chore(deps): bump the dependencies group across 1 directory with 18 updates #310

dependabot · 2025-09-29T20:27:27Z

Bumps the dependencies group with 18 updates in the / directory:

Package	From	To
requests	`2.32.3`	`2.32.5`
python-dotenv	`1.1.0`	`1.1.1`
pyyaml	`6.0.2`	`6.0.3`
fhir-resources	`8.0.0`	`8.1.0`
sympy	`1.13.3`	`1.14.0`
pandas	`2.2.3`	`2.3.2`
psycopg[binary]	`3.2.6`	`3.2.10`
sqlalchemy	`2.0.40`	`2.0.43`
pydantic	`2.11.2`	`2.11.9`
pydantic-settings	`2.8.1`	`2.11.0`
uvicorn[standard]	`0.34.0`	`0.37.0`
fastapi	`0.115.12`	`0.118.0`
pendulum	`3.0.0`	`3.1.0`
cython	`3.0.12`	`3.1.4`
setuptools	`78.1.0`	`80.9.0`
pytest	`8.3.5`	`8.4.2`
pytest-postgresql	`7.0.1`	`7.0.2`
pytest-cov	`6.1.1`	`7.0.0`

Updates requests from 2.32.3 to 2.32.5

Release notes

Sourced from requests's releases.

v2.32.5

2.32.5 (2025-08-18)

Bugfixes

The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

Added support for Python 3.14.

Dropped support for Python 3.8 following its end of support.

v2.32.4

2.32.4 (2025-06-10)

Security

CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file. (#6965)

Improvements

Numerous documentation improvements

Deprecations

Added support for pypy 3.11 for Linux and macOS. (#6926)

Dropped support for pypy 3.9 following its end of support. (#6926)

Changelog

Sourced from requests's changelog.

2.32.5 (2025-08-18)

Bugfixes

The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

Added support for Python 3.14.

Dropped support for Python 3.8 following its end of support.

2.32.4 (2025-06-10)

Security

CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file.

Improvements

Numerous documentation improvements

Deprecations

Added support for pypy 3.11 for Linux and macOS.

Dropped support for pypy 3.9 following its end of support.

Commits

b25c87d v2.32.5
131e506 Merge pull request #7010 from psf/dependabot/github_actions/actions/checkout-...
b336cb2 Bump actions/checkout from 4.2.0 to 5.0.0
46e939b Update publish workflow to use artifact-id instead of name
4b9c546 Merge pull request #6999 from psf/dependabot/github_actions/step-security/har...
7618dbe Bump step-security/harden-runner from 2.12.0 to 2.13.0
2edca11 Add support for Python 3.14 and drop support for Python 3.8 (#6993)
fec96cd Update Makefile rules (#6996)
d58d8aa docs: clarify timeout parameter uses seconds in Session.request (#6994)
91a3eab Bump github/codeql-action from 3.28.5 to 3.29.0
Additional commits viewable in compare view

Updates python-dotenv from 1.1.0 to 1.1.1

Release notes

Sourced from python-dotenv's releases.

v1.1.1

What's Changed

fix: ensure find_dotenv work reliably on python 3.13 by @theskumar in theskumar/python-dotenv#563

fix(cli): issue with execvpe on Windows by @wrongontheinternet in theskumar/python-dotenv#566

New Contributors

@wrongontheinternet made their first contribution in theskumar/python-dotenv#566

Full Changelog: theskumar/python-dotenv@v1.1.0...v1.1.1

Changelog

Sourced from python-dotenv's changelog.

[1.1.1] - 2025-06-24

Fixed

CLI: Ensure find_dotenv work reliably on python 3.13 by [@theskumar] in #563

CLI: revert the use of execvpe on Windows by [@wrongontheinternet] in #566

Commits

16e660d Bump version: 1.1.0 → 1.1.1
667e82f update changelog
9d85edb fix(cli): issue with execvpe on Windows (#566)
8411987 fix: ensure find_dotenv work reliably on python 3.13 (#563)
01f8997 docs update
See full diff in compare view

Updates pyyaml from 6.0.2 to 6.0.3

Release notes

Sourced from pyyaml's releases.

6.0.3

What's Changed

Support for Python 3.14 and free-threading (experimental).

Full Changelog: yaml/pyyaml@6.0.2...6.0.3

Changelog

Sourced from pyyaml's changelog.

6.0.3 (2025-09-25)

yaml/pyyaml#864 -- Support for Python 3.14 and free-threading (experimental)

Commits

49790e7 Release 6.0.3 (#889)
See full diff in compare view

Updates fhir-resources from 8.0.0 to 8.1.0

Changelog

Sourced from fhir-resources's changelog.

8.1.0 (2025-07-10)

New features

Issue #181 summary (https://www.hl7.org/fhir/search.html#_summary) mode feature added.

Fixes

Issue #184 pyright struggles with default position args.

Issue #186 missing py.typed marker, causing mypy import errors.

Issue #183 Pydantic 2.11+ Deprecation Warnings: model_fields Should Be Accessed on Class, Not Instance.

Commits

a49fcad Preparing release 8.1.0
4890b32 📝 tests coverages added for summary serilization mode.
90ec785 📝 readme updated.
fd3ec7a 💥 Issue #184 all fhir resources are regenerated as all fields have now d...
1b54cb6 ✨ travis file is updated as more python version is added.
93bb0cb 💥 all fhir resources have been regenerated in awake of supporting summer...
bb9aebf 📝 minimum fhir core version has been updated.
d1c5945 ✨ minimum fhir-core version has been updated, in aware of supporting...
9161634 Merge pull request #179 from lucas-tuva/py-typed-marker
0edabef Add py.typed marker
Additional commits viewable in compare view

Updates sympy from 1.13.3 to 1.14.0

Commits

16fa855 Merge pull request #28004 from oscarbenjamin/pr_bump_version_114
597028e release: bump version to 1.14.0 final
db82759 Merge pull request #27996 from oscarbenjamin/pr_27994_114_backport
9861163 release: bump version to 1.14.0rc2
d114acf Revert passing init_printing settings to the pretty printer
7f50681 Merge pull request #27970 from oscarbenjamin/pr_benchmarks_114
1721b69 maint(ci): fix paths in action
fa12f64 maint(ci): fix benchmarks on 1.14 branch
2b73e0c Merge pull request #27960 from oscarbenjamin/pr_pin_mpmath
a66be8c maint(ci): use Python 3.12 for flint==0.6.0
Additional commits viewable in compare view

Updates pandas from 2.2.3 to 2.3.2

Release notes

Sourced from pandas's releases.

Pandas 2.3.2

We are pleased to announce the release of pandas 2.3.2. This release includes some improvements and fixes to the future string data type (preview feature for the upcoming pandas 3.0). We recommend that all users upgrade to this version.

See the full whatsnew for a list of all the changes. Pandas 2.3.2 supports Python 3.9 and higher.

The release will be available on the conda-forge channel:
conda install pandas --channel conda-forge
Or via PyPI:
python3 -m pip install --upgrade pandas
Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Pandas 2.3.1

We are pleased to announce the release of pandas 2.3.1. This release includes some improvements and fixes to the future string data type (preview feature for the upcoming pandas 3.0). We recommend that all users upgrade to this version.

See the full whatsnew for a list of all the changes. Pandas 2.3.1 supports Python 3.9 and higher.

The release will be available on the conda-forge channel:
conda install pandas --channel conda-forge
Or via PyPI:
python3 -m pip install --upgrade pandas
Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Pandas 2.3.0

We are pleased to announce the release of pandas 2.3.0. This release includes some new features, bug fixes, and performance improvements. We recommend that all users upgrade to this version.

See the full whatsnew for a list of all the changes. Pandas 2.3.0 supports Python 3.10 and higher.

The release will be available on the defaults and conda-forge channels:
conda install -c conda-forge pandas
Or via PyPI:

... (truncated)

Commits

4665c10 RLS: 2.3.2
633c68b DOC: fix syntax in whatsnew file
456ad47 Backport PR #62152 on branch 2.3.x (DOC: prepare 2.3.2 whatsnew notes for rel...
6cae644 [backport 2.3.x] DOC: move and reword whatsnew note for replace fix (GH-57865...
a91c50a Backport PR #62147 on branch 2.3.x (DOC: correct and rewrite string migration...
f7a2cfd [backport 2.3.x] BUG/DEPR: logical operation with bool and string (#61995) (#...
7981a43 Backport PR #62124 on branch 2.3.x (CI/BLD: don't use strict xfail for '%m.%Y...
fafbcbd [backport 2.3.x] BUG(CoW): also raise for chained assignment for .at / .iat (...
3ac64a7 [backport 2.3.x] BUG: Fix Series.str.contains with compiled regex on Arrow st...
1f2dc4f [backport 2.3.x] BUG: fix Series.str.fullmatch() and Series.str.match() with ...
Additional commits viewable in compare view

Updates psycopg[binary] from 3.2.6 to 3.2.10

Changelog

Sourced from psycopg[binary]'s changelog.

.. currentmodule:: psycopg

.. index:: single: Release notes single: News

psycopg release notes

Future releases

Psycopg 3.3.0 (unreleased) ^^^^^^^^^^^^^^^^^^^^^^^^^^

.. rubric:: New top-level features

Add :ref:template strings queries \<template-strings> (:ticket:[#1054](https://github.com/psycopg/psycopg/issues/1054)).

Cursors are now iterators, not only iterables. This means you can call next(cur) to fetch the next row (:ticket:[#1064](https://github.com/psycopg/psycopg/issues/1064)).

Add Cursor.results() to iterate over the result sets of the queries executed though ~Cursor.executemany() or ~Cursor.execute() (:ticket:[#1080](https://github.com/psycopg/psycopg/issues/1080)).

.. rubric:: New libpq wrapper features

Add pq.PGconn.used_gssapi attribute and Capabilities.has_used_gssapi() function (:ticket:[#1138](https://github.com/psycopg/psycopg/issues/1138)).

Add ConnectionInfo.full_protocol_version attribute, Capabilities.has_full_protocol_version() function (:ticket:[#1079](https://github.com/psycopg/psycopg/issues/1079)).

.. rubric:: Other changes

Disable default GSSAPI preferential connection in the binary package (:ticket:[#1136](https://github.com/psycopg/psycopg/issues/1136)).

.. warning::

Please explicitly set the gssencmode_ connection parameter or the :envvar:PGGSSENCMODE environment variable to interact reliably with the GSSAPI.

Drop support for Python 3.8 (:ticket:[#976](https://github.com/psycopg/psycopg/issues/976)) and 3.9 (:ticket:[#1056](https://github.com/psycopg/psycopg/issues/1056)).

Psycopg 3.2.11 (unreleased) ^^^^^^^^^^^^^^^^^^^^^^^^^^^

Fix bad data on error in binary copy (:ticket:[#1147](https://github.com/psycopg/psycopg/issues/1147)).

Don't raise warning, and don't leak resources, if a builtin function is used

... (truncated)

Commits

6cc2adf chore: bump psycopg package version to 3.2.10
4c2fd37 Merge branch 'pg18-3.2' into maint-3.2
6ddad7b docs: mention PostgreSQL v18 support
30bfdb9 ci: add PostgreSQL 18 to the test grid
57236b8 chore: add PostgreSQL 18 exceptions
970a307 fix: add ConnStatus.CONNECTION_AUTHENTICATING value
6903a92 Merge branch 'fix-1091' into maint-3.2
43ad961 docs: document the changes to notifies generator
eac8115 fix: raise a warning when notifies generator and handlers are used together
5cc99d6 fix: collect notifies only if no handler was registered
Additional commits viewable in compare view

Updates sqlalchemy from 2.0.40 to 2.0.43

Release notes

Sourced from sqlalchemy's releases.

2.0.43

Released: August 11, 2025

orm

[orm] [bug] Fixed issue where using the post_update feature would apply incorrect "pre-fetched" values to the ORM objects after a multi-row UPDATE process completed. These "pre-fetched" values would come from any column that had an Column.onupdate callable or a version id generator used by orm.Mapper.version_id_generator; for a version id generator that delivered random identifiers like timestamps or UUIDs, this incorrect data would lead to a DELETE statement against those same rows to fail in the next step.

References: #12748

[orm] [bug] Fixed issue where _orm.mapped_column.use_existing_column parameter in _orm.mapped_column() would not work when the _orm.mapped_column() is used inside of an Annotated type alias in polymorphic inheritance scenarios. The parameter is now properly recognized and processed during declarative mapping configuration.

References: #12787

[orm] [bug] Improved the implementation of the _orm.selectin_polymorphic() inheritance loader strategy to properly render the IN expressions using chunks of 500 records each, in the same manner as that of the _orm.selectinload() relationship loader strategy. Previously, the IN expression would be arbitrarily large, leading to failures on databases that have limits on the size of IN expressions including Oracle Database.

References: #12790

engine

[engine] [usecase] Added new parameter create_engine.skip_autocommit_rollback which provides for a per-dialect feature of preventing the DBAPI .rollback() from being called under any circumstances, if the connection is detected as being in "autocommit" mode. This improves upon a critical performance issue identified in MySQL dialects where the network overhead of the .rollback() call remains prohibitive even if autocommit mode is set.

References: #12784

postgresql

... (truncated)

Commits

See full diff in compare view

Updates pydantic from 2.11.2 to 2.11.9

Release notes

Sourced from pydantic's releases.

v2.11.9 2025-09-13

What's Changed

Fixes

Backport v1.10.23 changes by @Viicos

Full Changelog: pydantic/pydantic@v2.11.8...v2.11.9

v2.11.8 2025-09-13

v2.11.8 (2025-09-13)

What's Changed

Fixes

Fix mypy plugin for mypy 1.18 by @cdce8p in #12209

Full Changelog: pydantic/pydantic@v2.11.7...v2.11.8

v2.11.7 2025-06-14

What's Changed

Fixes

Copy FieldInfo instance if necessary during FieldInfo build by @Viicos in pydantic/pydantic#11980

Full Changelog: pydantic/pydantic@v2.11.6...v2.11.7

v2.11.6 2025-06-13

v2.11.6 (2025-06-13)

What's Changed

Fixes

Rebuild dataclass fields before schema generation by @Viicos in #11949

Always store the original field assignment on FieldInfo by @Viicos in #11946

Full Changelog: pydantic/pydantic@v2.11.5...v2.11.6

v2.11.5 2025-05-22

What's Changed

Fixes

Check if FieldInfo is complete after applying type variable map by @Viicos in #11855

Do not delete mock validator/serializer in model_rebuild() by @Viicos in #11890

Do not duplicate metadata on model rebuild by @Viicos in #11902

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.11.9 (2025-09-13)

GitHub release

What's Changed

Fixes

Backport v1.10.23 changes by @Viicos

v2.11.8 (2025-09-13)

GitHub release

What's Changed

Fixes

Fix mypy plugin for mypy 1.18 by @cdce8p in #12209

v2.11.7 (2025-06-14)

GitHub release

What's Changed

Fixes

Copy FieldInfo instance if necessary during FieldInfo build by @Viicos in #11898

v2.11.6 (2025-06-13)

GitHub release

What's Changed

Fixes

Rebuild dataclass fields before schema generation by @Viicos in #11949

Always store the original field assignment on FieldInfo by @Viicos in #11946

v2.11.5 (2025-05-22)

GitHub release

What's Changed

Fixes

Check if FieldInfo is complete after applying type variable map by @Viicos in #11855

... (truncated)

Commits

9231095 Prepare release v2.11.9
f003a89 Backport v1.10.23 changes
96b81dd Prepare release v2.11.8
966f377 Fix mypy v2 plugin for upcoming 1.18 mypy release
5f033e4 Prepare release v2.11.7
c3368b8 Copy FieldInfo instance if necessary during FieldInfo build (#11980)
3987b23 Prepare release v2.11.6
dc7a9d2 Always store the original field assignment on FieldInfo
c284c27 Rebuild dataclass fields before schema generation
5e6d1dc Prepare release v2.11.5
Additional commits viewable in compare view

Updates pydantic-settings from 2.8.1 to 2.11.0

Release notes

Sourced from pydantic-settings's releases.

v2.11.0

What's Changed

CLI Serialize Support by @kschwab in pydantic/pydantic-settings#643

Inspect type aliases to determine if an annotation is complex by @tselepakis in pydantic/pydantic-settings#644

Revert "fix: Respect 'cli_parse_args' from model_config with settings_customise_sources (#611)" by @hramezani in pydantic/pydantic-settings#655

Remove parsing of command line arguments from CliSettingsSource.__init__. by @trygve-baerland in pydantic/pydantic-settings#656

turn off allow_abbrev on subparsers by @mroch in pydantic/pydantic-settings#658

CLI Serialization Fixes by @kschwab in pydantic/pydantic-settings#649

Fix PydanticModel type checking. by @kschwab in pydantic/pydantic-settings#659

Avoid env_prefix falling back to env vars without prefix by @tselepakis in pydantic/pydantic-settings#648

Warn if model_config sets unused keys for missing settings sources by @HomerusJa in pydantic/pydantic-settings#663

Included endpoint_url kwarg in AWSSecretsManagerSettingsSource class by @adrianohrl in pydantic/pydantic-settings#664

Fix typo ("Accesing") in the "Adding sources" docs by @deepyaman in pydantic/pydantic-settings#668

CLI Windows Path Fix by @kschwab in pydantic/pydantic-settings#669

Cli root model support by @kschwab in pydantic/pydantic-settings#677

Snake case conversion in Azure Key Vault by @AndreuCodina in pydantic/pydantic-settings#680

Make InitSettingsSource resolution deterministic by @enrico-stauss in pydantic/pydantic-settings#681

Update deps by @hramezani in pydantic/pydantic-settings#683

New Contributors

@tselepakis made their first contribution in pydantic/pydantic-settings#644

@trygve-baerland made their first contribution in pydantic/pydantic-settings#656

@mroch made their first contribution in pydantic/pydantic-settings#658

@HomerusJa made their first contribution in pydantic/pydantic-settings#663

@adrianohrl made their first contribution in pydantic/pydantic-settings#664

@deepyaman made their first contribution in pydantic/pydantic-settings#668

@enrico-stauss made their first contribution in pydantic/pydantic-settings#681

Full Changelog: pydantic/pydantic-settings@2.10.1...v2.11.0

v2.10.1

What's Changed

Fix UnboundLocalError error in _replace_field_names_case_insensitively by @hramezani in pydantic/pydantic-settings#639

Remove unknown file reference in documentation by @Viicos in pydantic/pydantic-settings#640

Prepare release 2.10.1 by @hramezani in pydantic/pydantic-settings#642

Full Changelog: pydantic/pydantic-settings@2.10.0...2.10.1

v2.10.0

What's Changed

Fix running tests when azure-keyvault-secrets is not installed by @CyberTailor in pydantic/pydantic-settings#601

Fix running tests when google-cloud-secret-manager is not installed by @CyberTailor in pydantic/pydantic-settings#602

Support loading a specific nested key from YAML in YamlConfigSettingsSource by @Seunghan-Jung in pydantic/pydantic-settings#603

Fix CLI suppression for model group help by @kschwab in pydantic/pydantic-settings#604

Fix missing DEFAULT_PATH import by @hramezani in pydantic/pydantic-settings#606

Fix case-insensitive handling of nested aliases in EnvironmentSettingsSource by @d15ky in pydantic/pydantic-settings#608

Azure Key Vault case insensitive support and dash-underscore translation by @d15ky in pydantic/pydantic-settings#607

fix: Respect 'cli_parse_args' from model_config with settings_customise_sources by @karta9821 in pydantic/pydantic-settings#611

Bump astral-sh/setup-uv by @hramezani in pydantic/pydantic-settings#612

... (truncated)

Commits

3e66430 Prepare release 2.11.0 (#684)
44fb5b7 Update deps (#683)
0497ef2 Make InitSettingsSource resolution deterministic (#681)
c22cef4 Snake case conversion in Azure Key Vault (#680)
9c6c9b5 Cli root model support (#677)
a164b73 CLI Windows Path Fix (#669)
d81f8d8 Fix typo ("Accesing") in the "Adding sources" docs (#668)
53ade97 Included endpoint_url kwarg in AWSSecretsManagerSettingsSource class (#664)
1967d6f Warn if model_config sets unused keys for missing settings sources (#663)
1fc2087 Avoid env_prefix falling back to env vars without prefix (#648)
Additional commits viewable in compare view

Updates uvicorn[standard] from 0.34.0 to 0.37.0

Release notes

Sourced from uvicorn[standard]'s releases.

Version 0.37.0

What's Changed

Add --timeout-worker-healthcheck setting by @Kludex in Kludex/uvicorn#2711

Add os.PathLike[str] type to ssl_ca_certs by @rnv812 in Kludex/uvicorn#2676

New Contributors

@LincolnPuzey made their first contribution in Kludex/uvicorn#2669

@rnv812 made their first contribution in Kludex/uvicorn#2676

Full Changelog: Kludex/uvicorn@0.36.1...0.37.0

Version 0.36.1

What's Changed

Raise an exception when calling removed Config.setup_event_loop() by @Kludex in Kludex/uvicorn#2709

Full Changelog: Kludex/uvicorn@0.36.0...0.36.1

Version 0.36.0

Added

Support custom IOLOOPs by @gnir-work in Kludex/uvicorn#2435

Allow to provide importable string in --http, --ws and --loop by @Kludex in Kludex/uvicorn#2658

New Contributors

@gnir-work made their first contribution in Kludex/uvicorn#2435

@musicinmybrain made their first contribution in Kludex/uvicorn#2659

@secrett2633 made their first contribution in Kludex/uvicorn#2684

Full Changelog: Kludex/uvicorn@0.35.0...0.36.0

Version 0.35.0

Added

Add WebSocketsSansIOProtocol by @Kludex in encode/uvicorn#2540

Changed

Refine help message for option --proxy-headers by @zhangyoufu in encode/uvicorn#2653

New Contributors

@zhangyoufu made their first contribution in encode/uvicorn#2653

Full Changelog: Kludex/uvicorn@0.34.3...0.35.0

Version 0.34.3

What's Changed

Don't include cwd() when non-empty --reload-dirs is passed by @stinovlas in encode/uvicorn#2598

... (truncated)

Changelog

Sourced from uvicorn[standard]'s changelog.

0.37.0 (September 23, 2025)

Added

Add --timeout-worker-healthcheck option (#2711)

Add os.PathLike[str] type to ssl_ca_certs (#2676)

0.36.1 (September 23, 2025)

Fixed

Raise an exception when calling removed Config.setup_event_loop() (#2709)

0.36.0 (September 20, 2025)

Added

Support custom IOLOOPs (#2435)

Allow to provide importable string in --http, --ws and --loop (#2658)

0.35.0 (June 28, 2025)

Added

Add WebSocketsSansIOProtocol (#2540)

Changed

Refine help message for option --proxy-headers (#2653)

0.34.3 (June 1, 2025)

Fixed

Don't include cwd() when non-empty --reload-dirs is passed (#2598)

Apply get_client_addr formatting to WebSocket logging (#2636)

0.34.2 (April 19, 2025)

Fixed

Flush stdout buffer on Windows to trigger reload (#2604)

0.34.1 (April 13, 2025)

Deprecated

Deprecate ServerState in the main module (#2581)

Commits

4098bca Version 0.37.0 (#2712)
8c057fa Add os.PathLike[str] type to ssl_ca_certs (#2676)
bbe119e Add note about --timeout-keep-alive being measured in seconds (#2669)
2744f14 Add --timeout-worker-healthcheck setting (#2711)
1dfb0bd Version 0.36.1 (#2710)
3d0d46a Raise an exception when calling removed Config.setup_event_loop() (#2709)
ad9e5b9 docs: redirect uvicorn.org to uvicorn.dev (#2705)
0e3b18c Version 0.36.0 (#2704)
f84661d chore: drop mention to scripts/publish (#2696)
dcd7e6c docs: replace uvicorn.org by uvicorn.dev (#2703)
Additional commits viewable in compare view

Updates fastapi from 0.115.12 to 0.118.0

Release notes

Sourced from fastapi's releases.

0.118.0

Fixes

🐛 Fix support for StreamingResponses with dependencies with yield or UploadFiles, close after the response is done. PR #14099 by @tiangolo.

Before FastAPI 0.118.0, if you used a dependency with yield, it would run the exit code after the path operation function returned but right before sending the response.

This change also meant that if you returned a StreamingResponse, the exit code of the dependency with yield would have been already run.

For example, if you had a database session in a dependency with yield, the StreamingResponse would not be able to use that session while streaming data because the session would have already been closed in the exit code after yield.

This behavior was reverted in 0.118.0, to make the exit code after yield be executed after the response is sent.

You can read more about it in the docs for Advanced Dependencies - Dependencies with yield, HTTPException, except and Background Tasks. Including what you could do if you wanted to close a database session earlier, before returning the response to the client.

Docs

📝 Update tutorial/security/oauth2-jwt/ to use pwdlib with Argon2 instead of passlib. PR #13917 by @Neizvestnyj.

✏️ Fix typos in OAuth2 password request forms. PR #14112 by @alv2017.

📝 Update contributing guidelines for installing requirements. PR #14095 by @alejsdev.

Translations

🌐 Sync German docs. PR #14098 by @nilslindemann.

Internal

⬆ [pre-commit.ci] pre-commit autoupdate. PR #14103 by @pre-commit-ci[bot].

♻️ Refactor sponsor image handling. PR #14102 by @alejsdev.

🐛 Fix sponsor display issue by hiding element on image error. PR #14097 by @alejsdev.

🐛 Hide sponsor badge when sponsor image is not displayed. PR #14096 by @alejsdev.

0.117.1

Fixes

🐛 Fix validation error when File is declared after Form parameter. PR #11194 by @thomasleveil.

0.117.0

Features

✨ Allow None as return type for bodiless responses. PR #9425 by @hofrob.

✨ Allow array values for OpenAPI schema type field. PR #13639 by @sammasak.

✨ Add OpenAPI external_docs parameter to FastAPI. PR #13713 by @cmtoro.

Fixes

⚡️ Fix default_factory for response model field with Pydantic V1. PR #9704 by @vvanglro.

🐛 Fix inconsistent processing of model docstring formfeed char with Pydantic V1. PR #6039 by @MaxwellPayne.

🐛 Fix jsonable_encoder alters json_encoders of Pydantic v1 objects. PR #4972 by @aboubacs.

... (truncated)

Commits

333f1ba 🔖 Release version 0.118.0
1d5168a 📝 Update release notes
bfa54b4 📝 Update release notes
e329d78 🐛 Fix support for StreamingResponses with dependencies with yield or `Upl...
861b22c 📝 Update release notes
efdafa4 📝 Update tutorial/security/oauth2-jwt/ to use pwdlib with Argon2 instead ...
450a334 📝 Update release notes
3eb2ee7 ✏️ Fix typos in OAuth2 password request forms (#14112)
287eb31 📝 Update release notes

…pdates Bumps the dependencies group with 18 updates in the / directory: | Package | From | To | | --- | --- | --- | | [requests](https://github.com/psf/requests) | `2.32.3` | `2.32.5` | | [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.1.0` | `1.1.1` | | [pyyaml](https://github.com/yaml/pyyaml) | `6.0.2` | `6.0.3` | | [fhir-resources](https://github.com/nazrulworld/fhir.resources) | `8.0.0` | `8.1.0` | | [sympy](https://github.com/sympy/sympy) | `1.13.3` | `1.14.0` | | [pandas](https://github.com/pandas-dev/pandas) | `2.2.3` | `2.3.2` | | [psycopg[binary]](https://github.com/psycopg/psycopg) | `3.2.6` | `3.2.10` | | [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.40` | `2.0.43` | | [pydantic](https://github.com/pydantic/pydantic) | `2.11.2` | `2.11.9` | | [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.8.1` | `2.11.0` | | [uvicorn[standard]](https://github.com/Kludex/uvicorn) | `0.34.0` | `0.37.0` | | [fastapi](https://github.com/fastapi/fastapi) | `0.115.12` | `0.118.0` | | [pendulum](https://github.com/sdispater/pendulum) | `3.0.0` | `3.1.0` | | [cython](https://github.com/cython/cython) | `3.0.12` | `3.1.4` | | [setuptools](https://github.com/pypa/setuptools) | `78.1.0` | `80.9.0` | | [pytest](https://github.com/pytest-dev/pytest) | `8.3.5` | `8.4.2` | | [pytest-postgresql](https://github.com/dbfixtures/pytest-postgresql) | `7.0.1` | `7.0.2` | | [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `6.1.1` | `7.0.0` | Updates `requests` from 2.32.3 to 2.32.5 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.32.3...v2.32.5) Updates `python-dotenv` from 1.1.0 to 1.1.1 - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](theskumar/python-dotenv@v1.1.0...v1.1.1) Updates `pyyaml` from 6.0.2 to 6.0.3 - [Release notes](https://github.com/yaml/pyyaml/releases) - [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES) - [Commits](yaml/pyyaml@6.0.2...6.0.3) Updates `fhir-resources` from 8.0.0 to 8.1.0 - [Release notes](https://github.com/nazrulworld/fhir.resources/releases) - [Changelog](https://github.com/nazrulworld/fhir.resources/blob/main/HISTORY.rst) - [Commits](nazrulworld/fhir.resources@8.0.0...8.1.0) Updates `sympy` from 1.13.3 to 1.14.0 - [Release notes](https://github.com/sympy/sympy/releases) - [Commits](sympy/sympy@sympy-1.13.3...sympy-1.14.0) Updates `pandas` from 2.2.3 to 2.3.2 - [Release notes](https://github.com/pandas-dev/pandas/releases) - [Commits](pandas-dev/pandas@v2.2.3...v2.3.2) Updates `psycopg[binary]` from 3.2.6 to 3.2.10 - [Changelog](https://github.com/psycopg/psycopg/blob/master/docs/news.rst) - [Commits](psycopg/psycopg@3.2.6...3.2.10) Updates `sqlalchemy` from 2.0.40 to 2.0.43 - [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases) - [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst) - [Commits](https://github.com/sqlalchemy/sqlalchemy/commits) Updates `pydantic` from 2.11.2 to 2.11.9 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/v2.11.9/HISTORY.md) - [Commits](pydantic/pydantic@v2.11.2...v2.11.9) Updates `pydantic-settings` from 2.8.1 to 2.11.0 - [Release notes](https://github.com/pydantic/pydantic-settings/releases) - [Commits](pydantic/pydantic-settings@v2.8.1...v2.11.0) Updates `uvicorn[standard]` from 0.34.0 to 0.37.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.34.0...0.37.0) Updates `fastapi` from 0.115.12 to 0.118.0 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.115.12...0.118.0) Updates `pendulum` from 3.0.0 to 3.1.0 - [Release notes](https://github.com/sdispater/pendulum/releases) - [Changelog](https://github.com/python-pendulum/pendulum/blob/master/CHANGELOG.md) - [Commits](python-pendulum/pendulum@3.0.0...3.1.0) Updates `cython` from 3.0.12 to 3.1.4 - [Release notes](https://github.com/cython/cython/releases) - [Changelog](https://github.com/cython/cython/blob/master/CHANGES.rst) - [Commits](cython/cython@3.0.12...3.1.4) Updates `setuptools` from 78.1.0 to 80.9.0 - [Release notes](https://github.com/pypa/setuptools/releases) - [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst) - [Commits](pypa/setuptools@v78.1.0...v80.9.0) Updates `pytest` from 8.3.5 to 8.4.2 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.3.5...8.4.2) Updates `pytest-postgresql` from 7.0.1 to 7.0.2 - [Changelog](https://github.com/dbfixtures/pytest-postgresql/blob/main/CHANGES.rst) - [Commits](dbfixtures/pytest-postgresql@v7.0.1...v7.0.2) Updates `pytest-cov` from 6.1.1 to 7.0.0 - [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst) - [Commits](pytest-dev/pytest-cov@v6.1.1...v7.0.0) --- updated-dependencies: - dependency-name: requests dependency-version: 2.32.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: python-dotenv dependency-version: 1.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: pyyaml dependency-version: 6.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: fhir-resources dependency-version: 8.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: sympy dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: pandas dependency-version: 2.3.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: psycopg[binary] dependency-version: 3.2.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: sqlalchemy dependency-version: 2.0.43 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: pydantic dependency-version: 2.11.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: pydantic-settings dependency-version: 2.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: uvicorn[standard] dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: fastapi dependency-version: 0.118.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: pendulum dependency-version: 3.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: cython dependency-version: 3.1.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: setuptools dependency-version: 80.9.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: pytest dependency-version: 8.4.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: pytest-postgresql dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: pytest-cov dependency-version: 7.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2025-10-06T20:05:42Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 29, 2025

dependabot bot closed this Oct 6, 2025

dependabot bot deleted the dependabot/pip/main/dependencies-25eac0f895 branch October 6, 2025 20:05

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the dependencies group across 1 directory with 18 updates #310

chore(deps): bump the dependencies group across 1 directory with 18 updates #310

Uh oh!

dependabot bot commented on behalf of github Sep 29, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Oct 6, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

chore(deps): bump the dependencies group across 1 directory with 18 updates #310

chore(deps): bump the dependencies group across 1 directory with 18 updates #310

Uh oh!

Conversation

dependabot bot commented on behalf of github Sep 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v2.32.5

2.32.5 (2025-08-18)

v2.32.4

2.32.4 (2025-06-10)

2.32.5 (2025-08-18)

2.32.4 (2025-06-10)

v1.1.1

What's Changed

New Contributors

[1.1.1] - 2025-06-24

Fixed

6.0.3

What's Changed

8.1.0 (2025-07-10)

Pandas 2.3.2

Pandas 2.3.1

Pandas 2.3.0

psycopg release notes

Future releases

2.0.43

orm

engine

postgresql

v2.11.9 2025-09-13

What's Changed

Fixes

v2.11.8 2025-09-13

v2.11.8 (2025-09-13)

What's Changed

Fixes

v2.11.7 2025-06-14

What's Changed

Fixes

v2.11.6 2025-06-13

v2.11.6 (2025-06-13)

What's Changed

Fixes

v2.11.5 2025-05-22

What's Changed

Fixes

v2.11.9 (2025-09-13)

What's Changed

Fixes

v2.11.8 (2025-09-13)

What's Changed

Fixes

v2.11.7 (2025-06-14)

What's Changed

Fixes

v2.11.6 (2025-06-13)

What's Changed

Fixes

v2.11.5 (2025-05-22)

What's Changed

Fixes

v2.11.0

What's Changed

New Contributors

v2.10.1

What's Changed

v2.10.0

What's Changed

Version 0.37.0

What's Changed

New Contributors

Version 0.36.1

What's Changed

Version 0.36.0

Added

New Contributors

Version 0.35.0

Added

Changed

New Contributors

dependabot bot commented on behalf of github Sep 29, 2025 •

edited

Loading

`psycopg` release notes