deps: bump the fastapi group across 1 directory with 4 updates by dependabot[bot] · Pull Request #44 · jeninh/mail-api

dependabot · 2026-03-30T18:31:54Z

Bumps the fastapi group with 4 updates in the / directory: fastapi, uvicorn, pydantic and pydantic-settings.

Updates fastapi from 0.128.0 to 0.135.2

Release notes

0.135.2

Upgrades

⬆️ Increase lower bound to pydantic >=2.9.0. and fix the test suite. PR #15139 by @svlandeg.

Docs

📝 Add missing last release notes dates. PR #15202 by @tiangolo.

📝 Update docs for contributors and team members regarding translation PRs. PR #15200 by @YuriiMotov.

💄 Fix code blocks in reference docs overflowing table width. PR #15094 by @YuriiMotov.

📝 Fix duplicated words in docstrings. PR #15116 by @AhsanSheraz.

📝 Add docs for pyproject.toml with entrypoint. PR #15075 by @tiangolo.

📝 Update links in docs to no longer use the classes external-link and internal-link. PR #15061 by @tiangolo.

🔨 Add JS and CSS handling for automatic target=_blank for links in docs. PR #15063 by @tiangolo.

💄 Update styles for internal and external links in new tab. PR #15058 by @tiangolo.

📝 Add documentation for the FastAPI VS Code extension. PR #15008 by @savannahostrowski.

📝 Fix doctrings for max_digits and decimal_places. PR #14944 by @YuriiMotov.

📝 Add dates to release notes. PR #15001 by @YuriiMotov.

Translations

🌐 Update translations for zh (update-outdated). PR #15177 by @tiangolo.

🌐 Update translations for zh-hant (update-outdated). PR #15178 by @tiangolo.

🌐 Update translations for zh-hant (add-missing). PR #15176 by @tiangolo.

🌐 Update translations for zh (add-missing). PR #15175 by @tiangolo.

🌐 Update translations for ja (update-outdated). PR #15171 by @tiangolo.

🌐 Update translations for ko (update-outdated). PR #15170 by @tiangolo.

🌐 Update translations for tr (update-outdated). PR #15172 by @tiangolo.

🌐 Update translations for ko (add-missing). PR #15168 by @tiangolo.

🌐 Update translations for ja (add-missing). PR #15167 by @tiangolo.

🌐 Update translations for tr (add-missing). PR #15169 by @tiangolo.

🌐 Update translations for fr (update-outdated). PR #15165 by @tiangolo.

🌐 Update translations for fr (add-missing). PR #15163 by @tiangolo.

🌐 Update translations for uk (update-outdated). PR #15160 by @tiangolo.

🌐 Update translations for uk (add-missing). PR #15158 by @tiangolo.

🌐 Update translations for pt (add-missing). PR #15157 by @tiangolo.

🌐 Update translations for pt (update-outdated). PR #15159 by @tiangolo.

🌐 Update translations for es (update-outdated). PR #15155 by @tiangolo.

🌐 Update translations for es (add-missing). PR #15154 by @tiangolo.

🌐 Update translations for de (update-outdated). PR #15156 by @tiangolo.

🌐 Update translations for ru (update-and-add). PR #15152 by @tiangolo.

🌐 Update translations for de (add-missing). PR #15153 by @tiangolo.

Internal

🔨 Exclude spam comments from statistics in scripts/people.py. PR #15088 by @YuriiMotov.

⬆ Bump authlib from 1.6.7 to 1.6.9. PR #15128 by @dependabot[bot].

⬆ Bump pyasn1 from 0.6.2 to 0.6.3. PR #15143 by @dependabot[bot].

⬆ Bump ujson from 5.11.0 to 5.12.0. PR #15150 by @dependabot[bot].

🔨 Tweak translation workflow and translation fixer tool. PR #15166 by @YuriiMotov.

... (truncated)

Commits

25a3697 🔖 Release version 0.135.2
ab125da 📝 Update release notes
122b6d4 📝 Add missing last release notes dates (#15202)
68ac0ab 📝 Update release notes
ea6e287 📝 Update docs for contributors and team members regarding translation PRs (#1...
d0a6f20 📝 Update release notes
fd9e192 💄 Fix code blocks in reference docs overflowing table width (#15094)
fce9460 📝 Update release notes
0227991 🔨 Exclude spam comments from statistics in scripts/people.py (#15088)
cbd64b0 📝 Update release notes
Additional commits viewable in compare view

Updates uvicorn from 0.34.1 to 0.42.0

Release notes

Sourced from uvicorn's releases.

Version 0.42.0

Changed

Use bytearray for request body accumulation to avoid O(n^2) allocation on fragmented bodies (#2845)

Fixed

Escape brackets and backslash in httptools HEADER_RE regex (#2824)

Fix multiple issues in websockets sans-io implementation (#2825)

New Contributors

@bysiber made their first contribution in Kludex/uvicorn#2825

Full Changelog: Kludex/uvicorn@0.41.0...0.42.0

Version 0.41.0

Added

Add --limit-max-requests-jitter to stagger worker restarts (#2707)

Add socket path to scope["server"] (#2561)

Changed

Rename LifespanOn.error_occured to error_occurred (#2776)

Fixed

Ignore permission denied errors in watchfiles reloader (#2817)

Ensure lifespan shutdown runs when should_exit is set during startup (#2812)

Reduce the log level of 'request limit exceeded' messages (#2788)

New Contributors

@t-kawasumi made their first contribution in Kludex/uvicorn#2776

@fardyn made their first contribution in Kludex/uvicorn#2800

@ewie made their first contribution in Kludex/uvicorn#2807

@shevron made their first contribution in Kludex/uvicorn#2788

@jonashaag made their first contribution in Kludex/uvicorn#2707

Full Changelog: Kludex/uvicorn@0.40.0...0.41.0

Version 0.40.0

What's Changed

... (truncated)

Changelog

Sourced from uvicorn's changelog.

0.42.0 (March 16, 2026)

Changed

Use bytearray for request body accumulation to avoid O(n^2) allocation on fragmented bodies (#2845)

Fixed

Escape brackets and backslash in httptools HEADER_RE regex (#2824)

Fix multiple issues in websockets sans-io implementation (#2825)

0.41.0 (February 16, 2026)

Added

Add --limit-max-requests-jitter to stagger worker restarts (#2707)

Add socket path to scope["server"] (#2561)

Changed

Rename LifespanOn.error_occured to error_occurred (#2776)

Fixed

Ignore permission denied errors in watchfiles reloader (#2817)

Ensure lifespan shutdown runs when should_exit is set during startup (#2812)

Reduce the log level of 'request limit exceeded' messages (#2788)

0.40.0 (December 21, 2025)

Remove

Drop support for Python 3.9 (#2772)

0.39.0 (December 21, 2025)

Fixed

Send close frame on ASGI return for WebSockets (#2769)

Explicitly start ASGI run with empty context (#2742)

0.38.0 (October 18, 2025)

Added

Support Python 3.14 (#2723)

0.37.0 (September 23, 2025)

Added

... (truncated)

Commits

02bed6f Version 0.42.0 (#2852)
d8f2501 chore: pre-create Config objects in benchmarks to measure protocol hot paths ...
9dbb783 Add WebSocket protocol benchmarks for wsproto and websockets-sansio (#2849)
b3c69da Use bytearray for request body accumulation (#2845)
3f3ebee Disable pytest-xdist for CodSpeed benchmark runs (#2847)
d072de7 Add fragmented body benchmark for chunked body accumulation (#2846)
e300c2c Add CodSpeed benchmark suite for HTTP protocol hot paths (#2844)
1fa6976 Escape brackets and backslash in httptools HEADER_RE regex (#2824)
59ec1de Fix multiple issues in websockets sansio implementation (#2825)
2fc0efc Clarify Windows asyncio event loop selection in docs (#2843)
Additional commits viewable in compare view

Updates pydantic from 2.10.6 to 2.12.5

Release notes

Sourced from pydantic's releases.

v2.12.5 2025-11-26

v2.12.5 (2025-11-26)

This is the fifth 2.12 patch release, addressing an issue with the MISSING sentinel and providing several documentation improvements.

The next 2.13 minor release will be published in a couple weeks, and will include a new polymorphic serialization feature addressing the remaining unexpected changes to the serialize as any behavior.

Fix pickle error when using model_construct() on a model with MISSING as a default value by @ornariece in #12522.

Several updates to the documentation by @Viicos.

Full Changelog: pydantic/pydantic@v2.12.4...v2.12.5

v2.12.4 2025-11-05

v2.12.4 (2025-11-05)

This is the fourth 2.12 patch release, fixing more regressions, and reverting a change in the build() method of the AnyUrl and Dsn types.

This patch release also fixes an issue with the serialization of IP address types, when serialize_as_any is used. The next patch release will try to address the remaining issues with serialize as any behavior by introducing a new polymorphic serialization feature, that should be used in most cases in place of serialize as any.

Fix issue with forward references in parent TypedDict classes by @Viicos in #12427.

This issue is only relevant on Python 3.14 and greater.

Exclude fields with exclude_if from JSON Schema required fields by @Viicos in #12430

Revert URL percent-encoding of credentials in the build() method of the AnyUrl and Dsn types by @davidhewitt in pydantic-core#1833.

This was initially considered as a bugfix, but caused regressions and as such was fully reverted. The next release will include an opt-in option to percent-encode components of the URL.

Add type inference for IP address types by @davidhewitt in pydantic-core#1868.

The 2.12 changes to the serialize_as_any behavior made it so that IP address types could not properly serialize to JSON.

Avoid getting default values from defaultdict by @davidhewitt in pydantic-core#1853.

This fixes a subtle regression in the validation behavior of the collections.defaultdict type.

Fix issue with field serializers on nested typed dictionaries by @davidhewitt in pydantic-core#1879.

Add more pydantic-core builds for the three-threaded version of Python 3.14 by @davidhewitt in pydantic-core#1864.

Full Changelog: pydantic/pydantic@v2.12.3...v2.12.4

v2.12.3 2025-10-17

v2.12.3 (2025-10-17)

What's Changed

This is the third 2.13 patch release, fixing issues related to the FieldInfo class, and reverting a change to the supported after model validator function signatures.

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.12.5 (2025-11-26)

GitHub release

This is the fifth 2.12 patch release, addressing an issue with the MISSING sentinel and providing several documentation improvements.

The next 2.13 minor release will be published in a couple weeks, and will include a new polymorphic serialization feature addressing the remaining unexpected changes to the serialize as any behavior.

Fix pickle error when using model_construct() on a model with MISSING as a default value by @ornariece in #12522.

Several updates to the documentation by @Viicos.

v2.12.4 (2025-11-05)

GitHub release

This is the fourth 2.12 patch release, fixing more regressions, and reverting a change in the build() method of the AnyUrl and Dsn types.

This patch release also fixes an issue with the serialization of IP address types, when serialize_as_any is used. The next patch release will try to address the remaining issues with serialize as any behavior by introducing a new polymorphic serialization feature, that should be used in most cases in place of serialize as any.

Fix issue with forward references in parent TypedDict classes by @Viicos in #12427.

This issue is only relevant on Python 3.14 and greater.

Exclude fields with exclude_if from JSON Schema required fields by @Viicos in #12430

Revert URL percent-encoding of credentials in the build() method of the AnyUrl and Dsn types by @davidhewitt in pydantic-core#1833.

This was initially considered as a bugfix, but caused regressions and as such was fully reverted. The next release will include an opt-in option to percent-encode components of the URL.

Add type inference for IP address types by @davidhewitt in pydantic-core#1868.

The 2.12 changes to the serialize_as_any behavior made it so that IP address types could not properly serialize to JSON.

Avoid getting default values from defaultdict by @davidhewitt in pydantic-core#1853.

This fixes a subtle regression in the validation behavior of the collections.defaultdict type.

Fix issue with field serializers on nested typed dictionaries by @davidhewitt in pydantic-core#1879.

Add more pydantic-core builds for the three-threaded version of Python 3.14 by @davidhewitt in pydantic-core#1864.

v2.12.3 (2025-10-17)

GitHub release

... (truncated)

Commits

bd2d0dd Prepare release v2.12.5
7d0302e Document security implications when using create_model()
e9ef980 Fix typo in Standard Library Types documentation
f2c20c0 Add pydantic-docs dev dependency, make use of versioning blocks
a76c1aa Update documentation about JSON Schema
8cbc72c Add documentation about custom __init__()
99eba59 Add additional test for FieldInfo.get_default()
c710769 Special case MISSING sentinel in smart_deepcopy()
20a9d77 Do not delete mock validator/serializer in rebuild_dataclass()
c86515a Update parts of the model and revalidate_instances documentation
Additional commits viewable in compare view

Updates pydantic-settings from 2.7.1 to 2.13.1

Release notes

Sourced from pydantic-settings's releases.

v2.13.0

What's Changed

fix: Deterministic alias selection when using validate_by_name by @chbndrhnns in pydantic/pydantic-settings#707

add deep merge functionality to config file sources by @pmeier in pydantic/pydantic-settings#698

Add support for AWS Secrets Manager VersionId parameter by @jcyamacho in pydantic/pydantic-settings#708

bugfix: Return None for inaccessible GCP Secret Manager secrets by @zaphod72 in pydantic/pydantic-settings#712

Bugfix for cli_kebab_case="all" and CliImplicitFlag[bool] by @Digity101 in pydantic/pydantic-settings#702

Unpack type alisases when looking for NoDecode by @tselepakis in pydantic/pydantic-settings#695

CliToggleFlag and CliDualFlag by @kschwab in pydantic/pydantic-settings#717

Fix for CLI duplicate enum field values. by @kschwab in pydantic/pydantic-settings#722

fixed load nested config from env by @Sube-py in pydantic/pydantic-settings#723

Add non-Path files support (for example Traversable) and open files using Path.open method by @mahenzon in pydantic/pydantic-settings#724

add one more traversable test by @mahenzon in pydantic/pydantic-settings#725

CLI fix fox external list args. by @kschwab in pydantic/pydantic-settings#727

fix: handle case-insensitive retrieval in GoogleSecretManagerSettingsSource by @ezwiefel in pydantic/pydantic-settings#730

CLI test fixes for help text formatting. by @kschwab in pydantic/pydantic-settings#735

Avoid conflicts with the NAME environment variable in WSL by @kzrnm in pydantic/pydantic-settings#747

fix: When restoring init kwargs, use deterministic order by @chbndrhnns in pydantic/pydantic-settings#746

Add env_prefix_target by @kzrnm in pydantic/pydantic-settings#749

Remove (default: …) in the help message for CliToggleFlag by @kzrnm in pydantic/pydantic-settings#740

Add support for CLI serialize styles. by @kschwab in pydantic/pydantic-settings#755

Add support for overriding default help on CLI internal parser. by @kschwab in pydantic/pydantic-settings#758

CLI format_help method support by @kschwab in pydantic/pydantic-settings#759

feat(gcp): support SecretVersion annotation for per-field secret versioning by @ezwiefel in pydantic/pydantic-settings#763

Allow snake_case_conversion with env_prefix for Azure Key Vault source by @cstarkers in pydantic/pydantic-settings#762

fix: Only override preferred_key when no value was found by @chbndrhnns in pydantic/pydantic-settings#767

Update deps by @hramezani in pydantic/pydantic-settings#768

CLI coerce numeric types. by @kschwab in pydantic/pydantic-settings#769

CLI Union Discriminator Choices in Help by @kschwab in pydantic/pydantic-settings#764

Add nested path support for yaml_config_section (fixes #772) by @hugo-romero-mm in pydantic/pydantic-settings#773

Prepare release 2.13.0 by @hramezani in pydantic/pydantic-settings#777

New Contributors

@pmeier made their first contribution in pydantic/pydantic-settings#698

@jcyamacho made their first contribution in pydantic/pydantic-settings#708

@zaphod72 made their first contribution in pydantic/pydantic-settings#712

@Digity101 made their first contribution in pydantic/pydantic-settings#702

@Sube-py made their first contribution in pydantic/pydantic-settings#723

@mahenzon made their first contribution in pydantic/pydantic-settings#724

@kzrnm made their first contribution in pydantic/pydantic-settings#747

@cstarkers made their first contribution in pydantic/pydantic-settings#762

@hugo-romero-mm made their first contribution in pydantic/pydantic-settings#773

Full Changelog: pydantic/pydantic-settings@v2.12.0...v2.13.0

v2.12.0

What's Changed

Support for enum kebab case. by @kschwab in pydantic/pydantic-settings#686

Apply source order: init > env > dotenv > secrets > defaults and pres… by @chbndrhnns in pydantic/pydantic-settings#688

Add NestedSecretsSettings source by @makukha in pydantic/pydantic-settings#690

... (truncated)

Commits

e87d12d v2.13.1 (#790)
acf8c14 Fix JSON decoding for parameterized PEP 695 type aliases (#780)
58b236a Fix AttributeError with nested env vars for dict fields (#785) (#786)
4933f06 Fix CLI parsing error for set field types since 2.13.0 (#787) (#788)
bd0ebe6 Fix RecursionError with self-referential models in CliApp (#783)
eb7840e Fix regression for bool fields since 2.13.0 (#784)
198e71c Prepare release 2.13.0 (#777)
de71e84 Add nested path support for yaml_config_section (fixes #772) (#773)
0f8f951 CLI Union Discriminator Choices in Help (#764)
ce9804c CLI coerce numeric types. (#769)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the fastapi group with 4 updates in the / directory: [fastapi](https://github.com/fastapi/fastapi), [uvicorn](https://github.com/Kludex/uvicorn), [pydantic](https://github.com/pydantic/pydantic) and [pydantic-settings](https://github.com/pydantic/pydantic-settings). Updates `fastapi` from 0.128.0 to 0.135.2 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.128.0...0.135.2) Updates `uvicorn` from 0.34.1 to 0.42.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.34.1...0.42.0) Updates `pydantic` from 2.10.6 to 2.12.5 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](pydantic/pydantic@v2.10.6...v2.12.5) Updates `pydantic-settings` from 2.7.1 to 2.13.1 - [Release notes](https://github.com/pydantic/pydantic-settings/releases) - [Commits](pydantic/pydantic-settings@v2.7.1...v2.13.1) --- updated-dependencies: - dependency-name: fastapi dependency-version: 0.135.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: fastapi - dependency-name: uvicorn dependency-version: 0.42.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: fastapi - dependency-name: pydantic dependency-version: 2.12.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: fastapi - dependency-name: pydantic-settings dependency-version: 2.13.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: fastapi ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-03-30T18:31:54Z

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

deps: bump the fastapi group across 1 directory with 4 updates#44

deps: bump the fastapi group across 1 directory with 4 updates#44
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/fastapi-a167280f59

dependabot bot commented on behalf of github Mar 30, 2026

Uh oh!

dependabot bot commented on behalf of github Mar 30, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Mar 30, 2026

0.135.2

Upgrades

Docs

Translations

Internal

Version 0.42.0

Changed

Fixed

New Contributors

Version 0.41.0

Added

Changed

Fixed

New Contributors

Version 0.40.0

What's Changed

0.42.0 (March 16, 2026)

Changed

Fixed

0.41.0 (February 16, 2026)

Added

Changed

Fixed

0.40.0 (December 21, 2025)

Remove

0.39.0 (December 21, 2025)

Fixed

0.38.0 (October 18, 2025)

Added

0.37.0 (September 23, 2025)

Added

v2.12.5 2025-11-26

v2.12.5 (2025-11-26)

v2.12.4 2025-11-05

v2.12.4 (2025-11-05)

v2.12.3 2025-10-17

v2.12.3 (2025-10-17)

What's Changed

v2.12.5 (2025-11-26)

v2.12.4 (2025-11-05)

v2.12.3 (2025-10-17)

v2.13.0

What's Changed

New Contributors

v2.12.0

What's Changed

Uh oh!

dependabot bot commented on behalf of github Mar 30, 2026

Labels

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants