Skip to content

Update dependency fastapi to v0.129.1#19

Merged
github-actions[bot] merged 1 commit intomainfrom
konflux/mintmaker/main/python-deps
Feb 21, 2026
Merged

Update dependency fastapi to v0.129.1#19
github-actions[bot] merged 1 commit intomainfrom
konflux/mintmaker/main/python-deps

Conversation

@red-hat-konflux
Copy link
Contributor

This PR contains the following updates:

Package Change Age Confidence
fastapi (changelog) ==0.129.0 -> ==0.129.1 age confidence

Release Notes

fastapi/fastapi (fastapi)

v0.129.1

Compare Source

Fixes
  • ♻️ Fix JSON Schema for bytes, use "contentMediaType": "application/octet-stream" instead of "format": "binary". PR #​14953 by @​tiangolo.
Docs
Translations
Internal

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@github-actions github-actions bot enabled auto-merge February 21, 2026 17:04
@coderabbitai
Copy link

coderabbitai bot commented Feb 21, 2026

Summary by CodeRabbit

  • Chores
    • Updated FastAPI dependency to the latest patch version.

Walkthrough

FastAPI dependency version is bumped from 0.129.0 to 0.129.1 across both dependency specification files. No functional changes, control flow modifications, or error handling updates.

Changes

Cohort / File(s) Summary
Dependency Updates
requirements.txt, setup.cfg
FastAPI dependency version bumped from 0.129.0 to 0.129.1 in both files.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name Status Explanation Resolution
Description check ❓ Inconclusive The description is missing the required 'Type of change' section selection and 'Testing steps' section from the template, though it provides comprehensive release notes and context from the dependency updater. Select appropriate change type (likely 'Bump-up dependent library' or 'Security fix in dependent library') and describe testing steps performed or needed to validate the update.
✅ Passed checks (2 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly and concisely describes the main change: updating the fastapi dependency to version 0.129.1, which matches the actual changes in requirements.txt and setup.cfg.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch konflux/mintmaker/main/python-deps

Comment @coderabbitai help to get the list of available commands and usage tips.

@codecov
Copy link

codecov bot commented Feb 21, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 86.93%. Comparing base (8d2b40a) to head (7c6108b).
⚠️ Report is 3 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main      #19   +/-   ##
=======================================
  Coverage   86.93%   86.93%           
=======================================
  Files          10       10           
  Lines         199      199           
  Branches        6        6           
=======================================
  Hits          173      173           
  Misses         25       25           
  Partials        1        1           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Copy link

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@requirements.txt`:
- Line 1: The requirements declare fastapi==0.129.1 but setup.cfg's
python_requires is too low (python_requires = >=3.6), causing installs on
3.6–3.9 to fail; fix by either updating setup.cfg's python_requires to ">=3.10"
(change the python_requires setting) or by selecting a FastAPI release
compatible with the current floor (replace fastapi==0.129.1 in requirements.txt
with a version that supports >=3.6/3.7/3.8/3.9), and ensure the change is
reflected consistently in both requirements.txt and setup.cfg.

---

Duplicate comments:
In `@setup.cfg`:
- Around line 16-18: The install_requires block (install_requires,
uvicorn[standard] >= 0.31.1, fastapi ==0.129.1) lacks a Python version
compatibility declaration; add a python_requires entry in setup.cfg (for example
python_requires = >=3.8,<4) to enforce supported Python versions and, if needed,
adjust the pinned uvicorn/fastapi versions to ones that are compatible with that
python_requires range.

@@ -1,4 +1,4 @@
fastapi==0.129.0
fastapi==0.129.1
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Check FastAPI 0.129.1 Python version requirements from PyPI
curl -s https://pypi.org/pypi/fastapi/0.129.1/json | jq -r '.info.requires_python'

Repository: RedHatInsights/ccx-upgrades-inference

Length of output: 87


🏁 Script executed:

# Check the declared Python floor in setup.cfg
if [ -f setup.cfg ]; then
  grep -A2 "python_requires" setup.cfg
else
  echo "setup.cfg not found"
fi

Repository: RedHatInsights/ccx-upgrades-inference

Length of output: 155


Update setup.cfg python_requires or downgrade FastAPI.

FastAPI 0.129.1 requires Python ≥3.10, but setup.cfg declares python_requires = >=3.6. This creates a critical mismatch—installations on Python 3.6–3.9 will fail. Either update python_requires to >=3.10 in setup.cfg or select a FastAPI version compatible with your declared Python floor.

🧰 Tools
🪛 OSV Scanner (2.3.3)

[HIGH] 1-1: urllib3 1.26.20: urllib3 streaming API improperly handles highly compressed data

(GHSA-2xpw-w6gg-jr37)


[HIGH] 1-1: urllib3 1.26.20: Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)

(GHSA-38jv-5279-wg99)


[HIGH] 1-1: urllib3 1.26.20: urllib3 allows an unbounded number of links in the decompression chain

(GHSA-gm62-xv2j-4w53)


[HIGH] 1-1: urllib3 1.26.20: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation

(GHSA-pq67-6m6q-mj2v)

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@requirements.txt` at line 1, The requirements declare fastapi==0.129.1 but
setup.cfg's python_requires is too low (python_requires = >=3.6), causing
installs on 3.6–3.9 to fail; fix by either updating setup.cfg's python_requires
to ">=3.10" (change the python_requires setting) or by selecting a FastAPI
release compatible with the current floor (replace fastapi==0.129.1 in
requirements.txt with a version that supports >=3.6/3.7/3.8/3.9), and ensure the
change is reflected consistently in both requirements.txt and setup.cfg.

@github-actions github-actions bot merged commit ec200eb into main Feb 21, 2026
15 checks passed
@red-hat-konflux red-hat-konflux bot deleted the konflux/mintmaker/main/python-deps branch February 21, 2026 21:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant