Upgrade toolchain and move to Python 3.14

.github/dependabot.yml

@@ -0,0 +1,24 @@
+version: 2
+updates:
+  - package-ecosystem: "uv"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    groups:
+      python-minor-patch:
+        update-types:
+          - "minor"
+          - "patch"
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    groups:
+      actions:
+        update-types:
+          - "minor"
+          - "patch"
+  - package-ecosystem: "docker"
+    directory: "/"
+    schedule:
+      interval: "weekly"

.github/workflows/ci.yml

@@ -10,16 +10,16 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
-      - uses: astral-sh/setup-uv@v7
+      - uses: actions/checkout@v7
+      - uses: astral-sh/setup-uv@v9.0.0
       - run: uv sync
       - run: uv run ruff check .
       - run: uv run ruff format --check .
 
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
-      - uses: astral-sh/setup-uv@v7
+      - uses: actions/checkout@v7
+      - uses: astral-sh/setup-uv@v9.0.0
       - run: uv sync
       - run: uv run pytest

.pre-commit-config.yaml

@@ -1,9 +1,9 @@
 fail_fast: true
 repos:
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.8.6
+    rev: v0.16.0
     hooks:
-      - id: ruff
+      - id: ruff-check
         args: [--fix]
       - id: ruff-format
   - repo: local

.python-version

@@ -1 +1 @@
-3.12
+3.14

Dockerfile

@@ -1,9 +1,9 @@
-FROM python:3.12-slim
+FROM python:3.14-slim
 
 WORKDIR /app
 
 # Install uv
-COPY --from=ghcr.io/astral-sh/uv:latest /uv /usr/local/bin/uv
+COPY --from=ghcr.io/astral-sh/uv:0.11.32 /uv /usr/local/bin/uv
 
 # Copy dependency files
 COPY pyproject.toml uv.lock* ./

README.md

@@ -148,9 +148,9 @@ Superusers (`is_superuser=True`) bypass all role checks. Roles are read-only via
 ```python
 from app.auth import require_role
 
+
 @router.get("/admin-only")
-async def admin_only(user: User = Depends(require_role("admin"))):
-    ...
+async def admin_only(user: User = Depends(require_role("admin"))): ...
 ```
 
 ### Security Features

app/auth/users.py

@@ -20,7 +20,7 @@
 
 async def get_user_db(
     session: AsyncSession = Depends(get_async_session),
-) -> AsyncGenerator[SQLAlchemyUserDatabase, None]:
+) -> AsyncGenerator[SQLAlchemyUserDatabase]:
     yield SQLAlchemyUserDatabase(session, User)
 
 
@@ -75,7 +75,7 @@ async def on_after_request_verify(self, user: User, token: str, request=None):
 
 async def get_user_manager(
     user_db: SQLAlchemyUserDatabase = Depends(get_user_db),
-) -> AsyncGenerator[UserManager, None]:
+) -> AsyncGenerator[UserManager]:
     yield UserManager(user_db)
 
 

app/config.py

@@ -58,7 +58,7 @@ def cors_origin_list(self) -> list[str]:
         return [o.strip() for o in self.cors_origins.split(",") if o.strip()]
 
     @model_validator(mode="after")
-    def validate_production_settings(self) -> "Settings":
+    def validate_production_settings(self) -> Settings:
         if not self.is_development:
             weak_secrets = {"change-me-in-production", "dev-secret-key-change-in-production", ""}
             if self.secret_key in weak_secrets or len(self.secret_key) < 32:

app/database.py

@@ -24,7 +24,7 @@ class Base(DeclarativeBase):
 )
 
 
-async def get_async_session() -> AsyncGenerator[AsyncSession, None]:
+async def get_async_session() -> AsyncGenerator[AsyncSession]:
     """Dependency that provides an async database session."""
     async with async_session_maker() as session:
         yield session

pyproject.toml

@@ -3,7 +3,7 @@ name = "api-template"
 version = "0.1.0"
 description = "FastAPI template with async PostgreSQL and JWT auth"
 readme = "README.md"
-requires-python = ">=3.12"
+requires-python = ">=3.14"
 dependencies = [
     "fastapi>=0.135.0",
     "uvicorn[standard]>=0.41.0",
@@ -41,7 +41,7 @@ testpaths = ["tests"]
 asyncio_default_fixture_loop_scope = "function"
 
 [tool.ruff]
-target-version = "py312"
+target-version = "py314"
 line-length = 100
 
 [tool.ruff.lint]

tests/conftest.py

@@ -27,7 +27,7 @@ async def setup_database():
         await conn.run_sync(Base.metadata.drop_all)
 
 
-async def override_get_async_session() -> AsyncGenerator[AsyncSession, None]:
+async def override_get_async_session() -> AsyncGenerator[AsyncSession]:
     async with async_session_maker() as session:
         yield session
 
@@ -36,7 +36,7 @@ async def override_get_async_session() -> AsyncGenerator[AsyncSession, None]:
 
 
 @pytest.fixture
-async def client() -> AsyncGenerator[AsyncClient, None]:
+async def client() -> AsyncGenerator[AsyncClient]:
     """Async HTTP client for testing."""
     async with AsyncClient(
         transport=ASGITransport(app=app),
@@ -46,7 +46,7 @@ async def client() -> AsyncGenerator[AsyncClient, None]:
 
 
 @pytest.fixture
-async def session() -> AsyncGenerator[AsyncSession, None]:
+async def session() -> AsyncGenerator[AsyncSession]:
     """Direct database session for test setup."""
     async with async_session_maker() as session:
         yield session
@@ -77,7 +77,7 @@ def superuser() -> User:
 
 
 @pytest.fixture
-async def auth_client(client: AsyncClient, test_user: User) -> AsyncGenerator[AsyncClient, None]:
+async def auth_client(client: AsyncClient, test_user: User) -> AsyncGenerator[AsyncClient]:
     """Client that authenticates as test_user via dependency override."""
     app.dependency_overrides[current_active_user] = lambda: test_user
     try:
@@ -87,7 +87,7 @@ async def auth_client(client: AsyncClient, test_user: User) -> AsyncGenerator[As
 
 
 @pytest.fixture
-async def admin_client(client: AsyncClient, admin_user: User) -> AsyncGenerator[AsyncClient, None]:
+async def admin_client(client: AsyncClient, admin_user: User) -> AsyncGenerator[AsyncClient]:
     """Client that authenticates as admin_user via dependency override."""
     app.dependency_overrides[current_active_user] = lambda: admin_user
     try: