v1.107.7
luminal-ai/luminalv1.107.7Sep 30, 2026by dsfaccini
Upgrading?
AI Summary
Pydantic v1 maintenance release carrying the web_fetch security fix from v2.52.0.
Key Highlights
- Backport of GHSA-v36g-jcw9-x7cw (web_fetch security fix)
- Cap genai-prices below 0.1 to keep token usage extraction working
New Features
- Cap genai-prices to 0.1
Full Release Notes
### 🛡️ Security A maintenance release for the v1 line, carrying the v1 backport of the security fix released in `2.52.0`. See the advisory for full details and affected versions. - **[GHSA-v36g-jcw9-x7cw](https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-v36g-jcw9-x7cw)** (moderate): converting attacker-controlled HTML with deeply nested elements in the local `web_fetch` tool could consume excessive CPU and memory. Provider-native web fetching is not affected. Reported by @SounLabs. (#8985) Patched in `1.107.7`; also patched on the v2 line in `2.52.0`. ## What's Changed ### 🐛 Bug Fixes * Cap `genai-prices` below 0.1 to keep token usage extraction and limits working by [@pydanty](https://github.com/apps/pydanty) in https://github.com/pydantic/pydantic-ai/pull/8842 **Full Changelog**: https://github.com/pydantic/pydantic-ai/compare/v1.107.6...v1.107.7
Related Repositories
farion1231/cc-switch★ 147,412
A cross-platform desktop All-in-One assistant for Claude Code, Codex, OpenCode, OpenClaw, Grok Build & Hermes Agent. Only official website: ccswitch.io
rustdesk/rustdesk★ 126,566
An open-source remote desktop application designed for self-hosting, as an alternative to TeamViewer.
tauri-apps/tauri★ 112,104
Build smaller, faster, and more secure desktop and mobile applications with a web frontend.
ruvnet/RuView★ 99,096
π RuView turns commodity WiFi signals into real-time spatial intelligence, vital sign monitoring, and presence detection — all without a single pixel of video.
oven-sh/bun★ 96,338
Incredibly fast JavaScript runtime, bundler, test runner, and package manager – all in one