Skip to content

chore(deps): update uvicorn requirement from >=0.52.3 to >=0.52.4 in /oss-crs-infra/runner-sidecar in the all group across 1 directory - #365

Merged
azchin merged 1 commit into
mainfrom
dependabot/pip/oss-crs-infra/runner-sidecar/all-04fa09a6da
Aug 25, 2026
Merged

chore(deps): update uvicorn requirement from >=0.52.3 to >=0.52.4 in /oss-crs-infra/runner-sidecar in the all group across 1 directory#365
azchin merged 1 commit into
mainfrom
dependabot/pip/oss-crs-infra/runner-sidecar/all-04fa09a6da

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 18, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on uvicorn to permit the latest version.
Updates uvicorn to 0.52.4

Release notes

Sourced from uvicorn's releases.

Version 0.52.4

Fixed

  • Remove duplicate Date headers from accepted WebSocket handshakes with websockets-sansio (#3078)

Full Changelog: Kludex/uvicorn@0.52.3...0.52.4

Changelog

Sourced from uvicorn's changelog.

0.52.4 (August 18, 2026)

Fixed

  • Remove duplicate Date headers from accepted WebSocket handshakes with websockets-sansio (#3078)

0.52.3 (August 13, 2026)

Changed

  • Update zttp to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (#3067)

0.52.2 (August 13, 2026)

Fixed

  • Update zttp to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (#3063)

0.52.1 (August 1, 2026)

Fixed

  • Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)
  • Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)
  • Handle connection loss while a WebSocket write is waiting on backpressure (#3050)
  • Remove duplicate Content-Type and Content-Length headers from WebSocket denial responses on the websockets-sansio implementation, and deliver non-UTF-8 denial bodies intact (#3041)

0.52.0 (July 29, 2026)

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

  • Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

  • Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

0.51.0 (July 8, 2026)

Added

  • Restart workers one at a time on SIGHUP, bringing each replacement up before retiring the old worker, so reloads no longer drop requests (#3025)

Removed

  • Remove colorama from the standard extra (#3027)

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Aug 18, 2026
azchin added a commit that referenced this pull request Aug 25, 2026
Combines Dependabot PRs #364 (builder-sidecar) and #365 (runner-sidecar).

Signed-off-by: Andrew Chin <achin34@gatech.edu>
Updates the requirements on [uvicorn](https://github.com/Kludex/uvicorn) to permit the latest version.

Updates `uvicorn` to 0.52.4
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.52.3...0.52.4)

---
updated-dependencies:
- dependency-name: uvicorn
  dependency-version: 0.52.3
  dependency-type: direct:production
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): update uvicorn requirement from >=0.52.1 to >=0.52.3 in /oss-crs-infra/runner-sidecar in the all group chore(deps): update uvicorn requirement from >=0.52.3 to >=0.52.4 in /oss-crs-infra/runner-sidecar in the all group across 1 directory Aug 25, 2026
@dependabot
dependabot Bot force-pushed the dependabot/pip/oss-crs-infra/runner-sidecar/all-04fa09a6da branch from 0e11f06 to a34fa1f Compare August 25, 2026 01:38
@azchin
azchin merged commit dc324a6 into main Aug 25, 2026
8 checks passed
@azchin
azchin deleted the dependabot/pip/oss-crs-infra/runner-sidecar/all-04fa09a6da branch August 25, 2026 01:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant