Fetching from the wire…
Public story · 2026-08-04 · high
The release also patches a Google Cloud credential scoping bug and an ADC environment variable leak.
Why now: There's no larger news event behind this: it's a routine point release, not a response to any incident.
Pydantic AI shipped version 2.23.0 with a cost field on RunUsage and a cost_limit on UsageLimits, per the release notes on GitHub. A small API change, with a real consequence.
Teams running long agent loops have been capping spend by counting tokens. But token counts stop mapping to dollars once a run switches between model tiers mid-flight. A cost_limit lets you stop a run when the bill hits a number, not when a token counter does.
The same release fixes credential scoping in GoogleCloudProvider and closes a leak where Application Default Credentials environment variables were exposed, per GitHub's changelog. Neither fix comes with more detail than that. The release notes don't say how long the leak existed or who it affected.
Framework-level cost limits are an admission that token budgets never worked once you mix model tiers in one run. If you've been setting a max_tokens ceiling and calling it a budget, this update calls that assumption out. Watch whether other agent frameworks add the same field. If they don't, the gap between tokens spent and dollars spent stays every team's problem to solve by hand.
Each link below shares sources, entities, or timing with this story.
The August 1 release resolves a livelock triggered when anyio scope cancellation hits an in-flight activity await, stops Temporal activities from re-running prepare instead of using the workflow-prepared tool_def, and fails the workflow rather than retrying forever when an act...
Triple-stream retrieval (BM25 keyword, vector embeddings, knowledge-graph traversal) fused via Reciprocal Rank Fusion on the iii engine, with SQLite for state and an in-memory vector index, no external database. The economic claim: ~170K tokens/year (~$10) versus ~650K tokens...
The Show HN post (45 points, 66 comments) pitches it as "your laptop is the last place your secrets are still in plaintext." jit (Go, macOS on Apple Silicon, 84 stars) pulls credentials out of .env files, ~/.aws/credentials, and shell exports into a Touch ID vault, then inject...
Hudson Rock got hold of the archive and counted it. 433,909 files. 118,829 CI runner dumps traced to 2,488 corporate domains. AWS keys, Salesforce client secrets, Slack signing secrets, Azure environment variables, and AI provider API keys belonging to NVIDIA, Volkswagen, Micr...
rust-v0.150.1, published August 27, fixes remote compaction ignoring retained images when computing token budget; it now trims older images as needed (GitHub). Sessions passing screenshots to a vision-capable agent were budgeting as though those images cost nothing, which prod...
Block released it August 27 with a security section dominated by defaults that previously failed open: fail closed on malformed tool visibility, permission denies now take precedence, fail closed on invalid default GCP credentials and invalid Codex ACP mode, honor plugin enabl...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.