chore(deps): update pydantic-ai-slim requirement from <2,>=1.107.5 to >=1.107.6,<2

[dependabot]

Updates the requirements on pydantic-ai-slim to permit the latest version.

Release notes

Sourced from pydantic-ai-slim's releases.

v1.107.6 (2026-09-16)

🛡️ Security

A maintenance release for the v1 line, carrying the v1 backports of the four security fixes released in 2.44.0. See each advisory for full details and affected versions.

• GHSA-vmxc-h2x2-jmf3 (moderate): cloud-metadata and private-IP blocklist bypass via an IPv6 zone identifier, on a URL opted into local network access. Reported by @​euriconicacio. (#8402)
• GHSA-fpf4-vwcp-v4hp (moderate): superlinear response processing in web_fetch, in both the HTML conversion and the charset decode, blocking the event loop. Reported by @​BrianWillows. (#8399, #8434)
• GHSA-22h6-qm39-v87j (low): web_fetch_tool domain lists compared as written rather than in the form the resolver uses. (#8409)
• GHSA-4x9p-g9wm-8q7f (low): OpenTelemetry spans carrying exceptions, error statuses, instructions and the output template under include_content=False. Reported by @​BrianWillows. (#8404, #8422, #8429)

Also carried over: credentials are now dropped on a safe_download redirect whenever the full origin changes, not only the hostname (#8410). This was fixed on the v2 line some time ago and had never been backported.

Patched in 1.107.6; all four are also patched on the v2 line in 2.44.0.

What's Changed

Every code change in this release is one of the security fixes above. Maintenance alongside them:

• Repair v1 CI and its mcp, anthropic, and duckduckgo extras (v1 backport) by @​DouweM in pydantic/pydantic-ai#8406
• Pin FastA2A below 1 in the a2a extra (v1) by @​DouweM in pydantic/pydantic-ai#8412

Full Changelog: pydantic/pydantic-ai@v1.107.5...v1.107.6

Changelog

Sourced from pydantic-ai-slim's changelog.

Upgrade Guide

In September 2025, Pydantic AI reached V1 and committed to API stability: no changes that break your code until V2. V2 is now available, collecting the breaking and behavior changes that stability guarantee didn't allow. This guide is the canonical place to learn what's in V2, how to install it, and how to upgrade; for the guarantees behind these version numbers, see the Version Policy.

Breaking Changes

Here's a filtered list of the breaking changes for each version to help you upgrade Pydantic AI.

v2.0.0 (2026-06-23)

The stable V2.0 release. There are no new breaking or behavior changes since the betas; the full breaking-change list and recommended upgrade path are in the v2.0.0b1 entry below. Install it with:

uv add pydantic-ai

v2.0.0b7 (2026-06-10)

The seventh V2 beta, forked from v1.107.0. There are no new V2 breaking or behavior changes since v2.0.0b6 below — everything in that entry applies unchanged — but this beta picks up the latest V1 release on top, which adds Claude Fable 5 / Mythos 5 model support and OpenRouter prompt caching (CachePoint), plus known_model_names() and Anthropic fixes; see the v1.107.0 release notes for the full list.

Install it the same way, pinning the exact pre-release version:

pip/uv-add "pydantic-ai==2.0.0b7"

For the full breaking-change list and the recommended upgrade path, see the v2.0.0b1 entry below; the only difference is that the latest V1 to upgrade through first is now v1.107.0.

v2.0.0b6 (2026-06-04)

The sixth V2 beta, forked from v1.106.0. There are no new V2 breaking or behavior changes since v2.0.0b5 below — everything in that entry applies unchanged — but this beta picks up the latest V1 release on top, which adds api_host/timeout configuration and base seed mapping for the xAI provider, plus streaming and data-URI handling fixes; see the v1.106.0 release notes for the full list.

Install it the same way, pinning the exact pre-release version:

pip/uv-add "pydantic-ai==2.0.0b6"

For the full breaking-change list and the recommended upgrade path, see the v2.0.0b1 entry below; the only difference is that the latest V1 to upgrade through first is now v1.106.0.

v2.0.0b5 (2026-06-02)

The fifth V2 beta, forked from v1.105.0. There are no new V2 breaking or behavior changes since v2.0.0b4 below — everything in that entry (including the prepare-callbacks change) still applies — but this beta picks up the latest V1 release on top, which adds on-demand (deferred-loading) capabilities and Grok 4.3 reasoning_effort support, plus GoogleModelSettings.google_cached_content and Temporal gateway/ fixes; see the v1.105.0 release notes for the full list.

Install it the same way, pinning the exact pre-release version:

pip/uv-add "pydantic-ai==2.0.0b5"

... (truncated)

Commits

• 7ee27e3 Close two include_content redaction bypasses and make the content sweep pro...
• 2faa618 Decode web_fetch response bodies in a worker thread and treat non-text char...
• 6b22270 Check include_content=False over every content channel at once (v1 backport...
• a9dab92 Compare web_fetch_tool domain lists in the form the resolver uses (v1 backp...
• a93ea52 Extract the web_fetch page title with a linear scan and convert HTML in lin...
• 963dec5 Share exception recording between the agent run, tool and model request spans...
• 84d67aa Pin FastA2A below 1 in the a2a extra (v1) (#8412)
• b5d0f9c Compare full origin, not just hostname, when dropping credentials on `safe_do...
• 4da7059 Normalize IPv6 zone identifiers in URL validation (v1 backport) (#8402)
• 0595c1d Repair v1 CI and its mcp, anthropic, and duckduckgo extras (v1 backpo...
• See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
pydantic-ai-slim	[>= 2.dev0, < 3]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[claude]

Review

This is a Dependabot-authored patch bump: pydantic-ai-slim >=1.107.5,<2 → >=1.107.6,<2 (one line, requirements/base.txt). No application code changes.

What 1.107.6 contains (per the release notes): it's a security-only maintenance release on the v1 line, backporting four fixes from 2.44.0:

• IPv6 zone-identifier bypass of the cloud-metadata/private-IP blocklist (moderate, GHSA-vmxc-h2x2-jmf3)
• Superlinear web_fetch response processing — HTML conversion + charset decode — that could block the event loop (moderate, GHSA-fpf4-vwcp-v4hp)
• web_fetch_tool domain-list comparison bug (low, GHSA-22h6-qm39-v87j)
• OpenTelemetry spans leaking exception/error/instruction content under include_content=False (low, GHSA-4x9p-g9wm-8q7f)

Assessment: Recommend merging.

• These are genuine (if moderate/low severity) security fixes; taking the patch is the right call and low-risk given it's a same-minor bump.
• The upper bound (<2) guarded by the issue #1451 comment a few lines up (requirements/base.txt:59) is untouched — this only moves the floor, so the instructions= vs system_prompt= precedence concern documented there (CLAUDE.md pitfall Bump coverage from 6.2 to 6.5.0 #14) doesn't apply to this bump.
• I checked the 1.107.6 changelog against the two other version-sensitive traps called out in CLAUDE.md (opencontractserver/llms/history_processors.py's dataclass-shape assertion on ThinkingPart/ModelRequest/ModelResponse, and the Responses-API routing in llms/model_factory.py): none of the listed changes in this release touch message/dataclass shapes or model routing, so those code paths should be unaffected.
• No test or code changes accompany the bump, which is appropriate here since nothing in this diff touches the surfaces the existing regression tests (test_pydantic_ai_factory.py) are pinned against — CI running that suite is sufficient signal before merge.

No blocking issues found.