[PR #12] Bump uvicorn from 0.34.0 to 0.52.4 in /searxng-pii-proxy #12

New issue

Open

opened 2026-08-28 07:33:35 +02:00 by zaph0d · 0 comments

zaph0d commented 2026-08-28 07:33:35 +02:00

Owner

Copy link

📋 Pull Request Information

Original PR: https://github.com/niels-emmer/private-rag-openwebui/pull/12
Author: @dependabot[bot]
Created: 8/27/2026
Status: 🔄 Open

Base: main ← Head: dependabot/pip/searxng-pii-proxy/uvicorn-0.52.4

---

📝 Commits (1)

• ac5ef84 Bump uvicorn from 0.34.0 to 0.52.4 in /searxng-pii-proxy

📊 Changes

1 file changed (+1 additions, -1 deletions)

View changed files

📝 searxng-pii-proxy/requirements.txt (+1 -1)

📄 Description

Bumps uvicorn from 0.34.0 to 0.52.4.

Release notes

Sourced from uvicorn's releases.

Version 0.52.4

Fixed

• Remove duplicate Date headers from accepted WebSocket handshakes with websockets-sansio (#3078)

Full Changelog: https://github.com/Kludex/uvicorn/compare/0.52.3...0.52.4

Version 0.52.3

Changed

• Update zttp to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (#3067)

Full Changelog: https://github.com/Kludex/uvicorn/compare/0.52.2...0.52.3

Version 0.52.2

Fixed

• Update zttp to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (#3063)

Full Changelog: https://github.com/Kludex/uvicorn/compare/0.52.1...0.52.2

Version 0.52.1

Fixed

• Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)
• Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)
• Handle connection loss while a WebSocket write is waiting on backpressure (#3050)
• Remove duplicate Content-Type and Content-Length headers from WebSocket denial responses on the websockets-sansio implementation, and deliver non-UTF-8 denial bodies intact (#3041)

Full Changelog: https://github.com/Kludex/uvicorn/compare/0.52.0...0.52.1

Version 0.52.0

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

• Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

• Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

Full Changelog: https://github.com/Kludex/uvicorn/compare/0.51.0...0.52.0

Version 0.51.0

What's Changed

• Restart workers with overlap on SIGHUP for near-zero-downtime reloads by @​Kludex in Kludex/uvicorn#3025

... (truncated)

Changelog

Sourced from uvicorn's changelog.

0.52.4 (August 18, 2026)

Fixed

• Remove duplicate Date headers from accepted WebSocket handshakes with websockets-sansio (#3078)

0.52.3 (August 13, 2026)

Changed

• Update zttp to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (#3067)

0.52.2 (August 13, 2026)

Fixed

• Update zttp to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (#3063)

0.52.1 (August 1, 2026)

Fixed

• Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)
• Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)
• Handle connection loss while a WebSocket write is waiting on backpressure (#3050)
• Remove duplicate Content-Type and Content-Length headers from WebSocket denial responses on the websockets-sansio implementation, and deliver non-UTF-8 denial bodies intact (#3041)

0.52.0 (July 29, 2026)

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

• Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

• Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

0.51.0 (July 8, 2026)

Added

• Restart workers one at a time on SIGHUP, bringing each replacement up before retiring the old worker, so reloads no longer drop requests (#3025)

Removed

• Remove colorama from the standard extra (#3027)

... (truncated)

Commits

• 8988c23 Stabilize macOS Python 3.13 signal shutdown tests (#3084)
• 898ddca Update PyPI publish action to version 1.14.2 (#3083)
• 3869f8a Restore Mermaid diagram rendering (#3080)
• 64148a9 Version 0.52.4 (#3079)
• 9e9e569 docs: correct release example PR number (#3072)
• b783dac Remove duplicate Date header from SansIO WebSocket handshakes (#3078)
• 27019b2 chore(deps): bump the python-packages group across 1 directory with 11 update...
• 1b64273 Fix a typo in index.md (#3006)
• a68da60 Version 0.52.3 (#3068)
• 6e3bb4c Use zttp 0.0.24 fast receive path (#3067)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/niels-emmer/private-rag-openwebui/pull/12 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 8/27/2026 **Status:** 🔄 Open **Base:** `main` ← **Head:** `dependabot/pip/searxng-pii-proxy/uvicorn-0.52.4` --- ### 📝 Commits (1) - [`ac5ef84`](https://github.com/niels-emmer/private-rag-openwebui/commit/ac5ef84471cfdbf9dc3ec4f5d1261e35c8f58fd6) Bump uvicorn from 0.34.0 to 0.52.4 in /searxng-pii-proxy ### 📊 Changes **1 file changed** (+1 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `searxng-pii-proxy/requirements.txt` (+1 -1) </details> ### 📄 Description Bumps [uvicorn](https://github.com/Kludex/uvicorn) from 0.34.0 to 0.52.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/Kludex/uvicorn/releases">uvicorn's releases</a>.</em></p> <blockquote> <h2>Version 0.52.4</h2> <h3>Fixed</h3> <ul> <li>Remove duplicate <code>Date</code> headers from accepted WebSocket handshakes with <code>websockets-sansio</code> (<a href="https://redirect.github.com/Kludex/uvicorn/pull/3078">#3078</a>)</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/Kludex/uvicorn/compare/0.52.3...0.52.4">https://github.com/Kludex/uvicorn/compare/0.52.3...0.52.4</a></p> <h2>Version 0.52.3</h2> <h3>Changed</h3> <ul> <li>Update <code>zttp</code> to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3067">#3067</a>)</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/Kludex/uvicorn/compare/0.52.2...0.52.3">https://github.com/Kludex/uvicorn/compare/0.52.2...0.52.3</a></p> <h2>Version 0.52.2</h2> <h3>Fixed</h3> <ul> <li>Update <code>zttp</code> to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3063">#3063</a>)</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/Kludex/uvicorn/compare/0.52.1...0.52.2">https://github.com/Kludex/uvicorn/compare/0.52.1...0.52.2</a></p> <h2>Version 0.52.1</h2> <h3>Fixed</h3> <ul> <li>Complete the closing handshake on server-initiated WebSocket closes in the <code>websockets-sansio</code> and <code>wsproto</code> implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3053">#3053</a>)</li> <li>Add missing write flow control to the <code>websockets-sansio</code> implementation, preventing data truncation on server-initiated closes with large in-flight payloads (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3048">#3048</a>)</li> <li>Handle connection loss while a WebSocket write is waiting on backpressure (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3050">#3050</a>)</li> <li>Remove duplicate <code>Content-Type</code> and <code>Content-Length</code> headers from WebSocket denial responses on the <code>websockets-sansio</code> implementation, and deliver non-UTF-8 denial bodies intact (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3041">#3041</a>)</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/Kludex/uvicorn/compare/0.52.0...0.52.1">https://github.com/Kludex/uvicorn/compare/0.52.0...0.52.1</a></p> <h2>Version 0.52.0</h2> <p>This release adds an experimental HTTP/1.1 implementation backed by <a href="https://zttp.marcelotryle.com/">zttp</a>, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.</p> <p>It is still <strong>experimental</strong>, so don't put it in front of production traffic yet. Try it with <code>--http zttp</code>, and please send any feedback to the <a href="https://github.com/Kludex/uvicorn/issues">issue tracker</a>.</p> <h3>Added</h3> <ul> <li>Add an experimental <code>zttp</code> HTTP/1.1 implementation, selectable with <code>--http zttp</code> (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2979">#2979</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3036">#3036</a>)</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/Kludex/uvicorn/compare/0.51.0...0.52.0">https://github.com/Kludex/uvicorn/compare/0.51.0...0.52.0</a></p> <h2>Version 0.51.0</h2> <h2>What's Changed</h2> <ul> <li>Restart workers with overlap on SIGHUP for near-zero-downtime reloads by <a href="https://github.com/Kludex"><code>@​Kludex</code></a> in <a href="https://redirect.github.com/Kludex/uvicorn/pull/3025">Kludex/uvicorn#3025</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md">uvicorn's changelog</a>.</em></p> <blockquote> <h2>0.52.4 (August 18, 2026)</h2> <h3>Fixed</h3> <ul> <li>Remove duplicate <code>Date</code> headers from accepted WebSocket handshakes with <code>websockets-sansio</code> (<a href="https://redirect.github.com/Kludex/uvicorn/pull/3078">#3078</a>)</li> </ul> <h2>0.52.3 (August 13, 2026)</h2> <h3>Changed</h3> <ul> <li>Update <code>zttp</code> to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3067">#3067</a>)</li> </ul> <h2>0.52.2 (August 13, 2026)</h2> <h3>Fixed</h3> <ul> <li>Update <code>zttp</code> to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3063">#3063</a>)</li> </ul> <h2>0.52.1 (August 1, 2026)</h2> <h3>Fixed</h3> <ul> <li>Complete the closing handshake on server-initiated WebSocket closes in the <code>websockets-sansio</code> and <code>wsproto</code> implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3053">#3053</a>)</li> <li>Add missing write flow control to the <code>websockets-sansio</code> implementation, preventing data truncation on server-initiated closes with large in-flight payloads (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3048">#3048</a>)</li> <li>Handle connection loss while a WebSocket write is waiting on backpressure (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3050">#3050</a>)</li> <li>Remove duplicate <code>Content-Type</code> and <code>Content-Length</code> headers from WebSocket denial responses on the <code>websockets-sansio</code> implementation, and deliver non-UTF-8 denial bodies intact (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3041">#3041</a>)</li> </ul> <h2>0.52.0 (July 29, 2026)</h2> <p>This release adds an experimental HTTP/1.1 implementation backed by <a href="https://zttp.marcelotryle.com/">zttp</a>, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.</p> <p>It is still <strong>experimental</strong>, so don't put it in front of production traffic yet. Try it with <code>--http zttp</code>, and please send any feedback to the <a href="https://github.com/Kludex/uvicorn/issues">issue tracker</a>.</p> <h3>Added</h3> <ul> <li>Add an experimental <code>zttp</code> HTTP/1.1 implementation, selectable with <code>--http zttp</code> (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2979">#2979</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3036">#3036</a>)</li> </ul> <h2>0.51.0 (July 8, 2026)</h2> <h3>Added</h3> <ul> <li>Restart workers one at a time on <code>SIGHUP</code>, bringing each replacement up before retiring the old worker, so reloads no longer drop requests (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3025">#3025</a>)</li> </ul> <h3>Removed</h3> <ul> <li>Remove <code>colorama</code> from the <code>standard</code> extra (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3027">#3027</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/Kludex/uvicorn/commit/8988c23704fc373c9206cca53ec57dd8ad7f44a5"><code>8988c23</code></a> Stabilize macOS Python 3.13 signal shutdown tests (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3084">#3084</a>)</li> <li><a href="https://github.com/Kludex/uvicorn/commit/898ddca9254b53c5bf7a6ee509756704caaa949f"><code>898ddca</code></a> Update PyPI publish action to version 1.14.2 (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3083">#3083</a>)</li> <li><a href="https://github.com/Kludex/uvicorn/commit/3869f8aac2bdd040fa3fbe564e1dad67e2637641"><code>3869f8a</code></a> Restore Mermaid diagram rendering (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3080">#3080</a>)</li> <li><a href="https://github.com/Kludex/uvicorn/commit/64148a9c574e1eb87d3d09b3ce4c256606f8d973"><code>64148a9</code></a> Version 0.52.4 (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3079">#3079</a>)</li> <li><a href="https://github.com/Kludex/uvicorn/commit/9e9e5691bd14d5c4cd66d9bd76c7730bc48461a2"><code>9e9e569</code></a> docs: correct release example PR number (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3072">#3072</a>)</li> <li><a href="https://github.com/Kludex/uvicorn/commit/b783dacab50b9d6767b0cf65826b2dc3aae21909"><code>b783dac</code></a> Remove duplicate Date header from SansIO WebSocket handshakes (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3078">#3078</a>)</li> <li><a href="https://github.com/Kludex/uvicorn/commit/27019b2a4b1fa6d68a289fcf7d738fbdc6ee4e5d"><code>27019b2</code></a> chore(deps): bump the python-packages group across 1 directory with 11 update...</li> <li><a href="https://github.com/Kludex/uvicorn/commit/1b6427311bb84a15addee688f6d41d96e33f8b0a"><code>1b64273</code></a> Fix a typo in index.md (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3006">#3006</a>)</li> <li><a href="https://github.com/Kludex/uvicorn/commit/a68da608147c5f79d962352dce11de8f6e32d972"><code>a68da60</code></a> Version 0.52.3 (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3068">#3068</a>)</li> <li><a href="https://github.com/Kludex/uvicorn/commit/6e3bb4c5c22531c16d341f2da49f2653307f412f"><code>6e3bb4c</code></a> Use zttp 0.0.24 fast receive path (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3067">#3067</a>)</li> <li>Additional commits viewable in <a href="https://github.com/Kludex/uvicorn/compare/0.34.0...0.52.4">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- _{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

zaph0d added the

pull-request

label 2026-08-28 07:33:35 +02:00

Sign in to join this conversation.

No Branch/Tag specified

Branches Tags

main

dependabot/pip/searxng-pii-proxy/uvicorn-0.52.4

dependabot/docker/ingestion/python-3.14-slim

dependabot/docker/searxng-pii-proxy/python-3.14-slim

No results found.

Labels

Clear labels   

pull-request

Mirrored from GitHub Pull Request

No labels

pull-request

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

github-mirrors/private-rag-openwebui#12

No description provided.