chore: Set fastapi < 0.139.2 (#4934)

chtruong814 · web-flow · commit cdbcb3073537 · 2026-07-17T22:56:31.000Z
Signed-off-by: Charlie Truong &lt;chtruong@nvidia.com&gt;
diff --git a/docker/common/fw_pyproject.toml b/docker/common/fw_pyproject.toml
@@ -122,4 +122,5 @@ override-dependencies = [
     "decord; sys_platform == 'never'",                   # Optional dependency. Resolves CVE
     "av; sys_platform == 'never'",                       # Optional dependency. Resolves CVE
     "opencv-python-headless; sys_platform == 'never'",   # Optional dependency. Resolves CVE
+    "fastapi<0.139.2"                                    # 0.139.2 fails with ray 2.55.1 at least
 ]
diff --git a/pyproject.toml b/pyproject.toml
@@ -141,6 +141,7 @@ override-dependencies = [
     "onnx>=1.21.0; python_version < '3.13'",                # onnx<1.21 has missing lower bound on ml-dtypes, uses float4_e2m1fn (requires ml-dtypes>=0.5.0)
     "nvidia-cudnn-frontend==1.24.0",
     "nvidia-cutlass-dsl[cu13]; sys_platform == 'never'",    # Rely on system site packages install
+    "fastapi<0.139.2",                                      # 0.139.2 fails with ray 2.55.1 at least
     "fast-hadamard-transform @ git+https://github.com/Dao-AILab/fast-hadamard-transform.git@v1.1.0"  # pin 1.1.0; PyPI sdist is incomplete, install from git tag (see DSv4/GLM-5 READMEs)
 ]
 
diff --git a/uv.lock b/uv.lock

Original file line number	Diff line number	Diff line change
`@@ -122,4 +122,5 @@ override-dependencies = [`
`122`	`122`	`"decord; sys_platform == 'never'", # Optional dependency. Resolves CVE`
`123`	`123`	`"av; sys_platform == 'never'", # Optional dependency. Resolves CVE`
`124`	`124`	`"opencv-python-headless; sys_platform == 'never'", # Optional dependency. Resolves CVE`
	`125`	`+ "fastapi<0.139.2" # 0.139.2 fails with ray 2.55.1 at least`
`125`	`126`	`]`
Original file line number	Diff line number	Diff line change
`@@ -141,6 +141,7 @@ override-dependencies = [`
`141`	`141`	`"onnx>=1.21.0; python_version < '3.13'", # onnx<1.21 has missing lower bound on ml-dtypes, uses float4_e2m1fn (requires ml-dtypes>=0.5.0)`
`142`	`142`	`"nvidia-cudnn-frontend==1.24.0",`
`143`	`143`	`"nvidia-cutlass-dsl[cu13]; sys_platform == 'never'", # Rely on system site packages install`
	`144`	`+ "fastapi<0.139.2", # 0.139.2 fails with ray 2.55.1 at least`
`144`	`145`	`"fast-hadamard-transform @ git+https://github.com/Dao-AILab/fast-hadamard-transform.git@v1.1.0" # pin 1.1.0; PyPI sdist is incomplete, install from git tag (see DSv4/GLM-5 READMEs)`
`145`	`146`	`]`
`146`	`147`