Update dependency uvicorn to ^0.52.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
uvicorn (changelog)	^0.35.0 → ^0.52.0

---

Release Notes

Kludex/uvicorn (uvicorn)

v0.52.1: Version 0.52.1

Compare Source

Fixed

• Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#​3053)
• Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#​3048)
• Handle connection loss while a WebSocket write is waiting on backpressure (#​3050)
• Remove duplicate Content-Type and Content-Length headers from WebSocket denial responses on the websockets-sansio implementation, and deliver non-UTF-8 denial bodies intact (#​3041)

Full Changelog: Kludex/uvicorn@0.52.0...0.52.1

v0.52.0: Version 0.52.0

Compare Source

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

• Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#​2979)

Fixed

• Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#​3036)

Full Changelog: Kludex/uvicorn@0.51.0...0.52.0

v0.51.0: Version 0.51.0

Compare Source

What's Changed

• Restart workers with overlap on SIGHUP for near-zero-downtime reloads by @​Kludex in #​3025
• Remove colorama from the standard extra by @​Kludex in #​3027

Full Changelog: Kludex/uvicorn@0.50.2...0.51.0

v0.50.2: Version 0.50.2

Compare Source

What's Changed

• Require websockets>=13.0 for the default sansio implementation by @​Kludex in #​3021

Full Changelog: Kludex/uvicorn@0.50.1...0.50.2

v0.50.1: Version 0.50.1

Compare Source

What's Changed

• Split comma-separated Sec-WebSocket-Protocol values in the websockets-sansio implementation by @​Aayush7352 in #​3019

New Contributors

• @​Aayush7352 made their first contribution in #​3019

Full Changelog: Kludex/uvicorn@0.50.0...0.50.1

v0.50.0: Version 0.50.0

Compare Source

What's Changed

• Memoize trusted host checks to avoid re-parsing the client IP per request by @​Kludex in #​2970
• Cache the asgi scope sub-dict per connection by @​Kludex in #​2976
• Build a fresh asgi scope dict per request by @​Kludex in #​2977
• Replace click.style with an internal ANSI style helper by @​Kludex in #​2981
• Avoid copying single-frame WebSocket payloads in websockets-sansio by @​Kludex in #​2983
• Deprecate the legacy websockets implementation and default auto to websockets-sansio by @​Kludex in #​2985
• Exit with a dedicated code on startup failure and stop the supervisor when a worker can't boot by @​Kludex in #​3001
• Skip the eager app import in the parent when spawning workers by @​Kludex in #​3012

Full Changelog: Kludex/uvicorn@0.49.0...0.50.0

v0.49.0: Version 0.49.0

Compare Source

What's Changed

• Bump httptools minimum version to 0.8.0 by @​Kludex in #​2962
• Consume duplicate forwarding headers in ProxyHeadersMiddleware (reverses the 0.48.0 behavior of ignoring them) by @​Kludex in #​2971

Full Changelog: Kludex/uvicorn@0.48.0...0.49.0

v0.48.0: Version 0.48.0

Compare Source

What's Changed

• Default ssl_ciphers to None and use OpenSSL defaults by @​Kludex in #​2940
• Ignore duplicate forwarding headers in ProxyHeadersMiddleware by @​Kludex in #​2944

Full Changelog: Kludex/uvicorn@0.47.0...0.48.0

v0.47.0: Version 0.47.0

Compare Source

What's Changed

• Eagerly import the ASGI app in the parent process by @​Kludex in #​2919
• Add ssl_context_factory for custom SSLContext configuration by @​Kludex in #​2920
• Treat fd=0 as a valid file descriptor with reload/workers by @​eltoder in #​2927

Full Changelog: Kludex/uvicorn@0.46.0...0.47.0

v0.46.0: Version 0.46.0

Compare Source

What's Changed

• Support ws_max_size in wsproto implementation by @​Kludex in #​2915
• Support ws_ping_interval and ws_ping_timeout in wsproto implementation by @​Kludex in #​2916
• Use bytearray for incoming WebSocket message buffer in websockets-sansio by @​Kludex in #​2917

Full Changelog: Kludex/uvicorn@0.45.0...0.46.0

v0.45.0: Version 0.45.0

Compare Source

What's Changed

• Preserve forwarded client ports in proxy headers middleware by @​Kludex in #​2903
• Accept os.PathLike for log_config by @​Kludex in #​2905
• Accept log_level strings case-insensitively by @​Kludex in #​2907
• Raise helpful ImportError when PyYAML is missing for YAML log config by @​Kludex in #​2906
• Revert empty context for ASGI runs by @​Kludex in #​2911
• Add --reset-contextvars flag to isolate ASGI request context by @​Kludex in #​2912
• Revert "Emit http.disconnect on server shutdown for streaming responses" (#​2829) by @​Kludex in #​2913

New Contributors

• @​Krishnachaitanyakc made their first contribution in #​2870

Full Changelog: Kludex/uvicorn@0.44.0...0.45.0

v0.44.0: Version 0.44.0

Compare Source

What's Changed

• Implement websocket keepalive pings for websockets-sansio by @​Kludex in #​2888

Full Changelog: Kludex/uvicorn@0.43.0...0.44.0

v0.43.0: Version 0.43.0

Compare Source

Changed

• Emit http.disconnect ASGI receive() event on server shutting down for streaming responses (#​2829)
• Use native context parameter for create_task on Python 3.11+ (#​2859)
• Drop cast in ASGI types (#​2875)

---

Full Changelog: Kludex/uvicorn@0.42.0...0.43.0

v0.42.0: Version 0.42.0

Compare Source

Changed

• Use bytearray for request body accumulation to avoid O(n^2) allocation on fragmented bodies (#​2845)

Fixed

• Escape brackets and backslash in httptools HEADER_RE regex (#​2824)
• Fix multiple issues in websockets sans-io implementation (#​2825)

---

New Contributors

• @​bysiber made their first contribution in #​2825

---

Full Changelog: Kludex/uvicorn@0.41.0...0.42.0

v0.41.0: Version 0.41.0

Compare Source

Added

• Add --limit-max-requests-jitter to stagger worker restarts (#​2707)
• Add socket path to scope["server"] (#​2561)

Changed

• Rename LifespanOn.error_occured to error_occurred (#​2776)

Fixed

• Ignore permission denied errors in watchfiles reloader (#​2817)
• Ensure lifespan shutdown runs when should_exit is set during startup (#​2812)
• Reduce the log level of 'request limit exceeded' messages (#​2788)

---

New Contributors

• @​t-kawasumi made their first contribution in #​2776
• @​fardyn made their first contribution in #​2800
• @​ewie made their first contribution in #​2807
• @​shevron made their first contribution in #​2788
• @​jonashaag made their first contribution in #​2707

---

Full Changelog: Kludex/uvicorn@0.40.0...0.41.0

v0.40.0: Version 0.40.0

Compare Source

What's Changed

• Drop Python 3.9 by @​Kludex in #​2772

Full Changelog: Kludex/uvicorn@0.39.0...0.40.0

v0.39.0: Version 0.39.0

Compare Source

What's Changed

• explicitly start ASGI run with empty context by @​pmeier in #​2742
• fix(websockets): Send close frame on ASGI return by @​Kludex in #​2769

New Contributors

• @​pmeier made their first contribution in #​2742

Full Changelog: Kludex/uvicorn@0.38.0...0.39.0

v0.38.0: Version 0.38.0

Compare Source

What's Changed

• Support Python 3.14 by @​Kludex in #​2723

---

New Contributors

• @​NGANAMODEIJunior made their first contribution in #​2713

Full Changelog: Kludex/uvicorn@0.37.0...0.38.0

v0.37.0: Version 0.37.0

Compare Source

What's Changed

• Add --timeout-worker-healthcheck setting by @​Kludex in #​2711
• Add os.PathLike[str] type to ssl_ca_certs by @​rnv812 in #​2676

New Contributors

• @​LincolnPuzey made their first contribution in #​2669
• @​rnv812 made their first contribution in #​2676

Full Changelog: Kludex/uvicorn@0.36.1...0.37.0

v0.36.1: Version 0.36.1

Compare Source

What's Changed

• Raise an exception when calling removed Config.setup_event_loop() by @​Kludex in #​2709

Full Changelog: Kludex/uvicorn@0.36.0...0.36.1

v0.36.0: Version 0.36.0

Compare Source

Added

• Support custom IOLOOPs by @​gnir-work in #​2435
• Allow to provide importable string in --http, --ws and --loop by @​Kludex in #​2658

---

New Contributors

• @​gnir-work made their first contribution in #​2435
• @​musicinmybrain made their first contribution in #​2659
• @​secrett2633 made their first contribution in #​2684

Full Changelog: Kludex/uvicorn@0.35.0...0.36.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.