RepoJournal
FastAPI & Pydantic

FastAPI & Pydantic

FastAPI and the Pydantic + SQLModel async-Python stack

Pick a date

  1. Sat 16 may
  2. Sun 17 may
  3. Mon 18 may
  4. Tue 19 may
  5. Wed 20 may
  6. Thu 21 may
  7. Sat 23 may
  8. Sun 24 may
  9. Mon 25 may
  10. Tue 26 may
  11. Wed 27 may
  12. Thu 28 may
  13. Fri 29 may
  14. Sat 30 may
  15. Sun 31 may
  16. Mon 1 jun
  17. Mon 8 jun
  18. Tue 9 jun
  19. Today 10 jun

The Wire · Showcase

FASTAPI HARDENS CI PIPELINE WHILE FIXING HTTPX2 DEPRECATION WALL

By RepoJournal · Filed · About FastAPI & Pydantic

FastAPI's CI is now locked down with job timeouts and workflow security scanning, but the team is scrambling to patch a deprecation warning that's blocking builds.

GitHub Actions just got tighter across the FastAPI repo [1] with job timeouts, zizmor security scanning, and explicit guidance on keeping the setup-uv action version current. This mirrors hardening patterns already deployed in sibling projects, closing a gap that shouldn't have existed. In parallel, the team is racing a deprecation wall: Starlette's httpx2 changes [2] [3] introduced a warning that's now failing CI, forcing FastAPI to add httpx2 as an explicit test dependency to silence the noise. Meanwhile, housekeeping PRs [4] are stripping out obsolete ruff and coverage ignores, keeping the signal-to-noise ratio clean as the codebase evolves. None of these are breaking changes, but the httpx2 fix needs to land before the next release cycle to keep CI green.

Action items

References

  1. [1] 🔒️ Improve GitHub actions security (#15607) fastapi/fastapi
  2. [2] ✅ Add `httpx2` test dependency to avoid deprecation warning ↗ fastapi/fastapi
  3. [3] ✅ Add `httpx2` test dependency to avoid deprecation warning (#15603) fastapi/fastapi
  4. [4] ⚰️ Remove ruff and coverage ignores for non-existing files (#15610) fastapi/fastapi

FAQ

What changed in FastAPI & Pydantic on May 28, 2026?
FastAPI's CI is now locked down with job timeouts and workflow security scanning, but the team is scrambling to patch a deprecation warning that's blocking builds.
What should FastAPI & Pydantic teams do about it?
Merge httpx2 test dependency PR before next CI run • Review and approve GitHub Actions security hardening • Monitor Starlette httpx2 deprecation path for breaking changes
Which FastAPI & Pydantic repositories shipped on May 28, 2026?
fastapi/fastapi

Related across the cluster

For your repos

The showcase is a teaser.
Your wire is the product.

Same engine. Different stack. Below: what changes when the wire is yours.

Showcase wire

  • •14 famous open source orgs
  • •One wire per day
  • •Public, generic
  • •Read on the web, when you remember

Your wire

  • →Up to 1,500 of your repos - orgs, deps, vendors
  • →Morning and evening briefs
  • →Action items routed to your team
  • →Slack delivery, email, breaking-news CVE alerts

Want a hands-on demo first? Ask a current user for an invite link.