PydanticAI v1.107.6 回移四项安全修复
原标题：v1.107.6 (2026-09-16)
AI 摘要
PydanticAI 发布 v1.107.6 维护版本，将 2.44.0 中的四个安全修复回移到 v1 分支。修复内容包括：IPv6 zone identifier 绕过云元数据与私有 IP 黑名单（中危）、web_fetch 中超线性响应处理阻塞事件循环（中危）、web_fetch_tool 域名列表比较方式不当（低危）、以及 include_content=False 时 OpenTelemetry span 仍携带异常与指令内容（低危）。此外还回移了 safe_download 重定向时凭据丢弃的修复。
正文节选
### 🛡️ Security A maintenance release for the v1 line, carrying the v1 backports of the four security fixes released in `2.44.0`. See each advisory for full details and affected versions. - **[GHSA-vmxc-h2x2-jmf3](https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-vmxc-h2x2-jmf3)** (moderate): cloud-metadata and private-IP blocklist bypass via an IPv6 zone identifier, on a URL opted into local network access. Reported by @euriconicacio. (#8402) - **[GHSA-fpf4-vwcp-v4hp](https://g