RepoJournal
FastAPI & Pydantic FastAPI & Pydantic
140 wires and counting

$ follow FastAPI & Pydantic

Keep up with FastAPI & Pydantic in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-10-26
stories 6
RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

FastAPI's dependency bots move; Pydantic fixes its CI cache keys

By RepoJournal · Filed · About FastAPI & Pydantic · Composed from the cited sources · methodology

dependabot latest-changes[bot] David Hewitt
3 people shipped this
dependabot @dependabot 2 cited latest-changes[bot] @latest-changes[bot] 1 cited David Hewitt @davidhewitt 1 cited

A routine day on both repos: FastAPI took two dependabot bumps plus a release-notes refresh, and Pydantic corrected how uv keys its cache for pydantic-core builds.

Fix uv cache keys for `pydantic-core` (#14079) pydantic/pydantic

by David Hewitt

David Hewitt corrected the uv cache keys used for pydantic-core, so cache hits depend on the inputs that actually determine the build rather than a stale key. That matters to anyone running Pydantic's CI in a uv-cached environment, where a wrong key means either needless rebuilds or a reused artifact from the wrong inputs.

⬆ Bump gitpython from 3.1.62 to 3.2.1 fastapi/fastapi

by dependabot

FastAPI's gitpython pin moved from 3.1.62 to 3.2.1, a minor-version jump that GitPython's own notes mark as the release preparing v3.2. This is a test-and-tooling dependency in FastAPI's tree, not part of the package FastAPI users install.

⬆ Bump opentelemetry-api from 1.44.0 to 1.45.1 fastapi/fastapi

by dependabot

opentelemetry-api went from 1.44.0 to 1.45.1, a patch on top of 1.45.0 whose release notes list a fix making the API's AnyValue handling consistent. Users on 1.45.0 get that correction by moving to 1.45.1.

📝 Update release notes fastapi/fastapi

by latest-changes[bot]

The latest-changes bot regenerated FastAPI's release notes, marked skip ci. No shipped code changed.

$ ls fastapi/reviews/ # the step-back reads

the week in review Pydantic drops Python 3.10, then layers serialization fast paths the month in review Five Pydantic validation bypasses and a quadratic URL check
Full archive → Weekly reviews →

Quick answers

What shipped in FastAPI & Pydantic on October 26, 2026?
A routine day on both repos: FastAPI took two dependabot bumps plus a release-notes refresh, and Pydantic corrected how uv keys its cache for pydantic-core builds. In total, 3 commits and 3 pull requests landed.
Who contributed to FastAPI & Pydantic on October 26, 2026?
3 developers shipped this update, including dependabot, latest-changes[bot], and David Hewitt.
What were the notable FastAPI & Pydantic updates?
Fix uv cache keys for `pydantic-core` (#14079), ⬆ Bump gitpython from 3.1.62 to 3.2.1, and ⬆ Bump opentelemetry-api from 1.44.0 to 1.45.1.
♥

$ log FastAPI & Pydantic --recent

Pydantic fixes GC tracking in pydantic-core and caches UTC TzInfo 50 shipped Pydantic drops Python 3.10, accepts list and DecimalTuple for Decimal 37 shipped Pydantic reworks `TypeAdapter` call arguments, tightens `Decimal` schemas 13 shipped FastAPI bumps pillow and dnspython, Pydantic corrects arguments JSON Schema 6 shipped

$ log --all # elsewhere on the wire

Agent Security Quiet day in agent security as guard coverage reaches four clients Alignment & Post-training verl defaults Ascend RL mode, open-instruct unblocks SFT packing

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.