v1.107.6 v2.44.0
pydantic/pydantic-aiSep 17, 2026 → Sep 17, 20260 days between releases
What's New
Adds Vercel AI SDK, Eve skill, and fixes security vulnerabilities.
Breaking Changes
- Requires JSON Content-Type on UI adapter requests
- Dispatches `@durable_operation` from per-request hooks instead of inline
New Features
- Adds Vercel AI SDK and Eve migration skill support
- Stabilizes the serialized shape of `AgentRunResult`
- Adds a new `Storage` page for persistence management
- Enables emission of `EnqueuedMessagesEvent`
- Allows `Agent.from_spec()` to construct without a model
Improvements
- Makes `RunContext.enqueue()` safe for use in worker threads
Bug Fixes
- Fixes IPv6 bypass in cloud-metadata and private-IP blocklist
- Fixes superlinear response processing in `web_fetch`
- Fixes `web_fetch_tool` domain list comparison
- Fixes OpenTelemetry spans carrying sensitive content
- Fixes credentials dropping on safe_download redirects when origin changes
Upgrade Notes
Requires JSON Content-Type on UI adapter requests. The `@durable_operation` decorator now dispatches from hooks instead of running inline, which may affect execution flow.
The Two Releases
v1.107.6 (2026-09-16)
Sep 17, 2026· 1 month ago
A maintenance release for the v1 line that backports four security fixes from v2.44.0, specifically targeting vulnerabilities in `web_fetch_tool` and OpenTelemetry. It also includes maintenance updates to CI and dependency management.
Full release notesv2.44.0 (2026-09-16)
Sep 17, 2026· 1 month ago
This release focuses on fixing four security vulnerabilities related to `web_fetch_tool`, `web_fetch`, and OpenTelemetry instrumentation, including fixes for IPv6 bypass and event loop blocking. It introduces new features such as Vercel AI SDK support and a stable serialized shape for `AgentRunResult`, alongside several compatibility updates.
Full release notes