RepoJournal
FastAPI & Pydantic

FastAPI & Pydantic

FastAPI and the Pydantic + SQLModel async-Python stack

Keep up with FastAPI & Pydantic in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

Topics: Python Full archive →

The Wire · Showcase

FASTAPI HARDENS CI PIPELINE WHILE FIXING HTTPX2 DEPRECATION WALL

By RepoJournal · Filed · About FastAPI & Pydantic

FastAPI's CI is now locked down with job timeouts and workflow security scanning, but the team is scrambling to patch a deprecation warning that's blocking builds.

GitHub Actions just got tighter across the FastAPI repo [1] with job timeouts, zizmor security scanning, and explicit guidance on keeping the setup-uv action version current. This mirrors hardening patterns already deployed in sibling projects, closing a gap that shouldn't have existed. In parallel, the team is racing a deprecation wall: Starlette's httpx2 changes [2] [3] introduced a warning that's now failing CI, forcing FastAPI to add httpx2 as an explicit test dependency to silence the noise. Meanwhile, housekeeping PRs [4] are stripping out obsolete ruff and coverage ignores, keeping the signal-to-noise ratio clean as the codebase evolves. None of these are breaking changes, but the httpx2 fix needs to land before the next release cycle to keep CI green.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] 🔒️ Improve GitHub actions security (#15607) fastapi/fastapi
  2. [2] ✅ Add `httpx2` test dependency to avoid deprecation warning ↗ fastapi/fastapi
  3. [3] ✅ Add `httpx2` test dependency to avoid deprecation warning (#15603) fastapi/fastapi
  4. [4] ⚰️ Remove ruff and coverage ignores for non-existing files (#15610) fastapi/fastapi

Quick answers

What shipped in FastAPI & Pydantic on May 28, 2026?
FastAPI's CI is now locked down with job timeouts and workflow security scanning, but the team is scrambling to patch a deprecation warning that's blocking builds. In total, 4 commits and 4 pull requests landed.
Who contributed to FastAPI & Pydantic on May 28, 2026?
1 developer shipped this update, including YuriiMotov.
What were the notable FastAPI & Pydantic updates?
🔒️ Improve GitHub actions security (#15607), ✅ Add `httpx2` test dependency to avoid deprecation warning, and ✅ Add `httpx2` test dependency to avoid deprecation warning (#15603).

More from FastAPI & Pydantic

Daily updates, in your inbox

Follow FastAPI & Pydantic

Keep up with FastAPI & Pydantic in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

Want every project, not just this one?