Update dependency fastapi to v0.137.1

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
fastapi (changelog)	==0.115.12 → ==0.137.1

---

Release Notes

fastapi/fastapi (fastapi)

v0.137.1

Compare Source

Fixes

• 🚨 Fix typing checks for APIRoute. PR #​15765 by @​tiangolo.
• 🐛 Fix bug, allow empty path in path operation in prefixless router. PR #​15763 by @​tiangolo.

v0.137.0

Compare Source

Breaking Changes

• ♻️ Refactor internals to preserve APIRouter and APIRoute instances. PR #​15745 by @​tiangolo.

Unblocks ✨ SO MANY THINGS ✨

Before this, router.include_router(other_router) would take each path operation from other_router and "clone" it, or recreate it from scratch.

This would mean that in the end there was only one top level router, part of the app.

The way it is structured here is that there are a few additional classes to handle intermediate metadata for router and route inclusion. That way the information of "router X includes Y and Y includes Z" is stored somewhere, without affecting (recreating / clonning) the final route.

Non Objectives

Dependencies for 404: previously I intended to support dependencies that would be executed even for 404, but that would conflict with the fact that a router could not find a match, but the next router did find a match. Executing dependencies in the router that did not find a match would not make sense, they could consume the request, body, etc. This original idea was discarded.

Specific Breaking Changes

Now router.routes is no longer a plain list of APIRoute objects, it can contain these intermediate objects that can contain additional routers, forming a tree.

Any logic that depended on iterating on the router.routes directly would be affected, that logic cannot expect to be able to extract data from a plain list of routes, as it's no longer a plain list but a tree.

Additionally, any logic that iterated on router.routes to modify them would now also see these new objects, and would not see all the routes in the app.

router.routes should be considered an internal implementation detail, only passed around to the FastAPI functions that need it.

Features

• Adding routes (path operations) after a router is included now works, they are reflected as they are not copied.
• Including subrouter in mainrouter can be done before adding routes (path operations) to subrouter, because now the the entire object is stored instead of copying the routes.
• As routes are not copied, in some cases that might save some memory.

Alpha Features

This is not documented yet, so it's not officially supported yet and could change in the future.

But, as APIRoute and APIRouter instances are now preserved, they could be customized.

APIRouter has two new methods, .matches() and .handle(), counterpart to the existing ones in APIRoute. With this a router could customize how it matches and handles requests. For example, it could match only requests that include some specific header, for example for handling versions in headers.

Still, for now, consider this very experimental and potentially changing and breaking in the future.

Future Features Enabled

• Custom APIRoute subclasses (undocumented, but alraedy works as desccribed above)
• Custom APIRouter subclasses (undocumented, but already works as described above)
• Dependencies per router
• Exception handlers per router
• Middleware per router
• Other features planned

Docs

• 📝 Update release notes. PR #​15747 by @​tiangolo.
• 📝 Update FastAPI Cloud deployment instructions. PR #​15724 by @​alejsdev.
• ✏️ Use Annotated in inline example in docs/en/docs/tutorial/body-multiple-params.md. PR #​15591 by @​TheArchons.
• 📝 Remove "NGINX Unit" from the list of ASGI-servers in docs. PR #​15475 by @​angryfoxx.
• 📝 Update docs/en/docs/tutorial/security/oauth2-jwt.md. PR #​14781 by @​zadevhub.

Translations

• 🌐 Update translations for zh-hant (update-outdated). PR #​15671 by @​tiangolo.
• 🌐 Update translations for es (update-outdated). PR #​15670 by @​tiangolo.
• 🌐 Update translations for fr (update-outdated). PR #​15669 by @​tiangolo.
• 🌐 Update translations for ja (update-outdated). PR #​15668 by @​tiangolo.
• 🌐 Update translations for pt (update-outdated). PR #​15667 by @​tiangolo.
• 🌐 Update translations for tr (update-outdated). PR #​15666 by @​tiangolo.
• 🌐 Update translations for zh (update-outdated). PR #​15665 by @​tiangolo.
• 🌐 Update translations for ko (update-outdated). PR #​15664 by @​tiangolo.
• 🌐 Update translations for de (update-outdated). PR #​15673 by @​tiangolo.
• 🌐 Update translations for uk (update-outdated). PR #​15672 by @​tiangolo.
• 🌐 Update translations for ru (update-outdated). PR #​15674 by @​tiangolo.

Internal

• 🔧 Update sponsors: remove TalorData. PR #​15744 by @​tiangolo.
• 🔧 Update sponsors: remove ExoFlare. PR #​15736 by @​tiangolo.
• 🔧 Update sponsors: remove InterviewPal. PR #​15735 by @​tiangolo.
• 🔧 Update sponsors: remove Liblab. PR #​15731 by @​tiangolo.
• 🔧 Update sponsors: remove Scalar. PR #​15730 by @​tiangolo.
• ⬆ Bump the python-packages group across 1 directory with 6 updates. PR #​15721 by @​dependabot[bot].
• ⬆ Bump python-multipart from 0.0.29 to 0.0.30. PR #​15723 by @​dependabot[bot].
• ⬆ Bump the github-actions group with 3 updates. PR #​15720 by @​dependabot[bot].
• ⬆ Bump starlette from 1.1.0 to 1.2.1. PR #​15722 by @​dependabot[bot].
• ⬆ Bump https://github.com/crate-ci/typos from v1.46.0 to v1.47.1 in the pre-commit group. PR #​15719 by @​dependabot[bot].
• 🔧 Update sponsors, add Rapidproxy. PR #​15689 by @​tiangolo.
• 🔧 Update sponsors: Remove TestMu. PR #​15688 by @​tiangolo.
• ⬆ Bump the python-packages group across 1 directory with 11 updates. PR #​15683 by @​dependabot[bot].
• ⬆ Bump aiohttp from 3.13.4 to 3.14.0. PR #​15681 by @​dependabot[bot].
• ⬆ Bump the github-actions group with 2 updates. PR #​15682 by @​dependabot[bot].
• ⬆ Bump starlette from 1.0.0 to 1.1.0. PR #​15684 by @​dependabot[bot].
• 👥 Update FastAPI People - Experts. PR #​15677 by @​tiangolo.
• 👥 Update FastAPI GitHub topic repositories. PR #​15675 by @​tiangolo.
• 👥 Update FastAPI People - Contributors and Translators. PR #​15662 by @​tiangolo.
• 👷 Automate release preparation. PR #​15661 by @​tiangolo.
• 🔥 Remove slim package stub, deprecated for a while. PR #​15649 by @​tiangolo.
• ⬆ Bump authlib from 1.6.11 to 1.7.2. PR #​15512 by @​dependabot[bot].
• ⬆ Bump pymdown-extensions from 10.21.2 to 10.21.3. PR #​15569 by @​dependabot[bot].
• ⬆ Bump CodSpeedHQ/action from 4.14.0 to 4.15.1. PR #​15513 by @​dependabot[bot].
• ⬆ Bump python-multipart from 0.0.26 to 0.0.29. PR #​15595 by @​dependabot[bot].
• 🔒️ Improve GitHub actions security. PR #​15607 by @​YuriiMotov.
• ⚰️ Remove ruff and coverage ignores for non-existing files. PR #​15610 by @​YuriiMotov.
• ✅ Use custom changing_dir instead of CLIRunner.isolated_filesystem to set working dir. PR #​15616 by @​YuriiMotov.
• ✅ Add httpx2 test dependency to avoid deprecation warning. PR #​15603 by @​YuriiMotov.
• ⬆ Bump the python-packages group with 15 updates. PR #​15594 by @​dependabot[bot].
• 👷 Configure Dependabot to group updates and update weekly. PR #​15560 by @​YuriiMotov.

v0.136.3

Compare Source

Refactors

• ♻️ Do not accept underscore headers when using convert_underscores=True (the default). PR #​15589 by @​tiangolo.

v0.136.1

Compare Source

Upgrades

• ⬆️ Update Pydantic v2 code to address deprecations. PR #​15101 by @​svlandeg.

Internal

• 🔨 Tweak translation script. PR #​15174 by @​YuriiMotov.
• ⬆ Bump mkdocs-material from 9.7.1 to 9.7.6. PR #​15408 by @​dependabot[bot].
• ⬆ Bump inline-snapshot from 0.31.1 to 0.32.6. PR #​15409 by @​dependabot[bot].
• ⬆ Bump pytest-codspeed from 4.3.0 to 4.4.0. PR #​15407 by @​dependabot[bot].
• ⬆ Bump pytest-cov from 7.0.0 to 7.1.0. PR #​15406 by @​dependabot[bot].
• ⬆ Bump cloudflare/wrangler-action from 3.14.1 to 3.15.0. PR #​15405 by @​dependabot[bot].
• ⬆ Bump mypy from 1.19.1 to 1.20.1. PR #​15410 by @​dependabot[bot].
• ⬆ Bump python-dotenv from 1.2.1 to 1.2.2. PR #​15400 by @​dependabot[bot].
• ⬆ Bump starlette from 0.52.1 to 1.0.0. PR #​15397 by @​dependabot[bot].
• ⬆ Bump pygithub from 2.8.1 to 2.9.1. PR #​15396 by @​dependabot[bot].
• ⬆ Bump pyjwt from 2.12.0 to 2.12.1. PR #​15393 by @​dependabot[bot].
• ⬆ Bump zizmor from 1.23.1 to 1.24.1. PR #​15394 by @​dependabot[bot].
• ⬆ Bump strawberry-graphql from 0.312.3 to 0.314.3. PR #​15395 by @​dependabot[bot].
• ⬆ Bump python-multipart from 0.0.22 to 0.0.26. PR #​15360 by @​dependabot[bot].
• ⬆ Bump authlib from 1.6.9 to 1.6.11. PR #​15373 by @​dependabot[bot].
• ⬆ Bump aiohttp from 3.13.3 to 3.13.4. PR #​15282 by @​dependabot[bot].
• ⬆ Bump pygments from 2.19.2 to 2.20.0. PR #​15263 by @​dependabot[bot].
• ⬆ Bump pymdown-extensions from 10.20.1 to 10.21.2. PR #​15391 by @​YuriiMotov.
• ⬆ Bump pillow from 12.1.1 to 12.2.0. PR #​15333 by @​dependabot[bot].
• ⬆ Bump pytest from 9.0.2 to 9.0.3. PR #​15334 by @​dependabot[bot].
• ⬆ Bump actions/upload-artifact from 7.0.0 to 7.0.1. PR #​15374 by @​dependabot[bot].
• ⬆ Bump actions/cache from 5.0.4 to 5.0.5. PR #​15385 by @​dependabot[bot].
• 🔧 Update sponsors: remove Zuplo. PR #​15369 by @​tiangolo.
• 🔧 Update sponsors: remove Speakeasy. PR #​15368 by @​tiangolo.
• 🔒️ Add zizmor and fix audit findings. PR #​15316 by @​YuriiMotov.

v0.136.0

Compare Source

Upgrades

• ⬆️ Support free-threaded Python 3.14t. PR #​15149 by @​svlandeg.

v0.135.4

Compare Source

Refactors

• 🔥 Remove April Fool's @app.vibe() 🤪. PR #​15363 by @​tiangolo.

Internal

• ⬆ Bump cryptography from 46.0.5 to 46.0.7. PR #​15314 by @​dependabot[bot].
• ⬆ Bump strawberry-graphql from 0.307.1 to 0.312.3. PR #​15309 by @​dependabot[bot].
• 🔨 Add pre-commit hook to ensure latest release header has date. PR #​15293 by @​YuriiMotov.

v0.135.3

Compare Source

Features

• ✨ Add support for @app.vibe(). PR #​15280 by @​tiangolo.
  • New docs: Vibe Coding.

Docs

• ✏️ Fix typo for client_secret in OAuth2 form docstrings. PR #​14946 by @​bysiber.

Internal

• 👥 Update FastAPI People - Experts. PR #​15279 by @​tiangolo.
• ⬆ Bump orjson from 3.11.7 to 3.11.8. PR #​15276 by @​dependabot[bot].
• ⬆ Bump ruff from 0.15.0 to 0.15.8. PR #​15277 by @​dependabot[bot].
• 👥 Update FastAPI GitHub topic repositories. PR #​15274 by @​tiangolo.
• ⬆ Bump fastmcp from 2.14.5 to 3.2.0. PR #​15267 by @​dependabot[bot].
• 👥 Update FastAPI People - Contributors and Translators. PR #​15270 by @​tiangolo.
• ⬆ Bump requests from 2.32.5 to 2.33.0. PR #​15228 by @​dependabot[bot].
• 👷 Add ty check to lint.sh. PR #​15136 by @​svlandeg.

v0.135.2

Compare Source

Upgrades

• ⬆️ Increase lower bound to pydantic >=2.9.0. and fix the test suite. PR #​15139 by @​svlandeg.

Docs

• 📝 Add missing last release notes dates. PR #​15202 by @​tiangolo.
• 📝 Update docs for contributors and team members regarding translation PRs. PR #​15200 by @​YuriiMotov.
• 💄 Fix code blocks in reference docs overflowing table width. PR #​15094 by @​YuriiMotov.
• 📝 Fix duplicated words in docstrings. PR #​15116 by @​AhsanSheraz.
• 📝 Add docs for pyproject.toml with entrypoint. PR #​15075 by @​tiangolo.
• 📝 Update links in docs to no longer use the classes external-link and internal-link. PR #​15061 by @​tiangolo.
• 🔨 Add JS and CSS handling for automatic target=_blank for links in docs. PR #​15063 by @​tiangolo.
• 💄 Update styles for internal and external links in new tab. PR #​15058 by @​tiangolo.
• 📝 Add documentation for the FastAPI VS Code extension. PR #​15008 by @​savannahostrowski.
• 📝 Fix doctrings for max_digits and decimal_places. PR #​14944 by @​YuriiMotov.
• 📝 Add dates to release notes. PR #​15001 by @​YuriiMotov.

Translations

• 🌐 Update translations for zh (update-outdated). PR #​15177 by @​tiangolo.
• 🌐 Update translations for zh-hant (update-outdated). PR #​15178 by @​tiangolo.
• 🌐 Update translations for zh-hant (add-missing). PR #​15176 by @​tiangolo.
• 🌐 Update translations for zh (add-missing). PR #​15175 by @​tiangolo.
• 🌐 Update translations for ja (update-outdated). PR #​15171 by @​tiangolo.
• 🌐 Update translations for ko (update-outdated). PR #​15170 by @​tiangolo.
• 🌐 Update translations for tr (update-outdated). PR #​15172 by @​tiangolo.
• 🌐 Update translations for ko (add-missing). PR #​15168 by @​tiangolo.
• 🌐 Update translations for ja (add-missing). PR #​15167 by @​tiangolo.
• 🌐 Update translations for tr (add-missing). PR #​15169 by @​tiangolo.
• 🌐 Update translations for fr (update-outdated). PR #​15165 by @​tiangolo.
• 🌐 Update translations for fr (add-missing). PR #​15163 by @​tiangolo.
• 🌐 Update translations for uk (update-outdated). PR #​15160 by @​tiangolo.
• 🌐 Update translations for uk (add-missing). PR #​15158 by @​tiangolo.
• 🌐 Update translations for pt (add-missing). PR #​15157 by @​tiangolo.
• 🌐 Update translations for pt (update-outdated). PR #​15159 by @​tiangolo.
• 🌐 Update translations for es (update-outdated). PR #​15155 by @​tiangolo.
• 🌐 Update translations for es (add-missing). PR #​15154 by @​tiangolo.
• 🌐 Update translations for de (update-outdated). PR #​15156 by @​tiangolo.
• 🌐 Update translations for ru (update-and-add). PR #​15152 by @​tiangolo.
• 🌐 Update translations for de (add-missing). PR #​15153 by @​tiangolo.

Internal

• 🔨 Exclude spam comments from statistics in scripts/people.py. PR #​15088 by @​YuriiMotov.
• ⬆ Bump authlib from 1.6.7 to 1.6.9. PR #​15128 by @​dependabot[bot].
• ⬆ Bump pyasn1 from 0.6.2 to 0.6.3. PR #​15143 by @​dependabot[bot].
• ⬆ Bump ujson from 5.11.0 to 5.12.0. PR #​15150 by @​dependabot[bot].
• 🔨 Tweak translation workflow and translation fixer tool. PR #​15166 by @​YuriiMotov.
• 🔨 Fix commit_in_place passed via env variable in translate.yml workflow. PR #​15151 by @​YuriiMotov.
• 🔨 Update translation general prompt to enforce link style in translation matches the original link style. PR #​15148 by @​YuriiMotov.
• 👷 Re-enable translation workflow run by cron in CI (twice a month). PR #​15145 by @​YuriiMotov.
• 👷 Add ty to precommit. PR #​15091 by @​svlandeg.
• ⬆ Bump dorny/paths-filter from 3 to 4. PR #​15106 by @​dependabot[bot].
• ⬆ Bump cairosvg from 2.8.2 to 2.9.0. PR #​15108 by @​dependabot[bot].
• ⬆ Bump pyjwt from 2.11.0 to 2.12.0. PR #​15110 by @​dependabot[bot].
• ⬆ Bump black from 26.1.0 to 26.3.1. PR #​15100 by @​dependabot[bot].
• 🔨 Update script to autofix permalinks to account for headers with Markdown links. PR #​15062 by @​tiangolo.
• 📌 Pin Click for MkDocs live reload. PR #​15057 by @​tiangolo.
• ⬆ Bump werkzeug from 3.1.5 to 3.1.6. PR #​14948 by @​dependabot[bot].
• ⬆ Bump pydantic-ai from 1.62.0 to 1.63.0. PR #​15035 by @​dependabot[bot].
• ⬆ Bump pytest-codspeed from 4.2.0 to 4.3.0. PR #​15034 by @​dependabot[bot].
• ⬆ Bump strawberry-graphql from 0.291.2 to 0.307.1. PR #​15033 by @​dependabot[bot].
• ⬆ Bump typer from 0.21.1 to 0.24.1. PR #​15032 by @​dependabot[bot].
• ⬆ Bump actions/download-artifact from 7 to 8. PR #​15020 by @​dependabot[bot].
• ⬆ Bump actions/upload-artifact from 6 to 7. PR #​15019 by @​dependabot[bot].

v0.135.1

Compare Source

Fixes

• 🐛 Fix, avoid yield from a TaskGroup, only as an async context manager, closed in the request async exit stack. PR #​15038 by @​tiangolo.

Docs

• ✏️ Fix typo in docs/en/docs/_llm-test.md. PR #​15007 by @​adityagiri3600.
• 📝 Update Skill, optimize context, trim and refactor into references. PR #​15031 by @​tiangolo.

Internal

• 👥 Update FastAPI People - Experts. PR #​15037 by @​tiangolo.
• 👥 Update FastAPI People - Contributors and Translators. PR #​15029 by @​tiangolo.
• 👥 Update FastAPI GitHub topic repositories. PR #​15036 by @​tiangolo.

v0.135.0

Compare Source

Features

• ✨ Add support for Server Sent Events. PR #​15030 by @​tiangolo.
  • New docs: Server-Sent Events (SSE).

v0.134.0

Compare Source

Features

• ✨ Add support for streaming JSON Lines and binary data with yield. PR #​15022 by @​tiangolo.
  • This also upgrades Starlette from >=0.40.0 to >=0.46.0, as it's needed to properly unrwap and re-raise exceptions from exception groups.
  • New docs: Stream JSON Lines.
  • And new docs: Stream Data.

Docs

• 📝 Update Library Agent Skill with streaming responses. PR #​15024 by @​tiangolo.
• 📝 Update docs for responses and new stream with yield. PR #​15023 by @​tiangolo.
• 📝 Add await in StreamingResponse code example to allow cancellation. PR #​14681 by @​casperdcl.
• 📝 Rename docs_src/websockets to docs_src/websockets_ to avoid import errors. PR #​14979 by @​YuriiMotov.

Internal

• 🔨 Run tests with pytest-xdist and pytest-cov. PR #​14992 by @​YuriiMotov.

v0.133.1

Compare Source

Features

• 🔧 Add FastAPI Agent Skill. PR #​14982 by @​tiangolo.
  • Read more about it in Library Agent Skills.

Internal

• ✅ Fix all tests are skipped on Windows. PR #​14994 by @​YuriiMotov.

v0.133.0

Compare Source

v0.132.1

Compare Source

Refactors

• ♻️ Refactor logic to handle OpenAPI and Swagger UI escaping data. PR #​14986 by @​tiangolo.

Internal

• 👥 Update FastAPI People - Experts. PR #​14972 by @​tiangolo.
• 👷 Allow skipping benchmark job in test workflow. PR #​14974 by @​YuriiMotov.

v0.132.0

Compare Source

Breaking Changes

• 🔒️ Add strict_content_type checking for JSON requests. PR #​14978 by @​tiangolo.
  • Now FastAPI checks, by default, that JSON requests have a Content-Type header with a valid JSON value, like application/json, and rejects requests that don't.
  • If the clients for your app don't send a valid Content-Type header you can disable this with strict_content_type=False.
  • Check the new docs: Strict Content-Type Checking.

Internal

• ⬆ Bump flask from 3.1.2 to 3.1.3. PR #​14949 by @​dependabot[bot].
• ⬆ Update all dependencies to use griffelib instead of griffe. PR #​14973 by @​svlandeg.
• 🔨 Fix FastAPI People workflow. PR #​14951 by @​YuriiMotov.
• 👷 Do not run codspeed with coverage as it's not tracked. PR #​14966 by @​tiangolo.
• 👷 Do not include benchmark tests in coverage to speed up coverage processing. PR #​14965 by @​tiangolo.

v0.131.0

Compare Source

Breaking Changes

• 🗑️ Deprecate ORJSONResponse and UJSONResponse. PR #​14964 by @​tiangolo.

v0.130.0

Compare Source

Features

• ✨ Serialize JSON response with Pydantic (in Rust), when there's a Pydantic return type or response model. PR #​14962 by @​tiangolo.
  • This results in 2x (or more) performance increase for JSON responses.
  • New docs: Custom Response - JSON Performance.

v0.129.2

Compare Source

Internal

• ⬆️ Upgrade pytest. PR #​14959 by @​tiangolo.
• 👷 Fix CI, do not attempt to publish fastapi-slim. PR #​14958 by @​tiangolo.
• ➖ Drop support for fastapi-slim, no more versions will be released, use only "fastapi[standard]" or fastapi. PR #​14957 by @​tiangolo.
• 🔧 Update pyproject.toml, remove unneeded lines. PR #​14956 by @​tiangolo.

v0.129.1

Compare Source

Fixes

• ♻️ Fix JSON Schema for bytes, use "contentMediaType": "application/octet-stream" instead of "format": "binary". PR #​14953 by @​tiangolo.

Docs

• 🔨 Add Kapa.ai widget (AI chatbot). PR #​14938 by @​tiangolo.
• 🔥 Remove Python 3.9 specific files, no longer needed after updating translations. PR #​14931 by @​tiangolo.
• 📝 Update docs for JWT to prevent timing attacks. PR #​14908 by @​tiangolo.

Translations

• ✏️ Fix several typos in ru translations. PR #​14934 by @​argoarsiks.
• 🌐 Update translations for ko (update-all and add-missing). PR #​14923 by @​YuriiMotov.
• 🌐 Update translations for uk (add-missing). PR #​14922 by @​YuriiMotov.
• 🌐 Update translations for zh-hant (update-all and add-missing). PR #​14921 by @​YuriiMotov.
• 🌐 Update translations for fr (update-all and add-missing). PR #​14920 by @​YuriiMotov.
• 🌐 Update translations for de (update-all) . PR #​14910 by @​YuriiMotov.
• 🌐 Update translations for ja (update-all). PR #​14916 by @​YuriiMotov.
• 🌐 Update translations for pt (update-all). PR #​14912 by @​YuriiMotov.
• 🌐 Update translations for es (update-all and add-missing). PR #​14911 by @​YuriiMotov.
• 🌐 Update translations for zh (update-all). PR #​14917 by @​YuriiMotov.
• 🌐 Update translations for uk (update-all). PR #​14914 by @​YuriiMotov.
• 🌐 Update translations for tr (update-all). PR #​14913 by @​YuriiMotov.
• 🌐 Update translations for ru (update-outdated). PR #​14909 by @​YuriiMotov.

Internal

• 👷 Always run tests on push to master branch and when run by scheduler. PR #​14940 by @​YuriiMotov.
• 🎨 Upgrade typing syntax for Python 3.10. PR #​14932 by @​tiangolo.
• ⬆ Bump cryptography from 46.0.4 to 46.0.5. PR #​14892 by @​dependabot[bot].
• ⬆ Bump pillow from 12.1.0 to 12.1.1. PR #​14899 by @​dependabot[bot].

v0.129.0

Compare Source

Breaking Changes

• ➖ Drop support for Python 3.9. PR #​14897 by @​tiangolo.

Refactors

• 🎨 Update internal types for Python 3.10. PR #​14898 by @​tiangolo.

Docs

• 📝 Update highlights in webhooks docs. PR #​14905 by @​tiangolo.
• 📝 Update source examples and docs from Python 3.9 to 3.10. PR #​14900 by @​tiangolo.

Internal

• 🔨 Update docs.py scripts to migrate Python 3.9 to Python 3.10. PR #​14906 by @​tiangolo.

v0.128.8

Compare Source

Docs

• 📝 Fix grammar in docs/en/docs/tutorial/first-steps.md. PR #​14708 by @​SanjanaS10.

Internal

• 🔨 Tweak PDM hook script. PR #​14895 by @​tiangolo.
• ♻️ Update build setup for fastapi-slim, deprecate it, and make it only depend on fastapi. PR #​14894 by @​tiangolo.

v0.128.7

Compare Source

Features

• ✨ Show a clear error on attempt to include router into itself. PR #​14258 by @​JavierSanchezCastro.
• ✨ Replace dict by Mapping on HTTPException.headers. PR #​12997 by @​rijenkii.

Refactors

• ♻️ Simplify reading files in memory, do it sequentially instead of (fake) parallel. PR #​14884 by @​tiangolo.

Docs

• 📝 Use dfn tag for definitions instead of abbr in docs. PR #​14744 by @​YuriiMotov.

Internal

• ✅ Tweak comment in test to reference PR. PR #​14885 by @​tiangolo.
• 🔧 Update LLM-prompt for abbr and dfn tags. PR #​14747 by @​YuriiMotov.
• ✅ Test order for the submitted byte Files. PR #​14828 by @​valentinDruzhinin.
• 🔧 Configure test workflow to run tests with inline-snapshot=review. PR #​14876 by @​YuriiMotov.

v0.128.6

Compare Source

Fixes

• 🐛 Fix on_startup and on_shutdown parameters of APIRouter. PR #​14873 by @​YuriiMotov.

Translations

• 🌐 Update translations for zh (update-outdated). PR #​14843 by @​tiangolo.

Internal

• ✅ Fix parameterized tests with snapshots. PR #​14875 by @​YuriiMotov.

v0.128.5

Compare Source

Refactors

• ♻️ Refactor and simplify Pydantic v2 (and v1) compatibility internal utils. PR #​14862 by @​tiangolo.

Internal

• ✅ Add inline snapshot tests for OpenAPI before changes from Pydantic v2. PR #​14864 by @​tiangolo.

v0.128.4

Compare Source

Refactors

• ♻️ Refactor internals, simplify Pydantic v2/v1 utils, create_model_field, better types for lenient_issubclass. PR #​14860 by @​tiangolo.
• ♻️ Simplify internals, remove Pydantic v1 only logic, no longer needed. PR #​14857 by @​tiangolo.
• ♻️ Refactor internals, cleanup unneeded Pydantic v1 specific logic. PR #​14856 by @​tiangolo.

Translations

• 🌐 Update translations for fr (outdated pages). PR #​14839 by @​YuriiMotov.
• 🌐 Update translations for tr (outdated and missing). PR #​14838 by @​YuriiMotov.

Internal

• ⬆️ Upgrade development dependencies. PR #​14854 by @​tiangolo.

v0.128.3

Compare Source

Refactors

• ♻️ Re-implement on_event in FastAPI for compatibility with the next Starlette, while keeping backwards compatibility. PR #​14851 by @​tiangolo.

Upgrades

• ⬆️ Upgrade Starlette supported version range to starlette>=0.40.0,<1.0.0. PR #​14853 by @​tiangolo.

Translations

• 🌐 Update translations for ru (update-outdated). PR #​14834 by @​tiangolo.

Internal

• 👷 Run tests with Starlette from git. PR #​14849 by @​tiangolo.
• 👷 Run tests with lower bound uv sync, upgrade fastapi[all] minimum dependencies: ujson >=5.8.0, orjson >=3.9.3. PR #​14846 by @​tiangolo.

v0.128.2

Compare Source

Features

• ✨ Add support for PEP695 TypeAliasType. PR #​13920 by @​cstruct.
• ✨ Allow Response type hint as dependency annotation. PR #​14794 by @​jonathan-fulton.

Fixes

• 🐛 Fix using Json[list[str]] type (issue #​10997). PR #​14616 by @​mkanetsuna.

Docs

• 📝 Update docs for translations. PR #​14830 by @​tiangolo.
• 📝 Fix duplicate word in advanced-dependencies.md. PR #​14815 by @​Rayyan-Oumlil.

Translations

• 🌐 Enable Traditional Chinese translations. PR #​14842 by @​tiangolo.
• 🌐 Enable French docs translations. PR #​14841 by @​tiangolo.
• 🌐 Update translations for fr (translate-page). PR #​14837 by @​tiangolo.
• 🌐 Update translations for de (update-outdated). PR [#&#8203

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: uv.lock

Command failed: uv lock --upgrade-package fastapi
warning: The `tool.uv.dev-dependencies` field (used in `pyproject.toml`) is deprecated and will be removed in a future release; use `dependency-groups.dev` instead
Using CPython 3.14.6 interpreter at: /opt/containerbase/tools/python/3.14.6/bin/python3
  × No solution found when resolving dependencies for split (markers:
  │ python_full_version == '3.9.*'):
  ╰─▶ Because the requested Python version (>=3.9) does not satisfy
      Python>=3.10 and fastapi==0.137.1 depends on Python>=3.10, we can
      conclude that fastapi==0.137.1 cannot be used.
      And because your project depends on fastapi==0.137.1, we can conclude
      that your project's requirements are unsatisfiable.

hint: While the active Python version is 3.14, the resolution failed for other Python versions supported by your project. Consider limiting your project's supported Python versions using `requires-python`.
hint: The `requires-python` value (>=3.9) includes Python versions that are not supported by your dependencies (e.g., fastapi==0.137.1 only supports >=3.10). Consider using a more restrictive `requires-python` value (like >=3.10).