[PR #16] [MERGED] Bump fastapi from 0.73.0 to 0.74.0 #15

New issue

TheLovinator · 2026-09-02T13:12:15+02:00

TheLovinator commented

2026-09-02 13:12:15 +02:00

📋 Pull Request Information

Original PR: https://github.com/TheLovinator1/twitter-image-collage-maker/pull/16
Author: @dependabot[bot]
Created: 2/18/2022
Status: ✅ Merged
Merged: 2/18/2022
Merged by: @TheLovinator1

Base: master ← Head: dependabot/pip/fastapi-0.74.0

📝 Commits (1)

8b03282 Bump fastapi from 0.73.0 to 0.74.0

📊 Changes

2 files changed (+5 additions, -5 deletions)

View changed files

📝 poetry.lock (+4 -4)
📝 pyproject.toml (+1 -1)

📄 Description

Bumps fastapi from 0.73.0 to 0.74.0.

Release notes

Sourced from fastapi's releases.

0.74.0

Breaking Changes

✨ Update internal AsyncExitStack to fix context for dependencies with yield. PR #4575 by @tiangolo.

Dependencies with yield can now catch HTTPException and custom exceptions. For example:
async def get_database():
    with Session() as session:
        try:
            yield session
        except HTTPException:
            session.rollback()
            raise
        finally:
            session.close()
After the dependency with yield handles the exception (or not) the exception is raised again. So that any exception handlers can catch it, or ultimately the default internal ServerErrorMiddleware.

If you depended on exceptions not being received by dependencies with yield, and receiving an exception breaks the code after yield, you can use a block with try and finally:
async def do_something():
    try:
        yield something
    finally:
        some_cleanup()
...that way the finally block is run regardless of any exception that might happen.

Features

The same PR #4575 from above also fixes the contextvars context for the code before and after yield. This was the main objective of that PR.

This means that now, if you set a value in a context variable before yield, the value would still be available after yield (as you would intuitively expect). And it also means that you can reset the context variable with a token afterwards.

For example, this works correctly now:
from contextvars import ContextVar
from typing import Any, Dict, Optional
legacy_request_state_context_var: ContextVar[Optional[Dict[str, Any]]] = ContextVar(
"legacy_request_state_context_var", default=None
)
</tr></table>

... (truncated)

Commits

1ce16c2 🔖 Release version 0.74.0
03d4d4c 📝 Update release notes
2d2f1de 📝 Update release notes
59e3648 🔧 Add Striveworks sponsor (#4596)
4fcb003 📝 Update release notes
9d56a3c ✨ Update internal AsyncExitStack to fix context for dependencies with `yiel...
78b07cb 📝 Update release notes
6034f80 💚 Only build docs on push when on master to avoid duplicate runs from PRs (#4...
b93f8a7 📝 Update release notes
618c99d 👥 Update FastAPI People (#4502)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/TheLovinator1/twitter-image-collage-maker/pull/16 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 2/18/2022 **Status:** ✅ Merged **Merged:** 2/18/2022 **Merged by:** [@TheLovinator1](https://github.com/TheLovinator1) **Base:** `master` ← **Head:** `dependabot/pip/fastapi-0.74.0` --- ### 📝 Commits (1) - [`8b03282`](https://github.com/TheLovinator1/twitter-image-collage-maker/commit/8b03282703cd50fb92b086073b53500b43243efc) Bump fastapi from 0.73.0 to 0.74.0 ### 📊 Changes **2 files changed** (+5 additions, -5 deletions) <details> <summary>View changed files</summary> 📝 `poetry.lock` (+4 -4) 📝 `pyproject.toml` (+1 -1) </details> ### 📄 Description Bumps [fastapi](https://github.com/tiangolo/fastapi) from 0.73.0 to 0.74.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tiangolo/fastapi/releases">fastapi's releases</a>.</em></p> <blockquote> <h2>0.74.0</h2> <h3>Breaking Changes</h3> <ul> <li>✨ Update internal <code>AsyncExitStack</code> to fix context for dependencies with <code>yield</code>. PR <a href="https://github-redirect.dependabot.com/tiangolo/fastapi/pull/4575">#4575</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> </ul> <p>Dependencies with <code>yield</code> can now catch <code>HTTPException</code> and custom exceptions. For example:</p> <pre lang="Python"><code>async def get_database(): with Session() as session: try: yield session except HTTPException: session.rollback() raise finally: session.close() </code></pre> <p>After the dependency with <code>yield</code> handles the exception (or not) the exception is raised again. So that any exception handlers can catch it, or ultimately the default internal <code>ServerErrorMiddleware</code>.</p> <p>If you depended on exceptions not being received by dependencies with <code>yield</code>, and receiving an exception breaks the code after <code>yield</code>, you can use a block with <code>try</code> and <code>finally</code>:</p> <pre lang="Python"><code>async def do_something(): try: yield something finally: some_cleanup() </code></pre> <p>...that way the <code>finally</code> block is run regardless of any exception that might happen.</p> <h3>Features</h3> <ul> <li>The same PR <a href="https://github-redirect.dependabot.com/tiangolo/fastapi/pull/4575">#4575</a> from above also fixes the <code>contextvars</code> context for the code before and after <code>yield</code>. This was the main objective of that PR.</li> </ul> <p>This means that now, if you set a value in a context variable before <code>yield</code>, the value would still be available after <code>yield</code> (as you would intuitively expect). And it also means that you can reset the context variable with a token afterwards.</p> <p>For example, this works correctly now:</p> <pre lang="Python"><code>from contextvars import ContextVar from typing import Any, Dict, Optional <p>legacy_request_state_context_var: ContextVar[Optional[Dict[str, Any]]] = ContextVar( "legacy_request_state_context_var", default=None )</p> <p></tr></table> </code></pre></p> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tiangolo/fastapi/commit/1ce16c2f40a75a4d97233bf4e331ed563eda47cf"><code>1ce16c2</code></a> 🔖 Release version 0.74.0</li> <li><a href="https://github.com/tiangolo/fastapi/commit/03d4d4c38e28464a5b3ad41d69548009b5c45289"><code>03d4d4c</code></a> 📝 Update release notes</li> <li><a href="https://github.com/tiangolo/fastapi/commit/2d2f1dee5d0c2c03a3d1b7ba969896a1534b43ab"><code>2d2f1de</code></a> 📝 Update release notes</li> <li><a href="https://github.com/tiangolo/fastapi/commit/59e36481dc86673968c21cf9ea636eb3f379dc64"><code>59e3648</code></a> 🔧 Add Striveworks sponsor (<a href="https://github-redirect.dependabot.com/tiangolo/fastapi/issues/4596">#4596</a>)</li> <li><a href="https://github.com/tiangolo/fastapi/commit/4fcb00328c2b6c2ab5167359b7f62b1c481e1faf"><code>4fcb003</code></a> 📝 Update release notes</li> <li><a href="https://github.com/tiangolo/fastapi/commit/9d56a3cb59d59896bc38293b9fa54ae69b7cd36c"><code>9d56a3c</code></a> ✨ Update internal <code>AsyncExitStack</code> to fix context for dependencies with `yiel...</li> <li><a href="https://github.com/tiangolo/fastapi/commit/78b07cb809e97f400e196ff3d89862b9d5bd5dc2"><code>78b07cb</code></a> 📝 Update release notes</li> <li><a href="https://github.com/tiangolo/fastapi/commit/6034f80687302fa4f7da73cc3142750c3e239401"><code>6034f80</code></a> 💚 Only build docs on push when on master to avoid duplicate runs from PRs (<a href="https://github-redirect.dependabot.com/tiangolo/fastapi/issues/4">#4</a>...</li> <li><a href="https://github.com/tiangolo/fastapi/commit/b93f8a709ab3923d1268dbc845f41985c0302b33"><code>b93f8a7</code></a> 📝 Update release notes</li> <li><a href="https://github.com/tiangolo/fastapi/commit/618c99d77444e383e7b95ebe32ededbd95155c43"><code>618c99d</code></a> 👥 Update FastAPI People (<a href="https://github-redirect.dependabot.com/tiangolo/fastapi/issues/4502">#4502</a>)</li> <li>See full diff in <a href="https://github.com/tiangolo/fastapi/compare/0.73.0...0.74.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=fastapi&package-manager=pip&previous-version=0.73.0&new-version=0.74.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

TheLovinator

2026-09-02 13:12:15 +02:00