Pydantic AI v1.107.10 (2026-11-04)

Pydantic AI releases published Pydantic AI v1.107.10 (2026-11-04). This automated release-watch entry was generated from the project's official GitHub release feed and is kept separate from human-reviewed editorial analysis. Release notes: What's Changed 🛡️ Security GHSA-m5vj-8mcw-82qx (https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-m5vj-8mcw-82qx) (high): web fetch tool and the WebFetch capability's local fallback re-indented a JSON response on the event loop before applying the returned-content limit, so a deeply nested document within the download size limit could expand to hundreds of times its size, using large amounts of memory and delaying other work in the same process. You are affected if an attacker can choose or influence the URLs the tool fetches. Provider-native web fetching is not affected. Fixed in v1.107.10 and v2.66.0 ( pydantic-ai , pydantic-ai-slim ). GHSA-5fj9-5pjw-vpwc (https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-5fj9-5pjw-vpwc) (medium): The cloud-metadata blocklist that URL downloads check did not include Tencent Cloud's instance metadata address 169.254.0.23…

• Review the official Pydantic AI releases release notes before upgrading.
• Check compatibility, migration, and security notes against your current agent stack.
• Run focused regression tests before production rollout.