← Back to issue list

docs(build-deps): Update docs tutorial Spread dependencies (non-major) (main)

View original Github issue

Metadata

Project
charmcraft
Number
#2974
Type
pull request
State
open
Author
renovate
Labels
PR: Dependencies
Created
Updated
Closed
—

Current evaluation

Renovate PR updating Django 6.1.1→6.1.2, fastapi 0.142.2→0.162.0, and spring-boot-starter-parent 4.1.1→4.1.2 in docs build dependencies. CI has failing linkcheck and OSV-scanner checks.

Suggested action: needs review

Reason: This is an automated Renovate dependency update (+3/-3 lines) for docs build dependencies. CI is failing on `lint / linkcheck` and `Security scan / OSV-scanner`, which need investigation before merge. The OSV-scanner failure may indicate a vulnerability in one of the updated packages that requires maintainer review.

Evaluated by: mr-cal-bot

Impact: 10 Quick Win: 3 Complexity: 5 Confidence: 75 Actionability: 30

Issue body

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [Django](https://redirect.github.com/django/django) ([changelog](https://docs.djangoproject.com/en/stable/releases/)) | `==6.1.1` → `==6.1.2` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/django/6.1.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/django/6.1.1/6.1.2?slim=true) | | [fastapi](https://redirect.github.com/fastapi/fastapi) ([changelog](https://fastapi.tiangolo.com/release-notes/)) | `==0.142.2` → `==0.162.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/fastapi/0.162.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/fastapi/0.142.2/0.162.0?slim=true) | | [org.springframework.boot:spring-boot-starter-parent](https://spring.io/projects/spring-boot) ([source](https://redirect.github.com/spring-projects/spring-boot)) | `4.1.1` → `4.1.2` | ![age](https://developer.mend.io/api/mc/badges/age/maven/org.springframework.boot:spring-boot-starter-parent/4.1.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.springframework.boot:spring-boot-starter-parent/4.1.1/4.1.2?slim=true) | --- ### Release Notes <details> <summary>django/django (Django)</summary> ### [`v6.1.2`](https://redirect.github.com/django/django/compare/6.1.1...6.1.2) [Compare Source](https://redirect.github.com/django/django/compare/6.1.1...6.1.2) </details> <details> <summary>fastapi/fastapi (fastapi)</summary> ### [`v0.162.0`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.162.0) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.161.1...0.162.0) Omitted `bool` and `bool | None` form fields now use their declared defaults or produce missing-field errors, consistent with other fields and Pydantic behavior. FastAPI no longer infers `False` for omitted booleans. This applies to individual form parameters, form models, and unions of form models. Omitted boolean model fields are excluded from `model_dump(exclude_unset=True)`, and their defaults no longer count as submitted fields during union selection. Default factories and `validate_default` follow the usual rules. For HTML checkboxes, declare a boolean with a default of `False`. See [Boolean Form Fields](https://fastapi.tiangolo.com/tutorial/request-forms/#boolean-form-fields). ##### Breaking Changes - 🐛 Restore default handling for omitted boolean form fields. PR [#&#8203;16605](https://redirect.github.com/fastapi/fastapi/pull/16605) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.161.1`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.161.1) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.161.0...0.161.1) ##### Fixes - 🐛 Fix OpenAPI schemas for standalone nullable form unions. PR [#&#8203;16598](https://redirect.github.com/fastapi/fastapi/pull/16598) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.161.0`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.161.0) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.160.0...0.161.0) ##### Features - ✨ Add support for combining unions of form models. PR [#&#8203;16596](https://redirect.github.com/fastapi/fastapi/pull/16596) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.160.0`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.160.0) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.159.1...0.160.0) Query, header, cookie, and form parameter models now apply their `extra` configuration to all submitted fields in the same parameter location, consistent with Pydantic behavior. This includes fields declared in other models, individual parameters, or dependencies, which were previously excluded. With `extra="forbid"`, fields outside the model are rejected even if another parameter declares them. With `extra="allow"`, those fields are included as model extras. With the default `extra="ignore"`, they are ignored. ##### Breaking Changes - 🐛 Apply each parameter model's `extra` configuration to sibling fields. PR [#&#8203;16594](https://redirect.github.com/fastapi/fastapi/pull/16594) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ##### Internal - ⬆ Bump certifi from 2026.1.4 to 2026.10.19. PR [#&#8203;16571](https://redirect.github.com/fastapi/fastapi/pull/16571) by [@&#8203;dependabot\[bot\]](https://redirect.github.com/apps/dependabot). ### [`v0.159.1`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.159.1) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.159.0...0.159.1) ##### Features - ✨ Add support for optional unions of form models. PR [#&#8203;16586](https://redirect.github.com/fastapi/fastapi/pull/16586) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.159.0`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.159.0) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.158.2...0.159.0) ##### Features - ✨ Add support for optional query, header, and cookie parameter models. PR [#&#8203;16584](https://redirect.github.com/fastapi/fastapi/pull/16584) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.158.2`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.158.2) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.158.1...0.158.2) ##### Features - ✨ Add support for optional form models. PR [#&#8203;16582](https://redirect.github.com/fastapi/fastapi/pull/16582) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.158.1`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.158.1) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.158.0...0.158.1) ##### Fixes - 🐛 Preserve form media types in OpenAPI. PR [#&#8203;16579](https://redirect.github.com/fastapi/fastapi/pull/16579) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.158.0`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.158.0) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.157.0...0.158.0) ##### Features - ✨ Add support for combining form models. PR [#&#8203;16577](https://redirect.github.com/fastapi/fastapi/pull/16577) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.157.0`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.157.0) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.156.8...0.157.0) ##### Features - ✨ Add support for combining query, header, and cookie parameter models. PR [#&#8203;16573](https://redirect.github.com/fastapi/fastapi/pull/16573) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ##### Docs - 📝 Clarify boolean query parameter parsing. PR [#&#8203;16569](https://redirect.github.com/fastapi/fastapi/pull/16569) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). - 📝 Clarify nullable query parameters and path parameter defaults. PR [#&#8203;16568](https://redirect.github.com/fastapi/fastapi/pull/16568) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ##### Internal - 👷 Remove translation notifications and approval labeling. PR [#&#8203;16570](https://redirect.github.com/fastapi/fastapi/pull/16570) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.156.8`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.156.8) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.156.7...0.156.8) ##### Fixes - 🐛 Preserve uploaded file positions when converting to `bytes`. PR [#&#8203;16566](https://redirect.github.com/fastapi/fastapi/pull/16566) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.156.7`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.156.7) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.156.6...0.156.7) ##### Fixes - 🐛 Fix validation error locations for form and file `AliasChoices`. PR [#&#8203;16564](https://redirect.github.com/fastapi/fastapi/pull/16564) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.156.6`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.156.6) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.156.5...0.156.6) ##### Fixes - 🐛 Respect model alias settings for query, header, and cookie parameters. PR [#&#8203;16562](https://redirect.github.com/fastapi/fastapi/pull/16562) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.156.5`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.156.5) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.156.4...0.156.5) ##### Fixes - 🐛 Fix `AliasChoices` for path parameters. PR [#&#8203;16560](https://redirect.github.com/fastapi/fastapi/pull/16560) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.156.4`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.156.4) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.156.3...0.156.4) ##### Fixes - 🐛 Fix `AliasChoices` for named JSON body parameters. PR [#&#8203;16559](https://redirect.github.com/fastapi/fastapi/pull/16559) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). - 🐛 Fix `AliasChoices` extraction for form models. PR [#&#8203;16557](https://redirect.github.com/fastapi/fastapi/pull/16557) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.156.3`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.156.3) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.156.2...0.156.3) ##### Fixes - 🐛 Fix `AliasChoices` for query parameters, headers, and cookies. PR [#&#8203;16555](https://redirect.github.com/fastapi/fastapi/pull/16555) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.156.2`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.156.2) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.156.1...0.156.2) ##### Fixes - 🐛 Preserve Pydantic field metadata in inferred request parameters. PR [#&#8203;16553](https://redirect.github.com/fastapi/fastapi/pull/16553) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.156.1`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.156.1) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.156.0...0.156.1) ##### Fixes - 🐛 Preserve Pydantic field metadata when request options are omitted. PR [#&#8203;16549](https://redirect.github.com/fastapi/fastapi/pull/16549) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.156.0`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.156.0) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.155.0...0.156.0) ##### Fixes - 🐛 Preserve Pydantic `Field()` attributes in request parameters. PR [#&#8203;16547](https://redirect.github.com/fastapi/fastapi/pull/16547) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.155.0`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.155.0) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.154.0...0.155.0) The deprecated `**extra` keyword arguments have been removed from `Path`, `Query`, `Header`, `Cookie`, `Body`, `Form`, and `File`. Unknown keyword arguments now raise `TypeError`. For additional JSON Schema properties, replace, for example, `Query(custom="value")` with `Query(json_schema_extra={"custom": "value"})`. ##### Breaking Changes - 🔥 Remove deprecated `**extra` from request parameters. PR [#&#8203;16545](https://redirect.github.com/fastapi/fastapi/pull/16545) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.154.0`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.154.0) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.153.0...0.154.0) ##### Features - ✨ Add Pydantic validation options to request parameters. PR [#&#8203;16542](https://redirect.github.com/fastapi/fastapi/pull/16542) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.153.0`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.153.0) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.152.0...0.153.0) Unions of form models now apply the same browser form handling as individual models. Empty scalar fields use defaults or produce missing-field errors, empty list items are preserved, omitted boolean fields become `False`, and unselected files are treated as missing. JSON request bodies are unchanged. ##### Fixes - 🐛 Apply browser form handling to unions of Pydantic models. PR [#&#8203;16540](https://redirect.github.com/fastapi/fastapi/pull/16540) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.152.0`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.152.0) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.151.0...0.152.0) Validation errors for header parameter models now report the HTTP header name, such as `int-val`, instead of the Python field name, `int_val`. Explicit aliases, `Header(convert_underscores=False)`, and Pydantic models with `loc_by_alias=False` keep their existing behavior. ##### Fixes - 🐛 Fix header model validation errors to report HTTP header names. PR [#&#8203;16538](https://redirect.github.com/fastapi/fastapi/pull/16538) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.151.0`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.151.0) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.150.0...0.151.0) JSON request bodies now distinguish an explicit `null` from an omitted value. For individual `Body` parameters, `null` is validated as `None`: nullable types accept it, and non-nullable types reject it even when a default is defined. Defaults and default factories apply only when the value is omitted. This applies both to parameters inside JSON objects and to parameters representing the entire body. Clients that used `null` to request a default should omit the value instead. When a JSON object is expected because of `Body(embed=True)` or multiple body parameters, sending `null` as the entire body now returns a validation error. ##### Breaking Changes - 🐛 Distinguish JSON null from omitted body values. PR [#&#8203;16536](https://redirect.github.com/fastapi/fastapi/pull/16536) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.150.0`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.150.0) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.149.0...0.150.0) When no file is selected, browsers submit a file part with an empty filename and empty content. FastAPI now treats this as missing: required file fields return a validation error, and fields with defaults or default factories use them. Unselected inputs are ignored in lists of files. Named zero-byte files are still accepted. ##### Breaking Changes - 🐛 Treat unselected browser file inputs as missing. PR [#&#8203;16534](https://redirect.github.com/fastapi/fastapi/pull/16534) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.149.0`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.149.0) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.148.0...0.149.0) Browsers submit empty text inputs as empty strings (`""`). FastAPI now treats empty scalar form values as missing in form models, matching individual `Form` parameters. Required fields return a validation error. Fields with defaults or default factories use them and remain unset in `model_dump(exclude_unset=True)`. Empty strings inside lists are preserved. Omitted boolean form fields still become `False`. JSON requests and direct Pydantic validation are unchanged. ##### Breaking Changes - 🐛 Treat empty scalar values as missing in form models. PR [#&#8203;16529](https://redirect.github.com/fastapi/fastapi/pull/16529) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.148.0`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.148.0) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.147.0...0.148.0) Defaults for omitted `Query`, `Header`, `Cookie`, and `Form` parameters and model fields are no longer treated as user input. Defaults are not validated unless `validate_default=True` is enabled. If you rely on validators running for omitted values, enable default validation with `Field(validate_default=True)` for model fields or, for example, `Query(validate_default=True)` for individual parameters. `Body(validate_default=True)` is now honored too. For parameter models, applying a default no longer marks a field as explicitly set, so `model_dump(exclude_unset=True)` excludes it. Default factories run once, and validation errors no longer include injected defaults in `input`. Omitted boolean form fields still become `False` and count as explicitly set. ##### Breaking Changes - 🐛 Fix default handling for request parameters and models. PR [#&#8203;16527](https://redirect.github.com/fastapi/fastapi/pull/16527) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.147.0`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.147.0) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.146.0...0.147.0) Omitted `bool` and `bool | None` form fields are now interpreted as `False`, matching unchecked HTML checkboxes. This applies to individual `Form` parameters and form models, including required fields and fields with defaults of `True` or `None`. The inferred value is considered explicitly set, including in `model_dump(exclude_unset=True)`. JSON requests and direct Pydantic validation are unchanged. See [Boolean Form Fields](https://fastapi.tiangolo.com/tutorial/request-forms/#boolean-form-fields). ##### Breaking Changes - 🐛 Treat omitted boolean form fields as False. PR [#&#8203;16523](https://redirect.github.com/fastapi/fastapi/pull/16523) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ##### Internal - ✅ Add tests for parameter defaults, nullability, and browser form behavior. PR [#&#8203;14829](https://redirect.github.com/fastapi/fastapi/pull/14829) by [@&#8203;YuriiMotov](https://redirect.github.com/YuriiMotov). ### [`v0.146.0`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.146.0) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.145.0...0.146.0) The `root_path` parameter in `FastAPI()` is deprecated. Configure the server with `fastapi run --root-path /api/v1` instead. ##### Breaking Changes - 🗑️ Deprecate the `root_path` parameter in `FastAPI`. PR [#&#8203;16520](https://redirect.github.com/fastapi/fastapi/pull/16520) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.145.0`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.145.0) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.144.0...0.145.0) ##### Breaking Changes - 🔥 Remove deprecated `openapi_prefix` and unused `**extra` from `FastAPI`. PR [#&#8203;16518](https://redirect.github.com/fastapi/fastapi/pull/16518) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ##### Docs - 📝 Document URL paths in templates. PR [#&#8203;16517](https://redirect.github.com/fastapi/fastapi/pull/16517) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.144.0`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.144.0) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.143.5...0.144.0) ##### Features - ✨ Add WebSocket support to security dependencies. PR [#&#8203;10147](https://redirect.github.com/fastapi/fastapi/pull/10147) by [@&#8203;mnixry](https://redirect.github.com/mnixry). ### [`v0.143.5`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.143.5) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.143.4...0.143.5) ##### Fixes - 🐛 Fix handling of empty value for `byte` file list parameter. PR [#&#8203;9383](https://redirect.github.com/fastapi/fastapi/pull/9383) by [@&#8203;Viicos](https://redirect.github.com/Viicos). ### [`v0.143.4`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.143.4) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.143.3...0.143.4) ##### Upgrades - ⬆️ Add httpx2 to optional dependencies. PR [#&#8203;16512](https://redirect.github.com/fastapi/fastapi/pull/16512) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.143.3`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.143.3) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.143.2...0.143.3) ##### Fixes - 🐛 Fix non-finite float serialization in JSONL and SSE streams. PR [#&#8203;16509](https://redirect.github.com/fastapi/fastapi/pull/16509) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ##### Docs - 🎨 Update Python format in Markdown with Ruff. PR [#&#8203;16505](https://redirect.github.com/fastapi/fastapi/pull/16505) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.143.2`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.143.2) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.143.1...0.143.2) ##### Fixes - 🐛 Fix blocking frontend fallback file checks. PR [#&#8203;16503](https://redirect.github.com/fastapi/fastapi/pull/16503) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ##### Translations - 🌐 Update translations for zh-hant (update-outdated). PR [#&#8203;16500](https://redirect.github.com/fastapi/fastapi/pull/16500) by [@&#8203;pr-submit\[bot\]](https://redirect.github.com/apps/pr-submit). - 🌐 Update translations for ja (update-outdated). PR [#&#8203;16499](https://redirect.github.com/fastapi/fastapi/pull/16499) by [@&#8203;pr-submit\[bot\]](https://redirect.github.com/apps/pr-submit). - 🌐 Update translations for zh (update-outdated). PR [#&#8203;16501](https://redirect.github.com/fastapi/fastapi/pull/16501) by [@&#8203;pr-submit\[bot\]](https://redirect.github.com/apps/pr-submit). - 🌐 Update translations for hi (update-outdated). PR [#&#8203;16498](https://redirect.github.com/fastapi/fastapi/pull/16498) by [@&#8203;pr-submit\[bot\]](https://redirect.github.com/apps/pr-submit). - 🌐 Update translations for es (update-outdated). PR [#&#8203;16497](https://redirect.github.com/fastapi/fastapi/pull/16497) by [@&#8203;pr-submit\[bot\]](https://redirect.github.com/apps/pr-submit). - 🌐 Update translations for fr (update-outdated). PR [#&#8203;16495](https://redirect.github.com/fastapi/fastapi/pull/16495) by [@&#8203;pr-submit\[bot\]](https://redirect.github.com/apps/pr-submit). - 🌐 Update translations for ko (update-outdated). PR [#&#8203;16496](https://redirect.github.com/fastapi/fastapi/pull/16496) by [@&#8203;pr-submit\[bot\]](https://redirect.github.com/apps/pr-submit). - 🌐 Update translations for de (update-outdated). PR [#&#8203;16493](https://redirect.github.com/fastapi/fastapi/pull/16493) by [@&#8203;pr-submit\[bot\]](https://redirect.github.com/apps/pr-submit). - 🌐 Update translations for uk (update-outdated). PR [#&#8203;16494](https://redirect.github.com/fastapi/fastapi/pull/16494) by [@&#8203;pr-submit\[bot\]](https://redirect.github.com/apps/pr-submit). - 🌐 Update translations for tr (update-outdated). PR [#&#8203;16490](https://redirect.github.com/fastapi/fastapi/pull/16490) by [@&#8203;pr-submit\[bot\]](https://redirect.github.com/apps/pr-submit). - 🌐 Update translations for pt (update-outdated). PR [#&#8203;16491](https://redirect.github.com/fastapi/fastapi/pull/16491) by [@&#8203;pr-submit\[bot\]](https://redirect.github.com/apps/pr-submit). - 🌐 Update translations for ru (update-outdated). PR [#&#8203;16492](https://redirect.github.com/fastapi/fastapi/pull/16492) by [@&#8203;pr-submit\[bot\]](https://redirect.github.com/apps/pr-submit). ##### Internal - ⬆ Bump pydantic-ai-slim from 2.49.0 to 2.53.0. PR [#&#8203;16487](https://redirect.github.com/fastapi/fastapi/pull/16487) by [@&#8203;dependabot\[bot\]](https://redirect.github.com/apps/dependabot). - ⬆ Bump werkzeug from 3.1.6 to 3.1.9. PR [#&#8203;16464](https://redirect.github.com/fastapi/fastapi/pull/16464) by [@&#8203;dependabot\[bot\]](https://redirect.github.com/apps/dependabot). ### [`v0.143.1`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.143.1) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.143.0...0.143.1) ##### Fixes - 🐛 Fix included route metadata in `iter_route_contexts()`. PR [#&#8203;16484](https://redirect.github.com/fastapi/fastapi/pull/16484) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.143.0`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.143.0) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.142.4...0.143.0) Automatic OpenTelemetry exporter setup is now opt-in. If you rely on FastAPI to configure exporters from `OTEL_*` environment variables, set `FASTAPI_OTEL_AUTO_CONFIGURE=true` or use `FastAPI(telemetry={"auto_configure": True})` to retain the previous behavior. Applications that configure their own providers and exporters require no changes. FastAPI Cloud enables automatic setup for you. ##### Breaking Changes - 💥 Require opt-in for automatic OpenTelemetry exporter setup. PR [#&#8203;16476](https://redirect.github.com/fastapi/fastapi/pull/16476) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.142.4`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.142.4) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.142.3...0.142.4) ##### Fixes - 🐛 Isolate FastAPI telemetry for excluded requests. PR [#&#8203;16470](https://redirect.github.com/fastapi/fastapi/pull/16470) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ### [`v0.142.3`](https://redirect.github.com/fastapi/fastapi/releases/tag/0.142.3) [Compare Source](https://redirect.github.com/fastapi/fastapi/compare/0.142.2...0.142.3) ##### Fixes - 🐛 Cache OpenTelemetry tracers to preserve warning deduplication. PR [#&#8203;16468](https://redirect.github.com/fastapi/fastapi/pull/16468) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ##### Docs - 📝 Remove HTML title from newsletter to avoid the tooltip. PR [#&#8203;16461](https://redirect.github.com/fastapi/fastapi/pull/16461) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). - 📝 Embed the FastAPI and friends newsletter signup form. PR [#&#8203;16459](https://redirect.github.com/fastapi/fastapi/pull/16459) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). - 📝 Update skill, use Asyncer for blocking code in threads. PR [#&#8203;16420](https://redirect.github.com/fastapi/fastapi/pull/16420) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). ##### Translations - 🌐 Update translations for fr (add-missing). PR [#&#8203;16436](https://redirect.github.com/fastapi/fastapi/pull/16436) by [@&#8203;pr-submit\[bot\]](https://redirect.github.com/apps/pr-submit). - 🌐 Update translations for hi (add-missing). PR [#&#8203;16435](https://redirect.github.com/fastapi/fastapi/pull/16435) by [@&#8203;pr-submit\[bot\]](https://redirect.github.com/apps/pr-submit). - 🌐 Update translations for tr (add-missing). PR [#&#8203;16434](https://redirect.github.com/fastapi/fastapi/pull/16434) by [@&#8203;pr-submit\[bot\]](https://redirect.github.com/apps/pr-submit). - 🌐 Update translations for zh (add-missing). PR [#&#8203;16433](https://redirect.github.com/fastapi/fastapi/pull/16433) by [@&#8203;pr-submit\[bot\]](https://redirect.github.com/apps/pr-submit). - 🌐 Update translations for zh-hant (add-missing). PR [#&#8203;16432](https://redirect.github.com/fastapi/fastapi/pull/16432) by [@&#8203;pr-submit\[bot\]](https://redirect.github.com/apps/pr-submit). - 🌐 Update translations for pt (add-missing). PR [#&#8203;16431](https://redirect.github.com/fastapi/fastapi/pull/16431) by [@&#8203;pr-submit\[bot\]](https://redirect.github.com/apps/pr-submit). - 🌐 Update translations for de (add-missing). PR [#&#8203;16430](https://redirect.github.com/fastapi/fastapi/pull/16430) by [@&#8203;pr-submit\[bot\]](https://redirect.github.com/apps/pr-submit). - 🌐 Update translations for uk (add-missing). PR [#&#8203;16429](https://redirect.github.com/fastapi/fastapi/pull/16429) by [@&#8203;pr-submit\[bot\]](https://redirect.github.com/apps/pr-submit). - 🌐 Update translations for ja (add-missing). PR [#&#8203;16428](https://redirect.github.com/fastapi/fastapi/pull/16428) by [@&#8203;pr-submit\[bot\]](https://redirect.github.com/apps/pr-submit). - 🌐 Update translations for ko (add-missing). PR [#&#8203;16425](https://redirect.github.com/fastapi/fastapi/pull/16425) by [@&#8203;pr-submit\[bot\]](https://redirect.github.com/apps/pr-submit). - 🌐 Update translations for es (add-missing). PR [#&#8203;16426](https://redirect.github.com/fastapi/fastapi/pull/16426) by [@&#8203;pr-submit\[bot\]](https://redirect.github.com/apps/pr-submit). - 🌐 Update translations for ru (add-missing). PR [#&#8203;16427](https://redirect.github.com/fastapi/fastapi/pull/16427) by [@&#8203;pr-submit\[bot\]](https://redirect.github.com/apps/pr-submit). - 🌐 Update Russian LLM-prompt. PR [#&#8203;16449](https://redirect.github.com/fastapi/fastapi/pull/16449) by [@&#8203;YuriiMotov](https://redirect.github.com/YuriiMotov). ##### Internal - 👷 Fix deprecated command in `bump-pre-commit-hooks` workflow. PR [#&#8203;16463](https://redirect.github.com/fastapi/fastapi/pull/16463) by [@&#8203;YuriiMotov](https://redirect.github.com/YuriiMotov). - 🔧 Update sponsors: remove Render. PR [#&#8203;16457](https://redirect.github.com/fastapi/fastapi/pull/16457) by [@&#8203;tiangolo](https://redirect.github.com/tiangolo). - 🔨 Use `gpt-6-astra` model for translations. PR [#&#8203;16453](https://redirect.github.com/fastapi/fastapi/pull/16453) by [@&#8203;YuriiMotov](https://redirect.github.com/YuriiMotov). - ⬆ Bump the python-packages group across 1 directory with 14 updates. PR [#&#8203;16447](https://redirect.github.com/fastapi/fastapi/pull/16447) by [@&#8203;dependabot\[bot\]](https://redirect.github.com/apps/dependabot). - ⬆ Bump starlette from 1.6.0 to 1.7.0. PR [#&#8203;16440](https://redirect.github.com/fastapi/fastapi/pull/16440) by [@&#8203;dependabot\[bot\]](https://redirect.github.com/apps/dependabot). - ⬆ Bump pyjwt from 2.13.0 to 2.15.0. PR [#&#8203;16423](https://redirect.github.com/fastapi/fastapi/pull/16423) by [@&#8203;dependabot\[bot\]](https://redirect.github.com/apps/dependabot). - ⬆ Bump gitpython from 3.1.60 to 3.1.62. PR [#&#8203;16444](https://redirect.github.com/fastapi/fastapi/pull/16444) by [@&#8203;dependabot\[bot\]](https://redirect.github.com/apps/dependabot). - 👥 Update FastAPI GitHub topic repositories. PR [#&#8203;16443](https://redirect.github.com/fastapi/fastapi/pull/16443) by [@&#8203;pr-submit\[bot\]](https://redirect.github.com/apps/pr-submit). - 👥 Update FastAPI People - Sponsors. PR [#&#8203;16437](https://redirect.github.com/fastapi/fastapi/pull/16437) by [@&#8203;pr-submit\[bot\]](https://redirect.github.com/apps/pr-submit). - ⬆ Bump pre-commit hooks. PR [#&#8203;16442](https://redirect.github.com/fastapi/fastapi/pull/16442) by [@&#8203;pr-submit\[bot\]](https://redirect.github.com/apps/pr-submit). - ⬆ Bump urllib3 from 2.7.0 to 2.8.0. PR [#&#8203;16445](https://redirect.github.com/fastapi/fastapi/pull/16445) by [@&#8203;dependabot\[bot\]](https://redirect.github.com/apps/dependabot). - ⬆ Bump the github-actions group with 3 updates. PR [#&#8203;16438](https://redirect.github.com/fastapi/fastapi/pull/16438) by [@&#8203;dependabot\[bot\]](https://redirect.github.com/apps/dependabot). </details> <details> <summary>spring-projects/spring-boot (org.springframework.boot:spring-boot-starter-parent)</summary> ### [`v4.1.2`](https://redirect.github.com/spring-projects/spring-boot/releases/tag/v4.1.2) [Compare Source](https://redirect.github.com/spring-projects/spring-boot/compare/v4.1.1...v4.1.2) #### :star: New Features - Add TWENTY_SEVEN to JavaVersion enum [#&#8203;51426](https://redirect.github.com/spring-projects/spring-boot/issues/51426) #### :lady_beetle: Bug Fixes - OriginTrackedResource does not implement equals correctly [#&#8203;52267](https://redirect.github.com/spring-projects/spring-boot/issues/52267) - OriginTrackedPropertiesLoader drops properties whose name starts with # or ! [#&#8203;52265](https://redirect.github.com/spring-projects/spring-boot/issues/52265) - JWTs are rejected when issuer-uri is empty and jwk-set-uri is set [#&#8203;52260](https://redirect.github.com/spring-projects/spring-boot/issues/52260) - Package manifest attributes are missing for nested jars without directory entries [#&#8203;52258](https://redirect.github.com/spring-projects/spring-boot/issues/52258) - Logback ColorConverter unnecessarily parses its options for every log event [#&#8203;52228](https://redirect.github.com/spring-projects/spring-boot/pull/52228) - Empty system property in TestPropertyValues is cleared instead of being restored to its empty value [#&#8203;52208](https://redirect.github.com/spring-projects/spring-boot/issues/52208) - Graceful shutdown of Tomcat or Jetty may call back with REQUESTS_ACTIVE when stop is called immediately after shutDownGracefully on an idle server [#&#8203;52197](https://redirect.github.com/spring-projects/spring-boot/issues/52197) - NettyWebServer stop may hang when called immediately after shutDownGracefully [#&#8203;52196](https://redirect.github.com/spring-projects/spring-boot/issues/52196) - gRPC client 'grpc' load balancing fails to bind with a NullPointerException when no child policies are configured [#&#8203;52193](https://redirect.github.com/spring-projects/spring-boot/pull/52193) - Prevent gRPC client properties from overriding user customizations [#&#8203;52175](https://redirect.github.com/spring-projects/spring-boot/pull/52175) - MongoDB fails to connect when credentials contain a space [#&#8203;52168](https://redirect.github.com/spring-projects/spring-boot/issues/52168) - Authentication fails when password configured in spring.elasticsearch.uris contains a colon [#&#8203;52166](https://redirect.github.com/spring-projects/spring-boot/issues/52166) - Logging can be lost when a context is paused by the test context framework [#&#8203;52088](https://redirect.github.com/spring-projects/spring-boot/issues/52088) - Docker Compose support for MongoDB fails to connect when credentials contain a character that requires URL encoding [#&#8203;52084](https://redirect.github.com/spring-projects/spring-boot/issues/52084) - Jersey does not use the endpoint ObjectMapper when Actuator is running on a separate port [#&#8203;51982](https://redirect.github.com/spring-projects/spring-boot/issues/51982) - Fractions of a second are handled incorrectly when configuring gRPC service config durations [#&#8203;51957](https://redirect.github.com/spring-projects/spring-boot/pull/51957) - Configuration property descriptions may be lost when building incrementally with Gradle [#&#8203;51925](https://redirect.github.com/spring-projects/spring-boot/issues/51925) - BasicJsonParser mishandles escaped characters in nested lists and maps [#&#8203;51908](https://redirect.github.com/spring-projects/spring-boot/issues/51908) - Zero week value conversion fails with 'intValue cannot be extracted from WEEKS' exception [#&#8203;51894](https://redirect.github.com/spring-projects/spring-boot/issues/51894) - App fails to start when using DevTools and manually configuring JDBC or R2DBC without spring-boot-jdbc or spring-boot-r2dbc [#&#8203;51890](https://redirect.github.com/spring-projects/spring-boot/issues/51890) - Docker Compose support incorrectly recognizes MARIADB_ALLOW_EMPTY_PASSWORD instead of MARIADB_ALLOW_EMPTY_ROOT_PASSWORD [#&#8203;51888](https://redirect.github.com/spring-projects/spring-boot/issues/51888) - Auto-configured Kotlinx Serialization JSON codec customization is not applied [#&#8203;51877](https://redirect.github.com/spring-projects/spring-boot/issues/51877) - NullPointerException can be thrown when using uber jars due to a race condition in NestedJarFileResources [#&#8203;51745](https://redirect.github.com/spring-projects/spring-boot/issues/51745) - DevTools does not detect a reactive web environment [#&#8203;51730](https://redirect.github.com/spring-projects/spring-boot/issues/51730) - spring.http.clients.cookie-handling has no effect when using a reactive client backed by an HttpComponents connector [#&#8203;51724](https://redirect.github.com/spring-projects/spring-boot/pull/51724) - Connection fails when rabbitmq Docker Compose service is configured to use SSL [#&#8203;51667](https://redirect.github.com/spring-projects/spring-boot/issues/51667) - SBOM-related manifest attributes are missing from Maven-packaged wars [#&#8203;51651](https://redirect.github.com/spring-projects/spring-boot/issues/51651) - When server.reactive.session.cookie.same-site is not set, session cookies have no SameSite attribute [#&#8203;51639](https://redirect.github.com/spring-projects/spring-boot/issues/51639) - OAuth2 resource server ignores authorities-claim-delimiter when set on its own [#&#8203;51630](https://redirect.github.com/spring-projects/spring-boot/issues/51630) - developmentOnly and testAndDevelopmentOnly configurations do not specify any attributes causing potential resolution problems [#&#8203;51623](https://redirect.github.com/spring-projects/spring-boot/issues/51623) - In a reactive web application, Cloud Foundry security integration returns a 500 rather than a 503 when the cloud controller URL is unavailable [#&#8203;51614](https://redirect.github.com/spring-projects/spring-boot/issues/51614) - Layer temp file is not deleted when layer creation fails [#&#8203;51581](https://redirect.github.com/spring-projects/spring-boot/issues/51581) - Docker Compose integration for RabbitMQ skips credential fallbacks when an environment variable has no value [#&#8203;51578](https://redirect.github.com/spring-projects/spring-boot/issues/51578) - Some assertion messages name the wrong parameter [#&#8203;51574](https://redirect.github.com/spring-projects/spring-boot/issues/51574) - OAuth2ResourceServerProperties.Jwt has a setter that does not match its getter [#&#8203;51562](https://redirect.github.com/spring-projects/spring-boot/issues/51562) - jarmode tools commands print stacktrace instead of an error message [#&#8203;51547](https://redirect.github.com/spring-projects/spring-boot/issues/51547) - Docker Compose ProcessRunner can hang or leave orphan processes [#&#8203;51538](https://redirect.github.com/spring-projects/spring-boot/issues/51538) - NestedByteChannel.read(ByteBuffer) incorrectly returns 0 when buffer could not be filled [#&#8203;51520](https://redirect.github.com/spring-projects/spring-boot/issues/51520) - Customizer null checks in HTTP client builders assert the wrong attribute [#&#8203;51513](https://redirect.github.com/spring-projects/spring-boot/issues/51513) - SSL host config customizations may be lost during Tomcat initialization [#&#8203;51511](https://redirect.github.com/spring-projects/spring-boot/issues/51511) - SQL Server Docker Compose integration may duplicate the JDBC URL's encrypt parameter [#&#8203;51481](https://redirect.github.com/spring-projects/spring-boot/issues/51481) - WritableJson.toByteArray() may corrupt supplementary characters [#&#8203;51464](https://redirect.github.com/spring-projects/spring-boot/pull/51464) - SSL host config customizations are lost when reloading SSL bundles [#&#8203;51457](https://redirect.github.com/spring-projects/spring-boot/issues/51457) - OAuth2ClientProperties are not available when a user-defined ClientRegistrationRepository bean is provided [#&#8203;51450](https://redirect.github.com/spring-projects/spring-boot/issues/51450) - LdapHealthIndicator reports UNKNOWN instead of UP when LDAP server doesn't expose a protocol version [#&#8203;51441](https://redirect.github.com/spring-projects/spring-boot/pull/51441) - JmsHealthIndicator leaks watchdog threads if start fails immediately [#&#8203;51433](https://redirect.github.com/spring-projects/spring-boot/issues/51433) - Source is not closed consistently by all JSON marshal testers [#&#8203;51418](https://redirect.github.com/spring-projects/spring-boot/issues/51418) - File handle in SpringBootJoranConfigurator should be closed [#&#8203;51415](https://redirect.github.com/spring-projects/spring-boot/issues/51415) - Honour a wrapper's unwrap when resolving the root DataSource [#&#8203;51410](https://redirect.github.com/spring-projects/spring-boot/pull/51410) - Validation of deprecated io.buildpacks.stack.id is too aggressive [#&#8203;51400](https://redirect.github.com/spring-projects/spring-boot/issues/51400) - ReactiveOAuth2ResourceServerWebSecurityAutoConfiguration annotated with wrong condition [#&#8203;50778](https://redirect.github.com/spring-projects/spring-boot/issues/50778) #### :notebook_with_decorative_cover: Documentation - Fix typo in gRPC testing documentation [#&#8203;52181](https://redirect.github.com/spring-projects/spring-boot/pull/52181) - Fix Gradle example for servlet-based gRPC servers [#&#8203;51956](https://redirect.github.com/spring-projects/spring-boot/pull/51956) - Fix actuator endpoint property names in Javadoc [#&#8203;51886](https://redirect.github.com/spring-projects/spring-boot/issues/51886) - Document InetAddressFilter limitations with respect to proxy servers [#&#8203;51863](https://redirect.github.com/spring-projects/spring-boot/issues/51863) - Document support for Java 27 [#&#8203;51825](https://redirect.github.com/spring-projects/spring-boot/issues/51825) - Fix broken links from reference documentation to external Javadoc [#&#8203;51820](https://redirect.github.com/spring-projects/spring-boot/issues/51820) - Remove reference to AppOptics in the reference guide as it has retired [#&#8203;51808](https://redirect.github.com/spring-projects/spring-boot/issues/51808) - Fix broken links [#&#8203;51802](https://redirect.github.com/spring-projects/spring-boot/issues/51802) - Update Spring Framework reference links [#&#8203;51771](https://redirect.github.com/spring-projects/spring-boot/issues/51771) - Update testcontainers javadoc links [#&#8203;51765](https://redirect.github.com/spring-projects/spring-boot/issues/51765) - Maven plugin documentation incorrectly references remote restart property [#&#8203;51747](https://redirect.github.com/spring-projects/spring-boot/issues/51747) - Fix documented default of spring.test.database.replace [#&#8203;51728](https://redirect.github.com/spring-projects/spring-boot/issues/51728) - Correct Jackson 3 Javadoc links [#&#8203;51663](https://redirect.github.com/spring-projects/spring-boot/issues/51663) - Fix typo in deprecated Pushgateway base-url property metadata [#&#8203;51632](https://redirect.github.com/spring-projects/spring-boot/issues/51632) - Document baggage propagation over gRPC [#&#8203;51597](https://redirect.github.com/spring-projects/spring-boot/pull/51597) - Remove references to Spring Data Geode [#&#8203;51564](https://redirect.github.com/spring-projects/spring-boot/issues/51564) - Fix typos in service containers javadoc and reference documentation [#&#8203;51445](https://redirect.github.com/spring-projects/spring-boot/issues/51445) - Document SAML2 back-off in WebFlux security documentation [#&#8203;51435](https://redirect.github.com/spring-projects/spring-boot/issues/51435) - Remove reference to removed SpringBootWebSecurityConfiguration [#&#8203;51413](https://redirect.github.com/spring-projects/spring-boot/issues/51413) #### :hammer: Dependency Upgrades - Upgrade to [ActiveMQ 6.2.10](https://activemq.apache.org/components/classic/download/classic-06-02-10) [#&#8203;52005](https://redirect.github.com/spring-projects/spring-boot/issues/52005) - Upgrade to [Build Helper Maven Plugin 3.6.2](https://redirect.github.com/mojohaus/build-helper-maven-plugin/releases/tag/3.6.2) [#&#8203;52006](https://redirect.github.com/spring-projects/spring-boot/issues/52006) - Upgrade to Byte Buddy 1.18.15 [#&#8203;52219](https://redirect.github.com/spring-projects/spring-boot/issues/52219) - Upgrade to Cassandra Driver 4.19.4 [#&#8203;52274](https://redirect.github.com/spring-projects/spring-boot/issues/52274) - Upgrade to Elasticsearch Client 9.4.8 [#&#8203;52222](https://redirect.github.com/spring-projects/spring-boot/issues/52222) - Upgrade to [FreeMarker 2.3.35](https://freemarker.apache.org/docs/versions_2_3_35.html) [#&#8203;52008](https://redirect.github.com/spring-projects/spring-boot/issues/52008) - Upgrade to [GraphQL Java 25.1](https://redirect.github.com/graphql-java/graphql-java/releases/tag/v25.1) [#&#8203;52108](https://redirect.github.com/spring-projects/spring-boot/issues/52108) - Upgrade to [Grpc Java 1.84.1](https://redirect.github.com/grpc/grpc-java/releases/tag/v1.84.1) [#&#8203;52173](https://redirect.github.com/spring-projects/spring-boot/issues/52173) - Upgrade to Hibernate 7.4.13.Final [#&#8203;52156](https://redirect.github.com/spring-projects/spring-boot/issues/52156) - Upgrade to Hibernate Validator 9.1.5.Final [#&#8203;52224](https://redirect.github.com/spring-projects/spring-boot/issues/52224) - Upgrade to HttpClient5 5.6.5 [#&#8203;52157](https://redirect.github.com/spring-projects/spring-boot/issues/52157) - Upgrade to HttpCore5 5.4.4 [#&#8203;52011](https://redirect.github.com/spring-projects/spring-boot/issues/52011) - Upgrade to [Jackson 2 Bom 2.21.7](https://redirect.github.com/FasterXML/jackson/wiki/Jackson-Release-2.21.7) [#&#8203;52012](https://redirect.github.com/spring-projects/spring-boot/issues/52012) - Upgrade to [Jackson Bom 3.1.7](https://redirect.github.com/FasterXML/jackson/wiki/Jackson-Release-3.1.7) [#&#8203;52013](https://redirect.github.com/spring-projects/spring-boot/issues/52013) - Upgrade to Jakarta Json Bind 3.0.4 [#&#8203;52225](https://redirect.github.com/spring-projects/spring-boot/issues/52225) - Upgrade to Jaybird 6.0.7 [#&#8203;52158](https://redirect.github.com/spring-projects/spring-boot/issues/52158) - Upgrade to Jersey 4.0.3 [#&#8203;52016](https://redirect.github.com/spring-projects/spring-boot/issues/52016) - Upgrade to [Jetty 12.1.14](https://redirect.github.com/jetty/jetty.project/releases/tag/jetty-12.1.14) [#&#8203;52017](https://redirect.github.com/spring-projects/spring-boot/issues/52017) - Upgrade to [jOOQ 3.21.9](https://redirect.github.com/jOOQ/jOOQ/releases/tag/version-3.21.9) [#&#8203;52018](https://redirect.github.com/spring-projects/spring-boot/issues/52018) - Upgrade to [Kafka 4.2.2](https://downloads.apache.org/kafka/4.2.2/RELEASE_NOTES.html) [#&#8203;52019](https://redirect.github.com/spring-projects/spring-boot/issues/52019) - Upgrade to [Liquibase 5.0.4](https://redirect.github.com/liquibase/liquibase/releases/tag/v5.0.4) [#&#8203;52020](https://redirect.github.com/spring-projects/spring-boot/issues/52020) - Upgrade to Lombok 1.18.48 [#&#8203;52021](https://redirect.github.com/spring-projects/spring-boot/issues/52021) - Upgrade to [Micrometer 1.17.2](https://redirect.github.com/micrometer-metrics/micrometer/releases/tag/v1.17.2) [#&#8203;52097](https://redirect.github.com/spring-projects/spring-boot/issues/52097) - Upgrade to [Micrometer Tracing 1.7.2](https://redirect.github.com/micrometer-metrics/tracing/releases/tag/v1.7.2) [#&#8203;52134](https://redirect.github.com/spring-projects/spring-boot/issues/52134) - Upgrade to [Native Build Tools Plugin 1.1.14](https://redirect.github.com/graalvm/native-build-tools/releases/tag/1.1.14) [#&#8203;52022](https://redirect.github.com/spring-projects/spring-boot/issues/52022) - Upgrade to Netty 4.2.19.Final [#&#8203;52023](https://redirect.github.com/spring-projects/spring-boot/issues/52023) - Upgrade to Pooled JMS 3.2.5 [#&#8203;52025](https://redirect.github.com/spring-projects/spring-boot/issues/52025) - Upgrade to [Postgresql 42.7.14](https://redirect.github.com/pgjdbc/pgjdbc/releases/tag/REL42.7.14) [#&#8203;52109](https://redirect.github.com/spring-projects/spring-boot/issues/52109) - Upgrade to [Protobuf Java 4.36.2](https://redirect.github.com/protocolbuffers/protobuf/releases/tag/v4.36.2) [#&#8203;52174](https://redirect.github.com/spring-projects/spring-boot/issues/52174) - Upgrade to [Protobuf Maven Plugin 5.1.11](https://redirect.github.com/ascopes/protobuf-maven-plugin/releases/tag/v5.1.11) [#&#8203;52024](https://redirect.github.com/spring-projects/spring-boot/issues/52024) - Upgrade to [Pulsar 4.2.5](https://pulsar.apache.org/release-notes/versioned/pulsar-4.2.5) [#&#8203;52026](https://redirect.github.com/spring-projects/spring-boot/issues/52026) - Upgrade to [R2DBC MariaDB 1.4.2](https://redirect.github.com/mariadb-corporation/mariadb-connector-r2dbc/releases/tag/1.4.2) [#&#8203;52027](https://redirect.github.com/spring-projects/spring-boot/issues/52027) - Upgrade to [R2DBC MSSQL 1.0.7.RELEASE](https://redirect.github.com/r2dbc/r2dbc-mssql/releases/tag/v1.0.7.RELEASE) [#&#8203;52028](https://redirect.github.com/spring-projects/spring-boot/issues/52028) - Upgrade to [R2DBC Postgresql 1.1.3.RELEASE](https://redirect.github.com/pgjdbc/r2dbc-postgresql/releases/tag/v1.1.3.RELEASE) [#&#8203;52029](https://redirect.github.com/spring-projects/spring-boot/issues/52029) - Upgrade to [R2DBC Proxy 1.1.7.RELEASE](https://redirect.github.com/r2dbc/r2dbc-proxy/releases/tag/v1.1.7.RELEASE) [#&#8203;52226](https://redirect.github.com/spring-projects/spring-boot/issues/52226) - Upgrade to [Reactor Bom 2025.0.8](https://redirect.github.com/reactor/reactor/releases/tag/2025.0.8) [#&#8203;51960](https://redirect.github.com/spring-projects/spring-boot/issues/51960) - Upgrade to SLF4J 2.0.20 [#&#8203;52030](https://redirect.github.com/spring-projects/spring-boot/issues/52030) - Upgrade to [Spring AMQP 4.1.2](https://redirect.github.com/spring-projects/spring-amqp/releases/tag/v4.1.2) [#&#8203;51961](https://redirect.github.com/spring-projects/spring-boot/issues/51961) - Upgrade to [Spring Batch 6.0.6](https://redirect.github.com/spring-projects/spring-batch/releases/tag/v6.0.6) [#&#8203;52135](https://redirect.github.com/spring-projects/spring-boot/issues/52135) - Upgrade to [Spring Data Bom 2026.0.2](https://redirect.github.com/spring-projects/spring-data-bom/releases/tag/2026.0.2) [#&#8203;51971](https://redirect.github.com/spring-projects/spring-boot/issues/51971) - Upgrade to [Spring Framework 7.0.10](https://redirect.github.com/spring-projects/spring-framework/releases/tag/v7.0.10) [#&#8203;51962](https://redirect.github.com/spring-projects/spring-boot/issues/51962) - Upgrade to [Spring GraphQL 2.0.6](https://redirect.github.com/spring-projects/spring-graphql/releases/tag/v2.0.6) [#&#8203;52098](https://redirect.github.com/spring-projects/spring-boot/issues/52098) - Upgrade to [Spring gRPC 1.1.2](https://redirect.github.com/spring-projects/spring-grpc/releases/tag/v1.1.2) [#&#8203;51963](https://redirect.github.com/spring-projects/spring-boot/issues/51963) - Upgrade to [Spring HATEOAS 3.1.3](https://redirect.github.com/spring-projects/spring-hateoas/releases/tag/3.1.3) [#&#8203;52136](https://redirect.github.com/spring-projects/spring-boot/issues/52136) - Upgrade to [Spring Integration 7.1.2](https://redirect.github.com/spring-projects/spring-integration/releases/tag/v7.1.2) [#&#8203;51964](https://redirect.github.com/spring-projects/spring-boot/issues/51964) - Upgrade to [Spring Kafka 4.1.2](https://redirect.github.com/spring-projects/spring-kafka/releases/tag/v4.1.2) [#&#8203;51965](https://redirect.github.com/spring-projects/spring-boot/issues/51965) - Upgrade to [Spring LDAP 4.1.2](https://docs.spring.io/spring-ldap/reference/4.1.2/api/java) [#&#8203;52211](https://redirect.github.com/spring-projects/spring-boot/issues/52211) - Upgrade to [Spring Pulsar 2.0.8](https://redirect.github.com/spring-projects/spring-pulsar/releases/tag/v2.0.8) [#&#8203;52099](https://redirect.github.com/spring-projects/spring-boot/issues/52099) - Upgrade to [Spring RESTDocs 4.0.2](https://redirect.github.com/spring-projects/spring-restdocs/releases/tag/v4.0.2) [#&#8203;51966](https://redirect.github.com/spring-projects/spring-boot/issues/51966) - Upgrade to [Spring Security 7.1.2](https://redirect.github.com/spring-projects/spring-security/releases/tag/7.1.2) [#&#8203;52137](https://redirect.github.com/spring-projects/spring-boot/issues/52137) - Upgrade to [Spring WS 5.0.3](https://redirect.github.com/spring-projects/spring-ws/releases/tag/v5.0.3) [#&#8203;51967](https://redirect.github.com/spring-projects/spring-boot/issues/51967) - Upgrade to [SQLite JDBC 3.53.4.0](https://redirect.github.com/xerial/sqlite-jdbc/releases/tag/3.53.4.0) [#&#8203;52031](https://redirect.github.com/spring-projects/spring-boot/issues/52031) - Upgrade to Tomcat 11.0.27 [#&#8203;52184](https://redirect.github.com/spring-projects/spring-boot/issues/52184) - Upgrade to WebJars Locator Lite 1.1.5 [#&#8203;52033](https://redirect.github.com/spring-projects/spring-boot/issues/52033) - Upgrade to [XML Maven Plugin 1.2.2](https://redirect.github.com/mojohaus/xml-maven-plugin/releases/tag/xml-maven-plugin-1.2.2) [#&#8203;52034](https://redirect.github.com/spring-projects/spring-boot/issues/52034) #### :heart: Contributors Thank you to all the contributors who worked on this release: [@&#8203;2heunxun](https://redirect.github.com/2heunxun), [@&#8203;CCCLL](https://redirect.github.com/CCCLL), [@&#8203;CHISANW](https://redirect.github.com/CHISANW), [@&#8203;COBI-98](https://redirect.github.com/COBI-98), [@&#8203;DevJunz](https://redirect.github.com/DevJunz), [@&#8203;JunggiKim](https://redirect.github.com/JunggiKim), [@&#8203;LindseyZ1205](https://redirect.github.com/LindseyZ1205), [@&#8203;MacAlsandair](https://redirect.github.com/MacAlsandair), [@&#8203;MycroCosmo](https://redirect.github.com/MycroCosmo), [@&#8203;NotAFlightRisk](https://redirect.github.com/NotAFlightRisk), [@&#8203;SebTardif](https://redirect.github.com/SebTardif), [@&#8203;dlwhdgus0810](https://redirect.github.com/dlwhdgus0810), [@&#8203;dlwldn30](https://redirect.github.com/dlwldn30), [@&#8203;dmitrysulman](https://redirect.github.com/dmitrysulman), [@&#8203;fabio-grassi](https://redirect.github.com/fabio-grassi), [@&#8203;galenzo17](https://redirect.github.com/galenzo17), [@&#8203;geonheeryu](https://redirect.github.com/geonheeryu), [@&#8203;hjm12223](https://redirect.github.com/hjm12223), [@&#8203;icikle](https://redirect.github.com/icikle), [@&#8203;janwaleed09](https://redirect.github.com/janwaleed09), [@&#8203;jjh75607](https://redirect.github.com/jjh75607), [@&#8203;kdomo](https://redirect.github.com/kdomo), [@&#8203;khopland](https://redirect.github.com/khopland), [@&#8203;ksky8864](https://redirect.github.com/ksky8864), [@&#8203;lavinhoque33](https://redirect.github.com/lavinhoque33), [@&#8203;msridhar](https://redirect.github.com/msridhar), [@&#8203;ngocnhan-tran1996](https://redirect.github.com/ngocnhan-tran1996), [@&#8203;noojung](https://redirect.github.com/noojung), [@&#8203;o-shevchenko](https://redirect.github.com/o-shevchenko), [@&#8203;ohchanKyu](https://redirect.github.com/ohchanKyu), [@&#8203;padosol](https://redirect.github.com/padosol), [@&#8203;piyushrajyadav](https://redirect.github.com/piyushrajyadav), [@&#8203;rvullriede](https://redirect.github.com/rvullriede), [@&#8203;ryujungkyun](https://redirect.github.com/ryujungkyun), [@&#8203;scordio](https://redirect.github.com/scordio), [@&#8203;scottfrederick](https://redirect.github.com/scottfrederick), [@&#8203;timtebeek](https://redirect.github.com/timtebeek), [@&#8203;vlsi](https://redirect.github.com/vlsi), [@&#8203;xoruddl](https://redirect.github.com/xoruddl), [@&#8203;xxxxxxjun](https://redirect.github.com/xxxxxxjun), [@&#8203;yyuneu](https://redirect.github.com/yyuneu), and [@&#8203;zhoubiao188](https://redirect.github.com/zhoubiao188) </details> --- ### Configuration 📅 **Schedule**: (in timezone Etc/UTC) - Branch creation - "every weekend" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/charmcraft). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODAuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJQUjogRGVwZW5kZW5jaWVzIl19-->

Evaluation history

Date Model Scores Action Summary
qwen/qwen3.6-35b-a3b
Impact: 10
Quick Win: 3
Complexity: 5
Confidence: 75
Actionability: 30
needs review Renovate PR updating Django 6.1.1→6.1.2, fastapi 0.142.2→0.162.0, and spring-boot-starter-parent 4.1.1→4.1.2 in docs build dependencies. CI has failing linkcheck and OSV-scanner checks.

Update history

Date Change
updated
created

Related work

  • Duplicate Of: charmcraft#2871 (confidence 80%)

    Similar PR on main branch updating docs tutorial Spread dependencies

  • Duplicate Of: charmcraft#2924 (confidence 80%)

    Similar PR on hotfix/4.3 branch updating docs tutorial Spread dependencies

  • Duplicate Of: charmcraft#2926 (confidence 80%)

    Similar PR on hotfix/4.4 branch updating docs tutorial Spread dependencies

Related issues

Issue Project State Summary Similarity
#2871 docs(build-deps): Update docs tutorial Spread dependencies (non-major) (main) charmcraft closed Renovate's docs-only dep bump (Django 6.1.1, fastapi 0.141.1, spring-boot 4.1.1, psycopg2 2.9.13) was closed unmerged despite 3 approvals; spread-select/snap-build/filter checks stayed pending and no merge commit was made.
89%
#2924 docs(build-deps): Update docs tutorial Spread dependencies (non-major) (hotfix/4.3) charmcraft closed Closed Renovate dependency update PR for spring-boot-starter-parent and psycopg2-binary. Superseded or closed due to failing CI checks.
83%
#2926 docs(build-deps): Update docs tutorial Spread dependencies (non-major) (hotfix/4.4) charmcraft closed Merged dependency updates for spring-boot-starter-parent (3.5.10→3.5.16) and psycopg2-binary (2.9.12→2.9.13) via Renovate bot on the hotfix/4.4 branch.
79%
#2911 docs(build-deps): Update dependency fastapi to v0.142.2 (main) charmcraft merged Merged Renovate PR bumping the docs tutorial fastapi dependency from 0.141.1 to 0.142.2 in docs/tutorial/code/fastapi/requirements.txt.
75%
#2737 build(deps): update dependency django to v6 (main) charmcraft merged Renovate PR #2737 bumped Django in docs/tutorial/code/django/requirements.txt from 5.2.15 to 6.0.6 (+1/-1); approved by 2 reviewers and merged to main as commit 4506aa46.
74%
#2738 build(deps): update dependency fastapi to v0.138.0 (main) charmcraft merged Renovate bumped fastapi[standard] 0.136.1 to 0.138.0 in docs/tutorial/code/fastapi/requirements.txt. PR #2738 was approved and merged as commit 564f17bf after manual testing, since the docs-tests Spread jobs were red.
72%
#2777 build(deps): update dependency django to v6.0.7 (main) charmcraft closed Django 6.0.7 update #2777 was closed unmerged after OSV-scanner failed; Renovate skipped that release, and #2871 later moved the tutorial to Django 6.1.1.
70%