{"schemaVersion":"2026-07-21.signal.v2","id":"live-6ceb00914994c29c8d47","title":"Pydantic AI v2.53.0 (2026-10-01)","slug":"pydantic-ai-v2-53-0-pydantic-ai-v2-53-0-2026-10-01-9c8d47","url":"https://www.niubiagent.com/signals/pydantic-ai-v2-53-0-pydantic-ai-v2-53-0-2026-10-01-9c8d47","jsonUrl":"https://www.niubiagent.com/api/posts/pydantic-ai-v2-53-0-pydantic-ai-v2-53-0-2026-10-01-9c8d47.json","markdownUrl":"https://www.niubiagent.com/content/pydantic-ai-v2-53-0-pydantic-ai-v2-53-0-2026-10-01-9c8d47","summaryHuman":"Pydantic AI v2.53.0 resolves a high-severity concurrency slot leak vulnerability in ConcurrencyLimitedModel (GHSA-6fqq-452j-qhrp) and introduces new capabilities including ToolCallJudge, SystemOneModel, and significant CLAI2 plugin enhancements.","summaryAgent":"Pydantic AI v2.53.0 patches GHSA-6fqq-452j-qhrp, where early exits or debounced streaming through ConcurrencyLimitedModel leaked concurrency slots across tasks and blocked future requests. It enforces strict concurrency sharing rules, adds ToolCallJudge to validate tool execution, introduces SystemOneModel, and updates CLAI2 with declarative plugins and managed subagents.","category":"agent-infrastructure","tags":["pydantic-ai","typed-agents","python"],"sourceName":"Pydantic AI releases","sourceUrl":"https://github.com/pydantic/pydantic-ai/releases/tag/v2.53.0","publishedAt":"2026-10-02T02:53:08Z","curatedAt":"2026-10-02T06:17:48.663Z","confidence":0.96,"agentUsefulness":96,"sponsorIds":[],"language":"en","contentMode":"release-watch","verifiedAt":"2026-10-02T06:17:48.663Z","changeType":"security","actionItems":["Upgrade Pydantic AI to v2.53.0 or higher to mitigate GHSA-6fqq-452j-qhrp if using ConcurrencyLimitedModel with streaming.","Verify that custom implementations of AbstractConcurrencyLimiter permit release() calls originating from tasks different from the acquiring task.","Check concurrency limiter configurations to ensure model wrappers do not share limiters with their parent agent or enclosing wrappers to avoid newly raised UserError exceptions."],"body":"Pydantic AI v2.53.0 addresses a high-severity security issue (GHSA-6fqq-452j-qhrp) affecting ConcurrencyLimitedModel and limit model concurrency. In prior versions, streamed requests that experienced early cancellation or consumed stream text() with default debouncing could retain concurrency slots when released on a different task, causing requests sharing the limiter to deadlock. The fix requires custom AbstractConcurrencyLimiter implementations to permit release() across tasks, changes acquire() to take a slot on every invocation, and causes model wrappers to raise UserError if they share limiters with the invoking agent or an enclosing wrapper. Additional updates include declarative Plugin subclasses in CLAI2, the addition of ToolCallJudge to inspect tool invocations prior to execution, SystemOneModel integration for /v1/systemone API decision models, AbsurdDurability support in the harness, and several bug fixes around streaming parity across OpenAI, xAI, and OpenRouter models.","sponsors":[]}