RepoJournal
FastAPI & Pydantic FastAPI & Pydantic
140 wires and counting

$ follow FastAPI & Pydantic

Keep up with FastAPI & Pydantic in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-06-17
stories 15
RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

FASTAPI BUMPS CRYPTOGRAPHY TO 48.0.1 ALONGSIDE SEVEN PACKAGE UPDATES

By RepoJournal · Filed · About FastAPI & Pydantic · Composed from the cited sources · methodology

dependabot[bot] GonzalezSanchez
2 people shipped this
dependabot[bot] @dependabot[bot] 5 cited GonzalezSanchez @GonzalezSanchez 1 cited

FastAPI locked in cryptography 48.0.1 with breaking changes and seven companion package bumps in a single coordinated push.

The cryptography upgrade from 46.0.7 to 48.0.1 [1] carries backwards-incompatible changes compiled against OpenSSL 4.0.1, making this a deliberate breaking change that demands attention before you ship. Bundled in the same PR batch, FastAPI upgraded ruff, inline-snapshot, ty, typer, zensical, and pydantic-ai [2], consolidating maintenance work across the dependency stack. The aiohttp bump to 3.14.1 [3] landed in parallel, and a script reversion [4] corrected an overzealous cleanup that removed more than intended. On the infrastructure side, both FastAPI and SQLModel moved setup-uv to 8.2.0 [5] [6], bringing new inputs like quiet mode and astral-mirror support. Over in Pydantic, the Mypy plugin now warns on unknown config keys [7] [8], surfacing dead configuration from V1 migrations that were silently ignored before.

Action items

References

  1. [1] ⬆ Bump cryptography from 46.0.7 to 48.0.1 ↗ fastapi/fastapi
  2. [2] ⬆ Bump the python-packages group across 1 directory with 7 updates ↗ fastapi/fastapi
  3. [3] ⬆ Bump aiohttp from 3.14.0 to 3.14.1 ↗ fastapi/fastapi
  4. [4] ⏪️ Revert removing scripts, only remove `coverage.sh` (#15772) ↗ fastapi/fastapi
  5. [5] ⬆ Bump astral-sh/setup-uv from 8.1.0 to 8.2.0 in the github-actions group ↗ fastapi/fastapi
  6. [6] ⬆ Bump astral-sh/setup-uv from 8.1.0 to 8.2.0 in the github-actions group ↗ tiangolo/sqlmodel
  7. [7] Warn on unknown config keys in the Mypy plugin ↗ pydantic/pydantic
  8. [8] Warn on unknown config keys in the Mypy plugin (#13149) ↗ pydantic/pydantic

$ ls fastapi/reviews/ # the step-back reads

the week in review Pydantic drops Python 3.10, then layers serialization fast paths the month in review Five Pydantic validation bypasses and a quadratic URL check
Full archive → Weekly reviews →

Quick answers

What shipped in FastAPI & Pydantic on June 17, 2026?
FastAPI locked in cryptography 48.0.1 with breaking changes and seven companion package bumps in a single coordinated push. In total, 3 commits and 12 pull requests landed.
Who contributed to FastAPI & Pydantic on June 17, 2026?
2 developers shipped this update, including dependabot[bot] and GonzalezSanchez.
What were the notable FastAPI & Pydantic updates?
⬆ Bump cryptography from 46.0.7 to 48.0.1, ⬆ Bump the python-packages group across 1 directory with 7 updates, and ⬆ Bump aiohttp from 3.14.0 to 3.14.1.
♥

$ log FastAPI & Pydantic --recent

Pydantic fixes GC tracking in pydantic-core and caches UTC TzInfo 50 shipped Pydantic drops Python 3.10, accepts list and DecimalTuple for Decimal 37 shipped Pydantic reworks `TypeAdapter` call arguments, tightens `Decimal` schemas 13 shipped FastAPI bumps pillow and dnspython, Pydantic corrects arguments JSON Schema 6 shipped

$ log --all # elsewhere on the wire

Agent Security Quiet day in agent security as guard coverage reaches four clients Alignment & Post-training verl defaults Ascend RL mode, open-instruct unblocks SFT packing

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.