[dependabot]

Bumps pydantic-ai-slim from 2.59.0 to 2.60.0.

Release notes

Sourced from pydantic-ai-slim's releases.

v2.60.0 (2026-10-22)

What's Changed

⚠️ Compatibility Notes

• Raise model error categories like ModelRateLimitError from embedding models by @​DouweM in pydantic/pydantic-ai#10804
• Add usage_limits, deadline, run_id and conversation_id to ModelSelectionContext by @​DouweM in pydantic/pydantic-ai#10856
• Default BedrockConverseModel's maxTokens to Claude's maximum output, streaming such requests behind the scenes by @​DouweM in pydantic/pydantic-ai#10845
• Deprecate RetryPromptPart in favor of ToolReturnPart(outcome='retried') and RetryFeedbackPart by @​dsfaccini in pydantic/pydantic-ai#8094
• Summarize harness-added user-channel content as <harness_data> instead of user messages in SummarizingCompaction by @​DouweM in pydantic/pydantic-ai#10833
• Give AskUser, ConversationSearch, Macroscope, ManagedPrompt, PlaywrightBrowser and PydanticAIDocs a stable default id, and append ManagedPrompt version changes by @​DouweM in pydantic/pydantic-ai#10904
• Derive the MCP capability's default id from the server URL's hostname only, and reject two servers on one host without explicit ids by @​DouweM in pydantic/pydantic-ai#10807
• Record who wrote a memory file with an opt-in MetadataMemoryStore and Memory(write_metadata=...) by @​mpfaffenberger in pydantic/pydantic-ai#10892
• Let a named InstructionPart passed to a run's instructions opt into on_change='append', keyed run:<name> by @​DouweM in pydantic/pydantic-ai#10789
• Keep SummarizingCompaction(keep_user_messages=True) copies recognized after their request is merged by @​DouweM in pydantic/pydantic-ai#10914
• Strip request-level instructions from untrusted history in sanitize_messages and server-managed UI adapters by @​DouweM in pydantic/pydantic-ai#10897
• Send tool returns whose JSON form is a string, like datetime and UUID, to the model unquoted so restored histories match the first run by @​dsfaccini in pydantic/pydantic-ai#10488
• Keep the ids of instructions a wrapper toolset passes on from the toolsets it wraps by @​DouweM in pydantic/pydantic-ai#10909
• Include settings and profile in model equality and Model repr by @​dsfaccini in pydantic/pydantic-ai#9474
• Deprecate OpenAIDecisionsProvider and let OpenAIDecisionsModel take OpenAIProvider by @​DouweM in pydantic/pydantic-ai#10951
• Record every mid-run tool population change as a ToolAvailabilityDeltaPart by @​DouweM in pydantic/pydantic-ai#9405
• Send typed text to the GPT-Live backend as a user turn, so send(text) runs the agent's tools by @​DouweM in pydantic/pydantic-ai#10960
• Keep tool returns shaped like media markers from breaking StepPersistence snapshots, and fix SqliteMediaStore, DiskMediaStore, MongoMediaStore and S3MediaStore edge cases by @​mpfaffenberger in pydantic/pydantic-ai#10834
• Send settings stated by either of two merged Advisor capabilities by @​mpfaffenberger in pydantic/pydantic-ai#10726
• Drop client-supplied TextContent.metadata from user prompts in sanitize_messages by @​DouweM in pydantic/pydantic-ai#10943
• Raise ModelConnectionError and ModelTimeoutError for xAI gRPC connection failures and client timeouts by @​DouweM in pydantic/pydantic-ai#11080
• Send the agent's system_prompt and seeded history's system prompts to realtime sessions by @​DouweM in pydantic/pydantic-ai#11055
• Deliver SubAgents background task output as framed <task_output> data instead of in a SystemPromptPart by @​DouweM in pydantic/pydantic-ai#10550
• Keep BrowserUse secrets on allowlisted sites and out of tool results, and fix allowlist and file:// gaps by @​mpfaffenberger in pydantic/pydantic-ai#10771
• Match FileSystem denied and read-only patterns case-insensitively, protect .git files, and bound reads and Python regex searches by @​mpfaffenberger in pydantic/pydantic-ai#10825
• Filter GitHub tools on readOnlyHint under read_only=True, reject 'oauth', and deprecate plain http:// URLs by @​mpfaffenberger in pydantic/pydantic-ai#10815
• Add 'max' to unified thinking effort levels by @​dsfaccini in pydantic/pydantic-ai#10920

🚀 Features

• Add DockerSandbox harness capability that runs the workspace in a local Docker or Podman container by @​mpfaffenberger in pydantic/pydantic-ai#9341
• Add BoxLiteSandbox: a local BoxLite micro-VM workspace by @​adtyavrdhn in pydantic/pydantic-ai#10740
• Let SmolSandboxBackend use a VM the application already has by @​adtyavrdhn in pydantic/pydantic-ai#10882
• Attribute ElevenLabs Agents replies to the text turns they answer by in_response_to_ids by @​DouweM in pydantic/pydantic-ai#10792
• Add the run's output retry count and budget to ModelSelectionContext by @​DouweM in pydantic/pydantic-ai#10836
• Add ToolDefinition.unless_tool_kind and RunContext.tool_name_for_kind, and give instructions the current step's tools by @​DouweM in pydantic/pydantic-ai#10673
• Send a file a tool returns as a note when the model can't read it, with supports_audio_file_input and supported_document_media_types profile flags by @​DouweM in pydantic/pydantic-ai#10476
• Run gh-aw copilot/ models on the github-copilot: model and declare detection-engine: copilot by @​mpfaffenberger in pydantic/pydantic-ai#9318
• Add base_url and MOONSHOTAI_BASE_URL support to MoonshotAIProvider by @​yanlinf in pydantic/pydantic-ai#10177
• Drop capability reader tools duplicated by FileSystem by @​DouweM in pydantic/pydantic-ai#9410
• Add Bedrock model profile for xAI Grok 4.6 and 4.7 by @​ahmed-moubtahij in pydantic/pydantic-ai#8639
• Add RelevanceCompaction, which keeps, reduces or drops each older history step by a judge model's ranking by @​mpfaffenberger in pydantic/pydantic-ai#11026
• Add SmartSearch harness capability for plain-English code search with a pluggable judge model by @​mpfaffenberger in pydantic/pydantic-ai#8977
• Keep streamed model deltas out of durable execution histories by replaying the final response by @​DouweM in pydantic/pydantic-ai#10958
• Send OpenAIDecisionsModel message history as native Responses input items by @​DouweM in pydantic/pydantic-ai#11028
• Add the FileUnderstanding capability by @​DouweM in pydantic/pydantic-ai#8453
• Let MCPToolset take auth and headers as functions of the run context, so each run connects as its own user by @​DouweM in pydantic/pydantic-ai#10846

... (truncated)

Commits

• 7bccbb8 Serialize only incident-reconciling completions in `agent-provider-health.yml...
• 79f91d6 Stop CodeMode speculation adopting reads that predate a write, scan eager s...
• 4bcca20 Add 'max' to unified thinking effort levels (#10920)
• 9ceab03 Correct Coder docs drift and move Coder tests under `tests/harness/coder/...
• bae7840 Add lockdown to GitHub to ask GitHub's server to withhold public content ...
• a500320 Make E2BSandbox raise a clear UserError on Trio before any E2B request (#...
• 8dbb56d Handle prefixItems and string length bounds in OpenAI strict mode (#7333)
• a5694cd Reject auth='oauth' and describe only the selected products in `GoogleWorks...
• d3d510d Filter GitHub tools on readOnlyHint under read_only=True, reject `'oaut...
• 48da135 Stop timed-out E2BSandbox commands on templates without ps (#10809)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)