[dependabot]

Bumps pydantic-ai-slim from 2.58.0 to 2.59.0.

Release notes

Sourced from pydantic-ai-slim's releases.

v2.59.0 (2026-10-20)

This comment was posted by Codex Desktop using gpt-6.1-sol on behalf of David.

What's Changed

🛡️ Security

• High — HTML conversion in web_fetch: GHSA-4whf-38hw-pxxh. When web_fetch_tool fetched attacker-controlled HTML containing many elements, conversion could delay unrelated work in the same process. Fixed in v2.59.0 and v1.107.9. Upgrade if the tool can fetch such pages.

⚠️ Compatibility Notes

• Remove shut-down Groq models playai-tts, playai-tts-arabic, meta-llama/llama-guard-4-12b and meta-llama/llama-4-maverick-17b-128e-instruct by @​mekanbaymyradov in pydantic/pydantic-ai#10306
• Distinguish omitted provider usage from reported zero and add UsageLimitUnavailableWarning by @​mpfaffenberger in pydantic/pydantic-ai#9491
• Add on_change='append' to preserve dynamic instruction prefixes by @​dsfaccini in pydantic/pydantic-ai#8188
• Stop recording that a realtime session ended when a tool raised, and document that it goes on by @​DouweM in pydantic/pydantic-ai#10782
• Record what the user heard of ElevenLabs Agents replies they barged in on, adding the OutputItemCut lifecycle event by @​DouweM in pydantic/pydantic-ai#10739
• Append the next hour to LogfireMCP history instead of rewriting its instructions, keeping the prompt cache by @​DouweM in pydantic/pydantic-ai#10543
• Settle a realtime reply only with the response that answers it, adding AnswersRevised by @​DouweM in pydantic/pydantic-ai#10668
• Add provider-neutral model error categories like ModelRateLimitError, ModelUnavailableError, ModelServerError and ModelContextWindowExceededError, and ModelHTTPError.for_category by @​DouweM in pydantic/pydantic-ai#9354
• Frame BackgroundTools results as <tool_result> tool output instead of untagged user text by @​DouweM in pydantic/pydantic-ai#10548
• Send TrajectoryJudge steering as a framework SystemPromptPart note plus the judge message as escaped <judge_feedback> data, both marked with metadata by @​DouweM in pydantic/pydantic-ai#10545
• Check tool_calls_limit before each CodeMode nested tool call by @​dsfaccini in pydantic/pydantic-ai#10362
• Let GitHubCopilotProvider send a configurable copilot-integration-id via integration_id or GITHUB_COPILOT_INTEGRATION_ID by @​dsfaccini in pydantic/pydantic-ai#10784

🚀 Features

• Add DaytonaSandbox: a workspace that runs Coder, Shell, FileSystem and every other harness capability in a Daytona sandbox by @​adtyavrdhn in pydantic/pydantic-ai#10610
• Add ElevenLabsRealtimeModel for Eleven Realtime speech-to-speech models by @​DouweM in pydantic/pydantic-ai#10738
• Let FunctionToolset.instructions and instruction functions opt into on_change='append' by @​DouweM in pydantic/pydantic-ai#10788
• Give FileSystem tools registered tool kinds and typed call parts by @​DouweM in pydantic/pydantic-ai#10674
• Add non_retryable_model_errors to TemporalDurability to stop Temporal retrying specific model error categories by @​DouweM in pydantic/pydantic-ai#10803

🐛 Bug Fixes

• Keep a push-to-talk turn in realtime history when the session ends before the provider confirms its commit_audio() by @​DouweM in pydantic/pydantic-ai#10652
• Accept non-string metadata values from OpenAI-compatible chat completions by @​dergachoff in pydantic/pydantic-ai#8010
• Record a realtime barge-in's cut in history when interrupt() races a failed send, the reply's end, or a later cancel by @​DouweM in pydantic/pydantic-ai#10723
• Apply an ElevenLabs Agents agent_response_correction only to the message it names by @​DouweM in pydantic/pydantic-ai#10709
• Raise for elevenlabs_agents_llm and elevenlabs_agents_tts model_id overrides on ElevenLabs Agents in Realtime voice mode by @​DouweM in pydantic/pydantic-ai#10728
• Match OpenAI Realtime audio-commit acknowledgements to the commit that caused them by @​DouweM in pydantic/pydantic-ai#10722
• Move unsupported Bedrock array contains constraints into descriptions by @​dsfaccini in pydantic/pydantic-ai#10720
• Preserve boolean $defs semantics during schema transformation by @​dsfaccini in pydantic/pydantic-ai#10714
• Fix DynamicWorkflow revealed type names, nested tool exposure, and empty WorkflowAgent descriptions by @​mpfaffenberger in pydantic/pydantic-ai#10747
• Retry deeply nested BackgroundTools optional-tool args instead of raising RecursionError by @​mpfaffenberger in pydantic/pydantic-ai#10721
• Return the value of BackgroundTools tools that code mode's run_code calls, instead of a started message by @​mpfaffenberger in pydantic/pydantic-ai#10750
• Schedule a tool once when BackgroundTools instances with distinct ids select it by @​mpfaffenberger in pydantic/pydantic-ai#10757
• Treat auth='' as unset alongside client in DayAI and warn about tokens in Temporal history by @​mpfaffenberger in pydantic/pydantic-ai#10718
• End an on_change='append' window that opened without blocks when a hook unsets instruction_parts by @​DouweM in pydantic/pydantic-ai#10766
• Recognize Bedrock inference profile and foundation model ARNs in split_bedrock_model_id, so they get the same model capabilities as the bare ID by @​DouweM in pydantic/pydantic-ai#10664
• Render carried thinking as a bare <assistant_thinking> tag so UI round trips keep the prompt cache by @​DouweM in pydantic/pydantic-ai#10642
• Mark CodeMode discovery announcements with SystemPromptPart.metadata, and announce a tool again when its announcement was dropped by @​DouweM in pydantic/pydantic-ai#10666
• Escape the SummarizingCompaction summarizer transcript so tool output can't forge messages by @​DouweM in pydantic/pydantic-ai#10544
• Deliver tool-tied 'asap' enqueue content into the same ModelRequest as the tool's ToolReturnPart by @​divyankmalik in pydantic/pydantic-ai#7043
• Keep typed const constraints, such as Literal discriminators, in Anthropic strict schemas by @​DouweM in pydantic/pydantic-ai#10675
• Use <context_diff> instead of <context-diff> for instruction deltas by @​DouweM in pydantic/pydantic-ai#10790
• Add the ToolCallsAbandoned realtime lifecycle event, so an abandoned tool call no longer holds its exchange open by @​DouweM in pydantic/pydantic-ai#10793
• Add grok-4.7 to xAI known models and Grok reasoning profile by @​pydanty[bot] in pydantic/pydantic-ai#9750

... (truncated)

Commits

• 5cdf4e2 Let GitHubCopilotProvider send a configurable copilot-integration-id via ...
• aed2ba0 Serve CI's test-duration baseline from actions/cache instead of the REST AP...
• a815bdf Keep web_fetch HTML processing bounded (#10760)
• eb27b2b Check tool_calls_limit before each CodeMode nested tool call (#10362)
• 57d8610 Count every model request in the gh-aw shim's num_turns on success (#10863)
• 2c69968 Tie TrajectoryJudge's steering note to its own frame with a ref, so forge...
• 3107837 Let DeduplicateFileReads and ClearToolResults clear typed read_file res...
• 3d56e35 Add grok-4.7 to xAI known models and Grok reasoning profile (#9750)
• 78f9e44 Skip unchanged pull request size label updates (#10870)
• aca285c State in THREAT_MODEL.md that dependency and CPython vulnerabilities are fi...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)