Skip to content

FastAPI Production API v1.0.1

Choose a tag to compare

View all tags
@HoungDev HoungDev released this 08 Aug 14:49
· 13 commits to main since this release
v1.0.1
da61c4c
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

FastAPI Production API v1.0.1

This patch release aligns the runtime, packaging, documentation, and CI around
one verified production-ready foundation.

Highlights

  • Ships a complete wheel containing both app and the package entrypoint.
  • Adds PostgreSQL 17 migrations and tests, Ruff lint/format checks, dependency
    auditing, package builds, and wheel smoke testing to CI.
  • Strengthens production configuration validation, authentication helpers,
    security headers, rate limiting, and runtime behavior.
  • Replaces the deprecated Uvicorn Gunicorn worker and unmaintained Passlib
    bcrypt adapter while retaining compatibility with existing bcrypt hashes.
  • Reworks the README, deployment guidance, community files, changelog, roadmap,
    and release process.

Upgrade notes

  • Python 3.13 or newer is required.
  • Install the locked dependencies with uv sync --locked.
  • Apply database migrations with uv run alembic upgrade head.
  • Deployments that reference uvicorn.workers.UvicornWorker should use
    uvicorn_worker.UvicornWorker.
  • Production deployments must provide a non-placeholder SECRET_KEY containing
    at least 32 bytes and keep DEBUG=false.

Validation

  • Ruff lint and formatting checks passed.
  • PostgreSQL 17 migrations passed.
  • 39 automated tests passed.
  • Dependency audit reported no known vulnerabilities.
  • Wheel and source distribution built successfully.
  • Wheel import and HTTP root/health smoke tests passed.

CI evidence: https://github.com/HoungDev/fastapi-production-api/actions/runs/31262324636

Known limitations

  • Rate limiting is stored in process memory and is not shared across workers or
    hosts; use Redis or an API gateway for distributed enforcement.
  • Password reset, email verification, OAuth providers, and MFA are not included.
  • Docker Compose provides PostgreSQL for local development but does not build or
    deploy the API container.
  • Deployment defaults must be reviewed for traffic, proxy topology, secrets,
    backups, and compliance requirements.

Artifacts

  • fastapi_production_api-1.0.1-py3-none-any.whl
    • SHA-256: 56d9e2b276a31246e7312bbd44bcc2f923058aabd67ee338bf9e2f77d7ff9908
  • fastapi_production_api-1.0.1.tar.gz
    • SHA-256: 436af2fbdd03623c1a3d3c99d5c8827f8943087db7fc9511656ae7eb1c8e0a26

Full changelog: v1.0.0...v1.0.1

Assets 5
Loading