chore(deps): bump pydantic-ai from 2.27.0 to 2.31.0 in /pydantic-ai

[dependabot]

Bumps pydantic-ai from 2.27.0 to 2.31.0.

Release notes

Sourced from pydantic-ai's releases.

v2.31.0 (2026-08-14)

What's Changed

🚀 Features

• Allow a UIEventStream to be built without a run_input, and give AGUIEventStream its own thread_id/run_id by @​dsfaccini in pydantic/pydantic-ai#7292

🐛 Bug Fixes

• Attribute failed FallbackModel spans to the failing model, not the fallback: wrapper by @​strawgate in pydantic/pydantic-ai#7018
• Pass openai through Temporal workflow sandboxes by @​adtyavrdhn in pydantic/pydantic-ai#7464

New Contributors

• @​echoVic made their first contribution in pydantic/pydantic-ai#4636

Full Changelog: pydantic/pydantic-ai@v2.30.0...v2.31.0

v2.30.0 (2026-08-13)

What's Changed

🛡️ Security

• GHSA-q2xc-rrxj-58x9: the local dev web chat UI (Agent.to_web(), clai web) didn't validate the Host header, so DNS rebinding from a website you visit could reach it and run the served agent with your local process's tools and credentials. Fixed in pydantic-ai/pydantic-ai-slim 2.30.0 by validating Host against localhost/loopback/LAN addresses by default; deployments reached under a real hostname must opt in with the new allowed_hosts setting.

🚀 Features

• Use openrouter:web_search for web search by @​dsfaccini in pydantic/pydantic-ai#7378
• Add gemini-3.7-flash model by @​dsfaccini in pydantic/pydantic-ai#7445
• Expose gRPC metadata on XaiProvider by @​pydanty[bot] in pydantic/pydantic-ai#7423
• Add allowed_hosts to Agent.to_web() and clai web by @​DouweM in pydantic/pydantic-ai#7437

🐛 Bug Fixes

• Resolve deferred openai resource imports and genai-prices data loading at Model construction time by @​adtyavrdhn in pydantic/pydantic-ai#7408
• Fall back to ASCII in EvaluationReport.print() on non-UTF-8 consoles by @​dsfaccini in pydantic/pydantic-ai#7290
• Lowercase model name before profile lookup in SambaNova, Heroku, and Fireworks providers by @​pydanty[bot] in pydantic/pydantic-ai#6818
• Update LatestCerebrasModelNames to current model catalog by @​pydanty[bot] in pydantic/pydantic-ai#6838
• Require a deferred tool to be revealed, and its capability loaded, before it can be called by @​DouweM in pydantic/pydantic-ai#7271
• Anchor the tool-callability evidence window to the response's serving provider by @​DouweM in pydantic/pydantic-ai#7442

Full Changelog: pydantic/pydantic-ai@v2.29.0...v2.30.0

v2.29.0 (2026-08-12)

What's Changed

🚀 Features

• Support FastMCP 4 and MCP SDK v2 in MCPToolset alongside FastMCP 3 by @​adtyavrdhn in pydantic/pydantic-ai#6738
• Add Azure AI Voice Live via the azure_voice_live setting by @​DouweM in pydantic/pydantic-ai#6642

🐛 Bug Fixes

• Fix silent truncation of gzip response bodies by @​ChaoGlenXu in pydantic/pydantic-ai#7388
• Include parameter descriptions in rendered tool signatures by @​adtyavrdhn in pydantic/pydantic-ai#6487
• Fix inherited realtime WebRTC and Azure for_realtime bugs from [#6676](https://github.com/pydantic/pydantic-ai/issues/6676) by @​DouweM in pydantic/pydantic-ai#7412
• Fix concurrent provider stream shutdown by @​dsfaccini in pydantic/pydantic-ai#7375

... (truncated)

Commits

• 25a7092 docs: add the tagline line to the README (#7474)
• c36e27f Front-page rewrite: reassurance hero, Harness in the same breath, modality ta...
• 9a602b3 Allow a UIEventStream to be built without a run_input, and give `AGUIEven...
• aff2c4f Codify override warning principles (#7457)
• 3722408 Fix attention triage pydantic-ai-slim resolution (#7460)
• 82b1d9c Pass openai through Temporal workflow sandboxes (#7464)
• b6b292c Attribute failed FallbackModel spans to the failing model, not the `fallbac...
• 181d7b1 Document embedding settings precedence and merging (#4636)
• c24a900 Set TEMPORAL_DEBUG and disable Prefect's task-run recorder to stop durable-...
• 59284fc Correct the ModelSettings Supported by: lists and pin them with a wire-pr...
• Additional commits viewable in compare view