Commit 8fbf37a
authored
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4&size=40){kind=avatar}
build(deps-dev): bump pydantic-ai from 1.94.0 to 1.99.0 in /py (#469)
Bumps [pydantic-ai](https://github.com/pydantic/pydantic-ai) from 1.94.0
to 1.99.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pydantic/pydantic-ai/releases">pydantic-ai's
releases</a>.</em></p>
<blockquote>
<h2>v1.99.0 (2026-05-19)</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>🛡️ Security</h3>
<ul>
<li>Normalize IPv6 transition forms in URL validation by <a
href="https://github.com/DouweM"><code>@DouweM</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-ai/pull/5528">pydantic/pydantic-ai#5528</a>
<ul>
<li>Security advisory: SSRF cloud-metadata blocklist bypass via
IPv6-encoded address forms <a
href="https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-cqp8-fcvh-x7r3">https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-cqp8-fcvh-x7r3</a></li>
<li>You are affected <strong>only</strong> if your application
explicitly opts a <code>FileUrl</code> into
<code>force_download='allow-local'</code> on a URL that is, or could be,
influenced by untrusted input.</li>
<li>You are <strong>not</strong> affected if you use any of the bundled
integrations to ingest user input: <code>Agent.to_web</code> /
<code>clai web</code>; <code>VercelAIAdapter</code>;
<code>AGUIAdapter</code> / <code>Agent.to_ag_ui</code></li>
</ul>
</li>
</ul>
<h3>🚀 Features</h3>
<ul>
<li>Add <code>gemini-3.5-flash</code> model by <a
href="https://github.com/dsfaccini"><code>@dsfaccini</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-ai/pull/5527">pydantic/pydantic-ai#5527</a></li>
</ul>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>Avoid OpenAI strict schemas with regex lookarounds by <a
href="https://github.com/dsfaccini"><code>@dsfaccini</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-ai/pull/5519">pydantic/pydantic-ai#5519</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/pydantic/pydantic-ai/compare/v1.98.0...v1.99.0">https://github.com/pydantic/pydantic-ai/compare/v1.98.0...v1.99.0</a></p>
<h2>v1.98.0 (2026-05-18)</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>🚀 Features</h3>
<ul>
<li>Add OpenAI Responses input token counting
(<code>OpenAIResponsesModel.count_tokens</code>) by <a
href="https://github.com/colesmcintosh"><code>@colesmcintosh</code></a>
in <a
href="https://redirect.github.com/pydantic/pydantic-ai/pull/3951">pydantic/pydantic-ai#3951</a></li>
<li>Replace <code>Agent</code>
<code>tool_retries=</code>/<code>output_retries=</code> with
<code>retries: int | AgentRetries</code> by <a
href="https://github.com/Kludex"><code>@Kludex</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-ai/pull/5500">pydantic/pydantic-ai#5500</a></li>
</ul>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>fix(mcp): Don't require <code>fastmcp.server</code> at runtime by <a
href="https://github.com/Kymi808"><code>@Kymi808</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-ai/pull/5514">pydantic/pydantic-ai#5514</a></li>
</ul>
<h3>:new: V2 Preparation</h3>
<ul>
<li>Deprecate <code>pydantic_ai.ext.aci</code>
(<code>tool_from_aci</code> and <code>ACIToolset</code>) by <a
href="https://github.com/dsfaccini"><code>@dsfaccini</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-ai/pull/5510">pydantic/pydantic-ai#5510</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Kymi808"><code>@Kymi808</code></a> made
their first contribution in <a
href="https://redirect.github.com/pydantic/pydantic-ai/pull/5514">pydantic/pydantic-ai#5514</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/pydantic/pydantic-ai/compare/v1.97.0...v1.98.0">https://github.com/pydantic/pydantic-ai/compare/v1.97.0...v1.98.0</a></p>
<h2>v1.97.0 (2026-05-15)</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>🚀 Features</h3>
<ul>
<li>feat(evals): add <code>OnlineEvaluator.run_on_errors</code> to opt
into evaluating failed calls by <a
href="https://github.com/dmontagu"><code>@dmontagu</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-ai/pull/5456">pydantic/pydantic-ai#5456</a></li>
<li>Split <code>GoogleProvider(vertexai=True|False)</code> into
<code>GoogleProvider</code> + <code>GoogleCloudProvider</code>; rename
provider ID <code>google-gla:</code> to <code>google:</code>,
<code>google-vertex:</code> to <code>google-cloud:</code>; deprecate old
names by <a
href="https://github.com/dsfaccini"><code>@dsfaccini</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-ai/pull/5336">pydantic/pydantic-ai#5336</a></li>
<li>Add <code>MCPToolset</code> that uses
<code>fastmcp-slim[client]</code>, deprecate <code>MCPServer*</code> and
<code>FastMCPToolset</code> by <a
href="https://github.com/DouweM"><code>@DouweM</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-ai/pull/5325">pydantic/pydantic-ai#5325</a></li>
<li>Set <code>ModelResponse.state</code> to <code>incomplete</code>
while response is still streaming by <a
href="https://github.com/adtyavrdhn"><code>@adtyavrdhn</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-ai/pull/5455">pydantic/pydantic-ai#5455</a></li>
<li>Move <code>pydantic_graph.beta</code> API out of beta, deprecate old
API by <a href="https://github.com/dmontagu"><code>@dmontagu</code></a>
in <a
href="https://redirect.github.com/pydantic/pydantic-ai/pull/5306">pydantic/pydantic-ai#5306</a></li>
</ul>
<h3>🆕 V2 Preparation</h3>
<ul>
<li>Deprecate <code>stream_responses()</code> for
<code>stream_response()</code>; new singular yields
<code>ModelResponse</code> instead of <code>(ModelResponse,
is_last)</code> tuple by <a
href="https://github.com/dsfaccini"><code>@dsfaccini</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-ai/pull/5296">pydantic/pydantic-ai#5296</a></li>
<li>Deprecate <code>Agent.to_a2a()</code> and bundled
<code>fasta2a</code> integration; <code>fasta2a</code> has been <a
href="https://pydantic.dev/articles/pydantic-donates-fasta2a-to-datalayer">adopted
by DataLayer</a> and users can use <code>fasta2a.pydantic_ai</code>
(requires <code>fasta2a</code> v0.6.1) instead by <a
href="https://github.com/dsfaccini"><code>@dsfaccini</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-ai/pull/5426">pydantic/pydantic-ai#5426</a></li>
</ul>
<h2>New Contributors</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pydantic/pydantic-ai/commit/78a4d8dff8e122a7ea32d69f554aaac40892502f"><code>78a4d8d</code></a>
Avoid OpenAI strict schemas with regex lookarounds (<a
href="https://redirect.github.com/pydantic/pydantic-ai/issues/5519">#5519</a>)</li>
<li><a
href="https://github.com/pydantic/pydantic-ai/commit/e64d2bf82839a02d4fad98736ff9a87fdb5bf1ca"><code>e64d2bf</code></a>
fix: normalize IPv6 transition forms in URL validation (<a
href="https://redirect.github.com/pydantic/pydantic-ai/issues/5528">#5528</a>)</li>
<li><a
href="https://github.com/pydantic/pydantic-ai/commit/7e6b79f843d288a9e6fdf89d7e11fe7ab3a55450"><code>7e6b79f</code></a>
Add <code>gemini-3.5-flash</code> model (<a
href="https://redirect.github.com/pydantic/pydantic-ai/issues/5527">#5527</a>)</li>
<li><a
href="https://github.com/pydantic/pydantic-ai/commit/4f09bf07785d1c8360b4f66fa9bd6f8c633c815f"><code>4f09bf0</code></a>
Revert "Drop instrumentation v1 and default to v5" (<a
href="https://redirect.github.com/pydantic/pydantic-ai/issues/5522">#5522</a>)</li>
<li><a
href="https://github.com/pydantic/pydantic-ai/commit/b9d5bbeceffe3d7230332c3e34643f7ffa20d9c4"><code>b9d5bbe</code></a>
Drop instrumentation v1 and default to v5 (<a
href="https://redirect.github.com/pydantic/pydantic-ai/issues/5511">#5511</a>)</li>
<li><a
href="https://github.com/pydantic/pydantic-ai/commit/23924c3978913c64b2eb5b637dfcd714f0c9bbf7"><code>23924c3</code></a>
chore: add skill update guidance to <code>Agents.md</code> (<a
href="https://redirect.github.com/pydantic/pydantic-ai/issues/5520">#5520</a>)</li>
<li><a
href="https://github.com/pydantic/pydantic-ai/commit/2f461ec4346ac3dde1b5a8c686b0a281300c571a"><code>2f461ec</code></a>
Add OpenAI Responses input token counting (<a
href="https://redirect.github.com/pydantic/pydantic-ai/issues/3951">#3951</a>)</li>
<li><a
href="https://github.com/pydantic/pydantic-ai/commit/f45834640286800e30acf2bffeabca2f3ab53581"><code>f458346</code></a>
fix(mcp): Don't require <code>fastmcp.server</code> at runtime (<a
href="https://redirect.github.com/pydantic/pydantic-ai/issues/5514">#5514</a>)</li>
<li><a
href="https://github.com/pydantic/pydantic-ai/commit/24c8cdca7578fe3706475298f7dc0f78ba269401"><code>24c8cdc</code></a>
Replace <code>Agent</code>
<code>tool_retries=</code>/<code>output_retries=</code> with `retries:
int | AgentR...</li>
<li><a
href="https://github.com/pydantic/pydantic-ai/commit/8cc76d863a8367f0d8494e8fc26e2a6f44ef5988"><code>8cc76d8</code></a>
Deprecate <code>pydantic_ai.ext.aci</code> (<code>tool_from_aci</code>
and <code>ACIToolset</code>) ahead of v...</li>
<li>Additional commits viewable in <a
href="https://github.com/pydantic/pydantic-ai/compare/v1.94.0...v1.99.0">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/braintrustdata/braintrust-sdk-python/network/alerts).
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>1 parent a3d5c09 commit 8fbf37a
1 file changed
Lines changed: 362 additions & 441 deletions
0 commit comments