Skip to content

Update dependency fastapi to v0.129.1 #19

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
github-actions merged 1 commit into from
Feb 21, 2026
Merged

Update dependency fastapi to v0.129.1 #19

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
fastapi==0.129.0
fastapi==0.129.1
Copy link

@coderabbitai coderabbitai bot Feb 21, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Check FastAPI 0.129.1 Python version requirements from PyPI
curl -s https://pypi.org/pypi/fastapi/0.129.1/json | jq -r '.info.requires_python'

Repository: RedHatInsights/ccx-upgrades-inference

Length of output: 87

🏁 Script executed:

# Check the declared Python floor in setup.cfg
if [ -f setup.cfg ]; then
  grep -A2 "python_requires" setup.cfg
else
  echo "setup.cfg not found"
fi

Repository: RedHatInsights/ccx-upgrades-inference

Length of output: 155

Update setup.cfg python_requires or downgrade FastAPI.

FastAPI 0.129.1 requires Python ≥3.10, but setup.cfg declares python_requires = >=3.6. This creates a critical mismatch—installations on Python 3.6–3.9 will fail. Either update python_requires to >=3.10 in setup.cfg or select a FastAPI version compatible with your declared Python floor.

🧰 Tools
🪛 OSV Scanner (2.3.3)

[HIGH] 1-1: urllib3 1.26.20: urllib3 streaming API improperly handles highly compressed data

(GHSA-2xpw-w6gg-jr37)

[HIGH] 1-1: urllib3 1.26.20: Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)

(GHSA-38jv-5279-wg99)

[HIGH] 1-1: urllib3 1.26.20: urllib3 allows an unbounded number of links in the decompression chain

(GHSA-gm62-xv2j-4w53)

[HIGH] 1-1: urllib3 1.26.20: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation

(GHSA-pq67-6m6q-mj2v)

🤖 Prompt for AI Agents 
Verify each finding against the current code and only fix it if needed.

In `@requirements.txt` at line 1, The requirements declare fastapi==0.129.1 but
setup.cfg's python_requires is too low (python_requires = >=3.6), causing
installs on 3.6–3.9 to fail; fix by either updating setup.cfg's python_requires
to ">=3.10" (change the python_requires setting) or by selecting a FastAPI
release compatible with the current floor (replace fastapi==0.129.1 in
requirements.txt with a version that supports >=3.6/3.7/3.8/3.9), and ensure the
change is reflected consistently in both requirements.txt and setup.cfg.

uvicorn[standard]==0.41.0
prometheus_fastapi_instrumentator==7.1.0
sentry-sdk>=1.37.1
Expand Down
2 changes: 1 addition & 1 deletion setup.cfg
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ packages = find:
python_requires = >=3.6
install_requires =
uvicorn[standard] >= 0.31.1
fastapi ==0.129.0
fastapi ==0.129.1
prometheus_fastapi_instrumentator ==7.1.0

boto3
Expand Down