chore(deps): update all non-major webhook-listener dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
fastapi (changelog)	==0.135.1 → ==0.136.3
pydantic-settings (changelog)	==2.13.1 → ==2.14.1

---

Release Notes

fastapi/fastapi (fastapi)

v0.136.3

Compare Source

Refactors

• ♻️ Do not accept underscore headers when using convert_underscores=True (the default). PR #​15589 by @​tiangolo.

v0.136.1

Compare Source

Upgrades

• ⬆️ Update Pydantic v2 code to address deprecations. PR #​15101 by @​svlandeg.

Internal

• 🔨 Tweak translation script. PR #​15174 by @​YuriiMotov.
• ⬆ Bump mkdocs-material from 9.7.1 to 9.7.6. PR #​15408 by @​dependabot[bot].
• ⬆ Bump inline-snapshot from 0.31.1 to 0.32.6. PR #​15409 by @​dependabot[bot].
• ⬆ Bump pytest-codspeed from 4.3.0 to 4.4.0. PR #​15407 by @​dependabot[bot].
• ⬆ Bump pytest-cov from 7.0.0 to 7.1.0. PR #​15406 by @​dependabot[bot].
• ⬆ Bump cloudflare/wrangler-action from 3.14.1 to 3.15.0. PR #​15405 by @​dependabot[bot].
• ⬆ Bump mypy from 1.19.1 to 1.20.1. PR #​15410 by @​dependabot[bot].
• ⬆ Bump python-dotenv from 1.2.1 to 1.2.2. PR #​15400 by @​dependabot[bot].
• ⬆ Bump starlette from 0.52.1 to 1.0.0. PR #​15397 by @​dependabot[bot].
• ⬆ Bump pygithub from 2.8.1 to 2.9.1. PR #​15396 by @​dependabot[bot].
• ⬆ Bump pyjwt from 2.12.0 to 2.12.1. PR #​15393 by @​dependabot[bot].
• ⬆ Bump zizmor from 1.23.1 to 1.24.1. PR #​15394 by @​dependabot[bot].
• ⬆ Bump strawberry-graphql from 0.312.3 to 0.314.3. PR #​15395 by @​dependabot[bot].
• ⬆ Bump python-multipart from 0.0.22 to 0.0.26. PR #​15360 by @​dependabot[bot].
• ⬆ Bump authlib from 1.6.9 to 1.6.11. PR #​15373 by @​dependabot[bot].
• ⬆ Bump aiohttp from 3.13.3 to 3.13.4. PR #​15282 by @​dependabot[bot].
• ⬆ Bump pygments from 2.19.2 to 2.20.0. PR #​15263 by @​dependabot[bot].
• ⬆ Bump pymdown-extensions from 10.20.1 to 10.21.2. PR #​15391 by @​YuriiMotov.
• ⬆ Bump pillow from 12.1.1 to 12.2.0. PR #​15333 by @​dependabot[bot].
• ⬆ Bump pytest from 9.0.2 to 9.0.3. PR #​15334 by @​dependabot[bot].
• ⬆ Bump actions/upload-artifact from 7.0.0 to 7.0.1. PR #​15374 by @​dependabot[bot].
• ⬆ Bump actions/cache from 5.0.4 to 5.0.5. PR #​15385 by @​dependabot[bot].
• 🔧 Update sponsors: remove Zuplo. PR #​15369 by @​tiangolo.
• 🔧 Update sponsors: remove Speakeasy. PR #​15368 by @​tiangolo.
• 🔒️ Add zizmor and fix audit findings. PR #​15316 by @​YuriiMotov.

v0.136.0

Compare Source

Upgrades

• ⬆️ Support free-threaded Python 3.14t. PR #​15149 by @​svlandeg.

v0.135.4

Compare Source

Refactors

• 🔥 Remove April Fool's @app.vibe() 🤪. PR #​15363 by @​tiangolo.

Internal

• ⬆ Bump cryptography from 46.0.5 to 46.0.7. PR #​15314 by @​dependabot[bot].
• ⬆ Bump strawberry-graphql from 0.307.1 to 0.312.3. PR #​15309 by @​dependabot[bot].
• 🔨 Add pre-commit hook to ensure latest release header has date. PR #​15293 by @​YuriiMotov.

v0.135.3

Compare Source

Features

• ✨ Add support for @app.vibe(). PR #​15280 by @​tiangolo.
  • New docs: Vibe Coding.

Docs

• ✏️ Fix typo for client_secret in OAuth2 form docstrings. PR #​14946 by @​bysiber.

Internal

• 👥 Update FastAPI People - Experts. PR #​15279 by @​tiangolo.
• ⬆ Bump orjson from 3.11.7 to 3.11.8. PR #​15276 by @​dependabot[bot].
• ⬆ Bump ruff from 0.15.0 to 0.15.8. PR #​15277 by @​dependabot[bot].
• 👥 Update FastAPI GitHub topic repositories. PR #​15274 by @​tiangolo.
• ⬆ Bump fastmcp from 2.14.5 to 3.2.0. PR #​15267 by @​dependabot[bot].
• 👥 Update FastAPI People - Contributors and Translators. PR #​15270 by @​tiangolo.
• ⬆ Bump requests from 2.32.5 to 2.33.0. PR #​15228 by @​dependabot[bot].
• 👷 Add ty check to lint.sh. PR #​15136 by @​svlandeg.

v0.135.2

Compare Source

Upgrades

• ⬆️ Increase lower bound to pydantic >=2.9.0. and fix the test suite. PR #​15139 by @​svlandeg.

Docs

• 📝 Add missing last release notes dates. PR #​15202 by @​tiangolo.
• 📝 Update docs for contributors and team members regarding translation PRs. PR #​15200 by @​YuriiMotov.
• 💄 Fix code blocks in reference docs overflowing table width. PR #​15094 by @​YuriiMotov.
• 📝 Fix duplicated words in docstrings. PR #​15116 by @​AhsanSheraz.
• 📝 Add docs for pyproject.toml with entrypoint. PR #​15075 by @​tiangolo.
• 📝 Update links in docs to no longer use the classes external-link and internal-link. PR #​15061 by @​tiangolo.
• 🔨 Add JS and CSS handling for automatic target=_blank for links in docs. PR #​15063 by @​tiangolo.
• 💄 Update styles for internal and external links in new tab. PR #​15058 by @​tiangolo.
• 📝 Add documentation for the FastAPI VS Code extension. PR #​15008 by @​savannahostrowski.
• 📝 Fix doctrings for max_digits and decimal_places. PR #​14944 by @​YuriiMotov.
• 📝 Add dates to release notes. PR #​15001 by @​YuriiMotov.

Translations

• 🌐 Update translations for zh (update-outdated). PR #​15177 by @​tiangolo.
• 🌐 Update translations for zh-hant (update-outdated). PR #​15178 by @​tiangolo.
• 🌐 Update translations for zh-hant (add-missing). PR #​15176 by @​tiangolo.
• 🌐 Update translations for zh (add-missing). PR #​15175 by @​tiangolo.
• 🌐 Update translations for ja (update-outdated). PR #​15171 by @​tiangolo.
• 🌐 Update translations for ko (update-outdated). PR #​15170 by @​tiangolo.
• 🌐 Update translations for tr (update-outdated). PR #​15172 by @​tiangolo.
• 🌐 Update translations for ko (add-missing). PR #​15168 by @​tiangolo.
• 🌐 Update translations for ja (add-missing). PR #​15167 by @​tiangolo.
• 🌐 Update translations for tr (add-missing). PR #​15169 by @​tiangolo.
• 🌐 Update translations for fr (update-outdated). PR #​15165 by @​tiangolo.
• 🌐 Update translations for fr (add-missing). PR #​15163 by @​tiangolo.
• 🌐 Update translations for uk (update-outdated). PR #​15160 by @​tiangolo.
• 🌐 Update translations for uk (add-missing). PR #​15158 by @​tiangolo.
• 🌐 Update translations for pt (add-missing). PR #​15157 by @​tiangolo.
• 🌐 Update translations for pt (update-outdated). PR #​15159 by @​tiangolo.
• 🌐 Update translations for es (update-outdated). PR #​15155 by @​tiangolo.
• 🌐 Update translations for es (add-missing). PR #​15154 by @​tiangolo.
• 🌐 Update translations for de (update-outdated). PR #​15156 by @​tiangolo.
• 🌐 Update translations for ru (update-and-add). PR #​15152 by @​tiangolo.
• 🌐 Update translations for de (add-missing). PR #​15153 by @​tiangolo.

Internal

• 🔨 Exclude spam comments from statistics in scripts/people.py. PR #​15088 by @​YuriiMotov.
• ⬆ Bump authlib from 1.6.7 to 1.6.9. PR #​15128 by @​dependabot[bot].
• ⬆ Bump pyasn1 from 0.6.2 to 0.6.3. PR #​15143 by @​dependabot[bot].
• ⬆ Bump ujson from 5.11.0 to 5.12.0. PR #​15150 by @​dependabot[bot].
• 🔨 Tweak translation workflow and translation fixer tool. PR #​15166 by @​YuriiMotov.
• 🔨 Fix commit_in_place passed via env variable in translate.yml workflow. PR #​15151 by @​YuriiMotov.
• 🔨 Update translation general prompt to enforce link style in translation matches the original link style. PR #​15148 by @​YuriiMotov.
• 👷 Re-enable translation workflow run by cron in CI (twice a month). PR #​15145 by @​YuriiMotov.
• 👷 Add ty to precommit. PR #​15091 by @​svlandeg.
• ⬆ Bump dorny/paths-filter from 3 to 4. PR #​15106 by @​dependabot[bot].
• ⬆ Bump cairosvg from 2.8.2 to 2.9.0. PR #​15108 by @​dependabot[bot].
• ⬆ Bump pyjwt from 2.11.0 to 2.12.0. PR #​15110 by @​dependabot[bot].
• ⬆ Bump black from 26.1.0 to 26.3.1. PR #​15100 by @​dependabot[bot].
• 🔨 Update script to autofix permalinks to account for headers with Markdown links. PR #​15062 by @​tiangolo.
• 📌 Pin Click for MkDocs live reload. PR #​15057 by @​tiangolo.
• ⬆ Bump werkzeug from 3.1.5 to 3.1.6. PR #​14948 by @​dependabot[bot].
• ⬆ Bump pydantic-ai from 1.62.0 to 1.63.0. PR #​15035 by @​dependabot[bot].
• ⬆ Bump pytest-codspeed from 4.2.0 to 4.3.0. PR #​15034 by @​dependabot[bot].
• ⬆ Bump strawberry-graphql from 0.291.2 to 0.307.1. PR #​15033 by @​dependabot[bot].
• ⬆ Bump typer from 0.21.1 to 0.24.1. PR #​15032 by @​dependabot[bot].
• ⬆ Bump actions/download-artifact from 7 to 8. PR #​15020 by @​dependabot[bot].
• ⬆ Bump actions/upload-artifact from 6 to 7. PR #​15019 by @​dependabot[bot].

pydantic/pydantic-settings (pydantic-settings)

v2.14.1

Compare Source

What's Changed

• Bump the python-packages group with 4 updates by @​dependabot[bot] in #​850
• Bump the python-packages group with 5 updates by @​dependabot[bot] in #​854
• Bump the github-actions group with 3 updates by @​dependabot[bot] in #​853
• Bump the python-packages group with 2 updates by @​dependabot[bot] in #​856
• Fix field named cls conflicting with classmethod parameter by @​hramezani in #​858
• Prepare release 2.14.1 by @​hramezani in #​859

Full Changelog: pydantic/pydantic-settings@v2.14.0...v2.14.1

v2.14.0

Compare Source

What's Changed

• Fix parsing env vars into Optional Strict types by @​hramezani in #​792
• Fix RecursionError with mutually recursive models in CLI by @​hramezani in #​794
• Fix env_file from model_config ignored in CliApp.run() (#​795) by @​hramezani in #​796
• Update dependencies by @​hramezani in #​798
• Add Dependabot configuration by @​hramezani in #​801
• Bump samuelcolvin/check-python-version from 4.1 to 5 by @​dependabot[bot] in #​802
• Bump actions/upload-artifact from 4 to 7 by @​dependabot[bot] in #​803
• Bump actions/checkout from 4 to 6 by @​dependabot[bot] in #​804
• Bump astral-sh/setup-uv from 5 to 7 by @​dependabot[bot] in #​805
• Bump actions/setup-python from 5 to 6 by @​dependabot[bot] in #​806
• Ignore chardet and group GitHub Actions in Dependabot by @​hramezani in #​808
• Bump actions/download-artifact from 4 to 8 in the github-actions group by @​dependabot[bot] in #​809
• Bump the python-packages group with 2 updates by @​dependabot[bot] in #​810
• Support reading .env files from FIFOs (e.g. 1Password Environments) by @​JacobHayes in #​776
• Fix AliasChoices ignored when changing provider priority by @​hramezani in #​813
• fix: resolve KeyError in run_subcommand for underscore field names by @​bradykieffer in #​799
• Bump the python-packages group with 3 updates by @​dependabot[bot] in #​814
• Fix Literal[numeric Enum] coercion for CLI and env vars by @​m9810223 in #​811
• Fix nested discriminated unions not discovered by env/CLI providers by @​hramezani in #​816
• Bump the python-packages group with 3 updates by @​dependabot[bot] in #​820
• CLI ensure env nested max split internally. by @​kschwab in #​821
• Bump the python-packages group with 4 updates by @​dependabot[bot] in #​824
• Migrate boto3-stubs to types-boto3 by @​hramezani in #​831
• Fix CLI not recognizing field name with validate_by_name and AliasChoices by @​hramezani in #​826
• Allow customisation of the dotevn setting source to filter variables by @​CaselIT in #​832
• Bump the python-packages group with 3 updates by @​dependabot[bot] in #​833
• Introduce yamlfmt by @​Viicos in #​836
• Bump boto3 from 1.42.82 to 1.42.83 in the python-packages group by @​dependabot[bot] in #​837
• Introduce zizmor by @​Viicos in #​838
• Fix CliPositionalArg[list[CustomType]] crash for custom types by @​hramezani in #​839
• Add note about Mypy plugin for BaseSettings.__init__() by @​Viicos in #​842
• Fix cli_ignore_unknown_args=True not working on subcommands by @​hramezani in #​844
• Bump the python-packages group with 4 updates by @​dependabot[bot] in #​847
• Fix CLI descriptions lost under python -OO by falling back to json_schema_extra by @​hramezani in #​843
• Prepare release 2.14.0 by @​hramezani in #​848

New Contributors

• @​dependabot[bot] made their first contribution in #​802
• @​JacobHayes made their first contribution in #​776
• @​bradykieffer made their first contribution in #​799
• @​CaselIT made their first contribution in #​832

Full Changelog: pydantic/pydantic-settings@v2.13.1...v2.14.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Coverage ∅ diff coverage · +0.00% coverage variation

Metric	Results
Coverage variation	✅ +0.00% coverage variation (-1.00%)
Diff coverage	✅ ∅ diff coverage

View coverage diff in Codacy

Coverage variation details

	Coverable lines	Covered lines	Coverage
Common ancestor commit (fc639cc)	10428	4917	47.15%
Head commit (86c6ec2)	10428 (+0)	4917 (+0)	47.15% (+0.00%)

Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: <coverage of head commit> - <coverage of common ancestor commit>

Diff coverage details

	Coverable lines	Covered lines	Diff coverage
Pull request (#1010)	0	0	∅ (not applicable)

Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: <covered lines added or modified>/<coverable lines added or modified> * 100%

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}

[github-actions]

There hasn't been any activity on this pull request recently. Therefore, this pull request has been automatically marked as stale and will be closed if no further activity occurs within seven days. Thank you for your contributions.