pydantic-ai 2.52.0 and 1.107.7 patch a denial-of-service in `web_fetch`

Advisory GHSA-v36g-jcw9-x7cw, rated moderate: converting attacker-controlled HTML with deeply nested elements in the local web_fetch tool could consume excessive CPU and memory. Provider-native web fetching is not affected.⁵ Both release lines are patched.

Relevant to: Anyone whose pydantic-ai agents fetch pages they do not control. Upgrade either line today.