chore(deps): update pip deps

[renovate]

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.

---

This PR contains the following updates:

Package	Change	Age	Confidence
fastapi (changelog)	==0.116.1 -> ==0.118.0
pydantic-settings (changelog)	~=2.10.1 -> ~=2.11.0
uvicorn (changelog)	~=0.35.0 -> ~=0.37.0

---

Release Notes

fastapi/fastapi (fastapi)

v0.118.0

Compare Source

0.118.0

Fixes

• 🐛 Fix support for StreamingResponses with dependencies with yield or UploadFiles, close after the response is done. PR #​14099 by @​tiangolo.

Before FastAPI 0.118.0, if you used a dependency with yield, it would run the exit code after the path operation function returned but right before sending the response.

This change also meant that if you returned a StreamingResponse, the exit code of the dependency with yield would have been already run.

For example, if you had a database session in a dependency with yield, the StreamingResponse would not be able to use that session while streaming data because the session would have already been closed in the exit code after yield.

This behavior was reverted in 0.118.0, to make the exit code after yield be executed after the response is sent.

You can read more about it in the docs for Advanced Dependencies - Dependencies with yield, HTTPException, except and Background Tasks. Including what you could do if you wanted to close a database session earlier, before returning the response to the client.

Docs

• 📝 Update tutorial/security/oauth2-jwt/ to use pwdlib with Argon2 instead of passlib. PR #​13917 by @​Neizvestnyj.
• ✏️ Fix typos in OAuth2 password request forms. PR #​14112 by @​alv2017.
• 📝 Update contributing guidelines for installing requirements. PR #​14095 by @​alejsdev.

Translations

• 🌐 Sync German docs. PR #​14098 by @​nilslindemann.

Internal

• ⬆ [pre-commit.ci] pre-commit autoupdate. PR #​14103 by @​pre-commit-ci[bot].
• ♻️ Refactor sponsor image handling. PR #​14102 by @​alejsdev.
• 🐛 Fix sponsor display issue by hiding element on image error. PR #​14097 by @​alejsdev.
• 🐛 Hide sponsor badge when sponsor image is not displayed. PR #​14096 by @​alejsdev.

v0.117.1

Compare Source

Fixes

• 🐛 Fix validation error when File is declared after Form parameter. PR #​11194 by @​thomasleveil.

v0.117.0

Compare Source

Features

• ✨ Allow None as return type for bodiless responses. PR #​9425 by @​hofrob.
• ✨ Allow array values for OpenAPI schema type field. PR #​13639 by @​sammasak.
• ✨ Add OpenAPI external_docs parameter to FastAPI. PR #​13713 by @​cmtoro.

Fixes

• ⚡️ Fix default_factory for response model field with Pydantic V1. PR #​9704 by @​vvanglro.
• 🐛 Fix inconsistent processing of model docstring formfeed char with Pydantic V1. PR #​6039 by @​MaxwellPayne.
• 🐛 Fix jsonable_encoder alters json_encoders of Pydantic v1 objects. PR #​4972 by @​aboubacs.
• 🐛 Reenable allow_arbitrary_types when only 1 argument is used on the API endpoint. PR #​13694 by @​rmawatson.
• 🐛 Fix inspect.getcoroutinefunction() can break testing with unittest.mock.patch(). PR #​14022 by @​secrett2633.

Refactors

• ♻️ Create dependency-cache dict in solve_dependencies only if None (don't re-create if empty). PR #​13689 by @​bokshitsky.
• ✅ Enable test case for duplicated headers in test_tutorial/test_header_params/test_tutorial003.py. PR #​13864 by @​Amogha-ark.
• 📌 Pin httpx to >=0.23.0,<1.0.0. PR #​14086 by @​YuriiMotov.

Docs

• 📝 Add note about Cookies and JavaScript on tutorial/cookie-params.md. PR #​13510 by @​Kludex.
• 📝 Remove outdated formatting from path-params-numeric-validations.md for languages en, es and uk.. PR #​14059 by @​svlandeg.
• 📝 Fix and Improve English Documentation. PR #​14048 by @​nilslindemann.

Translations

• 📝 Update prompts and German translation. PR #​14015 by @​nilslindemann.

Internal

• ✅ Simplify tests for response_model. PR #​14062 by @​dynamicy.
• 🚨 Install pydantic.mypy plugin. PR #​14081 by @​svlandeg.
• ✅ Add LLM test file. PR #​14049 by @​nilslindemann.
• 🔨 Update translations script. PR #​13968 by @​YuriiMotov.
• 🛠️ Update docs.py generate-readme command to remove permalinks from headers. PR #​14055 by @​YuriiMotov.
• ⬆️ Update mypy to 1.14.1. PR #​12970 by @​tamird.

v0.116.2

Compare Source

Upgrades

• ⬆️ Upgrade Starlette supported version range to >=0.40.0,<0.49.0. PR #​14077 by @​musicinmybrain.

Docs

• 📝 Add documentation for Behind a Proxy - Proxy Forwarded Headers, using --forwarded-allow-ips="*". PR #​14028 by @​tiangolo.
• 📝 Add deprecation info block about dict() in docs/tutorial/body.md. PR #​13906 by @​jomkv.
• 📝 Fix Twitter to be X (Twitter) everywhere in documentation. PR #​13809 by @​valentinDruzhinin.
• 🐛 Prevent scroll-to-top on restart/fast buttons in termynal.js. PR #​13714 by @​Ashish-Pandey62.
• 📝 Update testing events documentation. PR #​13259 by @​z0z0r4.
• 📝 Remove obsolete url field in error responses in docs. PR #​13655 by @​Taoup.
• 📝 Bring the scope claim in line with the standard in docs_src/security/tutorial005.py. PR #​11189 by @​DurandA.
• 📝 Update TrustedHostMiddleware Documentation. PR #​11441 by @​soulee-dev.
• 📝 Remove links to site callbackhell.com that doesn't exist anymore. PR #​14006 by @​dennybiasiolli.
• 📝 Add permalinks to headers in English docs. PR #​13993 by @​YuriiMotov.
• 📝 Update docs/en/docs/advanced/generate-clients.md. PR #​13793 by @​mrlubos.
• 📝 Add discussion template for new language translation requests. PR #​13535 by @​alejsdev.

Translations

• 📝 Fix code include for Pydantic models example in docs/zh/docs/python-types.md. PR #​13997 by @​anfreshman.
• 🌐 Update Portuguese Translation for docs/pt/docs/async.md. PR #​13863 by @​EdmilsonRodrigues.
• 📝 Fix highlight line in docs/ja/docs/tutorial/body.md. PR #​13927 by @​KoyoMiyazaki.
• 🌐 Add Persian translation for docs/fa/docs/environment-variables.md. PR #​13923 by @​Mohammad222PR.
• 🌐 Add Persian translation for docs/fa/docs/python-types.md. PR #​13524 by @​Mohammad222PR.
• 🌐 Update Portuguese Translation for docs/pt/docs/project-generation.md. PR #​13875 by @​EdmilsonRodrigues.
• 🌐 Add Persian translation for docs/fa/docs/async.md. PR #​13541 by @​Mohammad222PR.
• 🌐 Add Bangali translation for docs/bn/about/index.md. PR #​13882 by @​sajjadrahman56.

Internal

• ⬆ Bump pyjwt from 2.8.0 to 2.9.0. PR #​13960 by @​dependabot[bot].
• ⬆ [pre-commit.ci] pre-commit autoupdate. PR #​14080 by @​pre-commit-ci[bot].
• ⬆ Bump actions/setup-python from 5 to 6. PR #​14042 by @​dependabot[bot].
• ⬆ Bump actions/labeler from 5 to 6. PR #​14046 by @​dependabot[bot].
• ⬆ [pre-commit.ci] pre-commit autoupdate. PR #​14056 by @​pre-commit-ci[bot].
• ⬆ [pre-commit.ci] pre-commit autoupdate. PR #​14035 by @​pre-commit-ci[bot].
• ⬆ Bump pypa/gh-action-pypi-publish from 1.12.4 to 1.13.0. PR #​14041 by @​dependabot[bot].
• 👥 Update FastAPI People - Contributors and Translators. PR #​14029 by @​tiangolo.
• 👥 Update FastAPI People - Sponsors. PR #​14030 by @​tiangolo.
• 👥 Update FastAPI GitHub topic repositories. PR #​14031 by @​tiangolo.
• 👥 Update FastAPI People - Experts. PR #​14034 by @​tiangolo.
• 👷 Detect and label merge conflicts on PRs automatically. PR #​14045 by @​svlandeg.
• 🔧 Update sponsors: remove Platform.sh. PR #​14027 by @​tiangolo.
• 🔧 Update sponsors: remove Mobb. PR #​14026 by @​tiangolo.
• 🛠️ Update mkdocs_hooks to handle headers with permalinks when building docs. PR #​14025 by @​tiangolo.
• ⬆ [pre-commit.ci] pre-commit autoupdate. PR #​14016 by @​pre-commit-ci[bot].
• ⬆ Bump mkdocs-macros-plugin from 1.3.7 to 1.3.9. PR #​14003 by @​YuriiMotov.
• ⬆ [pre-commit.ci] pre-commit autoupdate. PR #​13999 by @​pre-commit-ci[bot].
• ⬆ [pre-commit.ci] pre-commit autoupdate. PR #​13983 by @​pre-commit-ci[bot].
• ⬆ Bump actions/checkout from 4 to 5. PR #​13986 by @​dependabot[bot].
• 🔧 Update Speakeasy sponsor graphic. PR #​13971 by @​chailandau.
• ⬆ [pre-commit.ci] pre-commit autoupdate. PR #​13969 by @​pre-commit-ci[bot].
• ⬆ Bump actions/download-artifact from 4 to 5. PR #​13975 by @​dependabot[bot].
• 👥 Update FastAPI People - Experts. PR #​13963 by @​tiangolo.
• ⬆ Bump ruff from 0.11.2 to 0.12.7. PR #​13957 by @​dependabot[bot].
• ⬆ Bump cairosvg from 2.7.1 to 2.8.2. PR #​13959 by @​dependabot[bot].
• ⬆ Bump pydantic-ai from 0.0.30 to 0.4.10. PR #​13958 by @​dependabot[bot].
• 👥 Update FastAPI GitHub topic repositories. PR #​13962 by @​tiangolo.
• ⬆ Bump mkdocs-material from 9.6.15 to 9.6.16. PR #​13961 by @​dependabot[bot].
• ⬆ Bump tiangolo/latest-changes from 0.3.2 to 0.4.0. PR #​13952 by @​dependabot[bot].
• 👥 Update FastAPI People - Sponsors. PR #​13956 by @​tiangolo.
• 👥 Update FastAPI People - Contributors and Translators. PR #​13955 by @​tiangolo.
• 🔧 Update sponsors: Databento link and sponsors_badge data. PR #​13954 by @​tiangolo.
• 🔧 Update sponsors: Add Railway. PR #​13953 by @​tiangolo.
• ⚒️ Update translate script, update prompt to minimize generated diff. PR #​13947 by @​YuriiMotov.
• ⬆ [pre-commit.ci] pre-commit autoupdate. PR #​13943 by @​pre-commit-ci[bot].
• ⚒️ Tweak translate script and CI. PR #​13939 by @​tiangolo.
• 👷 Add CI to translate with LLMs. PR #​13937 by @​tiangolo.
• ⚒️ Update translate script, show and update outdated translations. PR #​13933 by @​tiangolo.
• 🔨 Refactor translate script with extra feedback (prints). PR #​13932 by @​tiangolo.
• 🔨 Update translations script to remove old (removed) files. PR #​13928 by @​tiangolo.
• ⬆ [pre-commit.ci] pre-commit autoupdate. PR #​13894 by @​pre-commit-ci[bot].
• ⬆ Update httpx requirement to >=0.23.0,<0.29.0. PR #​13114 by @​yan12125.
• 🔧 Update sponsors: Add Mobb. PR #​13916 by @​tiangolo.
• 👥 Update FastAPI People - Experts. PR #​13889 by @​tiangolo.
• 🔨 Update FastAPI People sleep interval, use external settings. PR #​13888 by @​tiangolo.

pydantic/pydantic-settings (pydantic-settings)

v2.11.0

Compare Source

What's Changed

• CLI Serialize Support by @​kschwab in #​643
• Inspect type aliases to determine if an annotation is complex by @​tselepakis in #​644
• Revert "fix: Respect 'cli_parse_args' from model_config with settings_customise_sources (#​611)" by @​hramezani in #​655
• Remove parsing of command line arguments from CliSettingsSource.__init__. by @​trygve-baerland in #​656
• turn off allow_abbrev on subparsers by @​mroch in #​658
• CLI Serialization Fixes by @​kschwab in #​649
• Fix PydanticModel type checking. by @​kschwab in #​659
• Avoid env_prefix falling back to env vars without prefix by @​tselepakis in #​648
• Warn if model_config sets unused keys for missing settings sources by @​HomerusJa in #​663
• Included endpoint_url kwarg in AWSSecretsManagerSettingsSource class by @​adrianohrl in #​664
• Fix typo ("Accesing") in the "Adding sources" docs by @​deepyaman in #​668
• CLI Windows Path Fix by @​kschwab in #​669
• Cli root model support by @​kschwab in #​677
• Snake case conversion in Azure Key Vault by @​AndreuCodina in #​680
• Make InitSettingsSource resolution deterministic by @​enrico-stauss in #​681
• Update deps by @​hramezani in #​683

New Contributors

• @​tselepakis made their first contribution in #​644
• @​trygve-baerland made their first contribution in #​656
• @​mroch made their first contribution in #​658
• @​HomerusJa made their first contribution in #​663
• @​adrianohrl made their first contribution in #​664
• @​deepyaman made their first contribution in #​668
• @​enrico-stauss made their first contribution in #​681

Full Changelog: pydantic/pydantic-settings@2.10.1...v2.11.0

Kludex/uvicorn (uvicorn)

v0.37.0: Version 0.37.0

Compare Source

What's Changed

• Add --timeout-worker-healthcheck setting by @​Kludex in #​2711
• Add os.PathLike[str] type to ssl_ca_certs by @​rnv812 in #​2676

New Contributors

• @​LincolnPuzey made their first contribution in #​2669
• @​rnv812 made their first contribution in #​2676

Full Changelog: Kludex/uvicorn@0.36.1...0.37.0

v0.36.1: Version 0.36.1

Compare Source

What's Changed

• Raise an exception when calling removed Config.setup_event_loop() by @​Kludex in #​2709

Full Changelog: Kludex/uvicorn@0.36.0...0.36.1

v0.36.0: Version 0.36.0

Compare Source

Added

• Support custom IOLOOPs by @​gnir-work in #​2435
• Allow to provide importable string in --http, --ws and --loop by @​Kludex in #​2658

---

New Contributors

• @​gnir-work made their first contribution in #​2435
• @​musicinmybrain made their first contribution in #​2659
• @​secrett2633 made their first contribution in #​2684

Full Changelog: Kludex/uvicorn@0.35.0...0.36.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.