Pydantic AI Updates: August 14, 2026

1. Pydantic AI v2.30.0 Adds DNS Rebinding Protection, OpenRouter Web Search, and Gemini 3.7 Flash

Pydantic AI. Pydantic AI v2.30.0 hardens the development web chat UI against DNS rebinding attacks by validating the Host header and restricting access to localhost, loopback, and LAN addresses by default, with a new allowed_hosts setting for deployments that use real hostnames on Agent.to_web() and the CLI. The release also adds web search through OpenRouter, support for the gemini-3.7-flash model, and gRPC metadata exposure on the xAI provider. Bug fixes cover deferred OpenAI resource imports, ASCII fallback for non-UTF-8 consoles in evaluation reports, and model-name normalization across SambaNova, Heroku, and Fireworks. Source

2. Pydantic AI Backports the DNS Rebinding Fix to the v1 Line as v1.107.5

Pydantic AI. Pydantic AI shipped v1.107.5, backporting the DNS rebinding security fix from the v2 line to the maintained v1 release series. The patch applies the same Host header validation that limits the local development chat interface to localhost, loopback, and LAN addresses, preventing a website a developer visits in the same browser from reaching the local agent server. Teams still running the v1 branch can adopt the mitigation without upgrading to v2. Source