Skip to content

Update dependency pydantic to v2.14.2 - #368

Open
renovate[bot] wants to merge 1 commit into
developfrom
renovate/pydantic-2.x-lockfile
Open

Update dependency pydantic to v2.14.2#368
renovate[bot] wants to merge 1 commit into
developfrom
renovate/pydantic-2.x-lockfile

Conversation

@renovate

@renovate renovate Bot commented Oct 29, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
pydantic (changelog) 2.12.5 → 2.14.2 age confidence

Release Notes

pydantic/pydantic (pydantic)

v2.14.2: 2026-10-29

Compare Source

v2.14.2 (2026-10-29)

This release addresses 2 security issues, GHSA-qpmf-fgh3-ff25 and GHSA-3r8g-cqwr-jr29.

Packaging
Performance
Fixes

  • Make JSON validation by iteration consistent with Python approach by @​davidhewitt in #​13275.

    JSON validation now handles field lookup and extra data the same way as Python validation. In particular, keys that only match an
    unused alias or field name are now treated as extra data, instead of being silently dropped:

    from pydantic import BaseModel, ConfigDict
from pydantic.alias_generators import to_camel

class Page(BaseModel):
    model_config = ConfigDict(extra='forbid', alias_generator=to_camel)

    page_size: int = 10

Page.model_validate_json('{"page_size": 50}')
# Before: Page(page_size=10)
# After: ValidationError (extra_forbidden)

    See the pull request for the full list of behavior changes.
    This change addresses GHSA-qpmf-fgh3-ff25.

  • Ignore extra data matching a field name in TypedDict and dataclasses with extra=allow by @​Viicos in #​14090. Addresses GHSA-3r8g-cqwr-jr29.

  • Fix unpickling of generic classes defined in separate module by @​Viicos in #​13994

  • Support explicit by_alias overriding validate_by_alias in validation JSON schemas by @​Viicos in #​13997

  • Fix mypy plugin crash on deferred empty model by @​ilevkivskyi in #​14027

  • Fix infinite recursion when validating an invalid default with PydanticUseDefault by @​Viicos in #​14028

  • Implement recursion guard for validate_strings() by @​Viicos in #​14029

  • Support named tuples in Sequence serialization by @​Viicos in #​14033

  • Take preserve_empty_path into account in URL types equality by @​Viicos in #​14035

  • Fix pickling of PydanticCustomError and ValidationErrors containing custom errors by @​Viicos in #​14051

  • Do not extract attribute docstrings from nested classes and functions by @​Viicos in #​14052

  • Fix forward annotations evaluation and type variables substitution when rebuilding parametrized generic models by @​Viicos in #​14054

  • Fix Self resolution in parametrized generics by @​Viicos in #​14065

  • Check mapping max_length constraint during validation by @​Viicos in #​14092

  • Fix deep copy of self-referential models by @​Viicos in #​14116

Full Changelog: pydantic/pydantic@v2.14.1...v2.14.2

v2.14.1

Compare Source

GitHub release

The code released in v2.5.0 is functionally identical to that of v2.5.0b1.

What's Changed
Packaging
  • Update pydantic-core from 2.10.1 to 2.14.1, significant changes from these updates are described below, full changelog here
  • Update to pyright==1.1.335 by @​Viicos in #​8075
New Features
Changes
  • Significant Change: replace ultra_strict with new smart union implementation, the way unions are validated has changed significantly to improve performance and correctness, we have worked hard to absolutely minimise the number of cases where behaviour has changed, see the PR for details - by @​davidhewitt in pydantic/pydantic-core#867
  • Add support for instance method reassignment when extra='allow' by @​sydney-runkle in #​7683
  • Support JSON schema generation for Enum types with no cases by @​sydney-runkle in #​7927
  • Warn if a class inherits from Generic before BaseModel by @​alexmojaki in #​7891
Performance
Fixes
New Contributors
pydantic
pydantic-core

v2.14.0

Compare Source

GitHub release

What's Changed

The highlights of the v2.14 release are available in the blog post.
Several minor changes (considered non-breaking changes according to our versioning policy)
are also included in this release. Make sure to look into them before upgrading.

This release drops support for Python 3.9 and adds support for Python 3.15.

New Features
Changes
Fixes
New Contributors

v2.13.5: 2026-08-28

Compare Source

v2.13.5 (2026-08-28)

What's Changed
Fixes

v2.13.4

Compare Source

GitHub release

What's Changed
Packaging
Fixes

v2.13.3

Compare Source

GitHub release

What's Changed
Fixes

v2.13.2

Compare Source

GitHub release

What's Changed
Fixes

v2.13.1

Compare Source

GitHub release

What's Changed
Fixes

v2.13.0

Compare Source

GitHub release

The highlights of the v2.13 release are available in the blog post.
Several minor changes (considered non-breaking changes according to our versioning policy)
are also included in this release. Make sure to look into them before upgrading.

This release contains the updated pydantic.v1 namespace, matching version 1.10.26 which includes support for Python 3.14.

What's Changed

See the beta releases for all changes sinces 2.12.

New Features
  • Allow default factories of private attributes to take validated model data by @​Viicos in #​13013
Changes
Fixes
  • Change type of Any when synthesizing _build_sources for BaseSettings.__init__() signature in the mypy plugin by @​Viicos in #​13049
  • Fix model equality when using runtime extra configuration by @​Viicos in #​13062
Packaging
New Contributors

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Oct 29, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@glennmatthews glennmatthews Awaiting requested review from glennmatthews glennmatthews is a code owner
@michalis1 michalis1 Awaiting requested review from michalis1 michalis1 is a code owner
@jdrew82 jdrew82 Awaiting requested review from jdrew82 jdrew82 is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants