RepoJournal
FastAPI & Pydantic

FastAPI & Pydantic

FastAPI and the Pydantic + SQLModel async-Python stack

Pick a date

The Wire · Showcase

PYDANTIC UPGRADES CRYPTOGRAPHY AMID BREAKING CHANGES

By RepoJournal · Filed · About FastAPI & Pydantic

Pydantic is bumping cryptography to 48.0.1, a major version that ships backwards-incompatible changes and requires careful validation before you merge.

The Pydantic team is moving cryptography from 46.0.7 to 48.0.1 [1], a jump that includes breaking changes you need to audit before it lands in production. Version 48.0.0 introduced backwards-incompatible shifts [1], so this isn't a patch you can wave through. The upgrade also bumps aiohttp to 3.14.1 [2], a minor security and stability refresh that's lower risk. On the FastAPI side, the maintainers are cleaning house with sponsor script updates [3] and adding BairesDev to the sponsors list [4], keeping the ecosystem funded and documented. These are infrastructure plays, not code changes that affect your dependencies. The cryptography upgrade is the story here: it's necessary, it's significant, and it needs your attention before the PR merges.

Action items

References

  1. [1] Bump cryptography from 46.0.7 to 48.0.1 ↗ pydantic/pydantic
  2. [2] Bump aiohttp from 3.14.0 to 3.14.1 ↗ pydantic/pydantic
  3. [3] 🔨 Update sponsors script to simplify previews (#15786) fastapi/fastapi
  4. [4] 🔧 Update sponsors: add BairesDev (#15787) fastapi/fastapi

FAQ

What changed in FastAPI & Pydantic on June 18, 2026?
Pydantic is bumping cryptography to 48.0.1, a major version that ships backwards-incompatible changes and requires careful validation before you merge.
What should FastAPI & Pydantic teams do about it?
Review cryptography 48.0.1 breaking changes and test with your auth/encryption code before approving • Monitor the aiohttp bump for integration issues in async workloads • Watch FastAPI sponsor docs for changes to preview rendering
Which FastAPI & Pydantic repositories shipped on June 18, 2026?
pydantic/pydantic, fastapi/fastapi

Related across the cluster

For your repos

The showcase is a teaser.
Your wire is the product.

Same engine. Different stack. Below: what changes when the wire is yours.

Showcase wire

  • 14 famous open source orgs
  • One wire per day
  • Public, generic
  • Read on the web, when you remember

Your wire

  • Up to 1,500 of your repos - orgs, deps, vendors
  • Morning and evening briefs
  • Action items routed to your team
  • Slack delivery, email, breaking-news CVE alerts

Want a hands-on demo first? Ask a current user for an invite link.