chore: bump pydantic-ai-slim from 1.107.1 to 1.107.5

[dependabot]

Bumps pydantic-ai-slim from 1.107.1 to 1.107.5.

Release notes

Sourced from pydantic-ai-slim's releases.

v1.107.5 (2026-08-13)

What's Changed

🛡️ Security

• GHSA-q2xc-rrxj-58x9: the local dev web chat UI (Agent.to_web(), clai web) didn't validate the Host header, so DNS rebinding from a website you visit could reach it and run the served agent with your local process's tools and credentials. Fixed in pydantic-ai/pydantic-ai-slim 1.107.5 by validating Host against localhost/loopback/LAN addresses by default; deployments reached under a real hostname must opt in with the new allowed_hosts setting. Backport of allowed_hosts by @​DouweM in pydantic/pydantic-ai#7438

Full Changelog: pydantic/pydantic-ai@v1.107.4...v1.107.5

v1.107.4 (2026-08-11)

Note: an earlier v1.107.3 tag/release was cut and deleted tonight — a build-tooling issue (#7394: hatchling 1.32.0 emitted a package-metadata version PyPI's publish validator didn't yet accept) blocked its publish before anything reached PyPI, so nothing under that version number was ever installable. This release (1.107.4) carries the same fixes with the build issue resolved.

🛡️ Security

This release backports two security fixes to the v1 line:

• GHSA-h4xc-3qfq-jf93 (high) — the development web chat UI's (Agent.to_web(), clai web) chat endpoint didn't check the request's content type, so a plain cross-origin request from a website open in the developer's browser could reach it without a CORS preflight and trigger the served agent to run and execute its tools with the local process's privileges and credentials. The endpoint now requires Content-Type: application/json.
• GHSA-3gh4-cghq-f8v4 (low) — retry-prompt content wasn't redacted by InstrumentationSettings(include_content=False) when the retry wasn't tied to a tool call.

Patched in 1.107.4; both are also patched on the v2 line (2.28.0 and 2.27.1 respectively).

What's Changed

🐛 Bug Fixes

• Backport #7357 to v1 by @​DouweM in pydantic/pydantic-ai#7381
• Only accept JSON request bodies on the web UI chat endpoint (v1 backport) by @​DouweM in pydantic/pydantic-ai#7383

Full Changelog: pydantic/pydantic-ai@v1.107.2...v1.107.4

v1.107.2 (2026-08-07)

🛡️ Security

Fixes an availability vulnerability: unbounded memory use when downloading remote content via the local web_fetch tool or FileUrl media downloads, which could exhaust process memory and crash the worker. Patched versions enforce a default 50 MiB download cap. See GHSA-v2xh-2vp8-57h8. Patched in 1.107.2 (v1) and 2.24.0 (v2).

What's Changed

🐛 Bug Fixes

• Bound HTTP response body sizes for web_fetch and media URL downloads by @​dsfaccini in pydantic/pydantic-ai#7308

Full Changelog: pydantic/pydantic-ai@v1.107.1...v1.107.2

Commits

• 394cc1d Add allowed_hosts to Agent.to_web() and clai web (v1 backport) (#7438)
• f275d5c Pin hatchling below 1.32 for release builds (#7394)
• dd2abbd Only accept JSON request bodies on the web UI chat endpoint (v1 backport) (#7...
• ad7db6f Backport #7357 to v1 (#7381)
• e3824a5 Bound HTTP response body sizes for web_fetch and media URL downloads (#7308)
• See full diff in compare view

[github-actions]

Coverage Report •

File	Stmts	Miss	Cover	Missing
TOTAL	1729	148	91%

report-only-changed-files is enabled. No files were changed during this commit :)

Tests	Skipped	Failures	Errors	Time
244	1 💤	0 ❌	0 🔥	10.635s ⏱️