⬆️(dependencies) update python dependencies#49
Open
renovate[bot] wants to merge 1 commit intomainfrom
Open
Conversation
Contributor
Author
|
34503d8 to
9dee109
Compare
e66c095 to
c762a92
Compare
51a7359 to
bb8cb0a
Compare
bb8cb0a to
905fb62
Compare
905fb62 to
1f03ca6
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
==5.6.2→==5.6.3==0.0.22→==0.0.26==3.16.1→==3.17.1==2024.4.2→==2026.3.4==2026.1.1→==2026.4.1==40.1.0→==40.12.040.13.0==23.0.0→==25.3.0==9.8.0→==9.12.0==1.1.0→==1.1.1==3.3.2→==3.3.3==6.0.0→==6.1.66.2.0==4.0.4→==4.0.5==7.0.0→==7.1.0==4.11.1→==4.12.0~=3.12.0→~=3.14.33.14.4==5.3.1→==7.4.0==0.25.8→==0.26.0==0.14.10→==0.15.90.15.10==2.48.0→==2.57.0==2.32.4.20250913→==2.33.0.202604022.33.0.20260408==6.11.0→==6.12.0Release Notes
celery/celery (celery)
v5.6.3Compare Source
What's Changed
TypeErrorduring exception handling by @ChickenBenny in #10178reconnect_on_errortoBaseResultConsumerby @ChickenBenny in #10189New Contributors
Full Changelog: celery/celery@v5.6.2...v5.6.3
suitenumerique/django-lasuite (django-lasuite)
v0.0.26Compare Source
Changed
Fixed
issclaim optional in introspection response validationv0.0.25Compare Source
Added
v0.0.24Compare Source
Changed
Fixed
v0.0.23Compare Source
encode/django-rest-framework (djangorestframework)
v3.17.1Compare Source
What's Changed
Bug fixes
HTMLFormRendererwith emptydatetimevalues by @p-r-a-v-i-n in #9928Full Changelog: encode/django-rest-framework@3.17.0...3.17.1
v3.17.0Compare Source
What's Changed
Breaking changes
Features
DurationFieldby @sevdog in #8532@versioning_class(),@content_negotiation_class(),@metadata_class()for function-based views by @qqii in #9719violation_error_codeandviolation_error_messagefromUniqueConstraintinUniqueTogetherValidatorby @s-aleshin in #9766ipaddressobjects inJSONEncoderby @corenting in #9087BigIntegerto string by @HoodyH in #9775Bug fixes
Tokenoverwrite by @mahdirahimi1999 in #9754UniqueTogetherValidatorvalidation when condition references a read-only field by @ticosax in #9764default=Noneby @Genarito in #9790__init__.pyby @TheFunctionalGuy in #9799HTMLFormRendererto ensure a validdatetime-localformat by @mgaligniana in #9365MultipleChoiceFieldby @fbozhang in #9735Translations
Packaging
pyproject.tomlby @deronnax in #9056MANIFEST.intopyproject.tomlby @p-r-a-v-i-n in #9825Other changes
secretsmodule by @mahdirahimi1999 in #9760@api_viewby @kernelshard in #9821New Contributors
Full Changelog: encode/django-rest-framework@3.16.1...3.17.0
mozilla-services/python-dockerflow (dockerflow)
v2026.3.4Compare Source
v2026.1.26Compare Source
tfranzel/drf-spectacular-sidecar (drf-spectacular-sidecar)
v2026.4.1Compare Source
v2026.3.1Compare Source
joke2k/faker (faker)
v40.12.0Compare Source
ar_DZandfr_DZlocales (#2341). Thanks @othmane099.v40.11.1Compare Source
v40.11.0Compare Source
de_CHbank provider. Thanks @raphael-s.v40.10.0Compare Source
es_MXlocale. Thanks @rodrigobnogueira.v40.9.0Compare Source
pt_PTpostalcodeformat in address provider. Thanks @filipemattar.v40.8.1Compare Source
v40.8.0Compare Source
hu_HUlocale. Thanks @majorzoltan80.v40.7.0Compare Source
v40.6.0Compare Source
he_ILlocale. Thanks @Moo64c.v40.5.1Compare Source
_get_local_timezone()missingreturnstatement. Thanks @bysiber.v40.5.0Compare Source
user_name_formats. Thanks @WannaFight.v40.4.0Compare Source
cieforit_IT. Thanks @ElektroDuck.v40.3.0Compare Source
el_GRbank provider. Thanks @bon12-gr.v40.2.0Compare Source
pt_bRprovider (domains, tlds, slugify). Thanks @MorganaSilva.v40.1.3Compare Source
pyfloatTypeErrorwhen combiningpositive=Truewithmax_value. Thanks @odrigobnogueira.v40.1.2Compare Source
tzdataconditionally required based on platform. Thanks @rodrigobnogueira.v40.1.1Compare Source
-iCLI parameter. Thanks @crd.benoitc/gunicorn (gunicorn)
v25.3.0: Gunicorn 25.3.0Compare Source
Bug Fixes
HTTP/2 ASGI Body Duplication: Fix request body being received twice in HTTP/2
ASGI requests, causing JSON parsing errors with "Extra data" messages
(#3558)
ASGI Chunked EOF Handling: Add
finish()method to callback parser to handlechunked encoding edge case where connection closes before final CRLF after zero-chunk
HTTP/2 Documentation: Fix
http_protocolsexamples to use comma-separated stringinstead of list syntax (#3561)
Chunked Encoding: Reject chunk extensions containing bare CR bytes per RFC 9112
(#3556)
Request Line Limit: Fix
--limit-request-line 0to mean unlimited as documented,instead of using default maximum. Works with both Python and fast C parser.
(#3563)
Security
Changes
Fast HTTP Parser: Update to gunicorn_h1c >= 0.6.3 for
asgi_headerspropertyand
InvalidChunkExtensionvalidation for bare CR rejectionASGI PROXY Protocol: Add PROXY protocol v1/v2 support to callback parser
Docker Images: Update to Python 3.14
v25.2.0: Gunicorn 25.2.0Compare Source
New Features
http_parser='fast'automode if version not metBug Fixes
uWSGI Async Workers: Fix
InvalidUWSGIHeader: incomplete headererror when using gevent or gthread workers with uwsgi protocol behind nginx. (#3552, PR #3554)FileWrapper Iterator Protocol: Add
__iter__and__next__methods toFileWrapperfor full PEP 3333 compliance. (#3396, PR #3550)Performance
bytearraybuffer operationsbytearray.find()directly instead of converting to bytes firstlist.pop(0)(O(1) vs O(n))v25.1.0: Gunicorn 25.1.0Compare Source
New Features
Control Interface (gunicornc): Add interactive control interface for managing
running Gunicorn instances, similar to birdc for BIRD routing daemon
(PR #3505)
show all/workers/dirty/config/stats/listenersworker add/remove/kill,dirty add/removereload,reopen,shutdown--control-socket,--control-socket-mode,--no-control-socketgunicorncfor connecting to control socketDirty Stash: Add global shared state between workers via
dirty.stash(PR #3503)
Dirty Binary Protocol: Implement efficient binary protocol for dirty arbiter IPC
using TLV (Type-Length-Value) encoding
(PR #3500)
Dirty TTIN/TTOU Signals: Add dynamic worker scaling for dirty arbiters
(PR #3504)
Changes
Documentation
v25.0.3Compare Source
What's Changed
Bug Fixes
Documentation
Full Changelog: benoitc/gunicorn@25.0.2...25.0.3
v25.0.2: Release 25.0.2Compare Source
Bug Fixes
Fix ASGI concurrent request failures through nginx proxy by normalizing
sockaddr tuples to handle both 2-tuple (IPv4) and 4-tuple (IPv6) formats
(PR #3485)
Fix graceful disconnect handling for ASGI worker to properly handle
client disconnects without raising exceptions
(PR #3485)
Fix lazy import of dirty module for gevent compatibility - prevents
import errors when concurrent.futures is imported before gevent monkey-patching
(PR #3483)
Changes
Refactor: Extract
_normalize_sockaddrutility function for consistentsocket address handling across workers
Add license headers to all Python source files
Update copyright year to 2026 in LICENSE and NOTICE files
v25.0.1Compare Source
Bug Fixes
HTTP/1.1 responses without Content-Length header. Without chunked encoding,
clients wait for connection close to determine end-of-response.
Changes
uvloop for async task execution
Testing
WebSocket, streaming, lifespan, framework integration (Starlette, FastAPI),
HTTP/2, and concurrency scenarios
v25.0.0: Gunicorn 25.0.0Compare Source
New Features
Dirty Arbiters: Separate process pool for executing long-running, blocking
operations (AI model loading, heavy computation) without blocking HTTP workers
(PR #3460)
--dirty-app,--dirty-workers,--dirty-timeout,--dirty-threads,--dirty-graceful-timeouton_dirty_starting,dirty_post_fork,dirty_worker_init,dirty_worker_exitPer-App Worker Allocation for Dirty Arbiters: Control how many dirty workers
load each app for memory optimization with heavy models
(PR #3473)
workersclass attribute on DirtyApp (e.g.,workers = 2)module:class:N(e.g.,myapp:HeavyModel:2)DirtyNoWorkersAvailableErrorfor graceful error handlingworkers=2: 20GB (75% savings)HTTP/2 Support (Beta): Native HTTP/2 (RFC 7540) support for improved performance
with modern clients (PR #3468)
--http-protocols,--http2-max-concurrent-streams,--http2-initial-window-size,--http2-max-frame-size,--http2-max-header-list-sizepip install gunicorn[http2]examples/http2_gevent/with Docker and testsHTTP 103 Early Hints: Support for RFC 8297 Early Hints to enable browsers to
preload resources before the final response
(PR #3468)
environ['wsgi.early_hints'](headers)callbackhttp.response.informationalmessage typeuWSGI Protocol for ASGI Worker: The ASGI worker now supports receiving requests
via the uWSGI binary protocol from nginx
(PR #3467)
Bug Fixes
Fix HTTP/2 ALPN negotiation for gevent and eventlet workers when
do_handshake_on_connectis False (the default). The TLS handshake is nowexplicitly performed before checking
selected_alpn_protocol().Fix setproctitle initialization with systemd socket activation
(#3465)
Fix
Expect: 100-continuehandling: ignore the header for HTTP/1.0 requestssince 100-continue is only valid for HTTP/1.1+
(PR #3463)
Fix missing
_expected_100_continueattribute in UWSGIRequestDisable setproctitle on macOS to prevent segfaults during process title updates
Publish full exception traceback when the application fails to load
(#3462)
Fix ASGI: quick shutdown on SIGINT/SIGQUIT, graceful on SIGTERM
Deprecations
eventletworker is deprecated and will be removed inGunicorn 26.0. Eventlet itself is no longer actively maintained.
Please migrate to
gevent,gthread, or another supported worker type.Changes
(PR #3471)
v24.1.1Compare Source
Bug Fixes
forwarded_allow_ipsandproxy_allow_ipsto remain as strings for backwardcompatibility with external tools like uvicorn. Network validation now uses strict
mode to detect invalid CIDR notation (e.g.,
192.168.1.1/24where host bits are set)(#3458,
PR #3459)
Full Changelog: <https://githu
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.