$ the-wire ยท showcase
FastAPI Locks Down Automation, Pydantic Fixes Regex Flag Loss
By RepoJournal ยท Filed ยท About FastAPI & Pydantic ยท Composed from the cited sources ยท methodology
FastAPI is ditching long-lived tokens for short-lived PR Submit automation across sponsors, translations, and topic updates, while Pydantic patches a critical regex constraint bug that was silently dropping flags like re.ASCII.
FastAPI is systematizing its CI/CD security posture by replacing three separate long-lived personal access tokens with short-lived repository-scoped tokens from PR Submit [2] [3]. The shift covers sponsor updates, translation workflows, and GitHub topic repository maintenance [1], with tiangolo consolidating token management and crediting generated commits to the pr-submit bot rather than personal accounts. The move follows a sponsors Git authentication fix [4] that caught a credential leak in the workflow. On the Pydantic side, a critical bug fix addresses regex pattern handling in the experimental pipeline where compiled patterns were losing their flags: "a pattern built with re.ASCII stops being ascii-only" [6] because the constraint was folded down to just the source string, letting invalid input slip through while rejecting valid cases when re.IGNORECASE was dropped. The fix preserves the full re.Pattern instance instead of extracting only the pattern string. Minor dependency housekeeping includes a pytest-xdist version bump in FastAPI [5] and a pymdown-extensions update in Pydantic [7], both routine maintenance across 15 commits and 9 PRs in this period.
Action items
- โ Review FastAPI's new PR Submit token setup if you maintain downstream CI integrations fastapi/fastapi [plan]
- โ Upgrade Pydantic to pick up the regex flag preservation fix if you use re.compile patterns with constraints pydantic/pydantic [monitor]
- โ Watch for FastAPI's translation workflow changes if you contribute translations fastapi/fastapi [monitor]
References
- [1] ๐ฅ Update FastAPI GitHub topic repositories โ fastapi/fastapi
- [2] ๐ Use PR Submit for automated updates โ fastapi/fastapi
- [3] ๐ Use PR Submit for translations โ fastapi/fastapi
- [4] ๐ Fix Sponsors Git authentication (#16174) โ fastapi/fastapi
- [5] โฌ๏ธ Raise pytest-xdist minimum (#16170) โ fastapi/fastapi
- [6] Preserve `re.Pattern` instance for compiled patterns in the experimental pipeline โ pydantic/pydantic
- [7] Bump pymdown-extensions from 11.0 to 11.0.1 โ pydantic/pydantic
