עדכון pydantic-ai: ביטחון ותכונות חדשות

תקציר מקורי באנגלית<h2>What's Changed</h2> <h3>🛡️ Security</h3> <ul> <li><a href="https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-q2xc-rrxj-58x9">GHSA-q2xc-rrxj-58x9</a>: the local dev web chat UI (<code>Agent.to_web()</code>, <code>clai web</code>) didn't validate the <code>Host</code> header, so DNS rebinding from a website you visit could reach it and run the served agent with your local process's tools and credentials. Fixed in <code>pydantic-ai</code>/<code>pydantic-ai-slim</code> 2.30.0 by validating <code>Host</code> against localhost/loopback/LAN addresses by default; deployments reached under a real hostname must opt in with the new <code>allowed_hosts</code> setting.</li> </ul> <h3>🚀 Features</h3> <ul> <li>Use <code>openrouter:web_search</code> for web search by <a class="user-me