Bump fastapi from 0.135.3 to 0.136.0 in /backend (#1688)

Bumps [fastapi](https://github.com/fastapi/fastapi) from 0.135.3 to
0.136.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fastapi/fastapi/releases">fastapi's
releases</a>.</em></p>
<blockquote>
<h2>0.136.0</h2>
<h3>Upgrades</h3>
<ul>
<li>⬆️ Support free-threaded Python 3.14t. PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/15149">#15149</a>
by <a
href="https://github.com/svlandeg"><code>@​svlandeg</code></a>.</li>
</ul>
<h2>0.135.4</h2>
<h3>Refactors</h3>
<ul>
<li>🔥 Remove April Fool's <code>@app.vibe()</code> 🤪. PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/15363">#15363</a>
by <a
href="https://github.com/tiangolo"><code>@​tiangolo</code></a>.</li>
</ul>
<h3>Internal</h3>
<ul>
<li>⬆ Bump cryptography from 46.0.5 to 46.0.7. PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/15314">#15314</a>
by <a
href="https://github.com/apps/dependabot"><code>@​dependabot[bot]</code></a>.</li>
<li>⬆ Bump strawberry-graphql from 0.307.1 to 0.312.3. PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/15309">#15309</a>
by <a
href="https://github.com/apps/dependabot"><code>@​dependabot[bot]</code></a>.</li>
<li>🔨 Add pre-commit hook to ensure latest release header has date. PR
<a
href="https://redirect.github.com/fastapi/fastapi/pull/15293">#15293</a>
by <a
href="https://github.com/YuriiMotov"><code>@​YuriiMotov</code></a>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="708606c982"><code>708606c</code></a>
🔖 Release version 0.136.0</li>
<li><a
href="13be6a3a0f"><code>13be6a3</code></a>
📝 Update release notes</li>
<li><a
href="4b264878d7"><code>4b26487</code></a>
⬆️ Support free-threaded Python 3.14t (<a
href="https://redirect.github.com/fastapi/fastapi/issues/15149">#15149</a>)</li>
<li><a
href="f796c346a8"><code>f796c34</code></a>
🔖 Release version 0.135.4</li>
<li><a
href="09d1d1cb70"><code>09d1d1c</code></a>
📝 Update release notes</li>
<li><a
href="ae4e45c5cc"><code>ae4e45c</code></a>
🔥 Remove April Fool's <code>@app.vibe()</code> 🤪 (<a
href="https://redirect.github.com/fastapi/fastapi/issues/15363">#15363</a>)</li>
<li><a
href="9653034b8d"><code>9653034</code></a>
📝 Update release notes</li>
<li><a
href="6f9a102faf"><code>6f9a102</code></a>
⬆ Bump cryptography from 46.0.5 to 46.0.7 (<a
href="https://redirect.github.com/fastapi/fastapi/issues/15314">#15314</a>)</li>
<li><a
href="eba8942c81"><code>eba8942</code></a>
📝 Update release notes</li>
<li><a
href="77d080caf8"><code>77d080c</code></a>
⬆ Bump strawberry-graphql from 0.307.1 to 0.312.3 (<a
href="https://redirect.github.com/fastapi/fastapi/issues/15309">#15309</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/fastapi/fastapi/compare/0.135.3...0.136.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=fastapi&package-manager=uv&previous-version=0.135.3&new-version=0.136.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

backend/pyproject.toml

@@ -11,7 +11,7 @@ dependencies = [
     "bcrypt==5.0.0",
     "click==8.3.0",
     "databases[asyncpg]==0.9.0",
-    "fastapi==0.135.3",
+    "fastapi==0.136.0",
     "fastapi-sso==0.21.0",
     "gunicorn==25.3.0",
     "heliclockter==3.0.1",

backend/uv.lock

@@ -381,7 +381,7 @@ requires-dist = [
     { name = "bcrypt", specifier = "==5.0.0" },
     { name = "click", specifier = "==8.3.0" },
     { name = "databases", extras = ["asyncpg"], specifier = "==0.9.0" },
-    { name = "fastapi", specifier = "==0.135.3" },
+    { name = "fastapi", specifier = "==0.136.0" },
     { name = "fastapi-sso", specifier = "==0.21.0" },
     { name = "gunicorn", specifier = "==25.3.0" },
     { name = "heliclockter", specifier = "==3.0.1" },
@@ -580,7 +580,7 @@ wheels = [
 
 [[package]]
 name = "fastapi"
-version = "0.135.3"
+version = "0.136.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "annotated-doc" },
@@ -589,9 +589,9 @@ dependencies = [
     { name = "typing-extensions" },
     { name = "typing-inspection" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/f7/e6/7adb4c5fa231e82c35b8f5741a9f2d055f520c29af5546fd70d3e8e1cd2e/fastapi-0.135.3.tar.gz", hash = "sha256:bd6d7caf1a2bdd8d676843cdcd2287729572a1ef524fc4d65c17ae002a1be654", size = 396524, upload-time = "2026-04-01T16:23:58.188Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/4e/d9/e66315807e41e69e7f6a1b42a162dada2f249c5f06ad3f1a95f84ab336ef/fastapi-0.136.0.tar.gz", hash = "sha256:cf08e067cc66e106e102d9ba659463abfac245200752f8a5b7b1e813de4ff73e", size = 396607, upload-time = "2026-04-16T11:47:13.623Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/84/a4/5caa2de7f917a04ada20018eccf60d6cc6145b0199d55ca3711b0fc08312/fastapi-0.135.3-py3-none-any.whl", hash = "sha256:9b0f590c813acd13d0ab43dd8494138eb58e484bfac405db1f3187cfc5810d98", size = 117734, upload-time = "2026-04-01T16:23:59.328Z" },
+    { url = "https://files.pythonhosted.org/packages/26/a3/0bd5f0cdb0bbc92650e8dc457e9250358411ee5d1b65e42b6632387daf81/fastapi-0.136.0-py3-none-any.whl", hash = "sha256:8793d44ec7378e2be07f8a013cf7f7aa47d6327d0dfe9804862688ec4541a6b4", size = 117556, upload-time = "2026-04-16T11:47:11.922Z" },
 ]
 
 [[package]]