[dependabot]

Bumps pydantic-ai-slim from 2.57.0 to 2.58.0.

Release notes

Sourced from pydantic-ai-slim's releases.

v2.58.0 (2026-10-19)

This comment was posted by codex-tui using gpt-6.1-sol on behalf of David.

What's Changed

🛡️ Security

• Medium — MCP request telemetry: GHSA-xv4x-g8mx-ch56. Provider-native MCP configuration could expose server URLs, authorization tokens and custom header values in OpenTelemetry request traces, even with include_content=False. URL-based MCP capabilities could also expose a credential embedded in the URL-derived identifier. Fixed in v2.58.0 and v1.107.8. Restrict access to historical traces and rotate exposed credentials. Temporal mitigation: URL-based MCP activity names remain unchanged to preserve in-flight workflows. With Temporal tracing enabled, also pass an explicit id= to MCP once in-flight workflows complete; changing it renames the activities.
• Medium — UI adapter history: GHSA-5pfm-2g3g-gh85. With non-empty server-side message_history and manage_system_prompt='server' (the default), Vercel AI and AG-UI adapters could execute an available tool with client-chosen arguments without a model request. Approval-required tools are not executed by this path. Fixed in v2.58.0; v1 is unaffected.

⚠️ Compatibility Notes

• Count a resumed 'suspended' response's usage only in the run that produced it, in RunUsage, UsageLimits and SpendLimits by @​DouweM in pydantic/pydantic-ai#10078
• Make RealtimeConnection yield lifecycle events through a public pydantic_ai.realtime.lifecycle module by @​DouweM in pydantic/pydantic-ai#10353
• Let read_file return images and PDFs, and describe other binary files by @​DouweM in pydantic/pydantic-ai#9596
• Record a realtime reply the user cut off after it finished generating as interrupted, and mark interrupted speech when seeding by @​DouweM in pydantic/pydantic-ai#10466
• Treat a native tool as unsupported when the model can't apply its allowed_domains, blocked_domains, max_uses or external_web_access setting by @​DouweM in pydantic/pydantic-ai#10451
• Add request-scoped SystemPromptPart(scope='request') sent natively as Anthropic clear_at system messages by @​DouweM in pydantic/pydantic-ai#9711
• Send Harness WarnNearLimits warnings as request-scoped system prompts by @​DouweM in pydantic/pydantic-ai#10561
• Escape RepoContext <context-file> blocks and send the nested-directory pointer as a SystemPromptPart by @​DouweM in pydantic/pydantic-ai#10558
• Make the profile's supports_auto_cache decide anthropic_cache, and use automatic caching on legacy AsyncAnthropicBedrock for Claude Opus 4.7 and later by @​DouweM in pydantic/pydantic-ai#10551
• Let any module define a ToolKind with typed tool parts, and keep unknown kinds loadable by @​DouweM in pydantic/pydantic-ai#9710
• Emit Planning status-tool events after their store reads, so DBOS recovery with an event_stream_handler replays in order by @​dsfaccini in pydantic/pydantic-ai#10343 Existing DBOS workflows using Planning with an event_stream_handler may not recover after upgrading; let in-flight workflows finish first or deploy a new DBOS application version.
• Align RealtimeTurnCompleteEvent with the exchange boundary that wait_for_reply() waits for by @​DouweM in pydantic/pydantic-ai#10517 To react when a particular response ends, use its PartEndEvents. Caption UIs should keep user parts open until their PartEndEvent, which can arrive after the reply completes.

🚀 Features

• Steer a running delegated task with DelegationTasks.steer by @​mpfaffenberger in pydantic/pydantic-ai#10359
• Store each message once in SqliteStepStore instead of repeating the history in every snapshot by @​aweis89 in pydantic/pydantic-ai#9982
• Add ModelSettings['max_retries'] to set how many times the provider SDK retries a request by @​DouweM in pydantic/pydantic-ai#10068
• Bound a whole agent run with timeout= and RunContext.deadline by @​DouweM in pydantic/pydantic-ai#10070
• Stream ctx.enqueue messages to Vercel AI and AG-UI frontends as history they send back but don't render by @​DouweM in pydantic/pydantic-ai#10405
• Add ModelSettings['request_timeout'] covering all attempts and stream consumption of one model request by @​DouweM in pydantic/pydantic-ai#10072
• Store each message once in PostgresStepStore and MongoStepStore instead of repeating the history in every snapshot by @​DouweM in pydantic/pydantic-ai#10452
• Let harness Skills ignore include and exclude names no library has with unknown_names='skip' by @​mpfaffenberger in pydantic/pydantic-ai#10506
• Add the openai-chatgpt provider so app users can sign in with ChatGPT and use their plan by @​mpfaffenberger in pydantic/pydantic-ai#10539
• Accept timeout= on UI adapter run_stream(), run_stream_native() and dispatch_request() by @​DouweM in pydantic/pydantic-ai#10553
• Add reasoning_summary to OpenAILiveResponsesDelegation to request the GPT-Live backend's reasoning summaries by @​DouweM in pydantic/pydantic-ai#10514
• Warn with UnsupportedSettingWarning when a model ignores a setting like timeout, max_retries or stop_sequences by @​DouweM in pydantic/pydantic-ai#10508
• Add openai_prune_tool_items to delete answered tool rounds from the OpenAI Realtime conversation by @​DouweM in pydantic/pydantic-ai#10556
• Add ElevenLabsAgentsRealtimeModel to run realtime sessions on ElevenLabs Agents by @​rscholz98 in pydantic/pydantic-ai#7964

🐛 Bug Fixes

• Stop wait_for_reply() waiting forever when a realtime tool batch receives no reply after a call is cancelled by @​DouweM in pydantic/pydantic-ai#10503
• Label a symlinked RepoContext instruction file with its target's name, so CLAUDE.md -> AGENTS.md reads AGENTS.md by @​mpfaffenberger in pydantic/pydantic-ai#10438
• Keep mid-run system prompts when ReinjectSystemPrompt(replace_existing=True) replaces the client's by @​DouweM in pydantic/pydantic-ai#10389
• Keep parallel tool calls in one ModelResponse when VercelAIAdapter loads messages by @​DouweM in pydantic/pydantic-ai#10404
• Stream the returns of tool calls skipped after a final result to AG-UI and Vercel AI frontends by @​DouweM in pydantic/pydantic-ai#10409
• Fix tool_choice='none' on BedrockConverseModel failing after a tool call by @​DouweM in pydantic/pydantic-ai#10395
• Resolve the default output mode once per run so toggling thinking per step keeps tools stable by @​DouweM in pydantic/pydantic-ai#10398
• Clear tool results in batches under ClearToolResults(max_messages=...) instead of on every request past the threshold by @​DouweM in pydantic/pydantic-ai#10390
• Force a single tool natively on MistralModel instead of filtering tools by @​DouweM in pydantic/pydantic-ai#10394

... (truncated)

Commits

• b40096c Refresh locked dbos to avoid overlapping Typer installs (#10684)
• 7a5ad82 Normalize connection metadata in request traces (#10662)
• 02a3737 Rewrite nested $refs when merging JSON schema definitions (#10601)
• e0f61fa Paste or drop images into the clai2 web UI composer, and show them as thumb...
• 61200e7 Remove superseded PostgreSQL pilot workflow (#10681)
• 5c8a6c1 Recognize CREDIT_LIMIT windows in Z.ai provider health checks (#10678)
• 60c1d1a Fix UseEnumMemberDocstrings enums, Choices and BoolCriteria failing in ...
• f09030b Fix pyright errors in test_elevenlabs_agents after #9710 and #7964 (#10670)
• 6a847c1 Bring the clai2 token counting audit up to date with main (#10527)
• a6f1260 Show the clai2 OpenRouter and GitHub Copilot sign-in URLs in the transcript...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)