Tag
GHSA-xv4x-g8mx-ch56 is a Medium-severity fix, but it sits on the seam where your agent hands tool traffic to a model provider. That seam is where agent frameworks leak by default.
Pydantic-AI's v2.6.0 quietly added time-to-first-token measurement and files-in-sandbox support. Neither is a feature you'll notice. Both signal where the agent stack is hardening, and which layer stopped being interesting.
On-demand capability loading in Pydantic-AI v1.105.0 is being sold as a performance feature. It's actually an admission that the monolithic-agent pattern doesn't survive contact with real users.
