v1.107.7

Name: label-studio
Author: HumanSignal

HumanSignal/label-studiov1.107.7Sep 30, 2026by dsfaccini

Upgrading?

What changed from v2.52.0 → v1.107.7?What's new in v2.53.0 after v1.107.7?

AI Summary

A maintenance release for the v1 line that backports the security fix for web_fetch released in v2.52.0.

Key Highlights

Security fix for web_fetch HTML parsing (GHSA-v36g-jcw9-x7cw) to prevent CPU/memory exhaustion.
Bug fix for genai-prices to cap usage below 0.1.

Full Release Notes

### 🛡️ Security

A maintenance release for the v1 line, carrying the v1 backport of the security fix released in `2.52.0`. See the advisory for full details and affected versions.

- **[GHSA-v36g-jcw9-x7cw](https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-v36g-jcw9-x7cw)** (moderate): converting attacker-controlled HTML with deeply nested elements in the local `web_fetch` tool could consume excessive CPU and memory. Provider-native web fetching is not affected. Reported by @SounLabs. (#8985)

Patched in `1.107.7`; also patched on the v2 line in `2.52.0`.

## What's Changed
### 🐛 Bug Fixes
* Cap `genai-prices` below 0.1 to keep token usage extraction and limits working by [@pydanty](https://github.com/apps/pydanty) in https://github.com/pydantic/pydantic-ai/pull/8842


**Full Changelog**: https://github.com/pydantic/pydantic-ai/compare/v1.107.6...v1.107.7

Related Repositories

openclaw/openclaw★ 392,694

The AI that really does things. Any OS. Any Platform. The lobster way. 🦞

nilbuild/developer-roadmap★ 370,066

Interactive roadmaps, guides and other educational content to help developers grow in their careers.

morluto/rea★ 357,563

Reverse engineer anything with agents, from app behavior down to native binaries.

anomalyco/opencode★ 219,660

The open source coding agent.

n8n-io/n8n★ 208,248

Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.