fix(deps): update python-dependencies - #14
Open
renovate[bot] wants to merge 1 commit into
Open
renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
renovate
Bot
force-pushed
the
renovate/python-dependencies
branch
from
October 5, 2026 05:38
f43fa63 to
c597f1d
Compare
renovate
Bot
force-pushed
the
renovate/python-dependencies
branch
from
October 6, 2026 01:36
c597f1d to
11bbb94
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
==2.0.54→==2.1.1==4.0.3→==4.0.6==2026.3.post1→==2026.4==0.16.8→==0.16.9==1.177.0→==1.178.0==1.6.0→==1.7.0==0.53.0→==0.54.0Release Notes
tox-dev/py-filelock (filelock)
v4.0.6Compare Source
What's Changed
Full Changelog: tox-dev/filelock@4.0.5...4.0.6
v4.0.5Compare Source
What's Changed
New Contributors
Full Changelog: tox-dev/filelock@4.0.4...4.0.5
v4.0.4Compare Source
What's Changed
New Contributors
Full Changelog: tox-dev/filelock@4.0.3...4.0.4
stub42/pytz (pytz)
v2026.4Compare Source
astral-sh/ruff (ruff)
v0.16.9Compare Source
Released on 2026-09-24.
Preview features
ruff] Avoid false positives for overloaded division (RUF069) (#28309)Bug fixes
flake8-bugbear] Avoid false positives for calls with keyword arguments (B009,B010,B043) (#28776)flake8-tidy-imports] Allow lazy imports to be used in deferred annotations (TID255) (#28767)Rule changes
flake8-pyi] Mention stubs in the diagnostic message (PYI002) (#28542)Documentation
flake8-annotations] Clarify thatANN401checks return types in addition to arguments (#28334)flake8-bugbear] Document type-checker interaction (B010) (#28509)flake8-comprehensions] Documentmap/generator exception behavior (C417) (#27794)ruff] Mention related isort settings (RUF022) (#28719)Contributors
semgrep/semgrep (semgrep)
v1.178.0Compare Source
### Changed
### Fixed
semgrep-coreexited on Windows. (windows-hang)Kludex/starlette (starlette)
v1.7.0: Version 1.7.0Compare Source
This release adds experimental OpenTelemetry tracing, HTTP
QUERYsupport, and response trailers inTestClient. Starlette now requires AnyIO 4.Added
OpenTelemetryMiddlewarefor HTTP server spans, with URL exclusions and custom tracer providers #3438, #3463, and #3520.scope["route"]#3438.QUERYHTTP method inHTTPEndpoint, CORS, and OpenAPI 3.2 schema generation #3489.TestClientand expose them throughresponse.extensions["http.response.trailers"]#3563.SessionMiddleware#3510.partitionedtoResponse.delete_cookie()on Python 3.14 and later #3376.TrustedHostMiddlewareandTestClient#3471.Changed
anyio>=4.0.0,<5, dropping support for AnyIO 3 #3512.WebSocketDisconnected, aRuntimeErrorsubclass, for disconnected WebSocket operations #2767.Collection[str]inCORSMiddlewareconfiguration annotations, including sets and frozensets #3518.Fixed
BaseHTTPMiddleware#3476.400for invalid multipart parser input #3492.Vary: Originon all normal CORS responses and vary preflight responses by all request headers that affect them #3516 and #3517.Hostheaders and IPv6 authorities consistently across URL construction, host routing, and redirect middleware #3472.Rangeheaders whenFileResponsehas a status other than200, preserving its status and full body #3568.If-None-Match: *inStaticFiles#3201.StaticFileswithout raising an assertion error #3532.popitem()and|=#3436.WebSocketEndpoint.decode()#3372.identityonSimpleUserandUnauthenticatedUser#3271.HTTPExceptionto use non-standard status codes without an explicitdetail#3545.TestClientand add explicit imports inWSGIMiddlewarefor AnyIO 4.15 compatibility #3498 and #3501.ServerErrorMiddleware#2858.Full changelog: 1.6.0...1.7.0
Kludex/uvicorn (uvicorn)
v0.54.0: Version 0.54.0Compare Source
📨 Send metadata after the response body
uvicorn0.54.0 adds response trailers and103 Early Hintsto its experimental HTTP/2 implementation throughzttp.uv add uvicorn==0.54.0 "zttp>=0.0.34"http.response.trailersextension lets applications send metadata, such as checksums, after the response body. Clients must sendTE: trailersto receive them. Multiple trailer messages are combined before completing the response.--http zttp --http2. Upgrade-based h2c and WebSockets over HTTP/2 remain unsupported.💡 Hint at resources before the final response
103 Early Hintsover HTTP/2 (#3137). Applications can use the ASGIhttp.response.early_hintextension to send resource hints before the final response. Each supplied link becomes a separateLinkheader.Full changelog: 0.53.0...0.54.0
Configuration
📅 Schedule: (UTC)
* 0-3 * * 1)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.