FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

Update dependency fastapi to v0.141.1 by renovate[bot] · Pull Request #302 · e2b-dev/code-interpreter · GitHub

  1. e2b-dev
  2. code-interpreter

Repository navigation

Update dependency fastapi to v0.141.1 - #302

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/fastapi-0.x
ConversationCommits (1)ChecksFiles changed
Open

Update dependency fastapi to v0.141.1#302
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/fastapi-0.x

Conversation

renovate Bot commented Jul 7, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
fastapi (changelog) ==0.111.0 → ==0.141.1

Release Notes

fastapi/fastapi (fastapi)

v0.141.1

Compare Source

Fixes
  • 🐛 Fix support for background tasks and headers from dependencies in app.frontend(). PR #​16105 by @​tiangolo.
Docs

v0.141.0

Compare Source

Features
  • ✨ Add app.frontend(check_dir="auto"), to make local development more convenient with fastapi dev. PR #​16102 by @​tiangolo.

v0.140.13

Compare Source

Fixes
Docs

v0.140.12

Compare Source

Fixes

v0.140.11

Compare Source

v0.140.10

Compare Source

Fixes
Internal

v0.140.9

Compare Source

Fixes
  • 🐛 Fix exclude_defaults not propagated to dict keys and values in jsonable_encoder. PR #​16043 by @​MBGrao.
Internal

v0.140.8

Compare Source

Fixes

v0.140.7

Compare Source

Refactors
Internal

v0.140.6

Compare Source

Refactors
  • ⚡️ Avoid flattening dependencies for request parameters, mainly for OpenAPI. PR #​16073 by @​tiangolo.

v0.140.5

Compare Source

Refactors

v0.140.4

Compare Source

v0.140.3

Compare Source

Refactors

v0.140.2

Compare Source

Refactors
Internal

v0.140.1

Compare Source

Refactors
  • ♻️ Update the lru_cache limit for dependencies to account for large apps. PR #​16062 by @​tiangolo.

v0.140.0

Compare Source

Refactors
Docs
Internal

v0.139.2

Compare Source

Fixes
  • 🐛 Refactor router route building to make it thread-safe, mainly relevant for tests running in parallel threads (uncommon). PR #​16013 by @​tiangolo.

v0.139.1

Compare Source

Fixes
Docs
  • 📝 Fix topic repository list not being displayed and skip_users not being applied. PR #​15995 by @​YuriiMotov.
Translations
Internal

v0.139.0

Compare Source

Features
  • ✨ Support dependencies in app.frontend(), e.g. for automatic cookie authentication for the frontend. PR #​15908 by @​tiangolo.
Translations
Internal

v0.138.2

Compare Source

Refactors
  • ♻️ Make app.frontend() return 404 for methods other than GET or HEAD with no static file matches. PR #​15863 by @​tiangolo.
Internal

v0.138.1

Compare Source

Refactors
Internal

v0.138.0

Compare Source

Features
  • ✨ Add support for app.frontend("/", directory="dist") and router.frontend("/", directory="dist"). PR #​15800 by @​tiangolo.
Docs
Translations
Internal

v0.137.2

Compare Source

Features
  • ✨ Add iter_route_contexts() for advanced use cases that used to use router.routes (e.g. Jupyverse). PR #​15785 by @​tiangolo.
Translations
Internal

v0.137.1

Compare Source

Fixes

v0.137.0

Compare Source

Breaking Changes

Unblocks ✨ SO MANY THINGS ✨

Before this, router.include_router(other_router) would take each path operation from other_router and "clone" it, or recreate it from scratch.

This would mean that in the end there was only one top level router, part of the app.

The way it is structured here is that there are a few additional classes to handle intermediate metadata for router and route inclusion. That way the information of "router X includes Y and Y includes Z" is stored somewhere, without affecting (recreating / clonning) the final route.

Non Objectives

Dependencies for 404: previously I intended to support dependencies that would be executed even for 404, but that would conflict with the fact that a router could not find a match, but the next router did find a match. Executing dependencies in the router that did not find a match would not make sense, they could consume the request, body, etc. This original idea was discarded.

Specific Breaking Changes

Now router.routes is no longer a plain list of APIRoute objects, it can contain these intermediate objects that can contain additional routers, forming a tree.

Any logic that depended on iterating on the router.routes directly would be affected, that logic cannot expect to be able to extract data from a plain list of routes, as it's no longer a plain list but a tree.

Additionally, any logic that iterated on router.routes to modify them would now also see these new objects, and would not see all the routes in the app.

router.routes should be considered an internal implementation detail, only passed around to the FastAPI functions that need it.

Features
  • Adding routes (path operations) after a router is included now works, they are reflected as they are not copied.
  • Including subrouter in mainrouter can be done before adding routes (path operations) to subrouter, because now the the entire object is stored instead of copying the routes.
  • As routes are not copied, in some cases that might save some memory.
Alpha Features

This is not documented yet, so it's not officially supported yet and could change in the future.

But, as APIRoute and APIRouter instances are now preserved, they could be customized.

APIRouter has two new methods, .matches() and .handle(), counterpart to the existing ones in APIRoute. With this a router could customize how it matches and handles requests. For example, it could match only requests that include some specific header, for example for handling versions in headers.

Still, for now, consider this very experimental and potentially changing and breaking in the future.

Future Features Enabled
  • Custom APIRoute subclasses (undocumented, but alraedy works as desccribed above)
  • Custom APIRouter subclasses (undocumented, but already works as described above)
  • Dependencies per router
  • Exception handlers per router
  • Middleware per router
  • Other features planned
Docs
Translations
Internal

v0.136.3

Compare Source

Refactors
  • ♻️ Do not accept underscore headers when using convert_underscores=True (the default). PR #​15589 by @​tiangolo.

v0.136.1

Compare Source

Upgrades
Internal

v0.136.0

Compare Source

Upgrades

v0.135.4

Compare Source

Refactors
Internal

v0.135.3

Compare Source

Features
Docs
Internal

v0.135.2

Compare Source

Upgrades
Docs

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

cla-bot Bot added the cla-signed label Jul 7, 2026
claude Bot reviewed Jul 7, 2026
View reviewed changes

claude Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

Large 28-minor-version bump (0.111.0 → 0.139.0) with several documented breaking changes; worth a human confirming CI is green and the release notes were skimmed.

Extended reasoning...

Overview

Single-line change to template/server/requirements.txt, bumping fastapi==0.111.0 to fastapi==0.139.0. This is the sandbox server template — the FastAPI app in template/server/main.py that runs inside every E2B code-interpreter sandbox and exposes /execute, /contexts, /health endpoints consumed by the JS and Python SDKs.

Security risks

No direct security risk from the change itself. The version range does include a security-flavored change (v0.132.0 strict Content-Type checking) that hardens JSON parsing by default; both SDK clients already send Content-Type: application/json on POSTs, so this should be a net improvement rather than a regression.

Level of scrutiny

Elevated. A Renovate one-line bump is normally trivially approvable, but jumping 28 minor versions crosses several documented breaking changes: v0.132.0 (strict_content_type), v0.134.0 (Starlette bumped to >=0.46.0), v0.136.3 (no more underscore headers with convert_underscores=True), v0.137.0 (router.routes is no longer a flat list). The template code is straightforward standard FastAPI, so I don't see a concrete break, but the runtime blast radius is high — this ships to every sandbox.

Other factors

No bugs surfaced by the bug hunting system. No prior reviewer comments. No test exercise of this template file in the diff. Given the small textual change but high downstream impact, I'd rather a human confirm CI and eyeball the changelog than shadow-approve.

renovate Bot force-pushed the renovate/fastapi-0.x branch from 607f090 to 58660d9 Compare July 16, 2026 09:54
renovate Bot changed the title Update dependency fastapi to v0.139.0 Update dependency fastapi to v0.139.1 Jul 16, 2026
renovate Bot force-pushed the renovate/fastapi-0.x branch from 58660d9 to 043c5ce Compare July 16, 2026 18:06
renovate Bot changed the title Update dependency fastapi to v0.139.1 Update dependency fastapi to v0.139.2 Jul 16, 2026
renovate Bot force-pushed the renovate/fastapi-0.x branch from 043c5ce to 4b6bc47 Compare July 24, 2026 21:51
renovate Bot changed the title Update dependency fastapi to v0.139.2 Update dependency fastapi to v0.140.0 Jul 24, 2026
renovate Bot force-pushed the renovate/fastapi-0.x branch from 4b6bc47 to ed85b08 Compare July 27, 2026 15:08
renovate Bot changed the title Update dependency fastapi to v0.140.0 Update dependency fastapi to v0.140.2 Jul 27, 2026
renovate Bot force-pushed the renovate/fastapi-0.x branch from ed85b08 to 9bc530b Compare July 27, 2026 18:37
renovate Bot changed the title Update dependency fastapi to v0.140.2 Update dependency fastapi to v0.140.7 Jul 27, 2026
renovate Bot force-pushed the renovate/fastapi-0.x branch from 9bc530b to 50181ac Compare July 28, 2026 11:55
renovate Bot changed the title Update dependency fastapi to v0.140.7 Update dependency fastapi to v0.140.8 Jul 28, 2026
renovate Bot force-pushed the renovate/fastapi-0.x branch from 50181ac to 02cab03 Compare July 28, 2026 17:06
renovate Bot changed the title Update dependency fastapi to v0.140.8 Update dependency fastapi to v0.140.13 Jul 28, 2026
renovate Bot force-pushed the renovate/fastapi-0.x branch from 02cab03 to 5c76975 Compare July 29, 2026 15:40
renovate Bot changed the title Update dependency fastapi to v0.140.13 Update dependency fastapi to v0.141.0 Jul 29, 2026
renovate Bot force-pushed the renovate/fastapi-0.x branch from 5c76975 to becd01d Compare July 29, 2026 18:10
renovate Bot changed the title Update dependency fastapi to v0.141.0 Update dependency fastapi to v0.141.1 Jul 29, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

claude[bot] claude[bot] left review comments
jakubno Awaiting requested review from jakubno
ValentaTomas Awaiting requested review from ValentaTomas
mishushakov Awaiting requested review from mishushakov mishushakov is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

cla-signed

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants

Back | FazBrowse Home | New Git URL