Bump the production-version-updates group with 3 updates

[dependabot]

Bumps the production-version-updates group with 3 updates: fastapi, pydantic and pydantic-core.

Updates fastapi from 0.121.0 to 0.121.1

Release notes

Sourced from fastapi's releases.

0.121.1

Fixes

• 🐛 Fix Depends(func, scope='function') for top level (parameterless) dependencies. PR #14301 by @​luzzodev.

Docs

• 📝 Upate docs for advanced dependencies with yield, noting the changes in 0.121.0, adding scope. PR #14287 by @​tiangolo.

Internal

• ⬆ Bump ruff from 0.13.2 to 0.14.3. PR #14276 by @​dependabot[bot].
• ⬆ [pre-commit.ci] pre-commit autoupdate. PR #14289 by @​pre-commit-ci[bot].

Commits

• 1c7e254 🔖 Release version 0.121.1
• 9e54399 📝 Update release notes
• 282f372 🐛 Fix Depends(func, scope='function') for top level (parameterless) depende...
• 972a967 📝 Update release notes
• 4170f62 📝 Update release notes
• 67c8dfa ⬆ Bump ruff from 0.13.2 to 0.14.3 (#14276)
• 34db1e2 ⬆ [pre-commit.ci] pre-commit autoupdate (#14289)
• b787103 📝 Update release notes
• 289b4aa 📝 Upate docs for advanced dependencies with yield, noting the changes in 0....
• See full diff in compare view

Updates pydantic from 2.12.3 to 2.12.4

Release notes

Sourced from pydantic's releases.

v2.12.4 2025-11-05

v2.12.4 (2025-11-05)

This is the fourth 2.12 patch release, fixing more regressions, and reverting a change in the build() method of the AnyUrl and Dsn types.

This patch release also fixes an issue with the serialization of IP address types, when serialize_as_any is used. The next patch release will try to address the remaining issues with serialize as any behavior by introducing a new polymorphic serialization feature, that should be used in most cases in place of serialize as any.

• Fix issue with forward references in parent TypedDict classes by @​Viicos in #12427.

  This issue is only relevant on Python 3.14 and greater.

• Exclude fields with exclude_if from JSON Schema required fields by @​Viicos in #12430

• Revert URL percent-encoding of credentials in the build() method of the AnyUrl and Dsn types by @​davidhewitt in pydantic-core#1833.

  This was initially considered as a bugfix, but caused regressions and as such was fully reverted. The next release will include an opt-in option to percent-encode components of the URL.

• Add type inference for IP address types by @​davidhewitt in pydantic-core#1868.

  The 2.12 changes to the serialize_as_any behavior made it so that IP address types could not properly serialize to JSON.

• Avoid getting default values from defaultdict by @​davidhewitt in pydantic-core#1853.

  This fixes a subtle regression in the validation behavior of the collections.defaultdict type.

• Fix issue with field serializers on nested typed dictionaries by @​davidhewitt in pydantic-core#1879.

• Add more pydantic-core builds for the three-threaded version of Python 3.14 by @​davidhewitt in pydantic-core#1864.

Full Changelog: pydantic/pydantic@v2.12.3...v2.12.4

Changelog

Sourced from pydantic's changelog.

v2.12.4 (2025-11-05)

GitHub release

This is the fourth 2.12 patch release, fixing more regressions, and reverting a change in the build() method of the AnyUrl and Dsn types.

This patch release also fixes an issue with the serialization of IP address types, when serialize_as_any is used. The next patch release will try to address the remaining issues with serialize as any behavior by introducing a new polymorphic serialization feature, that should be used in most cases in place of serialize as any.

• Fix issue with forward references in parent TypedDict classes by @​Viicos in #12427.

  This issue is only relevant on Python 3.14 and greater.

• Exclude fields with exclude_if from JSON Schema required fields by @​Viicos in #12430

• Revert URL percent-encoding of credentials in the build() method of the AnyUrl and Dsn types by @​davidhewitt in pydantic-core#1833.

  This was initially considered as a bugfix, but caused regressions and as such was fully reverted. The next release will include an opt-in option to percent-encode components of the URL.

• Add type inference for IP address types by @​davidhewitt in pydantic-core#1868.

  The 2.12 changes to the serialize_as_any behavior made it so that IP address types could not properly serialize to JSON.

• Avoid getting default values from defaultdict by @​davidhewitt in pydantic-core#1853.

  This fixes a subtle regression in the validation behavior of the collections.defaultdict type.

• Fix issue with field serializers on nested typed dictionaries by @​davidhewitt in pydantic-core#1879.

• Add more pydantic-core builds for the three-threaded version of Python 3.14 by @​davidhewitt in pydantic-core#1864.

Commits

• 5c842df Prepare release v2.12.4
• c678a71 Bump pydantic-core to v2.41.5
• a7cd292 Bump cloudpickle to v3.1.2
• 21f6278 Bump actions/setup-node from 5 to 6
• 8d6be8f Bump astral-sh/setup-uv from 6 to 7
• 17865ea Bump actions/upload-artifact from 4 to 5
• 90ad0af Bump actions/download-artifact from 5 to 6
• 18e6672 Drop testing under PyPy 3.9
• 650215b Document workaround for MongoDsn default port
• e326790 Fix example of for bytes_invalid_encoding validation error
• Additional commits viewable in compare view

Updates pydantic-core from 2.41.4 to 2.41.5

Release notes

Sourced from pydantic-core's releases.

v2.41.5

What's Changed

• Correct invalid serialization of date/datetime/time/timedelta by pulling downcast checks up by @​astei in pydantic/pydantic-core#1851
• avoid getting default values from defaultdict by @​davidhewitt in pydantic/pydantic-core#1853
• ci: add more 3.14t builds, delete duplicate linux aarch64 build by @​davidhewitt in pydantic/pydantic-core#1864
• JsonValue: Deduplicate keys before populating Dict by @​friendlymatthew in pydantic/pydantic-core#1865
• fix: only percent-encode characters in the userinfo encode set by @​davidhewitt in pydantic/pydantic-core#1852
• Bump jiter from 0.11.0 to 0.11.1 by @​dependabot[bot] in pydantic/pydantic-core#1878
• Bump regex from 1.11.3 to 1.12.2 by @​dependabot[bot] in pydantic/pydantic-core#1877
• Bump percent-encoding from 2.3.1 to 2.3.2 by @​dependabot[bot] in pydantic/pydantic-core#1876
• fix issue with field_serializers on nested typed dicts by @​davidhewitt in pydantic/pydantic-core#1879
• clean up GC traversal for some top-level types by @​davidhewitt in pydantic/pydantic-core#1870
• add type inference for serializing ip address types by @​davidhewitt in pydantic/pydantic-core#1868
• revert url credential encoding (to be reintroduced as an option in future) by @​davidhewitt in pydantic/pydantic-core#1882
• optimizations in URL implementation by @​davidhewitt in pydantic/pydantic-core#1833

New Contributors

• @​friendlymatthew made their first contribution in pydantic/pydantic-core#1865

Full Changelog: pydantic/pydantic-core@v2.41.4...v2.41.5

Commits

• 52b821d release: 2.41.5 (#1883)
• 65d7c44 optimizations in URL implementation (#1833)
• 4d23017 revert url credential encoding (to be reintroduced as an option in future) (#...
• 2e932c6 add type inference for serializing ip address types (#1868)
• 4c9bec8 clean up GC traversal for some top-level types (#1870)
• bed9c14 fix issue with field_serializers on nested typed dicts (#1879)
• 20d576b address trivial fixme (#1880)
• 83133d6 Bump astral-sh/setup-uv from 6 to 7 (#1872)
• fbf16d7 Bump percent-encoding from 2.3.1 to 2.3.2 (#1876)
• d25eda1 Bump actions/setup-node from 5 to 6 (#1871)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions