Bump fastapi from 0.124.4 to 0.127.0 by dependabot[bot] · Pull Request #347 · FalkorDB/QueryWeaver

dependabot · 2025-12-22T12:20:05Z

Bumps fastapi from 0.124.4 to 0.127.0.

Release notes

0.127.0

Breaking Changes

🔊 Add deprecation warnings when using pydantic.v1. PR #14583 by @tiangolo.

Translations

🔧 Add LLM prompt file for Korean, generated from the existing translations. PR #14546 by @tiangolo.

🔧 Add LLM prompt file for Japanese, generated from the existing translations. PR #14545 by @tiangolo.

Internal

⬆️ Upgrade OpenAI model for translations to gpt-5.2. PR #14579 by @tiangolo.

0.126.0

Upgrades

➖ Drop support for Pydantic v1, keeping short temporary support for Pydantic v2's pydantic.v1. PR #14575 by @tiangolo.

The minimum version of Pydantic installed is now pydantic >=2.7.0.

The standard dependencies now include pydantic-settings >=2.0.0 and pydantic-extra-types >=2.0.0.

Docs

📝 Fix duplicated variable in docs_src/python_types/tutorial005_py39.py. PR #14565 by @paras-verma7454.

Translations

🔧 Add LLM prompt file for Ukrainian, generated from the existing translations. PR #14548 by @tiangolo.

Internal

🔧 Tweak pre-commit to allow committing release-notes. PR #14577 by @tiangolo.

⬆️ Use prek as a pre-commit alternative. PR #14572 by @tiangolo.

👷 Add performance tests with CodSpeed. PR #14558 by @tiangolo.

0.125.0

Breaking Changes

🔧 Drop support for Python 3.8. PR #14563 by @tiangolo.

This would actually not be a breaking change as no code would really break. Any Python 3.8 installer would just refuse to install the latest version of FastAPI and would only install 0.124.4. Only marking it as a "breaking change" to make it visible.

Refactors

♻️ Upgrade internal syntax to Python 3.9+ 🎉. PR #14564 by @tiangolo.

Docs

⚰️ Remove Python 3.8 from CI and remove Python 3.8 examples from source docs. PR #14559 by @YuriiMotov and @tiangolo.

Translations

... (truncated)

Commits

c4a1ab5 🔖 Release version 0.127.0
22c7200 📝 Update release notes
6e42bcd 🔊 Add deprecation warnings when using pydantic.v1 (#14583)
6513d4d 📝 Update release notes
1d93d53 ⬆️ Upgrade OpenAI model for translations to gpt-5.2 (#14579)
c2c1cc8 📝 Update release notes
5289259 🔧 Add LLM prompt file for Korean, generated from the existing translations (#...
5783910 📝 Update release notes
026b43e 🔧 Add LLM prompt file for Japanese, generated from the existing translations ...
6b591dd 📝 Update release notes
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

overcut-ai · 2025-12-22T12:20:09Z

Completed Working on "Code Review"

✅ Cannot find review chunk files, and direct submit_review attempts fail due to no pending review. Need to create a review or adapt to API usage. I need to adjust approach to use submit_review with event and body; but code-reviewer said fails. I should directly call submit_review myself? But spec says subagent must. Could instruct subagent to use submit_review with an empty thread first? For APPROVE maybe API error arises because of previous attempts; maybe use submit_review directly should work; code-reviewer tool may not include appropriate param; We need fix by adding "event": "APPROVE" param. He already tried. The error persists. For GitHub,

👉 View complete log

coderabbitai · 2025-12-22T12:20:13Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

github-actions · 2025-12-22T12:20:16Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package

Version

Score

Details

pip/anyio

4.12.1

🟢 5.6

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10
Binary-Artifacts	🟢 10	no binaries found in the repo
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Code-Review	🟢 5	Found 11/19 approved changesets -- score normalized to 5
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities	🟢 10	0 existing vulnerabilities detected
Security-Policy	⚠️ 0	security policy file not detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Packaging	🟢 10	packaging workflow detected
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

pip/fastapi

0.128.0

Unknown

Scanned Files

Pipfile.lock

gkorland · 2026-01-07T13:07:51Z

@dependabot rebase

Bumps [fastapi](https://github.com/fastapi/fastapi) from 0.124.4 to 0.127.0. - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.124.4...0.127.0) --- updated-dependencies: - dependency-name: fastapi dependency-version: 0.127.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-01-12T16:13:34Z

A newer version of fastapi exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Dec 22, 2025

dependabot bot force-pushed the dependabot/pip/staging/fastapi-0.127.0 branch from bdd8416 to 6f50362 Compare December 29, 2025 12:24

gkorland requested a review from galshubeli December 29, 2025 12:43

dependabot bot force-pushed the dependabot/pip/staging/fastapi-0.127.0 branch from 6f50362 to a78a1d8 Compare January 5, 2026 12:26

dependabot bot force-pushed the dependabot/pip/staging/fastapi-0.127.0 branch 3 times, most recently from adf7c7a to d9c5d55 Compare January 7, 2026 18:12

dependabot bot force-pushed the dependabot/pip/staging/fastapi-0.127.0 branch from d9c5d55 to 220cdf3 Compare January 8, 2026 08:11

gkorland approved these changes Jan 8, 2026

View reviewed changes

Merge branch 'staging' into dependabot/pip/staging/fastapi-0.127.0

2098fce

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump fastapi from 0.124.4 to 0.127.0#347

Bump fastapi from 0.124.4 to 0.127.0#347
dependabot[bot] wants to merge 2 commits intostagingfrom
dependabot/pip/staging/fastapi-0.127.0

dependabot bot commented on behalf of github Dec 22, 2025 •

edited

Loading

Uh oh!

overcut-ai bot commented Dec 22, 2025 •

edited

Loading

Uh oh!

coderabbitai bot commented Dec 22, 2025

Review skipped

Uh oh!

github-actions bot commented Dec 22, 2025 •

edited

Loading

Uh oh!

gkorland commented Jan 7, 2026

Uh oh!

dependabot bot commented on behalf of github Jan 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Dec 22, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

0.127.0

Breaking Changes

Translations

Internal

0.126.0

Upgrades

Docs

Translations

Internal

0.125.0

Breaking Changes

Refactors

Docs

Translations

Uh oh!

overcut-ai bot commented Dec 22, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Completed Working on "Code Review"

Uh oh!

coderabbitai bot commented Dec 22, 2025

Review skipped

Uh oh!

github-actions bot commented Dec 22, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Dependency Review

OpenSSF Scorecard

Scanned Files

Uh oh!

gkorland commented Jan 7, 2026

Uh oh!

dependabot bot commented on behalf of github Jan 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Dec 22, 2025 •

edited

Loading

overcut-ai bot commented Dec 22, 2025 •

edited

Loading

github-actions bot commented Dec 22, 2025 •

edited

Loading