build(deps): bump pydantic-ai-slim from 2.42.0 to 2.44.0

[dependabot]

Bumps pydantic-ai-slim from 2.42.0 to 2.44.0.

Release notes

Sourced from pydantic-ai-slim's releases.

v2.44.0 (2026-09-16)

🛡️ Security

This release fixes four security issues, all of them reached through web_fetch_tool or OpenTelemetry instrumentation. See each advisory for full details and affected versions.

• GHSA-vmxc-h2x2-jmf3 (moderate): the cloud-metadata and private-IP blocklists could be bypassed with an IPv6 zone identifier on a URL opted into local network access, via FileUrl(force_download='allow-local') or web_fetch_tool(allow_local_urls=True). Both are off by default. Reported by @​euriconicacio. (#8401)
• GHSA-fpf4-vwcp-v4hp (moderate): web_fetch processed responses in superlinear time on the event loop, in both the HTML conversion and the charset decode, so a single attacker-chosen page could stall every agent in the process. Reported by @​BrianWillows. (#8397, #8418, #8433)
• GHSA-22h6-qm39-v87j (low): web_fetch_tool's domain lists were compared as written rather than in the form the resolver uses, so a blocked domain could be reached under another spelling. (#8407, #8421)
• GHSA-4x9p-g9wm-8q7f (low): with InstrumentationSettings(include_content=False), spans still carried exceptions, error statuses, instructions and the output template. Reported by @​BrianWillows. (#8403, #8408, #8419, #8428)

Patched in 2.44.0 (v2) and 1.107.6 (v1).

What's Changed

⚠️ Compatibility Notes

• Make RunContext.enqueue() safe from worker threads by @​adtyavrdhn in pydantic/pydantic-ai#7758
• Require a JSON Content-Type on UI adapter requests by @​DouweM in pydantic/pydantic-ai#8396
• Dispatch a capability @durable_operation called from a per-request hook, instead of silently running it inline by @​DouweM in pydantic/pydantic-ai#8395

🚀 Features

• Add a Vercel AI SDK and Eve migration skill by @​adtyavrdhn in pydantic/pydantic-ai#8357
• Give AgentRunResult a stable serialized shape, and settle a finished stream into one by @​DouweM in pydantic/pydantic-ai#8269
• Add a Storage page so persistence is findable by @​DouweM in pydantic/pydantic-ai#8336
• Emit EnqueuedMessagesEvent when a realtime session delivers enqueued content by @​DouweM in pydantic/pydantic-ai#8134

🐛 Bug Fixes

• Forward blocked_domains to OpenAI web search by @​adtyavrdhn in pydantic/pydantic-ai#8323
• Fix OpenAI hosted tool_search pairing in AG-UI by @​adtyavrdhn in pydantic/pydantic-ai#8313
• Let Agent.from_spec() construct without a model, deferring the requirement to run time by @​DouweM in pydantic/pydantic-ai#8339
• Let RealtimeSession.close() finish its teardown when the closing task is cancelled by @​DouweM in pydantic/pydantic-ai#8142
• Run a capability's prepare_tools over every tool the availability gate admits by @​DouweM in pydantic/pydantic-ai#8071
• Bound the realtime session event queue while nothing is iterating it by @​DouweM in pydantic/pydantic-ai#8133
• Report a run's own usage on its span, not the conversation total by @​DouweM in pydantic/pydantic-ai#8417

New Contributors

• @​mrchatam made their first contribution in pydantic/pydantic-ai#8286
• @​vedjaw made their first contribution in pydantic/pydantic-ai#7028

Full Changelog: pydantic/pydantic-ai@v2.43.0...v2.44.0

v2.43.0 (2026-09-11)

What's Changed

🚀 Features

• Add a first-run banner describing the run, and open clai sessions with it by @​DouweM in pydantic/pydantic-ai#7447

🐛 Bug Fixes

• Preserve text part boundaries after tool calls in OpenAIChatModel by @​KaranJayakumar in pydantic/pydantic-ai#8235
• fix(temporal): key tool opt-out checks on operation kind, not an MCP import by @​adtyavrdhn in pydantic/pydantic-ai#8257

New Contributors

• @​KaranJayakumar made their first contribution in pydantic/pydantic-ai#8235

... (truncated)

Commits

• a078bb1 Make latest-versions-canary advisory (#8439)
• 9fdabb4 Put the enqueued-messages event on the queue the session now uses (#8437)
• 55a988b Emit EnqueuedMessagesEvent when a realtime session delivers enqueued conten...
• de4e615 Close two include_content redaction bypasses and make the content sweep pro...
• 1bcd8d7 Add transform_stream teardown regression tests (#7028)
• 9cdc952 Decode web_fetch response bodies in a worker thread and treat non-text char...
• b3d87f9 Link the Storage page from the pages that lead people to it (#8432)
• 8ca8238 Dispatch a capability @durable_operation called from a per-request hook, in...
• 95b5290 Report a run's own usage on its span, not the conversation total (#8417)
• 7531bdf Bound the realtime session event queue while nothing is iterating it (#8133)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[imran-siddique]

Qiang has independently approved this exact head. The previously recorded repair validation and all technical workflows pass. Adding the required maintainer approval.