ReleaseBytes
python Pydantic AI Releases · · 2.9.1

pydantic-ai v2.9.1: Bug fixes and dependency updates

sdkaisecuritysecurity-advisoryengineerpython-agentic
security patch

Pydantic-ai version 2.9.1 addresses several bugs related to typed composition, integer timeouts in Mistral models, and retired model handling. It also includes a crucial dependency update to address a ReDoS vulnerability in soupsieve (CVE-2026-49477). This patch is relevant for all users of the pydantic-ai library, especially those integrating with Mistral models or handling typed data compositions.

  • →Fix typed composition members recursion in JsonSchemaTransformer by @pydanty[bot] in https://github.com/pydantic/pydantic-ai/pull/6440
  • →handle int timeout values in MistralModel._get_timeout_ms by @Ricardo-M-L in https://github.com/pydantic/pydantic-ai/pull/5019
  • →fix(deps): bump soupsieve to 2.8.4 to fix ReDoS (CVE-2026-49477) by @hramezani in https://github.com/pydantic/pydantic-ai/pull/6442
Fixes (3) ›
  • Fix typed composition members recursion in JsonSchemaTransformer by @pydanty[bot] in https://github.com/pydantic/pydantic-ai/pull/6440
  • fix handle int timeout values in MistralModel._get_timeout_ms by @Ricardo-M-L in https://github.com/pydantic/pydantic-ai/pull/5019

  • Remove retired models from KnownModelName and restore Gateway-supported models by @adtyavrdhn in https://github.com/pydantic/pydantic-ai/pull/5843

Maintenance (1) ›
  • fix(deps): bump soupsieve to 2.8.4 to fix ReDoS (CVE-2026-49477) by @hramezani in https://github.com/pydantic/pydantic-ai/pull/6442
Read the original announcement →

https://github.com/pydantic/pydantic-ai/releases/tag/v2.9.1

Related releases