📝 Update release notes

[skip ci]
⬆ Bump pyjwt from 2.13.0 to 2.15.0 (#2494 )
2026-11-03 20:36:27 +00:00 · 2026-10-03 05:15:04 +00:00 · 2026-10-03 07:15:01 +02:00 · 2026-10-03 05:11:20 +00:00 · 2026-10-03 07:11:13 +02:00
13 changed files with 18 additions and 16 deletions
@@ -28,7 +28,7 @@ jobs:
        with:
          python-version-file: ".python-version"
      - name: Setup uv
-        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
        with:
          version: "latest-known"
          cache-dependency-glob: |
@@ -29,7 +29,7 @@ jobs:
        with:
          python-version-file: ".python-version"
      - name: Install uv
-        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
        with:
          version: "latest-known"
      - name: Extract release details
@@ -35,7 +35,7 @@ jobs:
          # Override frontend/.env so the deployed frontend uses the same origin as the API
          VITE_API_URL: ""
      - name: Set up uv
-        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
        with:
          version: "latest-known"
      - name: Prepare database
@@ -66,7 +66,7 @@ jobs:
      with:
        limit-access-to-actor: true
    - name: Install uv
-      uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+      uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
      with:
        version: "latest-known"
    - run: uv sync
@@ -46,7 +46,7 @@ jobs:
        with:
          python-version-file: .python-version
      - name: Setup uv
-        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
        with:
          version: "latest-known"
          cache-dependency-glob: |
@@ -38,7 +38,7 @@ jobs:
        with:
          python-version-file: ".python-version"
      - name: Install uv
-        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
        with:
          version: "latest-known"
      - name: Prepare release
@@ -24,7 +24,7 @@ jobs:
        with:
          python-version-file: .python-version
      - name: Setup uv
-        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
        with:
          version: "latest-known"
          cache-dependency-glob: |
@@ -22,7 +22,7 @@ jobs:
        with:
          python-version-file: .python-version
      - name: Install uv
-        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
        with:
          version: "latest-known"
      - run: docker compose down -v --remove-orphans
@@ -24,7 +24,7 @@ jobs:
        with:
          persist-credentials: false
      - name: Run zizmor
-        uses: zizmorcore/zizmor-action@3dc1ecc9bcb9e94e9b2c709687979e1298497054 # v0.6.2
+        uses: zizmorcore/zizmor-action@cc914d7f3750a2d13d75c7f184a1060aa0e9d482 # v0.6.4
        with:
          advanced-security: ${{ github.repository_owner == 'fastapi' }}
          annotations: ${{ github.repository_owner != 'fastapi' }}
@@ -47,14 +47,14 @@ repos:

      - id: local-mypy
        name: mypy check
-        entry: uv run mypy --config-file backend/pyproject.toml backend/app
+        entry: uv run mypy backend/app
        require_serial: true
        language: unsupported
        pass_filenames: false

      - id: local-ty
        name: ty check
-        entry: uv run ty check --project backend backend/app
+        entry: uv run ty check backend/app
        require_serial: true
        language: unsupported
        pass_filenames: false
@@ -16,7 +16,7 @@ dependencies = [
    "sqlmodel>=0.0.39,<1.0.0",
    "pydantic-settings<3.0.0,>=2.2.1",
    "sentry-sdk[fastapi]>=2.68.1,<3.0.0",
-    "pyjwt<3.0.0,>=2.13.0",
+    "pyjwt>=2.15.0,<3.0.0",
    "pwdlib[argon2,bcrypt]>=0.3.1",
 ]

@@ -21,6 +21,8 @@

 ### Internal

+* ⬆ Bump pyjwt from 2.13.0 to 2.15.0. PR [#2494](https://github.com/fastapi/full-stack-fastapi-template/pull/2494) by [@dependabot[bot]](https://github.com/apps/dependabot).
+* ⬆ Bump the github-actions group with 2 updates. PR [#2495](https://github.com/fastapi/full-stack-fastapi-template/pull/2495) by [@dependabot[bot]](https://github.com/apps/dependabot).
 * ⬆ Bump traefik from 3.6 to v3.7 in the docker-compose group. PR [#2465](https://github.com/fastapi/full-stack-fastapi-template/pull/2465) by [@dependabot[bot]](https://github.com/apps/dependabot).
 * ⬆ Bump pre-commit hooks. PR [#2471](https://github.com/fastapi/full-stack-fastapi-template/pull/2471) by [@pr-submit[bot]](https://github.com/apps/pr-submit).
 * ⬆ Update pwdlib[argon2,bcrypt] requirement from >=0.3.0 to >=0.3.1. PR [#2468](https://github.com/fastapi/full-stack-fastapi-template/pull/2468) by [@dependabot[bot]](https://github.com/apps/dependabot).
@@ -105,7 +105,7 @@ requires-dist = [
    { name = "pwdlib", extras = ["argon2", "bcrypt"], specifier = ">=0.3.1" },
    { name = "pydantic", specifier = ">2.0" },
    { name = "pydantic-settings", specifier = ">=2.2.1,<3.0.0" },
-    { name = "pyjwt", specifier = ">=2.13.0,<3.0.0" },
+    { name = "pyjwt", specifier = ">=2.15.0,<3.0.0" },
    { name = "python-multipart", specifier = ">=0.0.27,<1.0.0" },
    { name = "sentry-sdk", extras = ["fastapi"], specifier = ">=2.68.1,<3.0.0" },
    { name = "sqlmodel", specifier = ">=0.0.39,<1.0.0" },
@@ -1105,11 +1105,11 @@ wheels = [

 [[package]]
 name = "pyjwt"
-version = "2.13.0"
+version = "2.15.0"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/3b/81/58d0ac84e1ef3a3843791d6954d94c0b33d526c75eeb1efbce9d0a4c4077/pyjwt-2.13.0.tar.gz", hash = "sha256:41571c89ca91598c79e8ef18a2d07367d4810fbbd6f637794879baf1b7703423", size = 107515, upload-time = "2026-05-21T19:54:36.618Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/02/a5/5197bfd06417837ac079921c66fa6393f1dea3557272a263cebfef69e432/pyjwt-2.15.0.tar.gz", hash = "sha256:b11c5f9791d7bf51c2b39a81ed669f6b2dbbd669df2942f6c60167e9e3d1abe4", size = 120513, upload-time = "2026-09-23T16:56:00.689Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/a3/5e/ecf12fdb62546d64385c158514e9b2b671f7832108ef2ecd2020ce0af2d1/pyjwt-2.13.0-py3-none-any.whl", hash = "sha256:66adcc2aff09b3f1bbd95fc1e1577df8ac8723c978552fd43304c8a290ac5728", size = 31274, upload-time = "2026-05-21T19:54:35.362Z" },
+    { url = "https://files.pythonhosted.org/packages/e8/55/40e45bf052ee8ee12a4dfd785519660f8effa7b065442b91646ec6828619/pyjwt-2.15.0-py3-none-any.whl", hash = "sha256:7a3742debf6b879e912dbb9819ceec1594be812452b78c5f2e2dfc56564954f8", size = 33680, upload-time = "2026-09-23T16:55:59.241Z" },
 ]

 [[package]]
Author	SHA1	Message	Date
latest-changes[bot]	38b1c706ee	📝 Update release notes [skip ci]	2026-10-03 05:15:04 +00:00
dependabot[bot]	aae80fe6bf	⬆ Bump pyjwt from 2.13.0 to 2.15.0 (#2494 ) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-03 07:15:01 +02:00
latest-changes[bot]	938191aa87	📝 Update release notes [skip ci]	2026-10-03 05:11:20 +00:00
dependabot[bot]	f07a4917b8	⬆ Bump the github-actions group with 2 updates (#2495 ) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-03 07:11:13 +02:00