chore(deps): update backend python dependencies (minor/patch)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
fastapi (changelog)	~=0.121.0 -> ~=0.124.4
yt-dlp	==2025.10.22 -> ==2025.12.8

---

Release Notes

fastapi/fastapi (fastapi)

v0.124.4

Compare Source

Fixes

• 🐛 Fix parameter aliases. PR #​14371 by @​YuriiMotov.

v0.124.3

Compare Source

Fixes

• 🐛 Fix support for tagged union with discriminator inside of Annotated with Body(). PR #​14512 by @​tiangolo.

Refactors

• ✅ Add set of tests for request parameters and alias. PR #​14358 by @​YuriiMotov.

Docs

• 📝 Tweak links format. PR #​14505 by @​tiangolo.
• 📝 Update docs about re-raising validation errors, do not include string as is to not leak information. PR #​14487 by @​tiangolo.
• 🔥 Remove external links section. PR #​14486 by @​tiangolo.

Translations

• 🌐 Sync Russian docs. PR #​14509 by @​YuriiMotov.
• 🌐 Sync German docs. PR #​14488 by @​nilslindemann.

Internal

• 👷 Tweak coverage to not pass Smokeshow max file size limit. PR #​14507 by @​tiangolo.
• ✅ Expand test matrix to include Windows and MacOS. PR #​14171 by @​svlandeg.

v0.124.2

Compare Source

Fixes

• 🐛 Fix support for if TYPE_CHECKING, non-evaluated stringified annotations. PR #​14485 by @​tiangolo.

v0.124.1

Compare Source

Fixes

• 🐛 Fix handling arbitrary types when using arbitrary_types_allowed=True. PR #​14482 by @​tiangolo.

Docs

• 📝 Add variants for code examples in "Advanced User Guide". PR #​14413 by @​YuriiMotov.
• 📝 Update tech stack in project generation docs. PR #​14472 by @​alejsdev.

Internal

• ✅ Add test for Pydantic v2, dataclasses, UUID, and __annotations__. PR #​14477 by @​tiangolo.

v0.124.0

Compare Source

Features

• 🚸 Improve tracebacks by adding endpoint metadata. PR #​14306 by @​savannahostrowski.

Internal

• ✏️ Fix typo in scripts/mkdocs_hooks.py. PR #​14457 by @​yujiteshima.

v0.123.10

Compare Source

Fixes

• 🐛 Fix using class (not instance) dependency that has __call__ method. PR #​14458 by @​YuriiMotov.
• 🐛 Fix separate_input_output_schemas=False with computed_field. PR #​14453 by @​YuriiMotov.

v0.123.9

Compare Source

v0.123.8

Compare Source

Fixes

• 🐛 Fix OpenAPI security scheme OAuth2 scopes declaration, deduplicate security schemes with different scopes. PR #​14455 by @​tiangolo.

v0.123.7

Compare Source

Fixes

• 🐛 Fix evaluating stringified annotations in Python 3.10. PR #​11355 by @​chaen.

v0.123.6

Compare Source

Fixes

• 🐛 Fix support for functools wraps and partial combined, for async and regular functions and classes in path operations and dependencies. PR #​14448 by @​tiangolo.

v0.123.5

Compare Source

Features

• ✨ Allow using dependables with functools.partial(). PR #​9753 by @​lieryan.
• ✨ Add support for wrapped functions (e.g. @functools.wraps()) used with forward references. PR #​5077 by @​lucaswiman.
• ✨ Handle wrapped dependencies. PR #​9555 by @​phy1729.

Fixes

• 🐛 Fix optional sequence handling with new union syntax from Python 3.10. PR #​14430 by @​Viicos.

Refactors

• 🔥 Remove dangling extra condiitonal no longer needed. PR #​14435 by @​tiangolo.
• ♻️ Refactor internals, update is_coroutine check to reuse internal supported variants (unwrap, check class). PR #​14434 by @​tiangolo.

Translations

• 🌐 Sync German docs. PR #​14367 by @​nilslindemann.

v0.123.4

Compare Source

Fixes

• 🐛 Fix OpenAPI schema support for computed fields when using separate_input_output_schemas=False. PR #​13207 by @​vgrafe.

Docs

• 📝 Fix docstring of servers parameter. PR #​14405 by @​YuriiMotov.

v0.123.3

Compare Source

Fixes

• 🐛 Fix Query\Header\Cookie parameter model alias. PR #​14360 by @​YuriiMotov.
• 🐛 Fix optional sequence handling in serialize sequence value with Pydantic V2. PR #​14297 by @​YuriiMotov.

v0.123.2

Compare Source

Fixes

• 🐛 Fix unformatted {type_} in FastAPIError. PR #​14416 by @​Just-Helpful.
• 🐛 Fix parsing extra non-body parameter list. PR #​14356 by @​YuriiMotov.
• 🐛 Fix parsing extra Form parameter list. PR #​14303 by @​YuriiMotov.
• 🐛 Fix support for form values with empty strings interpreted as missing (None if that's the default), for compatibility with HTML forms. PR #​13537 by @​MarinPostma.

Docs

• 📝 Add tip on how to install pip in case of No module named pip error in virtual-environments.md. PR #​14211 by @​zadevhub.
• 📝 Update Primary Key notes for the SQL databases tutorial to avoid confusion. PR #​14120 by @​FlaviusRaducu.
• 📝 Clarify estimation note in documentation. PR #​14070 by @​SaisakthiM.

v0.123.1

Compare Source

Fixes

• 🐛 Avoid accessing non-existing "$ref" key for Pydantic v2 compat remapping. PR #​14361 by @​svlandeg.
• 🐛 Fix TypeError when encoding a decimal with a NaN or Infinity value. PR #​12935 by @​kentwelcome.

Internal

• 🐛 Fix Windows UnicodeEncodeError in CLI test. PR #​14295 by @​hemanth-thirthahalli.
• 🔧 Update sponsors: add Greptile. PR #​14429 by @​tiangolo.
• 👥 Update FastAPI GitHub topic repositories. PR #​14426 by @​tiangolo.
• ⬆ Bump markdown-include-variants from 0.0.6 to 0.0.7. PR #​14423 by @​YuriiMotov.
• 👥 Update FastAPI People - Sponsors. PR #​14422 by @​tiangolo.
• 👥 Update FastAPI People - Contributors and Translators. PR #​14420 by @​tiangolo.

v0.123.0

Compare Source

Fixes

• 🐛 Cache dependencies that don't use scopes and don't have sub-dependencies with scopes. PR #​14419 by @​tiangolo.

v0.122.1

Compare Source

Fixes

• 🐛 Fix hierarchical security scope propagation. PR #​5624 by @​kristjanvalur.

Docs

• 💅 Update CSS to explicitly use emoji font. PR #​14415 by @​tiangolo.

Internal

• ⬆ Bump markdown-include-variants from 0.0.5 to 0.0.6. PR #​14418 by @​YuriiMotov.

v0.122.0

Compare Source

Fixes

• 🐛 Use 401 status code in security classes when credentials are missing. PR #​13786 by @​YuriiMotov.
  • If your code depended on these classes raising the old (less correct) 403 status code, check the new docs about how to override the classes, to use the same old behavior: Use Old 403 Authentication Error Status Codes.

Internal

• 🔧 Configure labeler to exclude files that start from underscore for lang-all label. PR #​14213 by @​YuriiMotov.
• 👷 Add pre-commit config with local script for permalinks. PR #​14398 by @​tiangolo.
• 💄 Use font Fira Code to fix display of Rich panels in docs in Windows. PR #​14387 by @​tiangolo.
• 👷 Add custom pre-commit CI. PR #​14397 by @​tiangolo.
• ⬆ Bump actions/checkout from 5 to 6. PR #​14381 by @​dependabot[bot].
• 👷 Upgrade latest-changes GitHub Action and pin actions/checkout@v5. PR #​14403 by @​svlandeg.
• 🛠️ Add add-permalinks and add-permalinks-page to scripts/docs.py. PR #​14033 by @​YuriiMotov.
• 🔧 Upgrade Material for MkDocs and remove insiders. PR #​14375 by @​tiangolo.

v0.121.3

Compare Source

0.121.3

Refactors

• ♻️ Make the result of Depends() and Security() hashable, as a workaround for other tools interacting with these internal parts. PR #​14372 by @​tiangolo.

Upgrades

• ⬆️ Bump Starlette to <0.51.0. PR #​14282 by @​musicinmybrain.

Docs

• 📝 Add missing hash part. PR #​14369 by @​nilslindemann.
• 📝 Fix typos in code comments. PR #​14364 by @​Edge-Seven.
• 📝 Add docs for using FastAPI Cloud. PR #​14359 by @​tiangolo.

v0.121.2

Compare Source

Fixes

• 🐛 Fix handling of JSON Schema attributes named "$ref". PR #​14349 by @​tiangolo.

Docs

• 📝 Add EuroPython talk & podcast episode with Sebastián Ramírez. PR #​14260 by @​clytaemnestra.
• ✏️ Fix links and add missing permalink in docs. PR #​14217 by @​YuriiMotov.

Translations

• 🌐 Update Portuguese translations with LLM prompt. PR #​14228 by @​ceb10n.
• 🔨 Add Portuguese translations LLM prompt. PR #​14208 by @​ceb10n.
• 🌐 Sync Russian docs. PR #​14331 by @​YuriiMotov.
• 🌐 Sync German docs. PR #​14317 by @​nilslindemann.

v0.121.1

Compare Source

Fixes

• 🐛 Fix Depends(func, scope='function') for top level (parameterless) dependencies. PR #​14301 by @​luzzodev.

Docs

• 📝 Upate docs for advanced dependencies with yield, noting the changes in 0.121.0, adding scope. PR #​14287 by @​tiangolo.

Internal

• ⬆ Bump ruff from 0.13.2 to 0.14.3. PR #​14276 by @​dependabot[bot].
• ⬆ [pre-commit.ci] pre-commit autoupdate. PR #​14289 by @​pre-commit-ci[bot].

yt-dlp/yt-dlp (yt-dlp)

v2025.12.8

Compare Source

v2025.11.12

Compare Source

Important changes

• An external JavaScript runtime is now required for full YouTube support
  yt-dlp now requires users to have an external JavaScript runtime (e.g. Deno) installed in order to solve the JavaScript challenges presented by YouTube. Read more

Core changes

• cookies
  • Allow --cookies-from-browser for Safari on iOS (#​14950) by pha1n0q
  • Support Firefox cookies database v17 (#​15010) by Grub4K
• sponsorblock: Add hook category (#​14845) by seproDev
• update: Fix PyInstaller onedir variant detection (#​14800) by bashonly

Extractor changes

• 1tv: live: Add extractor (#​14299) by swayll
• ardaudiothek: Add extractors (#​14309) by evilpie, marieell
• bunnycdn
  • Fix extractor (#​14954) by seproDev
  • Support player subdomain URLs (#​14979) by einstein95
• discoverynetworksde: Fix extraction (#​14818) by dirkf, w4grfw (With fixes in f3c255b by bashonly)
• floatplane: Fix extractor (#​14984) by i3p9
• googledrive
  • Fix subtitles extraction (#​14809) by seproDev
  • Rework extractor (#​14746) by seproDev
• kika: Do not extract non-existent subtitles (#​14813) by InvalidUsernameException
• mux: Add extractor (#​14914) by PierceLBrooks, seproDev
• nascarclassics: Add extractor (#​14866) by JrM2628
• nbc: Detect and discard DRM formats (#​14844) by bashonly
• ntv.ru: Rework extractor (#​14934) by anlar, seproDev (With fixes in a86eeaa by seproDev)
• play.tv: Update extractor for new domain (#​14905) by thomasmllt
• tubetugraz: Support alternate URL format (#​14718) by krystophny
• twitch
  • Fix playlist extraction (#​15008) by bashonly, ctengel
  • stream: Fix extractor (#​14988) by seproDev
  • vod: Fix extractor (#​14999) by Zer0spectrum
• urplay: Fix extractor (#​14785) by seproDev
• web.archive: youtube: Fix extractor (#​14753) by seproDev
• xhamster: Fix extractor (#​14948) by CaramelConnoisseur, dhwz
• youtube
  • Add tv_downgraded client (#​14887) by seproDev (With fixes in fa35eb2)
  • Fix web_embedded client extraction (#​14843) by bashonly, seproDev
  • Fix auto-generated metadata extraction (#​13896) by TheQWERTYCodr
  • Fix original language detection (#​14919) by bashonly
  • Implement external n/sig solver (#​14157) by bashonly, coletdjnz, Grub4K, seproDev (With fixes in 4b4223b, ee98be4, c0c9f30, cacd163, 8636a9b)
  • Support collaborators (#​14677) by seproDev
  • tab: Fix duration extraction for feeds (#​14668) by WeidiDeng

Downloader changes

• ffmpeg
  • Apply ffmpeg_args for each format (#​14886) by bashonly
  • Limit read rate for DASH livestreams (#​14918) by bashonly

Networking changes

• Ensure underlying file object is closed when fully read (#​14935) by coletdjnz

Misc. changes

• Fix zsh path argument completion (#​14953) by matyb08
• build: Bump musllinux Python version to 3.14 (#​14623) by bashonly
• cleanup
  • Miscellaneous
    • c63b4e2 by bashonly, matyb08, seproDev
    • 335653b by bashonly, seproDev
• devscripts: Improve install_deps script (#​14766) by bashonly
• test: Skip flaky tests if source unchanged (#​14970) by bashonly, Grub4K

---

Configuration

📅 Schedule: Branch creation - "on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

✅ Backend requirements.txt updated

Generated from backend/uv.lock using uv export --no-hashes --frozen > requirements.txt

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.