testing vulnerable fastapi version #1866
Conversation
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
pyproject.toml
Outdated
| "mkdocs-static-i18n>=1.3.0", | ||
| "eval-type-backport>=0.2.2", | ||
| "fastapi >= 0.110.0, <1", | ||
| "fastapi==0.109.1", |
There was a problem hiding this comment.
Changing the dev extra from fastapi >= 0.110.0, <1 to fastapi==0.109.1 pulls in FastAPI’s older requirement pydantic>=2.0.3,<2.7. The project itself declares pydantic>=2.10,<3 in the main dependencies. When a contributor installs the dev group (e.g. uv sync --group dev or pip install .[dev]), the resolver cannot satisfy both constraints, so the environment fails to install. The previous range avoided this conflict by allowing a FastAPI that supports newer Pydantic versions.
Useful? React with 👍 / 👎.
No description provided.