This release includes 2 security fixes for security teams reviewing exposed deployments.
Published 19d
AI Agents & Assistants
β No known CVEs patched
This release patches 2 known CVEs
Topics
agent-framework
genai
llm
pydantic
python
Affected surfaces
deps
Summary
AI summaryUpdates π Bug Fixes, π Features, and π¦ Dependencies across a mixed release.
Full changelog
What's Changed
π Features
- Record time-to-first-token for streaming model requests by @dmontagu in https://github.com/pydantic/pydantic-ai/pull/5967
- feat: Add
filessupport toCodeExecutionToolfor Anthropic and OpenAI by @HenryYYang in https://github.com/pydantic/pydantic-ai/pull/4338 - Add Bedrock model profiles for Writer, Z.AI, and Moonshot AI, and refresh
LatestBedrockModelNamesby @DouweM in https://github.com/pydantic/pydantic-ai/pull/6318
π Bug Fixes
- Forward
WebSearchTooldomain filters to Groqsearch_settingsby @Iam-Mil in https://github.com/pydantic/pydantic-ai/pull/6160 - Give a clear error for non-positive concurrency
max_runningby @VectorPeak in https://github.com/pydantic/pydantic-ai/pull/6282 - fix(evals): constrain judge_output reason to be concise and retry-safe by @anmolg1997 in https://github.com/pydantic/pydantic-ai/pull/5089
- Re-enable Prefect test suite and fix
PrefectAgentcache-key drift by @adtyavrdhn in https://github.com/pydantic/pydantic-ai/pull/6313 - fix(google): recover Gemini 3+ File Search grounding dropped with native tool parts by @adtyavrdhn in https://github.com/pydantic/pydantic-ai/pull/6216
- fix: serialize callable thinking delta provider details by @hramezani in https://github.com/pydantic/pydantic-ai/pull/6294
- Resolve capability
for_runonce per run and preserve resolved native tools underoverride(native_tools=...)by @DouweM in https://github.com/pydantic/pydantic-ai/pull/6332 - Reject conflicting native tool IDs within a capability layer by @hramezani in https://github.com/pydantic/pydantic-ai/pull/6242
π¦ Dependencies
- deps: bump torch floor to 2.12.1 to close CVE-2025-3000 by @hramezani in https://github.com/pydantic/pydantic-ai/pull/6309
- deps: bump transformers floor to 5.3.0 to close CVE-2026-4372 by @hramezani in https://github.com/pydantic/pydantic-ai/pull/6310
- Bump
genai-pricesto 0.0.70 by @adtyavrdhn in https://github.com/pydantic/pydantic-ai/pull/6330
New Contributors
- @anmolg1997 made their first contribution in https://github.com/pydantic/pydantic-ai/pull/5089
- @HenryYYang made their first contribution in https://github.com/pydantic/pydantic-ai/pull/4338
Full Changelog: https://github.com/pydantic/pydantic-ai/compare/v2.5.1...v2.6.0
Security Fixes
- deps: bump torch floor to 2.12.1 to close CVE-2025-3000
- deps: bump transformers floor to 5.3.0 to close CVE-2026-4372
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Earlier breaking changes
- v1.95.0 rename βbuilt-in toolsβ to βnative toolsβ, deprecate old fields, register via capabilities=[NativeTool(...)]
Beta — feedback welcome: [email protected]