chore(deps): update pydantic-ai-slim requirement from <2,>=1.107.1 to >=1.107.5,<2

[dependabot]

Updates the requirements on pydantic-ai-slim to permit the latest version.

Release notes

Sourced from pydantic-ai-slim's releases.

v1.107.5 (2026-08-13)

What's Changed

🛡️ Security

• GHSA-q2xc-rrxj-58x9: the local dev web chat UI (Agent.to_web(), clai web) didn't validate the Host header, so DNS rebinding from a website you visit could reach it and run the served agent with your local process's tools and credentials. Fixed in pydantic-ai/pydantic-ai-slim 1.107.5 by validating Host against localhost/loopback/LAN addresses by default; deployments reached under a real hostname must opt in with the new allowed_hosts setting. Backport of allowed_hosts by @​DouweM in pydantic/pydantic-ai#7438

Full Changelog: pydantic/pydantic-ai@v1.107.4...v1.107.5

Changelog

Sourced from pydantic-ai-slim's changelog.

Upgrade Guide

In September 2025, Pydantic AI reached V1 and committed to API stability: no changes that break your code until V2. V2 is now available, collecting the breaking and behavior changes that stability guarantee didn't allow. This guide is the canonical place to learn what's in V2, how to install it, and how to upgrade; for the guarantees behind these version numbers, see the Version Policy.

Breaking Changes

Here's a filtered list of the breaking changes for each version to help you upgrade Pydantic AI.

v2.0.0 (2026-06-23)

The stable V2.0 release. There are no new breaking or behavior changes since the betas; the full breaking-change list and recommended upgrade path are in the v2.0.0b1 entry below. Install it with:

uv add pydantic-ai

v2.0.0b7 (2026-06-10)

The seventh V2 beta, forked from v1.107.0. There are no new V2 breaking or behavior changes since v2.0.0b6 below — everything in that entry applies unchanged — but this beta picks up the latest V1 release on top, which adds Claude Fable 5 / Mythos 5 model support and OpenRouter prompt caching (CachePoint), plus known_model_names() and Anthropic fixes; see the v1.107.0 release notes for the full list.

Install it the same way, pinning the exact pre-release version:

pip/uv-add "pydantic-ai==2.0.0b7"

For the full breaking-change list and the recommended upgrade path, see the v2.0.0b1 entry below; the only difference is that the latest V1 to upgrade through first is now v1.107.0.

v2.0.0b6 (2026-06-04)

The sixth V2 beta, forked from v1.106.0. There are no new V2 breaking or behavior changes since v2.0.0b5 below — everything in that entry applies unchanged — but this beta picks up the latest V1 release on top, which adds api_host/timeout configuration and base seed mapping for the xAI provider, plus streaming and data-URI handling fixes; see the v1.106.0 release notes for the full list.

Install it the same way, pinning the exact pre-release version:

pip/uv-add "pydantic-ai==2.0.0b6"

For the full breaking-change list and the recommended upgrade path, see the v2.0.0b1 entry below; the only difference is that the latest V1 to upgrade through first is now v1.106.0.

v2.0.0b5 (2026-06-02)

The fifth V2 beta, forked from v1.105.0. There are no new V2 breaking or behavior changes since v2.0.0b4 below — everything in that entry (including the prepare-callbacks change) still applies — but this beta picks up the latest V1 release on top, which adds on-demand (deferred-loading) capabilities and Grok 4.3 reasoning_effort support, plus GoogleModelSettings.google_cached_content and Temporal gateway/ fixes; see the v1.105.0 release notes for the full list.

Install it the same way, pinning the exact pre-release version:

pip/uv-add "pydantic-ai==2.0.0b5"

... (truncated)

Commits

• 394cc1d Add allowed_hosts to Agent.to_web() and clai web (v1 backport) (#7438)
• f275d5c Pin hatchling below 1.32 for release builds (#7394)
• dd2abbd Only accept JSON request bodies on the web UI chat endpoint (v1 backport) (#7...
• ad7db6f Backport #7357 to v1 (#7381)
• e3824a5 Bound HTTP response body sizes for web_fetch and media URL downloads (#7308)
• See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
pydantic-ai-slim	[>= 2.dev0, < 3]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[claude]

Review

This is a minimal, low-risk Dependabot bump: pydantic-ai-slim[openai,anthropic,google,mcp] lower bound moves from >=1.107.1 to >=1.107.5 (still <2), a single line in requirements/base.txt. No other files change.

Notable upside: v1.107.5 backports a real fix — GHSA-q2xc-rrxj-58x9, a Host-header DNS-rebinding issue in Agent.to_web()/clai web (local dev web chat UI). This project doesn't appear to use to_web()/clai web anywhere production-facing, so the security relevance is low, but there's no reason not to take the patch.

Checked against the project's documented pydantic-ai upgrade caveats (requirements/base.txt:44-59, CLAUDE.md pitfalls #14/#17/#20/#21):

• The pin comment explicitly calls out validating instructions= vs system_prompt= precedence semantics via opencontractserver/tests/test_pydantic_ai_factory.py on any bump — this PR only raises the lower bound within the same <2 ceiling (1.107.1 → 1.107.5), so it's a narrow patch range rather than a new minor/major, and the "before bumping the upper bound" warning doesn't technically apply here. Still, since the floor moved, it'd be good to confirm test_pydantic_ai_factory.py and the reasoning-model/history-processor tests (pitfalls Bump pytz from 2021.3 to 2022.5 #17, Bump traefik from v2.9.1 to v2.9.4 in /compose/production/traefik #20) actually ran green on this bump before merge — the PR description shows no CI status in what I can see from gh pr view.
• No requirements/*.txt inconsistencies — openai, mcp extras/pins are untouched and remain compatible with the new floor per the existing comments.
• No changelog fragment under changelog.d/ for this change. Per CLAUDE.md's "Changelog Maintenance" section, dependency bumps aren't explicitly called out as required, and Dependabot PRs conventionally skip this — flagging only for completeness, not blocking.

Recommendation: Safe to merge once CI (backend test suite, in particular the pydantic-ai factory/history-processor tests) passes green. No code changes to review beyond the version pin, so no correctness/security/performance concerns of substance.