Skip to content

fix(deps): bump fastapi from 0.136.3 to 0.137.1 in /nlp-orchestrator#1398

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/nlp-orchestrator/fastapi-0.137.0
Open

fix(deps): bump fastapi from 0.136.3 to 0.137.1 in /nlp-orchestrator#1398
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/nlp-orchestrator/fastapi-0.137.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 15, 2026

Copy link
Copy Markdown
Contributor

Bumps fastapi from 0.136.3 to 0.137.1.

Release notes

Sourced from fastapi's releases.

0.137.1

Fixes

0.137.0

Breaking Changes

  • ♻️ Refactor internals to preserve APIRouter and APIRoute instances. PR #15745 by @​tiangolo.

Unblocks ✨ SO MANY THINGS ✨

Before this, router.include_router(other_router) would take each path operation from other_router and "clone" it, or recreate it from scratch.

This would mean that in the end there was only one top level router, part of the app.

The way it is structured here is that there are a few additional classes to handle intermediate metadata for router and route inclusion. That way the information of "router X includes Y and Y includes Z" is stored somewhere, without affecting (recreating / clonning) the final route.

Non Objectives

Dependencies for 404: previously I intended to support dependencies that would be executed even for 404, but that would conflict with the fact that a router could not find a match, but the next router did find a match. Executing dependencies in the router that did not find a match would not make sense, they could consume the request, body, etc. This original idea was discarded.

Specific Breaking Changes

Now router.routes is no longer a plain list of APIRoute objects, it can contain these intermediate objects that can contain additional routers, forming a tree.

Any logic that depended on iterating on the router.routes directly would be affected, that logic cannot expect to be able to extract data from a plain list of routes, as it's no longer a plain list but a tree.

Additionally, any logic that iterated on router.routes to modify them would now also see these new objects, and would not see all the routes in the app.

router.routes should be considered an internal implementation detail, only passed around to the FastAPI functions that need it.

Features

  • Adding routes (path operations) after a router is included now works, they are reflected as they are not copied.
  • Including subrouter in mainrouter can be done before adding routes (path operations) to subrouter, because now the the entire object is stored instead of copying the routes.
  • As routes are not copied, in some cases that might save some memory.

Alpha Features

This is not documented yet, so it's not officially supported yet and could change in the future.

But, as APIRoute and APIRouter instances are now preserved, they could be customized.

APIRouter has two new methods, .matches() and .handle(), counterpart to the existing ones in APIRoute. With this a router could customize how it matches and handles requests. For example, it could match only requests that include some specific header, for example for handling versions in headers.

Still, for now, consider this very experimental and potentially changing and breaking in the future.

Future Features Enabled

... (truncated)

Commits

@dependabot dependabot Bot added the security label Jun 15, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jun 15, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot requested a review from viru0909-dev as a code owner June 15, 2026 10:57
@dependabot dependabot Bot added the security label Jun 15, 2026
@vercel

vercel Bot commented Jun 15, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
nyaysetu Error Error Jun 15, 2026 5:40pm

@github-actions

Copy link
Copy Markdown
Contributor

Hi @dependabot[bot], thanks for contributing to Nyay Setu! 🎉

I have automatically:

  • 👤 Assigned this PR to you.
  • 🏷️ Applied the gssoc:approved label.

Our workflows will now analyze your changes to classify:

  • 📈 PR Difficulty: level:*
  • 🧩 PR Type: type:*
  • 🌟 PR Quality: quality:*

Tip

Ensure your PR description references the issue it resolves (e.g. Closes #123). This allows the bot to inherit any additional labels from that issue!

Happy coding! 🚀

Bumps [fastapi](https://github.com/fastapi/fastapi) from 0.136.3 to 0.137.1.
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.136.3...0.137.1)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.137.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title fix(deps): bump fastapi from 0.136.3 to 0.137.0 in /nlp-orchestrator fix(deps): bump fastapi from 0.136.3 to 0.137.1 in /nlp-orchestrator Jun 15, 2026
@dependabot dependabot Bot force-pushed the dependabot/pip/nlp-orchestrator/fastapi-0.137.0 branch from 2a19cf1 to 4df33bc Compare June 15, 2026 17:40

@viru0909-dev viru0909-dev left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Review Summary

This PR has been reviewed and requires changes before it can be approved. The issues below must be resolved.

Issues to Resolve

Result Check Notes
FAIL Description Description is missing: a Checklist section with checkboxes.
FAIL Checklist No checklist found in the description.
FAIL Issue Link An issue number is referenced but without a closing keyword. Use 'Closes #NNN', 'Fixes #NNN', or 'Resolves #NNN' so the issue closes automatically on merge.

Passing Checks

Result Check Notes
PASS Title Title format is acceptable.
PASS Merge Conflicts No merge conflicts.
PASS Branch Freshness Branch was last updated 0.0 days ago.
PASS CI / Tests No CI checks are configured or results are not yet available.
PASS Code Quality No code quality issues detected in the diff.

To proceed: push the required fixes to dependabot/pip/nlp-orchestrator/fastapi-0.137.0 and the PR will be re-evaluated on the next review run.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant