Uh oh!
There was an error while loading.Please reload this page.
- Notifications
You must be signed in to change notification settings - Fork8.7k
Comments
🐛 Strip whitespaces fromAuthorization header credentials#14786
Merged
tiangolo merged 2 commits intofastapi:masterfromFeb 4, 2026
Merged
🐛 Strip whitespaces fromAuthorization header credentials#14786tiangolo merged 2 commits intofastapi:masterfrom
Authorization header credentials#14786tiangolo merged 2 commits intofastapi:masterfrom
Conversation
codspeed-hqbot commentedJan 30, 2026 • edited
Loading Uh oh!
There was an error while loading.Please reload this page.
edited
Uh oh!
There was an error while loading.Please reload this page.
CodSpeed Performance ReportMerging this PR willnot alter performanceComparing Summary
Footnotes |
YuriiMotov approved these changesFeb 3, 2026
Member
YuriiMotov left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others.Learn more.
LGTM!
@WaveTheory1, thanks!
The latest RFC that definesAuthorization header structure is RFC 9110 (seeAuthorization,credentials
RFC 9110 obsoletes RFC 7235 (Authorization header is defined the same way: seeAuthorization, [credentials]https://datatracker.ietf.org/doc/html/rfc7235#section-2.1))
RFC 7617 (HTTP Basic) doesn't specify format of Authorization header, refers to RFC 7235 (seeThe 'Basic' Authentication Scheme)
RFC 7616 (Digest)refers tohttps://datatracker.ietf.org/doc/html/rfc7235#section-2.1
RFC 6750 (Bearer) defines theAuthorization header format explicitly, and alsorefers toRFC 2617 (which is obsoleted by RFC 7235 and then by RFC 9110)
I didn't find anything about trailing whitespaces (if they are allowed by standard), but it's 100% that we shouldn't treat them as a part of credentials. So, I think it's fine to trim trailing whitespaces.
So, I think this PR is in line with all specs
Authorization header credentialsContributorAuthor
WaveTheory1 commentedFeb 4, 2026
Thanks for the review@YuriiMotov! Happy to get this merged whenever you're ready 😄 |
tiangolo approved these changesFeb 4, 2026
Member
tiangolo left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others.Learn more.
Thanks! 🙌
I was double checking the specs, thetoken68, the value for the token, it's defined here:https://datatracker.ietf.org/doc/html/rfc9110#section-11.2
And indeed, it says:
The token68 syntax allows the 66 unreserved URI characters ([URI]), plus a few others, so that it can hold a base64, base64url (URL and filename safe alphabet), base32, or base16 (hex) encoding, with or without padding, but excluding whitespace ([RFC4648]).
It does say "excluding whitespace". 🤓
This will be available in FastAPI 0.128.1, in the next few hours. 🎉
1d96b3e intofastapi:master 26 checks passed
Uh oh!
There was an error while loading.Please reload this page.
736-c41-2c1-e464fc974 added a commit to Swiss-Armed-Forces/Loom that referenced this pull requestFeb 20, 2026
This MR contains the following updates:| Package | Type | Update | Change | OpenSSF ||---|---|---|---|---|| [debugpy](https://aka.ms/debugpy) ([source](https://github.com/microsoft/debugpy)) | dev | patch | `1.8.19` → `1.8.20` | [](https://securityscorecards.dev/viewer/?uri=github.com/microsoft/debugpy) || [fastapi](https://github.com/fastapi/fastapi) ([changelog](https://fastapi.tiangolo.com/release-notes/)) | dependencies | patch | `0.128.0` → `0.128.8` | [](https://securityscorecards.dev/viewer/?uri=github.com/fastapi/fastapi) || [filelock](https://github.com/tox-dev/py-filelock) | dependencies | patch | `3.20.3` → `3.20.4` | [](https://securityscorecards.dev/viewer/?uri=github.com/tox-dev/py-filelock) || [python-multipart](https://github.com/Kludex/python-multipart) ([changelog](https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md)) | dependencies | patch | `^0.0.21` → `^0.0.22` | [](https://securityscorecards.dev/viewer/?uri=github.com/Kludex/python-multipart) || [stream-zip](https://github.com/uktrade/stream-zip) | dependencies | patch | `^0.0.83` → `^0.0.84` | [](https://securityscorecards.dev/viewer/?uri=github.com/uktrade/stream-zip) |---### Release Notes<details><summary>microsoft/debugpy (debugpy)</summary>### [`v1.8.20`](https://github.com/microsoft/debugpy/releases/tag/v1.8.20): debugpy v1.8.20[Compare Source](microsoft/debugpy@v1.8.19...v1.8.20)Fixes for:- annotate in 3.14 causing exceptions: [#​1971](microsoft/debugpy#1971)Enhancements:- Use remote\_exec if available: [`c7e86a1`](microsoft/debugpy@c7e86a1)- Support more architectures: [`1bbecdf`](microsoft/debugpy@1bbecdf)Infrastructure work:- Support devcontainers for development: [`7dbc229`](microsoft/debugpy@7dbc229)Thanks to [@​rameshvarun](https://github.com/rameshvarun), [@​Xeonacid](https://github.com/Xeonacid), and [@​pdepetro](https://github.com/pdepetro) for the commits</details><details><summary>fastapi/fastapi (fastapi)</summary>### [`v0.128.8`](https://github.com/fastapi/fastapi/releases/tag/0.128.8)[Compare Source](fastapi/fastapi@0.128.7...0.128.8)##### Docs- 📝 Fix grammar in `docs/en/docs/tutorial/first-steps.md`. MR [#​14708](fastapi/fastapi#14708) by [@​SanjanaS10](https://github.com/SanjanaS10).##### Internal- 🔨 Tweak PDM hook script. MR [#​14895](fastapi/fastapi#14895) by [@​tiangolo](https://github.com/tiangolo).- ♻️ Update build setup for `fastapi-slim`, deprecate it, and make it only depend on `fastapi`. MR [#​14894](fastapi/fastapi#14894) by [@​tiangolo](https://github.com/tiangolo).### [`v0.128.7`](https://github.com/fastapi/fastapi/releases/tag/0.128.7)[Compare Source](fastapi/fastapi@0.128.6...0.128.7)##### Features- ✨ Show a clear error on attempt to include router into itself. MR [#​14258](fastapi/fastapi#14258) by [@​JavierSanchezCastro](https://github.com/JavierSanchezCastro).- ✨ Replace `dict` by `Mapping` on `HTTPException.headers`. MR [#​12997](fastapi/fastapi#12997) by [@​rijenkii](https://github.com/rijenkii).##### Refactors- ♻️ Simplify reading files in memory, do it sequentially instead of (fake) parallel. MR [#​14884](fastapi/fastapi#14884) by [@​tiangolo](https://github.com/tiangolo).##### Docs- 📝 Use `dfn` tag for definitions instead of `abbr` in docs. MR [#​14744](fastapi/fastapi#14744) by [@​YuriiMotov](https://github.com/YuriiMotov).##### Internal- ✅ Tweak comment in test to reference MR. MR [#​14885](fastapi/fastapi#14885) by [@​tiangolo](https://github.com/tiangolo).- 🔧 Update LLM-prompt for `abbr` and `dfn` tags. MR [#​14747](fastapi/fastapi#14747) by [@​YuriiMotov](https://github.com/YuriiMotov).- ✅ Test order for the submitted byte Files. MR [#​14828](fastapi/fastapi#14828) by [@​valentinDruzhinin](https://github.com/valentinDruzhinin).- 🔧 Configure `test` workflow to run tests with `inline-snapshot=review`. MR [#​14876](fastapi/fastapi#14876) by [@​YuriiMotov](https://github.com/YuriiMotov).### [`v0.128.6`](https://github.com/fastapi/fastapi/releases/tag/0.128.6)[Compare Source](fastapi/fastapi@0.128.5...0.128.6)##### Fixes- 🐛 Fix `on_startup` and `on_shutdown` parameters of `APIRouter`. MR [#​14873](fastapi/fastapi#14873) by [@​YuriiMotov](https://github.com/YuriiMotov).##### Translations- 🌐 Update translations for zh (update-outdated). MR [#​14843](fastapi/fastapi#14843) by [@​tiangolo](https://github.com/tiangolo).##### Internal- ✅ Fix parameterized tests with snapshots. MR [#​14875](fastapi/fastapi#14875) by [@​YuriiMotov](https://github.com/YuriiMotov).### [`v0.128.5`](https://github.com/fastapi/fastapi/releases/tag/0.128.5)[Compare Source](fastapi/fastapi@0.128.4...0.128.5)##### Refactors- ♻️ Refactor and simplify Pydantic v2 (and v1) compatibility internal utils. MR [#​14862](fastapi/fastapi#14862) by [@​tiangolo](https://github.com/tiangolo).##### Internal- ✅ Add inline snapshot tests for OpenAPI before changes from Pydantic v2. MR [#​14864](fastapi/fastapi#14864) by [@​tiangolo](https://github.com/tiangolo).### [`v0.128.4`](https://github.com/fastapi/fastapi/releases/tag/0.128.4)[Compare Source](fastapi/fastapi@0.128.3...0.128.4)##### Refactors- ♻️ Refactor internals, simplify Pydantic v2/v1 utils, `create_model_field`, better types for `lenient_issubclass`. MR [#​14860](fastapi/fastapi#14860) by [@​tiangolo](https://github.com/tiangolo).- ♻️ Simplify internals, remove Pydantic v1 only logic, no longer needed. MR [#​14857](fastapi/fastapi#14857) by [@​tiangolo](https://github.com/tiangolo).- ♻️ Refactor internals, cleanup unneeded Pydantic v1 specific logic. MR [#​14856](fastapi/fastapi#14856) by [@​tiangolo](https://github.com/tiangolo).##### Translations- 🌐 Update translations for fr (outdated pages). MR [#​14839](fastapi/fastapi#14839) by [@​YuriiMotov](https://github.com/YuriiMotov).- 🌐 Update translations for tr (outdated and missing). MR [#​14838](fastapi/fastapi#14838) by [@​YuriiMotov](https://github.com/YuriiMotov).##### Internal- ⬆️ Upgrade development dependencies. MR [#​14854](fastapi/fastapi#14854) by [@​tiangolo](https://github.com/tiangolo).### [`v0.128.3`](https://github.com/fastapi/fastapi/releases/tag/0.128.3)[Compare Source](fastapi/fastapi@0.128.2...0.128.3)##### Refactors- ♻️ Re-implement `on_event` in FastAPI for compatibility with the next Starlette, while keeping backwards compatibility. MR [#​14851](fastapi/fastapi#14851) by [@​tiangolo](https://github.com/tiangolo).##### Upgrades- ⬆️ Upgrade Starlette supported version range to `starlette>=0.40.0,<1.0.0`. MR [#​14853](fastapi/fastapi#14853) by [@​tiangolo](https://github.com/tiangolo).##### Translations- 🌐 Update translations for ru (update-outdated). MR [#​14834](fastapi/fastapi#14834) by [@​tiangolo](https://github.com/tiangolo).##### Internal- 👷 Run tests with Starlette from git. MR [#​14849](fastapi/fastapi#14849) by [@​tiangolo](https://github.com/tiangolo).- 👷 Run tests with lower bound uv sync, upgrade `fastapi[all]` minimum dependencies: `ujson >=5.8.0`, `orjson >=3.9.3`. MR [#​14846](fastapi/fastapi#14846) by [@​tiangolo](https://github.com/tiangolo).### [`v0.128.2`](https://github.com/fastapi/fastapi/releases/tag/0.128.2)[Compare Source](fastapi/fastapi@0.128.1...0.128.2)##### Features- ✨ Add support for PEP695 `TypeAliasType`. MR [#​13920](fastapi/fastapi#13920) by [@​cstruct](https://github.com/cstruct).- ✨ Allow `Response` type hint as dependency annotation. MR [#​14794](fastapi/fastapi#14794) by [@​jonathan-fulton](https://github.com/jonathan-fulton).##### Fixes- 🐛 Fix using `Json[list[str]]` type (issue [#​10997](fastapi/fastapi#10997)). MR [#​14616](fastapi/fastapi#14616) by [@​mkanetsuna](https://github.com/mkanetsuna).##### Docs- 📝 Update docs for translations. MR [#​14830](fastapi/fastapi#14830) by [@​tiangolo](https://github.com/tiangolo).- 📝 Fix duplicate word in `advanced-dependencies.md`. MR [#​14815](fastapi/fastapi#14815) by [@​Rayyan-Oumlil](https://github.com/Rayyan-Oumlil).##### Translations- 🌐 Enable Traditional Chinese translations. MR [#​14842](fastapi/fastapi#14842) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Enable French docs translations. MR [#​14841](fastapi/fastapi#14841) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translations for fr (translate-page). MR [#​14837](fastapi/fastapi#14837) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translations for de (update-outdated). MR [#​14836](fastapi/fastapi#14836) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translations for pt (update-outdated). MR [#​14833](fastapi/fastapi#14833) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translations for ko (update-outdated). MR [#​14835](fastapi/fastapi#14835) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translations for es (update-outdated). MR [#​14832](fastapi/fastapi#14832) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translations for tr (update-outdated). MR [#​14831](fastapi/fastapi#14831) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translations for tr (add-missing). MR [#​14790](fastapi/fastapi#14790) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translations for fr (update-outdated). MR [#​14826](fastapi/fastapi#14826) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translations for zh-hant (update-outdated). MR [#​14825](fastapi/fastapi#14825) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translations for uk (update-outdated). MR [#​14822](fastapi/fastapi#14822) by [@​tiangolo](https://github.com/tiangolo).- 🔨 Update docs and translations scripts, enable Turkish. MR [#​14824](fastapi/fastapi#14824) by [@​tiangolo](https://github.com/tiangolo).##### Internal- 🔨 Add max pages to translate to configs. MR [#​14840](fastapi/fastapi#14840) by [@​tiangolo](https://github.com/tiangolo).### [`v0.128.1`](https://github.com/fastapi/fastapi/releases/tag/0.128.1)[Compare Source](fastapi/fastapi@0.128.0...0.128.1)##### Features- ✨ Add `viewport` meta tag to improve Swagger UI on mobile devices. MR [#​14777](fastapi/fastapi#14777) by [@​Joab0](https://github.com/Joab0).- 🚸 Improve error message for invalid query parameter type annotations. MR [#​14479](fastapi/fastapi#14479) by [@​retwish](https://github.com/retwish).##### Fixes- 🐛 Update `ValidationError` schema to include `input` and `ctx`. MR [#​14791](fastapi/fastapi#14791) by [@​jonathan-fulton](https://github.com/jonathan-fulton).- 🐛 Fix TYPE\_CHECKING annotations for Python 3.14 (PEP 649). MR [#​14789](fastapi/fastapi#14789) by [@​mgu](https://github.com/mgu).- 🐛 Strip whitespaces from `Authorization` header credentials. MR [#​14786](fastapi/fastapi#14786) by [@​WaveTheory1](https://github.com/WaveTheory1).- 🐛 Fix OpenAPI duplication of `anyOf` refs for app-level responses with specified `content` and `model` as `Union`. MR [#​14463](fastapi/fastapi#14463) by [@​DJMcoder](https://github.com/DJMcoder).##### Refactors- 🎨 Tweak types for mypy. MR [#​14816](fastapi/fastapi#14816) by [@​tiangolo](https://github.com/tiangolo).- 🏷️ Re-export `IncEx` type from Pydantic instead of duplicating it. MR [#​14641](fastapi/fastapi#14641) by [@​mvanderlee](https://github.com/mvanderlee).- 💡 Update comment for Pydantic internals. MR [#​14814](fastapi/fastapi#14814) by [@​tiangolo](https://github.com/tiangolo).##### Docs- 📝 Update docs for contributing translations, simplify title. MR [#​14817](fastapi/fastapi#14817) by [@​tiangolo](https://github.com/tiangolo).- 📝 Fix typing issue in `docs_src/app_testing/app_b` code example. MR [#​14573](fastapi/fastapi#14573) by [@​timakaa](https://github.com/timakaa).- 📝 Fix example of license identifier in documentation. MR [#​14492](fastapi/fastapi#14492) by [@​johnson-earls](https://github.com/johnson-earls).- 📝 Add banner to translated pages. MR [#​14809](fastapi/fastapi#14809) by [@​YuriiMotov](https://github.com/YuriiMotov).- 📝 Add links to related sections of docs to docstrings. MR [#​14776](fastapi/fastapi#14776) by [@​YuriiMotov](https://github.com/YuriiMotov).- 📝 Update embedded code examples to Python 3.10 syntax. MR [#​14758](fastapi/fastapi#14758) by [@​YuriiMotov](https://github.com/YuriiMotov).- 📝 Fix dependency installation command in `docs/en/docs/contributing.md`. MR [#​14757](fastapi/fastapi#14757) by [@​YuriiMotov](https://github.com/YuriiMotov).- 📝 Use return type annotation instead of `response_model` when possible. MR [#​14753](fastapi/fastapi#14753) by [@​YuriiMotov](https://github.com/YuriiMotov).- 📝 Use `WSGIMiddleware` from `a2wsgi` instead of deprecated `fastapi.middleware.wsgi.WSGIMiddleware`. MR [#​14756](fastapi/fastapi#14756) by [@​YuriiMotov](https://github.com/YuriiMotov).- 📝 Fix minor typos in release notes. MR [#​14780](fastapi/fastapi#14780) by [@​whyvineet](https://github.com/whyvineet).- 🐛 Fix copy button in custom.js. MR [#​14722](fastapi/fastapi#14722) by [@​fcharrier](https://github.com/fcharrier).- 📝 Add contribution instructions about LLM generated code and comments and automated tools for MRs. MR [#​14706](fastapi/fastapi#14706) by [@​tiangolo](https://github.com/tiangolo).- 📝 Update docs for management tasks. MR [#​14705](fastapi/fastapi#14705) by [@​tiangolo](https://github.com/tiangolo).- 📝 Update docs about managing translations. MR [#​14704](fastapi/fastapi#14704) by [@​tiangolo](https://github.com/tiangolo).- 📝 Update docs for contributing with translations. MR [#​14701](fastapi/fastapi#14701) by [@​tiangolo](https://github.com/tiangolo).- 📝 Specify language code for code block. MR [#​14656](fastapi/fastapi#14656) by [@​YuriiMotov](https://github.com/YuriiMotov).##### Translations- 🌐 Improve LLM prompt of `uk` documentation. MR [#​14795](fastapi/fastapi#14795) by [@​roli2py](https://github.com/roli2py).- 🌐 Update translations for ja (update-outdated). MR [#​14588](fastapi/fastapi#14588) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translations for uk (update outdated, found by fixer tool). MR [#​14739](fastapi/fastapi#14739) by [@​YuriiMotov](https://github.com/YuriiMotov).- 🌐 Update translations for tr (update-outdated). MR [#​14745](fastapi/fastapi#14745) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update `llm-prompt.md` for Korean language. MR [#​14763](fastapi/fastapi#14763) by [@​seuthootDev](https://github.com/seuthootDev).- 🌐 Update translations for ko (update outdated, found by fixer tool). MR [#​14738](fastapi/fastapi#14738) by [@​YuriiMotov](https://github.com/YuriiMotov).- 🌐 Update translations for de (update-outdated). MR [#​14690](fastapi/fastapi#14690) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update LLM prompt for Russian translations. MR [#​14733](fastapi/fastapi#14733) by [@​YuriiMotov](https://github.com/YuriiMotov).- 🌐 Update translations for ru (update-outdated). MR [#​14693](fastapi/fastapi#14693) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translations for pt (update-outdated). MR [#​14724](fastapi/fastapi#14724) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update Korean LLM prompt. MR [#​14740](fastapi/fastapi#14740) by [@​hard-coders](https://github.com/hard-coders).- 🌐 Improve LLM prompt for Turkish translations. MR [#​14728](fastapi/fastapi#14728) by [@​Kadermiyanyedi](https://github.com/Kadermiyanyedi).- 🌐 Update portuguese llm-prompt.md. MR [#​14702](fastapi/fastapi#14702) by [@​ceb10n](https://github.com/ceb10n).- 🌐 Update LLM prompt instructions file for French. MR [#​14618](fastapi/fastapi#14618) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translations for ko (add-missing). MR [#​14699](fastapi/fastapi#14699) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translations for ko (update-outdated). MR [#​14589](fastapi/fastapi#14589) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translations for uk (update-outdated). MR [#​14587](fastapi/fastapi#14587) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translations for es (update-outdated). MR [#​14686](fastapi/fastapi#14686) by [@​tiangolo](https://github.com/tiangolo).- 🔧 Add LLM prompt file for Turkish, generated from the existing translations. MR [#​14547](fastapi/fastapi#14547) by [@​tiangolo](https://github.com/tiangolo).- 🔧 Add LLM prompt file for Traditional Chinese, generated from the existing translations. MR [#​14550](fastapi/fastapi#14550) by [@​tiangolo](https://github.com/tiangolo).- 🔧 Add LLM prompt file for Simplified Chinese, generated from the existing translations. MR [#​14549](fastapi/fastapi#14549) by [@​tiangolo](https://github.com/tiangolo).##### Internal- ⬇️ Downgrade LLM translations model to GPT-5 to reduce mistakes. MR [#​14823](fastapi/fastapi#14823) by [@​tiangolo](https://github.com/tiangolo).- 🐛 Fix translation script commit in place. MR [#​14818](fastapi/fastapi#14818) by [@​tiangolo](https://github.com/tiangolo).- 🔨 Update translation script to retry if LLM-response doesn't pass validation with Translation Fixer tool. MR [#​14749](fastapi/fastapi#14749) by [@​YuriiMotov](https://github.com/YuriiMotov).- 👷 Run tests only on relevant code changes (not on docs). MR [#​14813](fastapi/fastapi#14813) by [@​tiangolo](https://github.com/tiangolo).- 👷 Run mypy by pre-commit. MR [#​14806](fastapi/fastapi#14806) by [@​YuriiMotov](https://github.com/YuriiMotov).- ⬆ Bump ruff from 0.14.3 to 0.14.14. MR [#​14798](fastapi/fastapi#14798) by [@​dependabot\[bot\]](https://github.com/apps/dependabot).- ⬆ Bump pyasn1 from 0.6.1 to 0.6.2. MR [#​14804](fastapi/fastapi#14804) by [@​dependabot\[bot\]](https://github.com/apps/dependabot).- ⬆ Bump sqlmodel from 0.0.27 to 0.0.31. MR [#​14802](fastapi/fastapi#14802) by [@​dependabot\[bot\]](https://github.com/apps/dependabot).- ⬆ Bump mkdocs-macros-plugin from 1.4.1 to 1.5.0. MR [#​14801](fastapi/fastapi#14801) by [@​dependabot\[bot\]](https://github.com/apps/dependabot).- ⬆ Bump gitpython from 3.1.45 to 3.1.46. MR [#​14800](fastapi/fastapi#14800) by [@​dependabot\[bot\]](https://github.com/apps/dependabot).- ⬆ Bump typer from 0.16.0 to 0.21.1. MR [#​14799](fastapi/fastapi#14799) by [@​dependabot\[bot\]](https://github.com/apps/dependabot).- 👥 Update FastAPI GitHub topic repositories. MR [#​14803](fastapi/fastapi#14803) by [@​tiangolo](https://github.com/tiangolo).- 👥 Update FastAPI People - Contributors and Translators. MR [#​14796](fastapi/fastapi#14796) by [@​tiangolo](https://github.com/tiangolo).- 🔧 Ensure that an edit to `uv.lock` gets the `internal` label. MR [#​14759](fastapi/fastapi#14759) by [@​svlandeg](https://github.com/svlandeg).- 🔧 Update sponsors: remove Requestly. MR [#​14735](fastapi/fastapi#14735) by [@​tiangolo](https://github.com/tiangolo).- 🔧 Update sponsors, LambdaTest changes to TestMu AI. MR [#​14734](fastapi/fastapi#14734) by [@​tiangolo](https://github.com/tiangolo).- ⬆ Bump actions/cache from 4 to 5. MR [#​14511](fastapi/fastapi#14511) by [@​dependabot\[bot\]](https://github.com/apps/dependabot).- ⬆ Bump actions/upload-artifact from 5 to 6. MR [#​14525](fastapi/fastapi#14525) by [@​dependabot\[bot\]](https://github.com/apps/dependabot).- ⬆ Bump actions/download-artifact from 6 to 7. MR [#​14526](fastapi/fastapi#14526) by [@​dependabot\[bot\]](https://github.com/apps/dependabot).- 👷 Tweak CI input names. MR [#​14688](fastapi/fastapi#14688) by [@​tiangolo](https://github.com/tiangolo).- 🔨 Refactor translation script to allow committing in place. MR [#​14687](fastapi/fastapi#14687) by [@​tiangolo](https://github.com/tiangolo).- 🐛 Fix translation script path. MR [#​14685](fastapi/fastapi#14685) by [@​tiangolo](https://github.com/tiangolo).- ✅ Enable tests in CI for scripts. MR [#​14684](fastapi/fastapi#14684) by [@​tiangolo](https://github.com/tiangolo).- 🔧 Add pre-commit local script to fix language translations. MR [#​14683](fastapi/fastapi#14683) by [@​tiangolo](https://github.com/tiangolo).- ⬆️ Migrate to uv. MR [#​14676](fastapi/fastapi#14676) by [@​DoctorJohn](https://github.com/DoctorJohn).- 🔨 Add LLM translations tool fixer. MR [#​14652](fastapi/fastapi#14652) by [@​YuriiMotov](https://github.com/YuriiMotov).- 👥 Update FastAPI People - Sponsors. MR [#​14626](fastapi/fastapi#14626) by [@​tiangolo](https://github.com/tiangolo).- 👥 Update FastAPI GitHub topic repositories. MR [#​14630](fastapi/fastapi#14630) by [@​tiangolo](https://github.com/tiangolo).- 👥 Update FastAPI People - Contributors and Translators. MR [#​14625](fastapi/fastapi#14625) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translation prompts. MR [#​14619](fastapi/fastapi#14619) by [@​tiangolo](https://github.com/tiangolo).- 🔨 Update LLM translation script to guide reviewers to change the prompt. MR [#​14614](fastapi/fastapi#14614) by [@​tiangolo](https://github.com/tiangolo).- 👷 Do not run translations on cron while finishing updating existing languages. MR [#​14613](fastapi/fastapi#14613) by [@​tiangolo](https://github.com/tiangolo).- 🔥 Remove test variants for Pydantic v1 in test\_request\_params. MR [#​14612](fastapi/fastapi#14612) by [@​tiangolo](https://github.com/tiangolo).- 🔥 Remove Pydantic v1 specific test variants. MR [#​14611](fastapi/fastapi#14611) by [@​tiangolo](https://github.com/tiangolo).</details><details><summary>Kludex/python-multipart (python-multipart)</summary>### [`v0.0.22`](https://github.com/Kludex/python-multipart/blob/HEAD/CHANGELOG.md#0022-2026-01-25)[Compare Source](Kludex/python-multipart@0.0.21...0.0.22)- Drop directory path from filename in `File` [9433f4b](Kludex/python-multipart@9433f4b).</details><details><summary>uktrade/stream-zip (stream-zip)</summary>### [`v0.0.84`](https://github.com/uktrade/stream-zip/releases/tag/v0.0.84)[Compare Source](uktrade/stream-zip@v0.0.83...v0.0.84)#### What's Changed##### Client-code facing changes- feat: remove input buffering and flush output buffer after local header by [@​michalc](https://github.com/michalc) in [#​176](uktrade/stream-zip#176)##### Non client-code facing changes- build(deps): bump send and [@​x-govuk/govuk-prototype-components](https://github.com/x-govuk/govuk-prototype-components) by [@​dependabot](https://github.com/dependabot)\[bot] in [#​148](uktrade/stream-zip#148)- build(deps): bump rollup from 4.17.2 to 4.22.4 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​149](uktrade/stream-zip#149)- build(deps): bump cross-spawn from 7.0.3 to 7.0.6 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​150](uktrade/stream-zip#150)- build(deps): bump js-yaml from 3.14.1 to 3.14.2 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​152](uktrade/stream-zip#152)- build(deps): bump brace-expansion by [@​dependabot](https://github.com/dependabot)\[bot] in [#​151](uktrade/stream-zip#151)- build(deps): bump glob to 10.5.0 by [@​JosefSmith](https://github.com/JosefSmith) in [#​154](uktrade/stream-zip#154)- feat: add pre-commit framework by [@​JosefSmith](https://github.com/JosefSmith) in [#​155](uktrade/stream-zip#155)- feat: add CODEOWNERS by [@​JosefSmith](https://github.com/JosefSmith) in [#​156](uktrade/stream-zip#156)- feat: tick off security checklist by [@​JosefSmith](https://github.com/JosefSmith) in [#​157](uktrade/stream-zip#157)- fix: update upload and deploy pages actions to v4 by [@​JosefSmith](https://github.com/JosefSmith) in [#​158](uktrade/stream-zip#158)- build: move tests to ubuntu 24.04 by [@​JosefSmith](https://github.com/JosefSmith) in [#​159](uktrade/stream-zip#159)- Fix GitHub pages deploy permissions by [@​JackSwerdlow](https://github.com/JackSwerdlow) in [#​160](uktrade/stream-zip#160)- docs: update to latest GDS Design System by [@​michalc](https://github.com/michalc) in [#​162](uktrade/stream-zip#162)- docs: use more appropriate logo and split into subsections by [@​michalc](https://github.com/michalc) in [#​163](uktrade/stream-zip#163)- docs: fix header styles by [@​michalc](https://github.com/michalc) in [#​164](uktrade/stream-zip#164)- docs: update favicon to one consistent with uktrade GitHub org by [@​michalc](https://github.com/michalc) in [#​165](uktrade/stream-zip#165)- docs: correct title suffix by [@​michalc](https://github.com/michalc) in [#​166](uktrade/stream-zip#166)- docs: use official DBT image for OpenGraph/social image by [@​michalc](https://github.com/michalc) in [#​167](uktrade/stream-zip#167)- docs: remove footer crown by [@​michalc](https://github.com/michalc) in [#​168](uktrade/stream-zip#168)- docs: initial API reference by [@​michalc](https://github.com/michalc) in [#​169](uktrade/stream-zip#169)- docs: initial functions API reference by [@​michalc](https://github.com/michalc) in [#​170](uktrade/stream-zip#170)- docs: surface password protection as its own page by [@​michalc](https://github.com/michalc) in [#​171](uktrade/stream-zip#171)- docs: fix typos and broken links by [@​michalc](https://github.com/michalc) in [#​172](uktrade/stream-zip#172)- chore: update pre-commit repo to latest version by [@​michalc](https://github.com/michalc) in [#​175](uktrade/stream-zip#175)- ci: bump upload and download action versions in PyPI publish by [@​michalc](https://github.com/michalc) in [#​177](uktrade/stream-zip#177)- ci: add permissions for PyPI publish to amend existing release by [@​michalc](https://github.com/michalc) in [#​178](uktrade/stream-zip#178)#### New Contributors- [@​JackSwerdlow](https://github.com/JackSwerdlow) made their first contribution in [#​160](uktrade/stream-zip#160)**Full Changelog**: <uktrade/stream-zip@v0.0.83...v0.0.84></details>--- - [ ] <!-- rebase-check -->If you want to rebase/retry this MR, check this box---This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNS4wIiwidXBkYXRlZEluVmVyIjoiNDMuMjUuNyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwicmVub3ZhdGUiXX0=-->See merge request swiss-armed-forces/cyber-command/cea/loom!305Co-authored-by: Loom MR Pipeline Trigger <group_103951964_bot_9504bb8dead6d4e406ad817a607f24be@noreply.gitlab.com>Co-authored-by: shrewd-laidback palace <shrewd-laidback-palace-736-c41-2c1-e464fc974@swiss-armed-forces-open-source.ch>
736-c41-2c1-e464fc974 added a commit to Swiss-Armed-Forces/Loom that referenced this pull requestFeb 20, 2026
fix(deps): update backend dependencies (patch) (patch)This MR contains the following updates:| Package | Type | Update | Change | OpenSSF ||---|---|---|---|---|| [debugpy](https://aka.ms/debugpy) ([source](https://github.com/microsoft/debugpy)) | dev | patch | `1.8.19` → `1.8.20` | [](https://securityscorecards.dev/viewer/?uri=github.com/microsoft/debugpy) || [fastapi](https://github.com/fastapi/fastapi) ([changelog](https://fastapi.tiangolo.com/release-notes/)) | dependencies | patch | `0.128.0` → `0.128.8` | [](https://securityscorecards.dev/viewer/?uri=github.com/fastapi/fastapi) || [filelock](https://github.com/tox-dev/py-filelock) | dependencies | patch | `3.20.3` → `3.20.4` | [](https://securityscorecards.dev/viewer/?uri=github.com/tox-dev/py-filelock) || [python-multipart](https://github.com/Kludex/python-multipart) ([changelog](https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md)) | dependencies | patch | `^0.0.21` → `^0.0.22` | [](https://securityscorecards.dev/viewer/?uri=github.com/Kludex/python-multipart) || [stream-zip](https://github.com/uktrade/stream-zip) | dependencies | patch | `^0.0.83` → `^0.0.84` | [](https://securityscorecards.dev/viewer/?uri=github.com/uktrade/stream-zip) |---### Release Notes<details><summary>microsoft/debugpy (debugpy)</summary>### [`v1.8.20`](https://github.com/microsoft/debugpy/releases/tag/v1.8.20): debugpy v1.8.20[Compare Source](microsoft/debugpy@v1.8.19...v1.8.20)Fixes for:- annotate in 3.14 causing exceptions: [#​1971](microsoft/debugpy#1971)Enhancements:- Use remote\_exec if available: [`c7e86a1`](microsoft/debugpy@c7e86a1)- Support more architectures: [`1bbecdf`](microsoft/debugpy@1bbecdf)Infrastructure work:- Support devcontainers for development: [`7dbc229`](microsoft/debugpy@7dbc229)Thanks to [@​rameshvarun](https://github.com/rameshvarun), [@​Xeonacid](https://github.com/Xeonacid), and [@​pdepetro](https://github.com/pdepetro) for the commits</details><details><summary>fastapi/fastapi (fastapi)</summary>### [`v0.128.8`](https://github.com/fastapi/fastapi/releases/tag/0.128.8)[Compare Source](fastapi/fastapi@0.128.7...0.128.8)##### Docs- 📝 Fix grammar in `docs/en/docs/tutorial/first-steps.md`. MR [#​14708](fastapi/fastapi#14708) by [@​SanjanaS10](https://github.com/SanjanaS10).##### Internal- 🔨 Tweak PDM hook script. MR [#​14895](fastapi/fastapi#14895) by [@​tiangolo](https://github.com/tiangolo).- ♻️ Update build setup for `fastapi-slim`, deprecate it, and make it only depend on `fastapi`. MR [#​14894](fastapi/fastapi#14894) by [@​tiangolo](https://github.com/tiangolo).### [`v0.128.7`](https://github.com/fastapi/fastapi/releases/tag/0.128.7)[Compare Source](fastapi/fastapi@0.128.6...0.128.7)##### Features- ✨ Show a clear error on attempt to include router into itself. MR [#​14258](fastapi/fastapi#14258) by [@​JavierSanchezCastro](https://github.com/JavierSanchezCastro).- ✨ Replace `dict` by `Mapping` on `HTTPException.headers`. MR [#​12997](fastapi/fastapi#12997) by [@​rijenkii](https://github.com/rijenkii).##### Refactors- ♻️ Simplify reading files in memory, do it sequentially instead of (fake) parallel. MR [#​14884](fastapi/fastapi#14884) by [@​tiangolo](https://github.com/tiangolo).##### Docs- 📝 Use `dfn` tag for definitions instead of `abbr` in docs. MR [#​14744](fastapi/fastapi#14744) by [@​YuriiMotov](https://github.com/YuriiMotov).##### Internal- ✅ Tweak comment in test to reference MR. MR [#​14885](fastapi/fastapi#14885) by [@​tiangolo](https://github.com/tiangolo).- 🔧 Update LLM-prompt for `abbr` and `dfn` tags. MR [#​14747](fastapi/fastapi#14747) by [@​YuriiMotov](https://github.com/YuriiMotov).- ✅ Test order for the submitted byte Files. MR [#​14828](fastapi/fastapi#14828) by [@​valentinDruzhinin](https://github.com/valentinDruzhinin).- 🔧 Configure `test` workflow to run tests with `inline-snapshot=review`. MR [#​14876](fastapi/fastapi#14876) by [@​YuriiMotov](https://github.com/YuriiMotov).### [`v0.128.6`](https://github.com/fastapi/fastapi/releases/tag/0.128.6)[Compare Source](fastapi/fastapi@0.128.5...0.128.6)##### Fixes- 🐛 Fix `on_startup` and `on_shutdown` parameters of `APIRouter`. MR [#​14873](fastapi/fastapi#14873) by [@​YuriiMotov](https://github.com/YuriiMotov).##### Translations- 🌐 Update translations for zh (update-outdated). MR [#​14843](fastapi/fastapi#14843) by [@​tiangolo](https://github.com/tiangolo).##### Internal- ✅ Fix parameterized tests with snapshots. MR [#​14875](fastapi/fastapi#14875) by [@​YuriiMotov](https://github.com/YuriiMotov).### [`v0.128.5`](https://github.com/fastapi/fastapi/releases/tag/0.128.5)[Compare Source](fastapi/fastapi@0.128.4...0.128.5)##### Refactors- ♻️ Refactor and simplify Pydantic v2 (and v1) compatibility internal utils. MR [#​14862](fastapi/fastapi#14862) by [@​tiangolo](https://github.com/tiangolo).##### Internal- ✅ Add inline snapshot tests for OpenAPI before changes from Pydantic v2. MR [#​14864](fastapi/fastapi#14864) by [@​tiangolo](https://github.com/tiangolo).### [`v0.128.4`](https://github.com/fastapi/fastapi/releases/tag/0.128.4)[Compare Source](fastapi/fastapi@0.128.3...0.128.4)##### Refactors- ♻️ Refactor internals, simplify Pydantic v2/v1 utils, `create_model_field`, better types for `lenient_issubclass`. MR [#​14860](fastapi/fastapi#14860) by [@​tiangolo](https://github.com/tiangolo).- ♻️ Simplify internals, remove Pydantic v1 only logic, no longer needed. MR [#​14857](fastapi/fastapi#14857) by [@​tiangolo](https://github.com/tiangolo).- ♻️ Refactor internals, cleanup unneeded Pydantic v1 specific logic. MR [#​14856](fastapi/fastapi#14856) by [@​tiangolo](https://github.com/tiangolo).##### Translations- 🌐 Update translations for fr (outdated pages). MR [#​14839](fastapi/fastapi#14839) by [@​YuriiMotov](https://github.com/YuriiMotov).- 🌐 Update translations for tr (outdated and missing). MR [#​14838](fastapi/fastapi#14838) by [@​YuriiMotov](https://github.com/YuriiMotov).##### Internal- ⬆️ Upgrade development dependencies. MR [#​14854](fastapi/fastapi#14854) by [@​tiangolo](https://github.com/tiangolo).### [`v0.128.3`](https://github.com/fastapi/fastapi/releases/tag/0.128.3)[Compare Source](fastapi/fastapi@0.128.2...0.128.3)##### Refactors- ♻️ Re-implement `on_event` in FastAPI for compatibility with the next Starlette, while keeping backwards compatibility. MR [#​14851](fastapi/fastapi#14851) by [@​tiangolo](https://github.com/tiangolo).##### Upgrades- ⬆️ Upgrade Starlette supported version range to `starlette>=0.40.0,<1.0.0`. MR [#​14853](fastapi/fastapi#14853) by [@​tiangolo](https://github.com/tiangolo).##### Translations- 🌐 Update translations for ru (update-outdated). MR [#​14834](fastapi/fastapi#14834) by [@​tiangolo](https://github.com/tiangolo).##### Internal- 👷 Run tests with Starlette from git. MR [#​14849](fastapi/fastapi#14849) by [@​tiangolo](https://github.com/tiangolo).- 👷 Run tests with lower bound uv sync, upgrade `fastapi[all]` minimum dependencies: `ujson >=5.8.0`, `orjson >=3.9.3`. MR [#​14846](fastapi/fastapi#14846) by [@​tiangolo](https://github.com/tiangolo).### [`v0.128.2`](https://github.com/fastapi/fastapi/releases/tag/0.128.2)[Compare Source](fastapi/fastapi@0.128.1...0.128.2)##### Features- ✨ Add support for PEP695 `TypeAliasType`. MR [#​13920](fastapi/fastapi#13920) by [@​cstruct](https://github.com/cstruct).- ✨ Allow `Response` type hint as dependency annotation. MR [#​14794](fastapi/fastapi#14794) by [@​jonathan-fulton](https://github.com/jonathan-fulton).##### Fixes- 🐛 Fix using `Json[list[str]]` type (issue [#​10997](fastapi/fastapi#10997)). MR [#​14616](fastapi/fastapi#14616) by [@​mkanetsuna](https://github.com/mkanetsuna).##### Docs- 📝 Update docs for translations. MR [#​14830](fastapi/fastapi#14830) by [@​tiangolo](https://github.com/tiangolo).- 📝 Fix duplicate word in `advanced-dependencies.md`. MR [#​14815](fastapi/fastapi#14815) by [@​Rayyan-Oumlil](https://github.com/Rayyan-Oumlil).##### Translations- 🌐 Enable Traditional Chinese translations. MR [#​14842](fastapi/fastapi#14842) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Enable French docs translations. MR [#​14841](fastapi/fastapi#14841) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translations for fr (translate-page). MR [#​14837](fastapi/fastapi#14837) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translations for de (update-outdated). MR [#​14836](fastapi/fastapi#14836) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translations for pt (update-outdated). MR [#​14833](fastapi/fastapi#14833) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translations for ko (update-outdated). MR [#​14835](fastapi/fastapi#14835) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translations for es (update-outdated). MR [#​14832](fastapi/fastapi#14832) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translations for tr (update-outdated). MR [#​14831](fastapi/fastapi#14831) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translations for tr (add-missing). MR [#​14790](fastapi/fastapi#14790) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translations for fr (update-outdated). MR [#​14826](fastapi/fastapi#14826) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translations for zh-hant (update-outdated). MR [#​14825](fastapi/fastapi#14825) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translations for uk (update-outdated). MR [#​14822](fastapi/fastapi#14822) by [@​tiangolo](https://github.com/tiangolo).- 🔨 Update docs and translations scripts, enable Turkish. MR [#​14824](fastapi/fastapi#14824) by [@​tiangolo](https://github.com/tiangolo).##### Internal- 🔨 Add max pages to translate to configs. MR [#​14840](fastapi/fastapi#14840) by [@​tiangolo](https://github.com/tiangolo).### [`v0.128.1`](https://github.com/fastapi/fastapi/releases/tag/0.128.1)[Compare Source](fastapi/fastapi@0.128.0...0.128.1)##### Features- ✨ Add `viewport` meta tag to improve Swagger UI on mobile devices. MR [#​14777](fastapi/fastapi#14777) by [@​Joab0](https://github.com/Joab0).- 🚸 Improve error message for invalid query parameter type annotations. MR [#​14479](fastapi/fastapi#14479) by [@​retwish](https://github.com/retwish).##### Fixes- 🐛 Update `ValidationError` schema to include `input` and `ctx`. MR [#​14791](fastapi/fastapi#14791) by [@​jonathan-fulton](https://github.com/jonathan-fulton).- 🐛 Fix TYPE\_CHECKING annotations for Python 3.14 (PEP 649). MR [#​14789](fastapi/fastapi#14789) by [@​mgu](https://github.com/mgu).- 🐛 Strip whitespaces from `Authorization` header credentials. MR [#​14786](fastapi/fastapi#14786) by [@​WaveTheory1](https://github.com/WaveTheory1).- 🐛 Fix OpenAPI duplication of `anyOf` refs for app-level responses with specified `content` and `model` as `Union`. MR [#​14463](fastapi/fastapi#14463) by [@​DJMcoder](https://github.com/DJMcoder).##### Refactors- 🎨 Tweak types for mypy. MR [#​14816](fastapi/fastapi#14816) by [@​tiangolo](https://github.com/tiangolo).- 🏷️ Re-export `IncEx` type from Pydantic instead of duplicating it. MR [#​14641](fastapi/fastapi#14641) by [@​mvanderlee](https://github.com/mvanderlee).- 💡 Update comment for Pydantic internals. MR [#​14814](fastapi/fastapi#14814) by [@​tiangolo](https://github.com/tiangolo).##### Docs- 📝 Update docs for contributing translations, simplify title. MR [#​14817](fastapi/fastapi#14817) by [@​tiangolo](https://github.com/tiangolo).- 📝 Fix typing issue in `docs_src/app_testing/app_b` code example. MR [#​14573](fastapi/fastapi#14573) by [@​timakaa](https://github.com/timakaa).- 📝 Fix example of license identifier in documentation. MR [#​14492](fastapi/fastapi#14492) by [@​johnson-earls](https://github.com/johnson-earls).- 📝 Add banner to translated pages. MR [#​14809](fastapi/fastapi#14809) by [@​YuriiMotov](https://github.com/YuriiMotov).- 📝 Add links to related sections of docs to docstrings. MR [#​14776](fastapi/fastapi#14776) by [@​YuriiMotov](https://github.com/YuriiMotov).- 📝 Update embedded code examples to Python 3.10 syntax. MR [#​14758](fastapi/fastapi#14758) by [@​YuriiMotov](https://github.com/YuriiMotov).- 📝 Fix dependency installation command in `docs/en/docs/contributing.md`. MR [#​14757](fastapi/fastapi#14757) by [@​YuriiMotov](https://github.com/YuriiMotov).- 📝 Use return type annotation instead of `response_model` when possible. MR [#​14753](fastapi/fastapi#14753) by [@​YuriiMotov](https://github.com/YuriiMotov).- 📝 Use `WSGIMiddleware` from `a2wsgi` instead of deprecated `fastapi.middleware.wsgi.WSGIMiddleware`. MR [#​14756](fastapi/fastapi#14756) by [@​YuriiMotov](https://github.com/YuriiMotov).- 📝 Fix minor typos in release notes. MR [#​14780](fastapi/fastapi#14780) by [@​whyvineet](https://github.com/whyvineet).- 🐛 Fix copy button in custom.js. MR [#​14722](fastapi/fastapi#14722) by [@​fcharrier](https://github.com/fcharrier).- 📝 Add contribution instructions about LLM generated code and comments and automated tools for MRs. MR [#​14706](fastapi/fastapi#14706) by [@​tiangolo](https://github.com/tiangolo).- 📝 Update docs for management tasks. MR [#​14705](fastapi/fastapi#14705) by [@​tiangolo](https://github.com/tiangolo).- 📝 Update docs about managing translations. MR [#​14704](fastapi/fastapi#14704) by [@​tiangolo](https://github.com/tiangolo).- 📝 Update docs for contributing with translations. MR [#​14701](fastapi/fastapi#14701) by [@​tiangolo](https://github.com/tiangolo).- 📝 Specify language code for code block. MR [#​14656](fastapi/fastapi#14656) by [@​YuriiMotov](https://github.com/YuriiMotov).##### Translations- 🌐 Improve LLM prompt of `uk` documentation. MR [#​14795](fastapi/fastapi#14795) by [@​roli2py](https://github.com/roli2py).- 🌐 Update translations for ja (update-outdated). MR [#​14588](fastapi/fastapi#14588) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translations for uk (update outdated, found by fixer tool). MR [#​14739](fastapi/fastapi#14739) by [@​YuriiMotov](https://github.com/YuriiMotov).- 🌐 Update translations for tr (update-outdated). MR [#​14745](fastapi/fastapi#14745) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update `llm-prompt.md` for Korean language. MR [#​14763](fastapi/fastapi#14763) by [@​seuthootDev](https://github.com/seuthootDev).- 🌐 Update translations for ko (update outdated, found by fixer tool). MR [#​14738](fastapi/fastapi#14738) by [@​YuriiMotov](https://github.com/YuriiMotov).- 🌐 Update translations for de (update-outdated). MR [#​14690](fastapi/fastapi#14690) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update LLM prompt for Russian translations. MR [#​14733](fastapi/fastapi#14733) by [@​YuriiMotov](https://github.com/YuriiMotov).- 🌐 Update translations for ru (update-outdated). MR [#​14693](fastapi/fastapi#14693) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translations for pt (update-outdated). MR [#​14724](fastapi/fastapi#14724) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update Korean LLM prompt. MR [#​14740](fastapi/fastapi#14740) by [@​hard-coders](https://github.com/hard-coders).- 🌐 Improve LLM prompt for Turkish translations. MR [#​14728](fastapi/fastapi#14728) by [@​Kadermiyanyedi](https://github.com/Kadermiyanyedi).- 🌐 Update portuguese llm-prompt.md. MR [#​14702](fastapi/fastapi#14702) by [@​ceb10n](https://github.com/ceb10n).- 🌐 Update LLM prompt instructions file for French. MR [#​14618](fastapi/fastapi#14618) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translations for ko (add-missing). MR [#​14699](fastapi/fastapi#14699) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translations for ko (update-outdated). MR [#​14589](fastapi/fastapi#14589) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translations for uk (update-outdated). MR [#​14587](fastapi/fastapi#14587) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translations for es (update-outdated). MR [#​14686](fastapi/fastapi#14686) by [@​tiangolo](https://github.com/tiangolo).- 🔧 Add LLM prompt file for Turkish, generated from the existing translations. MR [#​14547](fastapi/fastapi#14547) by [@​tiangolo](https://github.com/tiangolo).- 🔧 Add LLM prompt file for Traditional Chinese, generated from the existing translations. MR [#​14550](fastapi/fastapi#14550) by [@​tiangolo](https://github.com/tiangolo).- 🔧 Add LLM prompt file for Simplified Chinese, generated from the existing translations. MR [#​14549](fastapi/fastapi#14549) by [@​tiangolo](https://github.com/tiangolo).##### Internal- ⬇️ Downgrade LLM translations model to GPT-5 to reduce mistakes. MR [#​14823](fastapi/fastapi#14823) by [@​tiangolo](https://github.com/tiangolo).- 🐛 Fix translation script commit in place. MR [#​14818](fastapi/fastapi#14818) by [@​tiangolo](https://github.com/tiangolo).- 🔨 Update translation script to retry if LLM-response doesn't pass validation with Translation Fixer tool. MR [#​14749](fastapi/fastapi#14749) by [@​YuriiMotov](https://github.com/YuriiMotov).- 👷 Run tests only on relevant code changes (not on docs). MR [#​14813](fastapi/fastapi#14813) by [@​tiangolo](https://github.com/tiangolo).- 👷 Run mypy by pre-commit. MR [#​14806](fastapi/fastapi#14806) by [@​YuriiMotov](https://github.com/YuriiMotov).- ⬆ Bump ruff from 0.14.3 to 0.14.14. MR [#​14798](fastapi/fastapi#14798) by [@​dependabot\[bot\]](https://github.com/apps/dependabot).- ⬆ Bump pyasn1 from 0.6.1 to 0.6.2. MR [#​14804](fastapi/fastapi#14804) by [@​dependabot\[bot\]](https://github.com/apps/dependabot).- ⬆ Bump sqlmodel from 0.0.27 to 0.0.31. MR [#​14802](fastapi/fastapi#14802) by [@​dependabot\[bot\]](https://github.com/apps/dependabot).- ⬆ Bump mkdocs-macros-plugin from 1.4.1 to 1.5.0. MR [#​14801](fastapi/fastapi#14801) by [@​dependabot\[bot\]](https://github.com/apps/dependabot).- ⬆ Bump gitpython from 3.1.45 to 3.1.46. MR [#​14800](fastapi/fastapi#14800) by [@​dependabot\[bot\]](https://github.com/apps/dependabot).- ⬆ Bump typer from 0.16.0 to 0.21.1. MR [#​14799](fastapi/fastapi#14799) by [@​dependabot\[bot\]](https://github.com/apps/dependabot).- 👥 Update FastAPI GitHub topic repositories. MR [#​14803](fastapi/fastapi#14803) by [@​tiangolo](https://github.com/tiangolo).- 👥 Update FastAPI People - Contributors and Translators. MR [#​14796](fastapi/fastapi#14796) by [@​tiangolo](https://github.com/tiangolo).- 🔧 Ensure that an edit to `uv.lock` gets the `internal` label. MR [#​14759](fastapi/fastapi#14759) by [@​svlandeg](https://github.com/svlandeg).- 🔧 Update sponsors: remove Requestly. MR [#​14735](fastapi/fastapi#14735) by [@​tiangolo](https://github.com/tiangolo).- 🔧 Update sponsors, LambdaTest changes to TestMu AI. MR [#​14734](fastapi/fastapi#14734) by [@​tiangolo](https://github.com/tiangolo).- ⬆ Bump actions/cache from 4 to 5. MR [#​14511](fastapi/fastapi#14511) by [@​dependabot\[bot\]](https://github.com/apps/dependabot).- ⬆ Bump actions/upload-artifact from 5 to 6. MR [#​14525](fastapi/fastapi#14525) by [@​dependabot\[bot\]](https://github.com/apps/dependabot).- ⬆ Bump actions/download-artifact from 6 to 7. MR [#​14526](fastapi/fastapi#14526) by [@​dependabot\[bot\]](https://github.com/apps/dependabot).- 👷 Tweak CI input names. MR [#​14688](fastapi/fastapi#14688) by [@​tiangolo](https://github.com/tiangolo).- 🔨 Refactor translation script to allow committing in place. MR [#​14687](fastapi/fastapi#14687) by [@​tiangolo](https://github.com/tiangolo).- 🐛 Fix translation script path. MR [#​14685](fastapi/fastapi#14685) by [@​tiangolo](https://github.com/tiangolo).- ✅ Enable tests in CI for scripts. MR [#​14684](fastapi/fastapi#14684) by [@​tiangolo](https://github.com/tiangolo).- 🔧 Add pre-commit local script to fix language translations. MR [#​14683](fastapi/fastapi#14683) by [@​tiangolo](https://github.com/tiangolo).- ⬆️ Migrate to uv. MR [#​14676](fastapi/fastapi#14676) by [@​DoctorJohn](https://github.com/DoctorJohn).- 🔨 Add LLM translations tool fixer. MR [#​14652](fastapi/fastapi#14652) by [@​YuriiMotov](https://github.com/YuriiMotov).- 👥 Update FastAPI People - Sponsors. MR [#​14626](fastapi/fastapi#14626) by [@​tiangolo](https://github.com/tiangolo).- 👥 Update FastAPI GitHub topic repositories. MR [#​14630](fastapi/fastapi#14630) by [@​tiangolo](https://github.com/tiangolo).- 👥 Update FastAPI People - Contributors and Translators. MR [#​14625](fastapi/fastapi#14625) by [@​tiangolo](https://github.com/tiangolo).- 🌐 Update translation prompts. MR [#​14619](fastapi/fastapi#14619) by [@​tiangolo](https://github.com/tiangolo).- 🔨 Update LLM translation script to guide reviewers to change the prompt. MR [#​14614](fastapi/fastapi#14614) by [@​tiangolo](https://github.com/tiangolo).- 👷 Do not run translations on cron while finishing updating existing languages. MR [#​14613](fastapi/fastapi#14613) by [@​tiangolo](https://github.com/tiangolo).- 🔥 Remove test variants for Pydantic v1 in test\_request\_params. MR [#​14612](fastapi/fastapi#14612) by [@​tiangolo](https://github.com/tiangolo).- 🔥 Remove Pydantic v1 specific test variants. MR [#​14611](fastapi/fastapi#14611) by [@​tiangolo](https://github.com/tiangolo).</details><details><summary>Kludex/python-multipart (python-multipart)</summary>### [`v0.0.22`](https://github.com/Kludex/python-multipart/blob/HEAD/CHANGELOG.md#0022-2026-01-25)[Compare Source](Kludex/python-multipart@0.0.21...0.0.22)- Drop directory path from filename in `File` [9433f4b](Kludex/python-multipart@9433f4b).</details><details><summary>uktrade/stream-zip (stream-zip)</summary>### [`v0.0.84`](https://github.com/uktrade/stream-zip/releases/tag/v0.0.84)[Compare Source](uktrade/stream-zip@v0.0.83...v0.0.84)#### What's Changed##### Client-code facing changes- feat: remove input buffering and flush output buffer after local header by [@​michalc](https://github.com/michalc) in [#​176](uktrade/stream-zip#176)##### Non client-code facing changes- build(deps): bump send and [@​x-govuk/govuk-prototype-components](https://github.com/x-govuk/govuk-prototype-components) by [@​dependabot](https://github.com/dependabot)\[bot] in [#​148](uktrade/stream-zip#148)- build(deps): bump rollup from 4.17.2 to 4.22.4 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​149](uktrade/stream-zip#149)- build(deps): bump cross-spawn from 7.0.3 to 7.0.6 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​150](uktrade/stream-zip#150)- build(deps): bump js-yaml from 3.14.1 to 3.14.2 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​152](uktrade/stream-zip#152)- build(deps): bump brace-expansion by [@​dependabot](https://github.com/dependabot)\[bot] in [#​151](uktrade/stream-zip#151)- build(deps): bump glob to 10.5.0 by [@​JosefSmith](https://github.com/JosefSmith) in [#​154](uktrade/stream-zip#154)- feat: add pre-commit framework by [@​JosefSmith](https://github.com/JosefSmith) in [#​155](uktrade/stream-zip#155)- feat: add CODEOWNERS by [@​JosefSmith](https://github.com/JosefSmith) in [#​156](uktrade/stream-zip#156)- feat: tick off security checklist by [@​JosefSmith](https://github.com/JosefSmith) in [#​157](uktrade/stream-zip#157)- fix: update upload and deploy pages actions to v4 by [@​JosefSmith](https://github.com/JosefSmith) in [#​158](uktrade/stream-zip#158)- build: move tests to ubuntu 24.04 by [@​JosefSmith](https://github.com/JosefSmith) in [#​159](uktrade/stream-zip#159)- Fix GitHub pages deploy permissions by [@​JackSwerdlow](https://github.com/JackSwerdlow) in [#​160](uktrade/stream-zip#160)- docs: update to latest GDS Design System by [@​michalc](https://github.com/michalc) in [#​162](uktrade/stream-zip#162)- docs: use more appropriate logo and split into subsections by [@​michalc](https://github.com/michalc) in [#​163](uktrade/stream-zip#163)- docs: fix header styles by [@​michalc](https://github.com/michalc) in [#​164](uktrade/stream-zip#164)- docs: update favicon to one consistent with uktrade GitHub org by [@​michalc](https://github.com/michalc) in [#​165](uktrade/stream-zip#165)- docs: correct title suffix by [@​michalc](https://github.com/michalc) in [#​166](uktrade/stream-zip#166)- docs: use official DBT image for OpenGraph/social image by [@​michalc](https://github.com/michalc) in [#​167](uktrade/stream-zip#167)- docs: remove footer crown by [@​michalc](https://github.com/michalc) in [#​168](uktrade/stream-zip#168)- docs: initial API reference by [@​michalc](https://github.com/michalc) in [#​169](uktrade/stream-zip#169)- docs: initial functions API reference by [@​michalc](https://github.com/michalc) in [#​170](uktrade/stream-zip#170)- docs: surface password protection as its own page by [@​michalc](https://github.com/michalc) in [#​171](uktrade/stream-zip#171)- docs: fix typos and broken links by [@​michalc](https://github.com/michalc) in [#​172](uktrade/stream-zip#172)- chore: update pre-commit repo to latest version by [@​michalc](https://github.com/michalc) in [#​175](uktrade/stream-zip#175)- ci: bump upload and download action versions in PyPI publish by [@​michalc](https://github.com/michalc) in [#​177](uktrade/stream-zip#177)- ci: add permissions for PyPI publish to amend existing release by [@​michalc](https://github.com/michalc) in [#​178](uktrade/stream-zip#178)#### New Contributors- [@​JackSwerdlow](https://github.com/JackSwerdlow) made their first contribution in [#​160](uktrade/stream-zip#160)**Full Changelog**: <uktrade/stream-zip@v0.0.83...v0.0.84></details>--- - [ ] <!-- rebase-check -->If you want to rebase/retry this MR, check this box---This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNS4wIiwidXBkYXRlZEluVmVyIjoiNDMuMjUuNyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwicmVub3ZhdGUiXX0=-->See merge request swiss-armed-forces/cyber-command/cea/loom!305Co-authored-by: Loom MR Pipeline Trigger <group_103951964_bot_9504bb8dead6d4e406ad817a607f24be@noreply.gitlab.com>Co-authored-by: open-source Pipeline <group_90701827_bot_ed04ae348bc5f40af9966fb8b6867e99@noreply.gitlab.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.Learn more about bidirectional Unicode characters
Sign up for freeto join this conversation on GitHub. Already have an account?Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Uh oh!
There was an error while loading.Please reload this page.
Description
Fixes whitespace handling in authorization header parameter extraction to comply withRFC 6750.
Problem
The current implementation preserves leading/trailing whitespace in the extracted credential parameter. While RFC 6750 allows one or more spaces (
1*SP) between "Bearer" and the token, the token definition (b64token) doesn't include whitespace characters, meaning spaces should be treated as separators only.This causes the extracted credentials to include extraneous whitespace, which can lead to authentication failures.
Solution
Added
.strip()to the parameter extraction to remove leading and trailing whitespace:Reproduction
Before the fix:
Test case 1: Single space (correct)
Response:
{"scheme":"Bearer","credentials":"xxx"}✓Test case 2: Multiple spaces
Response:
{"scheme":"Bearer","credentials":" xxx"}✗Test case 3: Trailing whitespace
Response:
{"scheme":"Bearer","credentials":"xxx "}✗After the fix:
All three test cases now return:
{"scheme":"Bearer","credentials":"xxx"}✓Changes
get_authorization_scheme_param()infastapi/security/utils.pyto strip whitespace from the parameterChecklist