chore(deps): update pydantic-ai-slim[logfire] requirement from >=1.90.0 to >=1.100.0

[dependabot]

Updates the requirements on pydantic-ai-slim[logfire] to permit the latest version.

Release notes

Sourced from pydantic-ai-slim[logfire]'s releases.

v1.100.0 (2026-05-20)

What's Changed

🛡️ Security

• Normalize IPv6 transition forms in URL validation by @​DouweM in pydantic/pydantic-ai#5528
  • Security advisory: SSRF cloud-metadata blocklist bypass via IPv6-encoded address forms GHSA-cqp8-fcvh-x7r3
  • This fix went out in yesterday's v1.99.0.
  • You are affected only if your application explicitly opts a FileUrl into force_download='allow-local' on a URL that is, or could be, influenced by untrusted input.
  • You are not affected if you use any of the bundled integrations to ingest user input: Agent.to_web / clai web; VercelAIAdapter; AGUIAdapter / Agent.to_ag_ui

🚀 Features

• Support Bedrock native JSON output + strict tool calls by @​shailendher in pydantic/pydantic-ai#4237

🐛 Bug Fixes

• Ignore signatures on incomplete incoming thinking parts when Vercel AI by @​pydanty[bot] in pydantic/pydantic-ai#5534

🆕 V2 Preparation

• Deprecate gateway/gemini: prefix in favor of gateway/google-cloud: by @​dsfaccini in pydantic/pydantic-ai#5543
• Deprecate method-style StreamedResponse.usage(); raise on region-less Gateway API keys by @​dsfaccini in pydantic/pydantic-ai#5546
• Deprecate positional construction of evals classes ahead of v2 kw-only flip by @​dmontagu in pydantic/pydantic-ai#5547
• Deprecate evaluation_name / evaluator_version attribute pattern in favor of explicit accessor methods by @​dmontagu in pydantic/pydantic-ai#5554

New Contributors

• @​shailendher made their first contribution in pydantic/pydantic-ai#4237

Full Changelog: pydantic/pydantic-ai@v1.99.0...v1.100.0

Changelog

Sourced from pydantic-ai-slim[logfire]'s changelog.

Upgrade Guide

In September 2025, Pydantic AI reached V1, which means we're committed to API stability: we will not introduce changes that break your code until V2. For more information, review our Version Policy.

Breaking Changes

Here's a filtered list of the breaking changes for each version to help you upgrade Pydantic AI.

v1.0.1 (2025-09-05)

The following breaking change was accidentally left out of v1.0.0:

• See #2808 - Remove Python evaluator from pydantic_evals for security reasons

v1.0.0 (2025-09-04)

• See #2725 - Drop support for Python 3.9
• See #2738 - Make many dataclasses require keyword arguments
• See #2715 - Remove cases and averages attributes from pydantic_evals spans
• See #2798 - Change ModelRequest.parts and ModelResponse.parts types from list to Sequence
• See #2726 - Default InstrumentationSettings version to 2
• See #2717 - Remove errors when passing AsyncRetrying or Retrying object to AsyncTenacityTransport or TenacityTransport instead of RetryConfig

v0.x.x

Before V1, minor versions were used to introduce breaking changes:

v0.8.0 (2025-08-26)

See #2689 - AgentStreamEvent was expanded to be a union of ModelResponseStreamEvent and HandleResponseEvent, simplifying the event_stream_handler function signature. Existing code accepting AgentStreamEvent | HandleResponseEvent will continue to work.

v0.7.6 (2025-08-26)

The following breaking change was inadvertently released in a patch version rather than a minor version:

See #2670 - TenacityTransport and AsyncTenacityTransport now require the use of pydantic_ai.retries.RetryConfig (which is just a TypedDict containing the kwargs to tenacity.retry) instead of tenacity.Retrying or tenacity.AsyncRetrying.

v0.7.0 (2025-08-12)

See #2458 - pydantic_ai.models.StreamedResponse now yields a FinalResultEvent along with the existing PartStartEvent and PartDeltaEvent. If you're using pydantic_ai.direct.model_request_stream or pydantic_ai.direct.model_request_stream_sync, you may need to update your code to account for this.

See #2458 - pydantic_ai.models.Model.request_stream now receives a run_context argument. If you've implemented a custom Model subclass, you will need to account for this.

See #2458 - pydantic_ai.models.StreamedResponse now requires a model_request_parameters field and constructor argument. If you've implemented a custom Model subclass and implemented request_stream, you will need to account for this.

v0.6.0 (2025-08-06)

This release was meant to clean some old deprecated code, so we can get a step closer to V1.

See #2440 - The next method was removed from the Graph class. Use async with graph.iter(...) as run: run.next() instead.

... (truncated)

Commits

• 5f58b22 Deprecate evaluation_name / evaluator_version attribute pattern in favor ...
• c5ce50b docs: recommend the Thinking capability (#5549)
• 8b21d4b chore(ai): add testing-skill and refresh agent docs (AGENTS.md verify caden...
• aedce72 Improve AICA context guidance (#5513)
• e1c2889 Deprecate positional construction of evals classes ahead of v2 kw-only flip (...
• 71743fe v2 prep: Deprecate method-style StreamedResponse.usage(); raise on region-l...
• 03e3c8d Ignore signatures on incomplete incoming thinking parts when Vercel AI (#5534)
• 8eee004 Deprecate gateway/gemini: prefix in favor of gateway/google-cloud: (#5543)
• e5f6343 Support Bedrock native JSON output + strict tool calls (#4237)
• 3b0313f fix: Preserve property type when using deprecated_callable_property (like o...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)