In #2945 the behavior of cache keys was changed. The scopes are passed to every dependencies down the tree, including when these dependencies are not Security.

This results in undesired behaviors when a dependency such as a DB session is created twice, e.g.:

@app.patch("/me")
def update_current_user(
    user: UserUpdate,
    current_user: User = Security(get_current_user, scopes=["user:write"]),
    session: Session = Depends(get_session),
):
    pass