pydantic-ai 1.100.0 released
Pydantic AI 1.100.0 is mainly a security release for agent builders: it normalizes IPv6 transition forms in URL validation to close an SSRF cloud-metadata blocklist bypass affecting `FileUrl(..., force_download='allow-local')` when the URL can be influenced by untrusted input. It does not appear to add major new agent capabilities or performance improvements in the excerpt, and the fix was already shipped in v1.99.0.
pydantic-ai 1.100.0 is available. Release notes →
Pydantic AI 1.100.0 is mainly a security release for agent builders: it normalizes IPv6 transition forms in URL validation to close an SSRF cloud-metadata blocklist bypass affecting FileUrl(..., force_download='allow-local') when the URL can be influenced by untrusted input. It does not appear to add major new agent capabilities or performance improvements in the excerpt, and the fix was already shipped in v1.99.0.
What changed. 1.100.0 is the latest release.
Why it matters. Review the release notes for breaking changes before upgrading.
Builder takeaway. Pin your version or upgrade in a branch and run your eval suite before deploying.