Skip to content

build(deps): update fastapi requirement from <0.139.0,>=0.120.1 to >=0.120.1,<0.140.0 - #2228

Merged
jonahgabriel merged 9 commits into
devfrom
dependabot/pip/fastapi-gte-0.120.1-and-lt-0.140.0
Jul 9, 2026
Merged

jonahgabriel merged 9 commits into
devfrom
dependabot/pip/fastapi-gte-0.120.1-and-lt-0.140.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 7, 2026 •

Copy link
Copy Markdown
Contributor

Updates the requirements on fastapi to permit the latest version.

Release notes

Sourced from fastapi's releases.

0.139.0

Features

  • ✨ Support dependencies in app.frontend(), e.g. for automatic cookie authentication for the frontend. PR #15908 by @​tiangolo.

Translations

Internal

Commits
  • cecd96d 🔖 Release version 0.139.0 (#15910)
  • aea6609 📝 Update release notes
  • 319be50 ✨ Support dependencies in app.frontend(), e.g. for automatic cookie authent...
  • 66a90f6 📝 Update release notes
  • d30a3eb 👥 Update FastAPI People - Experts (#15909)
  • 122f1b5 📝 Update release notes
  • fd6ece3 👥 Update FastAPI GitHub topic repositories (#15906)
  • ec2a6ad 📝 Update release notes
  • 9d7d7fe 🌐 Update translations for fr (update-outdated) (#15897)
  • 8dc852d 📝 Update release notes
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Deploy evidence: OMN-14141 (OCC PR OmniNode-ai/onex_change_control#3732).

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 7, 2026
@jonahgabriel
jonahgabriel enabled auto-merge (squash) July 7, 2026 20:51
@jonahgabriel

Copy link
Copy Markdown
Collaborator

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Jul 8, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

dependabot Bot and others added 2 commits July 7, 2026 23:56
Updates the requirements on [fastapi](https://github.com/fastapi/fastapi) to permit the latest version.
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.120.1...0.139.0)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.139.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@jonahgabriel
jonahgabriel force-pushed the dependabot/pip/fastapi-gte-0.120.1-and-lt-0.140.0 branch from 269e9bc to 2a5a8b2 Compare July 8, 2026 07:00
@jonahgabriel
jonahgabriel disabled auto-merge July 8, 2026 17:01
@jonahgabriel

Copy link
Copy Markdown
Collaborator

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Jul 8, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@jonahgabriel
jonahgabriel self-requested a review as a code owner July 9, 2026 00:25
@jonahgabriel
jonahgabriel merged commit 1d97717 into dev Jul 9, 2026
183 of 191 checks passed
@jonahgabriel
jonahgabriel deleted the dependabot/pip/fastapi-gte-0.120.1-and-lt-0.140.0 branch July 9, 2026 01:47
jonahgabriel pushed a commit that referenced this pull request Jul 15, 2026
The dependabot uvicorn <0.51.0->0.52.0 bound bump changes pyproject.toml +
uv.lock, which by design (OMN-12567 binding-not-label) rebinds the runner
image identity in docker/runners/runner-image.lock.json (identity_digest
f3f1d66->87239d2a, shared_env 433be4f0->3b1bee43). The paired anchor in
tests/integration/infra/test_omn_12765_release_backmerge_identity.py was
left stale, causing a 100%-reproducible assertion failure (Tests Split
2/15) that a prior lane misdiagnosed as runner flakiness. Update the anchor
to the regenerated, build-proven values (runner-image-build-smoke asserts
baked image label == lock identity_digest). Precedent: #2227, #2228 rebound
the same lock and updated this anchor in lockstep.

Verified locally: runner_image_identity.py --mode verify passes and the
OMN-12765 test plus 40 runner-image CI tests pass.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant