v1.107.7
stackblitz-labs/bolt.diyv1.107.7Sep 30, 2026by dsfaccini
Upgrading?
AI Summary
A maintenance release for the v1 line that backports the security fix for the web_fetch vulnerability found in v2.52.0.
Key Highlights
- Security fix backport (web_fetch)
- Maintenance release for v1 line
New Features
- Token usage extraction fix (cap genai-prices)
Full Release Notes
### 🛡️ Security A maintenance release for the v1 line, carrying the v1 backport of the security fix released in `2.52.0`. See the advisory for full details and affected versions. - **[GHSA-v36g-jcw9-x7cw](https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-v36g-jcw9-x7cw)** (moderate): converting attacker-controlled HTML with deeply nested elements in the local `web_fetch` tool could consume excessive CPU and memory. Provider-native web fetching is not affected. Reported by @SounLabs. (#8985) Patched in `1.107.7`; also patched on the v2 line in `2.52.0`. ## What's Changed ### 🐛 Bug Fixes * Cap `genai-prices` below 0.1 to keep token usage extraction and limits working by [@pydanty](https://github.com/apps/pydanty) in https://github.com/pydantic/pydantic-ai/pull/8842 **Full Changelog**: https://github.com/pydantic/pydantic-ai/compare/v1.107.6...v1.107.7
Related Repositories
openclaw/openclaw★ 392,691
The AI that really does things. Any OS. Any Platform. The lobster way. 🦞
nilbuild/developer-roadmap★ 370,065
Interactive roadmaps, guides and other educational content to help developers grow in their careers.
morluto/rea★ 357,563
Reverse engineer anything with agents, from app behavior down to native binaries.
anomalyco/opencode★ 219,657
The open source coding agent.
n8n-io/n8n★ 208,248
Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.