RepoJournal
FastAPI & Pydantic FastAPI & Pydantic
140 wires and counting

$ follow FastAPI & Pydantic

Keep up with FastAPI & Pydantic in about 3 minutes: what actually shipped โ€” the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest โ€” weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-06-18
stories 6
RSS Archive Reviews

ยฉ 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire ยท showcase

PYDANTIC UPGRADES CRYPTOGRAPHY AMID BREAKING CHANGES

By RepoJournal ยท Filed ยท About FastAPI & Pydantic ยท Composed from the cited sources ยท methodology

dependabot[bot]
1 person shipped this
dependabot[bot] @dependabot[bot] 2 cited

Pydantic is bumping cryptography to 48.0.1, a major version that ships backwards-incompatible changes and requires careful validation before you merge.

The Pydantic team is moving cryptography from 46.0.7 to 48.0.1 [1], a jump that includes breaking changes you need to audit before it lands in production. Version 48.0.0 introduced backwards-incompatible shifts [1], so this isn't a patch you can wave through. The upgrade also bumps aiohttp to 3.14.1 [2], a minor security and stability refresh that's lower risk. On the FastAPI side, the maintainers are cleaning house with sponsor script updates [3] and adding BairesDev to the sponsors list [4], keeping the ecosystem funded and documented. These are infrastructure plays, not code changes that affect your dependencies. The cryptography upgrade is the story here: it's necessary, it's significant, and it needs your attention before the PR merges.

$ ls fastapi/reviews/ # the step-back reads

the week in review Pydantic drops Python 3.10, then layers serialization fast paths the month in review Five Pydantic validation bypasses and a quadratic URL check
Full archive โ†’ Weekly reviews โ†’

Quick answers

What shipped in FastAPI & Pydantic on June 18, 2026?
Pydantic is bumping cryptography to 48.0.1, a major version that ships backwards-incompatible changes and requires careful validation before you merge. In total, 2 commits and 4 pull requests landed.
Who contributed to FastAPI & Pydantic on June 18, 2026?
1 developer shipped this update, including dependabot[bot].
What were the notable FastAPI & Pydantic updates?
Bump cryptography from 46.0.7 to 48.0.1, Bump aiohttp from 3.14.0 to 3.14.1, and ๐Ÿ”จ Update sponsors script to simplify previews (#15786).
โ™ฅ

$ log FastAPI & Pydantic --recent

Pydantic fixes GC tracking in pydantic-core and caches UTC TzInfo 50 shipped Pydantic drops Python 3.10, accepts list and DecimalTuple for Decimal 37 shipped Pydantic reworks `TypeAdapter` call arguments, tightens `Decimal` schemas 13 shipped FastAPI bumps pillow and dnspython, Pydantic corrects arguments JSON Schema 6 shipped

$ log --all # elsewhere on the wire

Agent Security Quiet day in agent security as guard coverage reaches four clients Alignment & Post-training verl defaults Ascend RL mode, open-instruct unblocks SFT packing

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.