deps(deps): bump the fastapi-ecosystem group with 3 updates

[dependabot]

Bumps the fastapi-ecosystem group with 3 updates: fastapi, uvicorn and fastapi-injectable.

Updates fastapi from 0.123.0 to 0.127.0

Release notes

Sourced from fastapi's releases.

0.127.0

Breaking Changes

• 🔊 Add deprecation warnings when using pydantic.v1. PR #14583 by @​tiangolo.

Translations

• 🔧 Add LLM prompt file for Korean, generated from the existing translations. PR #14546 by @​tiangolo.
• 🔧 Add LLM prompt file for Japanese, generated from the existing translations. PR #14545 by @​tiangolo.

Internal

• ⬆️ Upgrade OpenAI model for translations to gpt-5.2. PR #14579 by @​tiangolo.

0.126.0

Upgrades

• ➖ Drop support for Pydantic v1, keeping short temporary support for Pydantic v2's pydantic.v1. PR #14575 by @​tiangolo.
  • The minimum version of Pydantic installed is now pydantic >=2.7.0.
  • The standard dependencies now include pydantic-settings >=2.0.0 and pydantic-extra-types >=2.0.0.

Docs

• 📝 Fix duplicated variable in docs_src/python_types/tutorial005_py39.py. PR #14565 by @​paras-verma7454.

Translations

• 🔧 Add LLM prompt file for Ukrainian, generated from the existing translations. PR #14548 by @​tiangolo.

Internal

• 🔧 Tweak pre-commit to allow committing release-notes. PR #14577 by @​tiangolo.
• ⬆️ Use prek as a pre-commit alternative. PR #14572 by @​tiangolo.
• 👷 Add performance tests with CodSpeed. PR #14558 by @​tiangolo.

0.125.0

Breaking Changes

• 🔧 Drop support for Python 3.8. PR #14563 by @​tiangolo.
  • This would actually not be a breaking change as no code would really break. Any Python 3.8 installer would just refuse to install the latest version of FastAPI and would only install 0.124.4. Only marking it as a "breaking change" to make it visible.

Refactors

• ♻️ Upgrade internal syntax to Python 3.9+ 🎉. PR #14564 by @​tiangolo.

Docs

• ⚰️ Remove Python 3.8 from CI and remove Python 3.8 examples from source docs. PR #14559 by @​YuriiMotov and @​tiangolo.

Translations

... (truncated)

Commits

• c4a1ab5 🔖 Release version 0.127.0
• 22c7200 📝 Update release notes
• 6e42bcd 🔊 Add deprecation warnings when using pydantic.v1 (#14583)
• 6513d4d 📝 Update release notes
• 1d93d53 ⬆️ Upgrade OpenAI model for translations to gpt-5.2 (#14579)
• c2c1cc8 📝 Update release notes
• 5289259 🔧 Add LLM prompt file for Korean, generated from the existing translations (#...
• 5783910 📝 Update release notes
• 026b43e 🔧 Add LLM prompt file for Japanese, generated from the existing translations ...
• 6b591dd 📝 Update release notes
• Additional commits viewable in compare view

Updates uvicorn from 0.38.0 to 0.40.0

Release notes

Sourced from uvicorn's releases.

Version 0.40.0

What's Changed

• Drop Python 3.9 by @​Kludex in Kludex/uvicorn#2772

Full Changelog: Kludex/uvicorn@0.39.0...0.40.0

Version 0.39.0

What's Changed

• explicitly start ASGI run with empty context by @​pmeier in Kludex/uvicorn#2742
• fix(websockets): Send close frame on ASGI return by @​Kludex in Kludex/uvicorn#2769

New Contributors

• @​pmeier made their first contribution in Kludex/uvicorn#2742

Full Changelog: Kludex/uvicorn@0.38.0...0.39.0

Changelog

Sourced from uvicorn's changelog.

0.40.0 (December 21, 2025)

Remove

• Drop support for Python 3.9 (#2772)

0.39.0 (December 21, 2025)

Fixed

• Send close frame on ASGI return for WebSockets (#2769)
• Explicitly start ASGI run with empty context (#2742)

Commits

• 9ff6004 Version 0.40.0 (#2773)
• 19df042 Drop Python 3.9 (#2772)
• 865ce7c Run strict mypy on test suite (#2771)
• 4f40b84 Version 0.39.0 (#2770)
• 5692dfc fix(websockets): Send close frame on ASGI return (#2769)
• 4194764 chore(deps): bump the github-actions group with 2 updates (#2763)
• d94bf28 explicitly start ASGI run with empty context (#2742)
• 8ae0bcb chore(deps): bump the github-actions group with 2 updates (#2748)
• 4744ff9 Add groups configuration for GitHub Actions (#2747)
• 0391372 chore(deps): bump astral-sh/setup-uv from 6.8.0 to 7.1.2 (#2746)
• Additional commits viewable in compare view

Updates fastapi-injectable from 1.4.4 to 1.4.6

Release notes

Sourced from fastapi-injectable's releases.

v1.4.6

Changes

• bump: from 1.4.5 to 1.4.6 (#201) @​JasperSui
• fix: isolate and manage internal AsyncExitStack for dependency resolution (#200) to fix #199 @​JasperSui

v1.4.5

Changes

• bump: from 1.4.4 to 1.4.5 (#198) @​JasperSui
• fix: separate async exit stacks for decoupled dependency resolution (#197) to fix #191 @​JasperSui
• fix: ensure overrides take precedence over Depends in *get_injected_obj (#196) to fix #194 @​JasperSui

📦 Dependencies

• build(deps): bump actions/checkout from 5 to 6 (#193) @dependabot[bot]

Commits

• 0e53ea8 bump: from 1.4.5 to 1.4.6 (#201)
• 132aefa fix: isolate and manage internal AsyncExitStack for dependency resolution (#200)
• 791e8a9 bump: from 1.4.4 to 1.4.5 (#198)
• b9aae4a fix: separate async exit stacks for decoupled dependency resolution (#197)
• e176858 fix: ensure overrides take precedence over Depends in *get_injected_obj (#196)
• 8c09bc5 build(deps): bump actions/checkout from 5 to 6 (#193)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!