The Wire · Showcase
FASTAPI AND SQLMODEL LOCK DOWN SECURITY POLICIES AS PYDANTIC BATTLES SPAM
By RepoJournal · Filed · About FastAPI & Pydantic
Both FastAPI and SQLModel shipped updated security policies overnight, signaling a coordinated hardening across the Tiangolo ecosystem just as Pydantic deployed automated spam defenses.
FastAPI and SQLModel both formalized their security disclosure processes [1] [2], establishing clear channels for responsible vulnerability reporting. This move standardizes how critical issues flow through two of the most widely deployed Python frameworks in production environments. On the Pydantic side, the team implemented automated workflow to close spam PRs [5], a tactical shift that reflects growing maintenance burden across popular open source projects. SQLModel also bumped its security scanning action to zizmor 1.25.0 [4], tightening CI/CD hygiene. Meanwhile, FastAPI's Portuguese documentation saw consistency improvements [3], a steady signal that translation work continues across the ecosystem despite higher-priority security work.
One email a day. Unsubscribe in one click.
Keep up with FastAPI & Pydantic in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
One email a day. Unsubscribe in one click. Read a past issue →
Action items
- → Review FastAPI and SQLModel security policies to align your incident response procedures fastapi/fastapi [plan]
- → Verify your SQLModel CI/CD is using zizmor 1.25.0 or later for security scanning tiangolo/sqlmodel [monitor]
References
- [1] 📝 Update security policy (#15577) fastapi/fastapi
- [2] 📝 Update security policy (#1973) tiangolo/sqlmodel
- [3] 🌐 Improve translation consistency in `docs/pt/docs/advanced/generate-clients.md` ↗ fastapi/fastapi
- [4] ⬆ Bump zizmorcore/zizmor-action from 0.5.3 to 0.5.5 ↗ tiangolo/sqlmodel
- [5] Add workflow to close spam PRs (#13211) pydantic/pydantic