Upgrade Python service dependencies

[tdewanNvidia]

Description

Updated FastAPI from v0.125.0 to v0.137.2 for improved performance and API compatibility.
Updated Starlette to v1.3.1 for enhanced stability and request handling.
Updated cryptography to v48.0.1 with the latest security improvements.
Updated PyJWT to v2.13.0 for better JWT authentication support.

Issue - None

Checklist

• I am familiar with the Contributing Guidelines.
• New or existing tests cover these changes.
• The documentation is up to date with these changes.

Summary by CodeRabbit

• Chores
  • Upgraded FastAPI from v0.125.0 to v0.137.2 for improved performance and API compatibility.
  • Updated Starlette to v1.3.1 to enhance stability and request handling.
  • Upgraded cryptography to v48.0.1 for the latest security improvements.
  • Updated PyJWT to v2.13.0 for improved JWT authentication support.

[coderabbitai]

📝 Walkthrough

Walkthrough

Bumps four Python dependencies: fastapi from 0.125.0 to 0.137.2, starlette from 0.50.0 to 1.3.1 (now pinned explicitly), pyjwt[crypto] from 2.12.0 to 2.13.0, and cryptography from 46.0.7 to 48.0.1. Both src/requirements.txt and the pip-compile-generated src/locked_requirements.txt are updated with new versions and hashes.

Changes

Dependency Version Bumps

Layer / File(s)	Summary
Version pins and lock file hashes src/requirements.txt, src/locked_requirements.txt	requirements.txt upgrades fastapi to 0.137.2, bumps pyjwt to 2.13.0, and bumps cryptography to 48.0.1. locked_requirements.txt replaces the corresponding --hash entries for all four packages, updates starlette from 0.50.0 to 1.3.1 with new hashes, and adds fastapi to the typing-inspection "via" comment.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Poem

🐇 Hop, hop — the versions rise,
New hashes gleam before my eyes.
FastAPI leaps, Starlette soars,
PyJWT and Crypto unlock new doors.
A pip-compile glow, the lock file sings,
Fresh deps in place — oh, what spring brings! 🌿

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title 'Upgrade Python service dependencies' accurately reflects the main change in the pull request, which upgrades multiple dependencies including cryptography, fastapi, pyjwt, and starlette to newer versions.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch td/upgrade-python-deps-20260623

---

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

🧹 Nitpick comments (1)

src/requirements.txt (1)

42-42: 🩺 Stability & Availability | 🔵 Trivial | ⚡ Quick win

Don't pin Starlette separately.

FastAPI's versioning guide says you shouldn't pin starlette; different FastAPI releases select the compatible Starlette version for you. Please verify this override is required, otherwise it can lock us onto an untested combination and block FastAPI upgrades. (fastapi.tiangolo.com)

Suggested change

 fastapi==0.137.2
-starlette==1.3.1
 uvicorn[standard]==0.30.1

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@src/requirements.txt` at line 42, Remove the pinned Starlette version
constraint (starlette==1.3.1) from requirements.txt at line 42. FastAPI manages
its own compatible Starlette version based on the FastAPI version specified, and
separately pinning Starlette can create untested dependency combinations and
prevent FastAPI upgrades. Verify if this pinning is absolutely required for your
use case; if not, let FastAPI's version constraints handle Starlette
compatibility automatically.

Source: MCP tools

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Nitpick comments:
In `@src/requirements.txt`:
- Line 42: Remove the pinned Starlette version constraint (starlette==1.3.1)
from requirements.txt at line 42. FastAPI manages its own compatible Starlette
version based on the FastAPI version specified, and separately pinning Starlette
can create untested dependency combinations and prevent FastAPI upgrades. Verify
if this pinning is absolutely required for your use case; if not, let FastAPI's
version constraints handle Starlette compatibility automatically.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: b91ac465-c406-4839-9879-54c65c29ebbf

📥 Commits

Reviewing files that changed from the base of the PR and between b8b8d07 and e3d6641.

📒 Files selected for processing (2)

• src/locked_requirements.txt
• src/requirements.txt

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@src/requirements.txt`:
- Around line 41-46: The PR checklist sign-off is incomplete. Before merging,
ensure the PR checklist items are explicitly checked off (particularly the
"Tests & Verification" item). Run the full test suite to verify that all tests
pass with the updated dependency versions (FastAPI 0.137.2, uvicorn 0.30.1, h11
0.16.0, and pyjwt 2.13.0). After confirming the tests pass, either check the
checklist items in the PR form or add a comment to the PR explicitly confirming
that the test suite has passed with these dependency versions to satisfy the
reviewer's sign-off requirement.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: db7fe33a-2cd6-4d34-9339-037b3b313590

📥 Commits

Reviewing files that changed from the base of the PR and between e3d6641 and 7e5753d.

📒 Files selected for processing (2)

• src/locked_requirements.txt
• src/requirements.txt

✅ Files skipped from review due to trivial changes (1)

• src/locked_requirements.txt