v2.58.0 v1.107.8

low risk

pydantic/pydantic-aiOct 20, 2026 → Oct 20, 20260 days between releases

What's New

No new features introduced; security patch for MCP telemetry exposure already present in v2.58.0.

Bug Fixes

  • Security patch for MCP request telemetry exposure (GHSA-xv4x-g8mx-ch56)

Upgrade Notes

No configuration changes required as the security fix is already included in the older version.

The Two Releases

v2.58.0

v2.58.0 (2026-10-19)

Oct 20, 2026· 2 days ago

This release brings a wide array of new features including support for ChatGPT sign-in, ElevenLabs Agents, and message storage optimizations. It also resolves a security vulnerability in UI adapters and updates compatibility notes for DBOS workflows and RealtimeConnection.

Full release notes
v1.107.8

v1.107.8 (2026-10-19)

Oct 20, 2026· 2 days ago

This release focuses on a security fix addressing a vulnerability in MCP request telemetry that could expose sensitive data like server URLs and authorization tokens in OpenTelemetry traces.

Full release notes