v2.43.0 v1.107.6

high risk

pydantic/pydantic-aiSep 12, 2026 → Sep 17, 20265 days between releases

What's New

Newer release (v1.107.6) contains security fixes and CI updates, but does not include features from v2.43.0

Improvements

  • Updated CI and dependency management
  • Pinned FastA2A below 1 in the a2a extra

Bug Fixes

  • Fixed credentials dropping on safe_download redirects when origin changes
  • Fixed web_fetch_tool domain lists comparison
  • Fixed OpenTelemetry spans carrying exceptions under include_content=False
  • Fixed cloud-metadata and private-IP blocklist bypass via IPv6 zone identifier
  • Fixed superlinear response processing in web_fetch blocking the event loop

Upgrade Notes

Note: v1.107.6 is a maintenance release for the v1 line, while v2.43.0 is a feature release for the v2 line. The v1.107.6 notes do not reference v2.43.0, so features like the clai banner are not included.

The Two Releases

v2.43.0

v2.43.0 (2026-09-11)

Sep 12, 2026· 1 month ago

This release introduces a first-run banner for `clai` sessions and includes bug fixes for text part boundaries in the `OpenAIChatModel` and temporal tool opt-out checks.

Full release notes
v1.107.6

v1.107.6 (2026-09-16)

Sep 17, 2026· 1 month ago

A maintenance release for the v1 line that backports four security fixes from v2.44.0, specifically targeting vulnerabilities in `web_fetch_tool` and OpenTelemetry. It also includes maintenance updates to CI and dependency management.

Full release notes