Skip to content

Update uvicorn requirement from <0.40,>=0.32 to >=0.32,<0.47#3066

Merged
liquidsec merged 1 commit intodevfrom
dependabot/pip/dev/uvicorn-gte-0.32-and-lt-0.47
May 7, 2026
Merged

Update uvicorn requirement from <0.40,>=0.32 to >=0.32,<0.47#3066
liquidsec merged 1 commit intodevfrom
dependabot/pip/dev/uvicorn-gte-0.32-and-lt-0.47

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 26, 2026

Updates the requirements on uvicorn to permit the latest version.

Release notes

Sourced from uvicorn's releases.

Version 0.46.0

What's Changed

Full Changelog: Kludex/uvicorn@0.45.0...0.46.0

Changelog

Sourced from uvicorn's changelog.

0.46.0 (April 23, 2026)

Added

  • Support ws_max_size in wsproto implementation (#2915)
  • Support ws_ping_interval and ws_ping_timeout in wsproto implementation (#2916)

Changed

  • Use bytearray for incoming WebSocket message buffer in websockets-sansio (#2917)

0.45.0 (April 21, 2026)

Added

  • Add --reset-contextvars flag to isolate ASGI request context (#2912)
  • Accept os.PathLike for log_config (#2905)
  • Accept log_level strings case-insensitively (#2907)

Changed

  • Revert "Emit http.disconnect on server shutdown for streaming responses" (#2913)
  • Revert "Explicitly start ASGI run with empty context" (#2911)

Fixed

  • Preserve forwarded client ports in proxy headers middleware (#2903)
  • Raise helpful ImportError when PyYAML is missing for YAML log config (#2906)

0.44.0 (April 6, 2026)

Added

  • Implement websocket keepalive pings for websockets-sansio (#2888)

0.43.0 (April 3, 2026)

You can quit Uvicorn now. We heard you, @​pamelafox - all 47 of your Ctrl+C's (thanks for flagging it, and thanks to @​tiangolo for the fix 🙏). See the tweet.

Changed

  • Emit http.disconnect ASGI receive() event on server shutting down for streaming responses (#2829)
  • Use native context parameter for create_task on Python 3.11+ (#2859)
  • Drop cast in ASGI types (#2875)

0.42.0 (March 16, 2026)

Changed

  • Use bytearray for request body accumulation to avoid O(n^2) allocation on fragmented bodies (#2845)

... (truncated)

Commits
  • b224045 Version 0.46.0 (#2918)
  • 7375b5b Use bytearray for incoming WebSocket message buffer in websockets-sansio (#...
  • d438fb1 Support ws_ping_interval and ws_ping_timeout in wsproto implementation ...
  • 3e6b964 Support ws_max_size in wsproto implementation (#2915)
  • 2c423bd Version 0.45.0 (#2914)
  • 7f027f8 Revert "Emit http.disconnect on server shutdown for streaming responses" (#...
  • 73a80c3 Add --reset-contextvars flag to isolate ASGI request context (#2912)
  • 45c0b56 Revert empty context for ASGI runs (#2911)
  • 850d926 Raise helpful ImportError when PyYAML is missing for YAML log config (#2906)
  • fdcacb4 Accept log_level strings case-insensitively (#2907)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Apr 26, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Apr 26, 2026

📊 Performance Benchmark Report

Comparing dev (baseline) vs dependabot/pip/dev/uvicorn-gte-0.32-and-lt-0.47 (current)

📈 Detailed Results (All Benchmarks)

📋 Complete results for all benchmarks - includes both significant and insignificant changes

🧪 Test Name 📏 Base 📏 Current 📈 Change 🎯 Status
Bloom Filter Dns Mutation Tracking Performance 3.29ms 3.30ms +0.4%
Bloom Filter Large Scale Dns Brute Force 13.62ms 13.66ms +0.3%
Large Closest Match Lookup 255.98ms 258.04ms +0.8%
Realistic Closest Match Workload 138.20ms 139.87ms +1.2%
Event Memory Medium Scan 1784 B/event 1784 B/event +0.0%
Event Memory Large Scan 1768 B/event 1768 B/event +0.0%
Event Validation Full Scan Startup Small Batch 294.32ms 307.04ms +4.3%
Event Validation Full Scan Startup Large Batch 394.89ms 410.42ms +3.9%
Make Event Autodetection Small 19.05ms 19.57ms +2.7%
Make Event Autodetection Large 195.27ms 196.82ms +0.8%
Make Event Explicit Types 8.18ms 8.34ms +2.0%
Excavate Single Thread Small 2.643s 2.669s +1.0%
Excavate Single Thread Large 6.765s 6.758s -0.1%
Excavate Parallel Tasks Small 2.845s 2.793s -1.8%
Excavate Parallel Tasks Large 5.317s 5.255s -1.2%
Is Ip Performance 2.46ms 2.47ms +0.5%
Make Ip Type Performance 8.74ms 8.67ms -0.8%
Mixed Ip Operations 3.48ms 3.42ms -1.8%
Memory Use Web Crawl 40.7 MB 43.5 MB +7.0%
Memory Use Subdomain Enum 19.5 MB 19.5 MB +0.0%
Scan Throughput 100 7.163s 7.709s +7.6%
Scan Throughput 1000 32.232s 32.872s +2.0%
Typical Queue Shuffle 45.76µs 46.53µs +1.7%
Priority Queue Shuffle 538.21µs 543.20µs +0.9%

🎯 Performance Summary

No significant performance changes detected (all changes <10%)


🐍 Python Version 3.11.15

Updates the requirements on [uvicorn](https://github.com/Kludex/uvicorn) to permit the latest version.
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.32.0...0.46.0)

---
updated-dependencies:
- dependency-name: uvicorn
  dependency-version: 0.46.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/dev/uvicorn-gte-0.32-and-lt-0.47 branch from 1867973 to 025dfb7 Compare May 5, 2026 13:13
@liquidsec liquidsec merged commit 64c2193 into dev May 7, 2026
20 checks passed
@dependabot dependabot Bot deleted the dependabot/pip/dev/uvicorn-gte-0.32-and-lt-0.47 branch May 7, 2026 23:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant