Bump pydantic-ai-slim from 1.58.0 to 1.99.0

[dependabot]

Bumps pydantic-ai-slim from 1.58.0 to 1.99.0.

Release notes

Sourced from pydantic-ai-slim's releases.

v1.99.0 (2026-05-19)

What's Changed

🛡️ Security

• Normalize IPv6 transition forms in URL validation by @​DouweM in pydantic/pydantic-ai#5528
  • Security advisory: SSRF cloud-metadata blocklist bypass via IPv6-encoded address forms GHSA-cqp8-fcvh-x7r3
  • You are affected only if your application explicitly opts a FileUrl into force_download='allow-local' on a URL that is, or could be, influenced by untrusted input.
  • You are not affected if you use any of the bundled integrations to ingest user input: Agent.to_web / clai web; VercelAIAdapter; AGUIAdapter / Agent.to_ag_ui

🚀 Features

• Add gemini-3.5-flash model by @​dsfaccini in pydantic/pydantic-ai#5527

🐛 Bug Fixes

• Avoid OpenAI strict schemas with regex lookarounds by @​dsfaccini in pydantic/pydantic-ai#5519

Full Changelog: pydantic/pydantic-ai@v1.98.0...v1.99.0

v1.98.0 (2026-05-18)

What's Changed

🚀 Features

• Add OpenAI Responses input token counting (OpenAIResponsesModel.count_tokens) by @​colesmcintosh in pydantic/pydantic-ai#3951
• Replace Agent tool_retries=/output_retries= with retries: int | AgentRetries by @​Kludex in pydantic/pydantic-ai#5500

🐛 Bug Fixes

• fix(mcp): Don't require fastmcp.server at runtime by @​Kymi808 in pydantic/pydantic-ai#5514

🆕 V2 Preparation

• Deprecate pydantic_ai.ext.aci (tool_from_aci and ACIToolset) by @​dsfaccini in pydantic/pydantic-ai#5510

New Contributors

• @​Kymi808 made their first contribution in pydantic/pydantic-ai#5514

Full Changelog: pydantic/pydantic-ai@v1.97.0...v1.98.0

v1.97.0 (2026-05-15)

What's Changed

🚀 Features

• feat(evals): add OnlineEvaluator.run_on_errors to opt into evaluating failed calls by @​dmontagu in pydantic/pydantic-ai#5456
• Split GoogleProvider(vertexai=True|False) into GoogleProvider + GoogleCloudProvider; rename provider ID google-gla: to google:, google-vertex: to google-cloud:; deprecate old names by @​dsfaccini in pydantic/pydantic-ai#5336
• Add MCPToolset that uses fastmcp-slim[client], deprecate MCPServer* and FastMCPToolset by @​DouweM in pydantic/pydantic-ai#5325
• Set ModelResponse.state to incomplete while response is still streaming by @​adtyavrdhn in pydantic/pydantic-ai#5455
• Move pydantic_graph.beta API out of beta, deprecate old API by @​dmontagu in pydantic/pydantic-ai#5306

🆕 V2 Preparation

• Deprecate stream_responses() for stream_response(); new singular yields ModelResponse instead of (ModelResponse, is_last) tuple by @​dsfaccini in pydantic/pydantic-ai#5296
• Deprecate Agent.to_a2a() and bundled fasta2a integration; fasta2a has been adopted by DataLayer and users can use fasta2a.pydantic_ai (requires fasta2a v0.6.1) instead by @​dsfaccini in pydantic/pydantic-ai#5426

New Contributors

... (truncated)

Commits

• 78a4d8d Avoid OpenAI strict schemas with regex lookarounds (#5519)
• e64d2bf fix: normalize IPv6 transition forms in URL validation (#5528)
• 7e6b79f Add gemini-3.5-flash model (#5527)
• 4f09bf0 Revert "Drop instrumentation v1 and default to v5" (#5522)
• b9d5bbe Drop instrumentation v1 and default to v5 (#5511)
• 23924c3 chore: add skill update guidance to Agents.md (#5520)
• 2f461ec Add OpenAI Responses input token counting (#3951)
• f458346 fix(mcp): Don't require fastmcp.server at runtime (#5514)
• 24c8cdc Replace Agent tool_retries=/output_retries= with `retries: int | AgentR...
• 8cc76d8 Deprecate pydantic_ai.ext.aci (tool_from_aci and ACIToolset) ahead of v...
• Additional commits viewable in compare view

[SamPetherbridge]

Superseded by #25 — pydantic-ai-slim 1.99.0 was bumped transitively as part of the pydantic-ai 1.99.0 upgrade (identical lock result).

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.