Skip to content

chore(deps): bump pydantic-ai-slim from 1.60.0 to 2.9.1#433

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/uv/dev/pydantic-ai-slim-2.9.0
Open

chore(deps): bump pydantic-ai-slim from 1.60.0 to 2.9.1#433
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/uv/dev/pydantic-ai-slim-2.9.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor

Bumps pydantic-ai-slim from 1.60.0 to 2.9.1.

Release notes

Sourced from pydantic-ai-slim's releases.

v2.9.1 (2026-07-13)

What's Changed

🐛 Bug Fixes

📦 Dependencies

Full Changelog: pydantic/pydantic-ai@v2.9.0...v2.9.1

v2.9.0 (2026-07-10)

What's Changed

🛡️ Security

A moderate advisory, GHSA-jpr8-2v3g-wgf9 (CWE-863), affecting the AG-UI UIAdapter.sanitize_messages dangling-tool-call strip, was fixed in 2.5.0 and backported to 1.107.1 on the v1 line. If you are on 2.5.0 or later you already have the fix; this note calls it out now that the advisory is public.

  • Affected: pydantic-ai / pydantic-ai-slim >= 2.0.0, < 2.5.0 (v2) and >= 1.88.0, < 1.107.1 (v1)
  • Patched: 2.5.0 (v2) and 1.107.1 (v1)
  • Not affected if every sensitive tool uses requires_approval=True / ApprovalRequiredToolset, or if your tool handlers validate their arguments and enforce authorization themselves.

🚀 Features

🐛 Bug Fixes

New Contributors

Full Changelog: pydantic/pydantic-ai@v2.8.0...v2.9.0

v2.8.0 (2026-07-09)

What's Changed

... (truncated)

Changelog

Sourced from pydantic-ai-slim's changelog.

Upgrade Guide

In September 2025, Pydantic AI reached V1 and committed to API stability: no changes that break your code until V2. V2 is now available, collecting the breaking and behavior changes that stability guarantee didn't allow. This guide is the canonical place to learn what's in V2, how to install it, and how to upgrade; for the guarantees behind these version numbers, see the Version Policy.

Breaking Changes

Here's a filtered list of the breaking changes for each version to help you upgrade Pydantic AI.

v2.0.0 (2026-06-23)

The stable V2.0 release. There are no new breaking or behavior changes since the betas; the full breaking-change list and recommended upgrade path are in the v2.0.0b1 entry below. Install it with:

uv add pydantic-ai

v2.0.0b7 (2026-06-10)

The seventh V2 beta, forked from v1.107.0. There are no new V2 breaking or behavior changes since v2.0.0b6 below — everything in that entry applies unchanged — but this beta picks up the latest V1 release on top, which adds Claude Fable 5 / Mythos 5 model support and OpenRouter prompt caching (CachePoint), plus known_model_names() and Anthropic fixes; see the v1.107.0 release notes for the full list.

Install it the same way, pinning the exact pre-release version:

pip/uv-add "pydantic-ai==2.0.0b7"

For the full breaking-change list and the recommended upgrade path, see the v2.0.0b1 entry below; the only difference is that the latest V1 to upgrade through first is now v1.107.0.

v2.0.0b6 (2026-06-04)

The sixth V2 beta, forked from v1.106.0. There are no new V2 breaking or behavior changes since v2.0.0b5 below — everything in that entry applies unchanged — but this beta picks up the latest V1 release on top, which adds api_host/timeout configuration and base seed mapping for the xAI provider, plus streaming and data-URI handling fixes; see the v1.106.0 release notes for the full list.

Install it the same way, pinning the exact pre-release version:

pip/uv-add "pydantic-ai==2.0.0b6"

For the full breaking-change list and the recommended upgrade path, see the v2.0.0b1 entry below; the only difference is that the latest V1 to upgrade through first is now v1.106.0.

v2.0.0b5 (2026-06-02)

The fifth V2 beta, forked from v1.105.0. There are no new V2 breaking or behavior changes since v2.0.0b4 below — everything in that entry (including the prepare-callbacks change) still applies — but this beta picks up the latest V1 release on top, which adds on-demand (deferred-loading) capabilities and Grok 4.3 reasoning_effort support, plus GoogleModelSettings.google_cached_content and Temporal gateway/ fixes; see the v1.105.0 release notes for the full list.

Install it the same way, pinning the exact pre-release version:

pip/uv-add "pydantic-ai==2.0.0b5"

... (truncated)

Commits
  • bf9a243 Fix broken doc links reported by lychee link checker (#6438)
  • 7e2d6bb docs: remove duplicated harness stub, point to canonical harness docs (#6409)
  • b7165aa docs: point UI-adapter authorization guidance at authenticated deps, not the ...
  • d869bdd docs: clarify that human-in-the-loop tool approval is not an authorization bo...
  • 553f0d8 Remove retired models from KnownModelName and restore Gateway-supported mod...
  • 7931d24 chore: remove obsolete docs-site directory and its stale references (#6445)
  • af03344 fix: handle int timeout values in MistralModel._get_timeout_ms (#5019)
  • ff371ed Fix typed composition members recursion in JsonSchemaTransformer (#6440)
  • f1c7305 fix(deps): bump soupsieve to 2.8.4 to fix ReDoS (CVE-2026-49477) (#6442)
  • da233ea fix(deps): force ws >= 8.21.0 in docs-site to fix DoS (CVE-2026-48779) (#6443)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 13, 2026
Bumps [pydantic-ai-slim](https://github.com/pydantic/pydantic-ai) from 1.60.0 to 2.9.1.
- [Release notes](https://github.com/pydantic/pydantic-ai/releases)
- [Changelog](https://github.com/pydantic/pydantic-ai/blob/main/docs/changelog.md)
- [Commits](pydantic/pydantic-ai@v1.60.0...v2.9.1)

---
updated-dependencies:
- dependency-name: pydantic-ai-slim
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump pydantic-ai-slim from 1.60.0 to 2.9.0 chore(deps): bump pydantic-ai-slim from 1.60.0 to 2.9.1 Jul 14, 2026
@dependabot dependabot Bot force-pushed the dependabot/uv/dev/pydantic-ai-slim-2.9.0 branch from eccc3b6 to 1a3df83 Compare July 14, 2026 13:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants