Skip to content

deps(deps): bump pydantic-ai-slim from 2.28.0 to 2.30.0 - #48

Open
dependabot[bot] wants to merge 1 commit into
developmentfrom
dependabot/uv/pydantic-ai-slim-2.30.0
Open

deps(deps): bump pydantic-ai-slim from 2.28.0 to 2.30.0#48
dependabot[bot] wants to merge 1 commit into
developmentfrom
dependabot/uv/pydantic-ai-slim-2.30.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor

Bumps pydantic-ai-slim from 2.28.0 to 2.30.0.

Release notes

Sourced from pydantic-ai-slim's releases.

v2.30.0 (2026-08-13)

What's Changed

🛡️ Security

  • GHSA-q2xc-rrxj-58x9: the local dev web chat UI (Agent.to_web(), clai web) didn't validate the Host header, so DNS rebinding from a website you visit could reach it and run the served agent with your local process's tools and credentials. Fixed in pydantic-ai/pydantic-ai-slim 2.30.0 by validating Host against localhost/loopback/LAN addresses by default; deployments reached under a real hostname must opt in with the new allowed_hosts setting.

🚀 Features

🐛 Bug Fixes

Full Changelog: pydantic/pydantic-ai@v2.29.0...v2.30.0

v2.29.0 (2026-08-12)

What's Changed

🚀 Features

🐛 Bug Fixes

New Contributors

Full Changelog: pydantic/pydantic-ai@v2.28.0...v2.29.0

Commits
  • c24a900 Set TEMPORAL_DEBUG and disable Prefect's task-run recorder to stop durable-...
  • 59284fc Correct the ModelSettings Supported by: lists and pin them with a wire-pr...
  • fba3ef6 Derive the compaction trim's behavior from a declared compaction_mode (#7440)
  • 00db3a4 Anchor the tool-callability evidence window to the response's serving provide...
  • 871c7ae Add allowed_hosts to Agent.to_web() and clai web (#7437)
  • da29bfa Require a deferred tool to be revealed, and its capability loaded, before it ...
  • 1e8f040 Expose gRPC metadata on XaiProvider (#7423)
  • e823795 Add gemini-3.7-flash model (#7445)
  • 39acfbd Update LatestCerebrasModelNames to current model catalog (#6838)
  • 7f09604 Lowercase model name before profile lookup in SambaNova, Heroku, and Firework...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [pydantic-ai-slim](https://github.com/pydantic/pydantic-ai) from 2.28.0 to 2.30.0.
- [Release notes](https://github.com/pydantic/pydantic-ai/releases)
- [Changelog](https://github.com/pydantic/pydantic-ai/blob/main/docs/changelog.md)
- [Commits](pydantic/pydantic-ai@v2.28.0...v2.30.0)

---
updated-dependencies:
- dependency-name: pydantic-ai-slim
  dependency-version: 2.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants