Who contributed to FastAPI & Pydantic on August 9, 2026?

4 developers shipped this update, including tiangolo, latest-changes[bot], dmontagu, and Viicos.

What were the notable FastAPI & Pydantic updates?

🔐 Use PR Submit for pull requests, 🔐 Use PR Submit for pull requests, and 👷 Use GitHub CLI for Git authentication.

FastAPI & Pydantic

FastAPI and the Pydantic + SQLModel async-Python stack

Pick a date

Topics: Python Full archive →

The Wire · Showcase

TIANGOLO LOCKS DOWN WORKFLOW TOKENS ACROSS FASTAPI AND SQLMODEL

By RepoJournal · Filed 06:58 UTC on August 9, 2026 · About FastAPI & Pydantic

4 people shipped this

tiangolo @tiangolo 6 cited

dmontagu @dmontagu 2 cited

Viicos @Viicos 2 cited

latest-changes[bot] @latest-changes[bot]

FastAPI and SQLModel are ditching long-lived personal access tokens for short-lived OIDC-scoped credentials across all automated workflows, eliminating a persistent supply-chain attack surface.

Tiangolo is systematically replacing hardcoded PATs with ephemeral tokens from GitHub's PR Submit and PR Push apps across both repositories [1][2]. The new approach requests tokens through GitHub OIDC, configures Git authentication via `gh auth setup-git`, and attributes commits to bot identities rather than generic `github-actions[bot]` accounts [3][4][5][6]. All changes have been validated with YAML parsing, git diff checks, and zizmor security audits. On the Pydantic side, a fix landed for callable discriminators with PEP 695 type aliases [7][8], and docs reverting changes from an earlier PR merged cleanly [9][10]. The activity reflects a focused 24-hour push: 18 commits and 10 PRs across three desks, with the token migration dominating both FastAPI and SQLModel.

Action items

→ Review FastAPI and SQLModel PRs for token migration merges; these are security-hardening changes ready to ship fastapi/fastapi [plan]
→ Monitor Pydantic discriminator fix if you use PEP 695 type aliases; pull the merge when available pydantic/pydantic [monitor]

References

[1] 🔐 Use PR Submit for pull requests ↗ fastapi/fastapi
[2] 🔐 Use PR Submit for pull requests ↗ tiangolo/sqlmodel
[3] 👷 Use GitHub CLI for Git authentication ↗ fastapi/fastapi
[4] 👷 Use PR Push commit identity ↗ fastapi/fastapi
[5] 👷 Use GitHub CLI for Git authentication ↗ tiangolo/sqlmodel
[6] 👷 Use PR Push commit identity ↗ tiangolo/sqlmodel
[7] Fix support for callable discriminators with PEP 695 type aliases ↗ pydantic/pydantic
[8] Fix support for callable discriminators with PEP 695 type aliases (#13604) pydantic/pydantic
[9] Revert some docs changes from #13457 ↗ pydantic/pydantic
[10] Revert some docs changes from #13457 (#13607) pydantic/pydantic

Quick answers

What shipped in FastAPI & Pydantic on August 9, 2026?: FastAPI and SQLModel are ditching long-lived personal access tokens for short-lived OIDC-scoped credentials across all automated workflows, eliminating a persistent supply-chain attack surface. In total, 18 commits and 10 pull requests landed.
Who contributed to FastAPI & Pydantic on August 9, 2026?: 4 developers shipped this update, including tiangolo, latest-changes[bot], dmontagu, and Viicos.
What were the notable FastAPI & Pydantic updates?: 🔐 Use PR Submit for pull requests, 🔐 Use PR Submit for pull requests, and 👷 Use GitHub CLI for Git authentication.

FastAPI Locks Down Automation, Pydantic Fixes Regex Flag Loss

FastAPI is ditching long-lived tokens for short-lived PR Submit automation across sponsors, translations, and topic updates, while Pydantic patches a critical regex constraint bug that was silently dropping flags like re.ASCII.

python 24 shipped

FastAPI & Pydantic Aug 8

BOTH FASTAPI AND SQLMODEL STRIP ZENSICAL CACHE FROM DOCS BUILDS

FastAPI and SQLModel both disabled caching in their documentation workflows after discovering that Zensical's cache invalidation misses source and data changes, risking stale content in production builds.

python 6 shipped

FastAPI & Pydantic Aug 7

PYDANTIC EYES PYTHON 3.15, FASTAPI AND SQLMODEL CLEAN HOUSE

Pydantic is moving fast on Python 3.15 support while the FastAPI ecosystem standardizes on a new release notes workflow.

python 14 shipped

FastAPI & Pydantic Aug 6

PYDANTIC TIGHTENS NAMED TUPLE VALIDATION, FASTAPI PULLS 12 DEPENDENCY UPDATES

Pydantic ships a dedicated named-tuple core schema that fixes four critical validation edge cases, while FastAPI and SQLModel ride a wave of upstream bumps across the toolchain.

python 8 shipped

Elsewhere on the wire

AI Agents Aug 10

LANGCHAIN PATCHES PYDANTIC 2.14 BREAKS, CLINE KILLS YOLO MODE

LangChain shipped critical compatibility fixes for Pydantic 2.14 serialization bugs while Cline removed a cosmetic toggle that masked real approval confusion.

ai-agents 10 shipped

Local LLMs Aug 10

OLLAMA SHIPS VISION SUPPORT ACROSS MLX AND QWEN3.5 AS LLAMA.CPP FIXES DISPATCH BUGS

Ollama's MLX runner now processes images natively, preserving prefix caching and speculative decoding while rejecting unsupported requests with clear errors.

llms 157 shipped

@CachyOS Aug 10

CACHYOS LINUX 7.2-RC7 SHIPS WITH WIFI AND USB FIXES, SETTINGS 1.4.0 REMOVES NVIDIA DEPRECATED FLAG

CachyOS Linux 7.2-rc7-1 rebased upstream with critical fixes for MT76 wifi devices and USB initialization, while the settings package ditches legacy NVIDIA parameters.

infra 73 shipped

Elixir & Phoenix Aug 10

ELIXIR FIXES UTF-8 CORRUPTION IN MACRO.TO_STRING, ECTO CUTS COMPILE DEPS

A critical fix landed for Elixir's string handling that was silently corrupting UTF-8 sequences when converting C1 control characters, while Ecto shipped a change that trims unnecessary compile-time dependencies from schema derivations.

elixir 4 shipped

Want every project, not just this one?

Follow FastAPI & Pydantic