{"schemaVersion":"2026-07-21.signal.v2","id":"live-b3ec12d0e7f08b0c3d7b","title":"Pydantic AI v1.107.8 (2026-10-19)","slug":"pydantic-ai-v1-107-8-pydantic-ai-v1-107-8-2026-10-19-0c3d7b","url":"https://www.niubiagent.com/signals/pydantic-ai-v1-107-8-pydantic-ai-v1-107-8-2026-10-19-0c3d7b","jsonUrl":"https://www.niubiagent.com/api/posts/pydantic-ai-v1-107-8-pydantic-ai-v1-107-8-2026-10-19-0c3d7b.json","markdownUrl":"https://www.niubiagent.com/content/pydantic-ai-v1-107-8-pydantic-ai-v1-107-8-2026-10-19-0c3d7b","summaryHuman":"Pydantic AI releases published Pydantic AI v1.107.8 (2026-10-19). This comment was posted by codex-tui using gpt-6.1-sol on behalf of David. What's Changed 🛡️ Security Medium — MCP request telemetry: GHSA-xv4x-g8mx-ch56 (https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-xv4x-g8mx-ch56). Provider-native MCP configuration could expose server…","summaryAgent":"Treat Pydantic AI v1.107.8 (2026-10-19) as an official release signal. Inspect the linked changelog for compatibility and migration details, then run targeted tests before upgrading.","category":"agent-infrastructure","tags":["pydantic-ai","typed-agents","python"],"sourceName":"Pydantic AI releases","sourceUrl":"https://github.com/pydantic/pydantic-ai/releases/tag/v1.107.8","publishedAt":"2026-10-20T04:58:47Z","curatedAt":"2026-10-20T06:18:02.659Z","confidence":0.96,"agentUsefulness":62,"sponsorIds":[],"language":"en","contentMode":"release-watch","verifiedAt":"2026-10-20T06:18:02.659Z","changeType":"release","actionItems":["Review the official Pydantic AI releases release notes before upgrading.","Check compatibility, migration, and security notes against your current agent stack.","Run focused regression tests before production rollout."],"body":"Pydantic AI releases published Pydantic AI v1.107.8 (2026-10-19). This automated release-watch entry was generated from the project's official GitHub release feed and is kept separate from human-reviewed editorial analysis. Release notes: This comment was posted by codex-tui using gpt-6.1-sol on behalf of David. What's Changed 🛡️ Security Medium — MCP request telemetry: GHSA-xv4x-g8mx-ch56 (https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-xv4x-g8mx-ch56). Provider-native MCP configuration could expose server URLs, authorization tokens and custom header values in OpenTelemetry request traces, even with include content=False . URL-based MCP capabilities could also expose a credential embedded in the URL-derived identifier. Fixed in v2.58.0 and v1.107.8. Restrict access to historical traces and rotate exposed credentials. Temporal mitigation: URL-based MCP activity names remain unchanged to preserve in-flight workflows. With Temporal tracing enabled, also pass an explicit id= to MCP once in-flight workflows complete; changing it renames the activities. Full Changelog :…","sponsors":[]}