RepoJournal
FastAPI & Pydantic FastAPI & Pydantic
140 wires and counting

$ follow FastAPI & Pydantic

Keep up with FastAPI & Pydantic in about 3 minutes: what actually shipped โ€” the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest โ€” weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-05-28
stories 8
RSS Archive Reviews

ยฉ 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire ยท showcase

FASTAPI HARDENS CI PIPELINE WHILE FIXING HTTPX2 DEPRECATION WALL

By RepoJournal ยท Filed ยท About FastAPI & Pydantic ยท Composed from the cited sources ยท methodology

YuriiMotov
1 person shipped this
YuriiMotov @YuriiMotov 1 cited

FastAPI's CI is now locked down with job timeouts and workflow security scanning, but the team is scrambling to patch a deprecation warning that's blocking builds.

GitHub Actions just got tighter across the FastAPI repo [1] with job timeouts, zizmor security scanning, and explicit guidance on keeping the setup-uv action version current. This mirrors hardening patterns already deployed in sibling projects, closing a gap that shouldn't have existed. In parallel, the team is racing a deprecation wall: Starlette's httpx2 changes [2] [3] introduced a warning that's now failing CI, forcing FastAPI to add httpx2 as an explicit test dependency to silence the noise. Meanwhile, housekeeping PRs [4] are stripping out obsolete ruff and coverage ignores, keeping the signal-to-noise ratio clean as the codebase evolves. None of these are breaking changes, but the httpx2 fix needs to land before the next release cycle to keep CI green.

$ ls fastapi/reviews/ # the step-back reads

the week in review Pydantic drops Python 3.10, then layers serialization fast paths the month in review Five Pydantic validation bypasses and a quadratic URL check
Full archive โ†’ Weekly reviews โ†’

Quick answers

What shipped in FastAPI & Pydantic on May 28, 2026?
FastAPI's CI is now locked down with job timeouts and workflow security scanning, but the team is scrambling to patch a deprecation warning that's blocking builds. In total, 4 commits and 4 pull requests landed.
Who contributed to FastAPI & Pydantic on May 28, 2026?
1 developer shipped this update, including YuriiMotov.
What were the notable FastAPI & Pydantic updates?
๐Ÿ”’๏ธ Improve GitHub actions security (#15607), โœ… Add `httpx2` test dependency to avoid deprecation warning, and โœ… Add `httpx2` test dependency to avoid deprecation warning (#15603).
โ™ฅ

$ log FastAPI & Pydantic --recent

Pydantic fixes GC tracking in pydantic-core and caches UTC TzInfo 50 shipped Pydantic drops Python 3.10, accepts list and DecimalTuple for Decimal 37 shipped Pydantic reworks `TypeAdapter` call arguments, tightens `Decimal` schemas 13 shipped FastAPI bumps pillow and dnspython, Pydantic corrects arguments JSON Schema 6 shipped

$ log --all # elsewhere on the wire

Agent Security Quiet day in agent security as guard coverage reaches four clients Alignment & Post-training verl defaults Ascend RL mode, open-instruct unblocks SFT packing

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.