Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 3, 2025

Bumps the python-packages group with 5 updates:

Package From To
fastapi 0.119.1 0.121.0
starlette 0.48.0 0.50.0
uvicorn 0.37.0 0.38.0
faker 37.11.0 37.12.0
types-jwcrypto 1.5.0.20250516 1.5.0.20251102

Updates fastapi from 0.119.1 to 0.121.0

Release notes

Sourced from fastapi's releases.

0.121.0

Features

Internal

0.120.4

Fixes

  • 🐛 Fix security schemes in OpenAPI when added at the top level app. PR #14266 by @​YuriiMotov.

0.120.3

Refactors

  • ♻️ Reduce internal cyclic recursion in dependencies, from 2 functions calling each other to 1 calling itself. PR #14256 by @​tiangolo.
  • ♻️ Refactor internals of dependencies, simplify code and remove get_param_sub_dependant. PR #14255 by @​tiangolo.
  • ♻️ Refactor internals of dependencies, simplify using dataclasses. PR #14254 by @​tiangolo.

Docs

0.120.2

Fixes

  • 🐛 Fix separation of schemas with nested models introduced in 0.119.0. PR #14246 by @​tiangolo.

Internal

0.120.1

Upgrades

Internal

  • 🔧 Add license and license-files to pyproject.toml, remove License from classifiers. PR #14230 by @​YuriiMotov.

... (truncated)

Commits
  • 4efae81 🔖 Release version 0.121.0
  • 3690140 📝 Update release notes
  • ad4d8f2 📝 Update release notes
  • ac438b9 ✨ Add support for dependencies with scopes, support scope="request" for dep...
  • 425a4c5 📝 Update release notes
  • 3a223b9 📝 Update release notes
  • 566e0d6 👥 Update FastAPI People - Contributors and Translators (#14273)
  • 940ee0c 📝 Update release notes
  • f8df43d 👥 Update FastAPI People - Sponsors (#14274)
  • dbb7020 👥 Update FastAPI GitHub topic repositories (#14280)
  • Additional commits viewable in compare view

Updates starlette from 0.48.0 to 0.50.0

Release notes

Sourced from starlette's releases.

Version 0.50.0

Removed

  • Drop Python 3.9 support #3061.

Full Changelog: Kludex/starlette@0.49.3...0.50.0

Version 0.49.3

Fixed

  • Relax strictness on Middleware type #3059.

Full Changelog: Kludex/starlette@0.49.2...0.49.3

Version 0.49.2

Fixed

  • Ignore if-modified-since header if if-none-match is present in StaticFiles #3044.

Full Changelog: Kludex/starlette@0.49.1...0.49.2

Version 0.49.1

This release fixes a security vulnerability in the parsing logic of the Range header in FileResponse.

You can view the full security advisory: GHSA-7f5h-v6xp-fcq8

Fixed


Full Changelog: Kludex/starlette@0.49.0...0.49.1

Version 0.49.0

Added

  • Add encoding parameter to Config class #2996.
  • Support multiple cookie headers in Request.cookies #3029.
  • Use Literal type for WebSocketEndpoint encoding values #3027.

Changed

  • Do not pollute exception context in Middleware when using BaseHTTPMiddleware #2976.

... (truncated)

Changelog

Sourced from starlette's changelog.

0.50.0 (November 1, 2025)

  • Drop Python 3.9 support #3061.

0.49.3 (November 1, 2025)

This is the last release that supports Python 3.9, which will be dropped in the next minor release.

Fixed

  • Relax strictness on Middleware type #3059.

0.49.2 (November 1, 2025)

Fixed

  • Ignore if-modified-since header if if-none-match is present in StaticFiles #3044.

0.49.1 (October 28, 2025)

This release fixes a security vulnerability in the parsing logic of the Range header in FileResponse.

You can view the full security advisory: GHSA-7f5h-v6xp-fcq8

Fixed

0.49.0 (October 28, 2025)

Added

  • Add encoding parameter to Config class #2996.
  • Support multiple cookie headers in Request.cookies #3029.
  • Use Literal type for WebSocketEndpoint encoding values #3027.

Changed

  • Do not pollute exception context in Middleware when using BaseHTTPMiddleware #2976.
Commits

Updates uvicorn from 0.37.0 to 0.38.0

Release notes

Sourced from uvicorn's releases.

Version 0.38.0

What's Changed


New Contributors

Full Changelog: Kludex/uvicorn@0.37.0...0.38.0

Changelog

Sourced from uvicorn's changelog.

0.38.0 (October 18, 2025)

Added

  • Support Python 3.14 (#2723)
Commits

Updates faker from 37.11.0 to 37.12.0

Release notes

Sourced from faker's releases.

Release v37.12.0

See CHANGELOG.md.

Changelog

Sourced from faker's changelog.

v37.12.0 - 2025-10-07

Commits

Updates types-jwcrypto from 1.5.0.20250516 to 1.5.0.20251102

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-packages group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [fastapi](https://github.com/fastapi/fastapi) | `0.119.1` | `0.121.0` |
| [starlette](https://github.com/Kludex/starlette) | `0.48.0` | `0.50.0` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.37.0` | `0.38.0` |
| [faker](https://github.com/joke2k/faker) | `37.11.0` | `37.12.0` |
| [types-jwcrypto](https://github.com/typeshed-internal/stub_uploader) | `1.5.0.20250516` | `1.5.0.20251102` |


Updates `fastapi` from 0.119.1 to 0.121.0
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.119.1...0.121.0)

Updates `starlette` from 0.48.0 to 0.50.0
- [Release notes](https://github.com/Kludex/starlette/releases)
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)
- [Commits](Kludex/starlette@0.48.0...0.50.0)

Updates `uvicorn` from 0.37.0 to 0.38.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.37.0...0.38.0)

Updates `faker` from 37.11.0 to 37.12.0
- [Release notes](https://github.com/joke2k/faker/releases)
- [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md)
- [Commits](joke2k/faker@v37.11.0...v37.12.0)

Updates `types-jwcrypto` from 1.5.0.20250516 to 1.5.0.20251102
- [Commits](https://github.com/typeshed-internal/stub_uploader/commits)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.121.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: starlette
  dependency-version: 0.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: uvicorn
  dependency-version: 0.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: faker
  dependency-version: 37.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: types-jwcrypto
  dependency-version: 1.5.0.20251102
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-packages
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the type:dependency Dependency-related changes label Nov 3, 2025
@MTSOnGithub MTSOnGithub enabled auto-merge (rebase) November 3, 2025 19:16
@github-actions
Copy link

github-actions bot commented Nov 3, 2025

Coverage

Coverage Report •
FileStmtsMissCoverMissing
TOTAL705039794% 
report-only-changed-files is enabled. No files were changed during this commit :)

@MTSOnGithub MTSOnGithub merged commit e2e0f0f into develop Nov 3, 2025
11 checks passed
@MTSOnGithub MTSOnGithub deleted the dependabot/uv/python-packages-accc4def4f branch November 3, 2025 19:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type:dependency Dependency-related changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants