chore(deps): bump the python-minor-patch group across 1 directory with 22 updates

[dependabot]

Bumps the python-minor-patch group with 21 updates in the /python directory:

Package	From	To
ruff	0.15.12	0.15.13
authlib	1.7.1	1.7.2
pydantic	2.12.5	2.13.4
typing-extensions	4.14.1	4.15.0
anyio	4.10.0	4.13.0
typer	0.16.0	0.25.1
uvicorn	0.35.0	0.47.0
openai	2.14.0	2.37.0
mcp	1.25.0	1.27.1
fastapi	0.129.0	0.136.1
urllib3	2.6.3	2.7.0
filelock	3.20.3	3.29.0
python-multipart	0.0.22	0.0.29
boto3	1.42.28	1.43.9
ollama	0.6.1	0.6.2
psutil	7.0.0	7.2.2
langgraph	1.0.6	1.2.0
openai-agents	0.6.5	0.17.2
pyyaml	6.0.2	6.0.3
langchain-openai	1.1.7	1.2.1
langgraph-checkpoint-sqlite	3.0.3	3.1.0

Updates ruff from 0.15.12 to 0.15.13

Release notes

Sourced from ruff's releases.

0.15.13

Release Notes

Released on 2026-05-14.

Preview features

• Add a rule to flag lazy imports that are eagerly evaluated (#25016)
• [pylint] Standardize diagnostic message (PLR0914, PLR0917) (#24996)

Bug fixes

• Fix F811 false positive for class methods (#24933)
• Fix setting selection for multi-folder workspace (#24819)
• [eradicate] Fix false positive for lines with leading whitespace (ERA001) (#25122)
• [flake8-pyi] Fix false positive for f-string debug specifier (PYI016) (#24098)

Rule changes

• Always include panic payload in panic diagnostic message (#24873)
• Restrict PYI034 for in-place operations to enclosing class (#24511)
• Improve error message for parameters that are declared global (#24902)
• Update known stdlib (#25103)

Performance

• [isort] Avoid constructing glob::Patterns for literal known modules (#25123)

CLI

• Add TOML examples to --config help text (#25013)
• Colorize ruff check 'All checks passed' (#25085)

Configuration

• Increase max allowed value of line-length setting (#24962)

Documentation

• Add D203 to rules that conflict with the formatter (#25044)
• Clarify COM819 and formatter interaction (#25045)
• Clarify that NotImplemented is a value, not an exception (F901) (#25054)
• Update number of lint rules supported (#24942)

Other changes

• Simplify the playground's markdown template (#24924)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.13

Released on 2026-05-14.

Preview features

• Add a rule to flag lazy imports that are eagerly evaluated (#25016)
• [pylint] Standardize diagnostic message (PLR0914, PLR0917) (#24996)

Bug fixes

• Fix F811 false positive for class methods (#24933)
• Fix setting selection for multi-folder workspace (#24819)
• [eradicate] Fix false positive for lines with leading whitespace (ERA001) (#25122)
• [flake8-pyi] Fix false positive for f-string debug specifier (PYI016) (#24098)

Rule changes

• Always include panic payload in panic diagnostic message (#24873)
• Restrict PYI034 for in-place operations to enclosing class (#24511)
• Improve error message for parameters that are declared global (#24902)
• Update known stdlib (#25103)

Performance

• [isort] Avoid constructing glob::Patterns for literal known modules (#25123)

CLI

• Add TOML examples to --config help text (#25013)
• Colorize ruff check 'All checks passed' (#25085)

Configuration

• Increase max allowed value of line-length setting (#24962)

Documentation

• Add D203 to rules that conflict with the formatter (#25044)
• Clarify COM819 and formatter interaction (#25045)
• Clarify that NotImplemented is a value, not an exception (F901) (#25054)
• Update number of lint rules supported (#24942)

Other changes

• Simplify the playground's markdown template (#24924)

Contributors

• @​MichaReiser

... (truncated)

Commits

• 2afb467 Bump 0.15.13 (#25157)
• 3008796 [ty] classify TypeVar semantic tokens as type parameters (#24891)
• 79470e3 [isort] Avoid constructing glob::Patterns for literal known modules (#25123)
• 2522549 Remove shellcheck from prek (#25154)
• 7db7170 [ty] Support TypedDict key completions in incomplete, anonymous contexts (#25...
• bb3dd53 [ty] Run full iteration analysis on narrowed typevars (#25143)
• 828cdb7 [ty] Isolate file-watching test environment (#25151)
• 89e1d86 [ty] Preserve TypedDict keys through dict unpacking (#24523)
• 86f3064 [ty] Avoid accessing args[0] for static_assert (#25149)
• ed819f9 [ty] Treat custom enum __new__ values as dynamic (#25136)
• Additional commits viewable in compare view

Updates authlib from 1.7.1 to 1.7.2

Release notes

Sourced from authlib's releases.

v1.7.2

What's Changed

• Fix the readme links by @​azmeuk in authlib/authlib#886
• Allow non-recommended algorithms in ClientSecretJWT and PrivateKey by @​azmeuk in authlib/authlib#887
• Validate BCP47 language tags with a regex by @​azmeuk in authlib/authlib#873
• Fix RFC7523 signing with non RSA keys by @​azmeuk in authlib/authlib#884

Full Changelog: authlib/authlib@v1.7.1...v1.7.2

Commits

• a0b76fa chore: bump to 1.7.2
• c85c7f2 Merge pull request #884 from azmeuk/852-rfc7523-key-import
• a3b2add Merge pull request #873 from azmeuk/bcp47
• f2578ea fix: Import RSAKey in auth.py for additional key support
• b57182c fix: fallback support RSAKey when client_secret is text
• 4e75902 Merge branch 'main' into 852-rfc7523-key-import
• 5eb4a86 Merge pull request #887 from azmeuk/883-alg
• 5633f37 fix: allow non-recommended algorithms in ClientSecretJWT and PrivateKeyJWT
• 4c8e7b3 Merge pull request #886 from azmeuk/885-readme
• 23b333e docs: fix the readme links
• Additional commits viewable in compare view

Updates pydantic from 2.12.5 to 2.13.4

Release notes

Sourced from pydantic's releases.

v2.13.4 2026-05-06

v2.13.4 (2026-05-06)

What's Changed

Packaging

• Bump libc from 0.2.155 to 0.2.185 by @​Viicos in #13109
• Adapt pydantic-core linker flags on macOS by @​washingtoneg and @​Viicos in #13147

Fixes

• Preserve RootModel core metadata by @​Viicos in #13129

Full Changelog: pydantic/pydantic@v2.13.3...v2.13.4

v2.13.3 2026-04-20

v2.13.3 (2026-04-20)

What's Changed

Fixes

• Handle AttributeError subclasses with from_attributes by @​Viicos in #13096

Full Changelog: pydantic/pydantic@v2.13.2...v2.13.3

v2.13.2 2026-04-17

v2.13.2 (2026-04-17)

What's Changed

Fixes

• Fix ValidationInfo.field_name missing with model_validate_json() by @​Viicos in #13084

Full Changelog: pydantic/pydantic@v2.13.1...v2.13.2

v2.13.1 2026-04-15

v2.13.1 (2026-04-15)

What's Changed

Fixes

• Fix ValidationInfo.data missing with model_validate_json() by @​davidhewitt in #13079

Full Changelog: pydantic/pydantic@v2.13.0...v2.13.1

v2.13.0 2026-04-13

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.13.4 (2026-05-06)

GitHub release

What's Changed

Packaging

• Bump libc from 0.2.155 to 0.2.185 by @​Viicos in #13109
• Adapt pydantic-core linker flags on macOS by @​washingtoneg and @​Viicos in #13147

Fixes

• Preserve RootModel core metadata by @​Viicos in #13129

v2.13.3 (2026-04-20)

GitHub release

What's Changed

Fixes

• Handle AttributeError subclasses with from_attributes by @​Viicos in #13096

v2.13.2 (2026-04-17)

GitHub release

What's Changed

Fixes

• Fix ValidationInfo.field_name missing with model_validate_json() by @​Viicos in #13084

v2.13.1 (2026-04-15)

GitHub release

What's Changed

Fixes

• Fix ValidationInfo.data missing with model_validate_json() by @​davidhewitt in #13079

v2.13.0 (2026-04-13)

GitHub release

The highlights of the v2.13 release are available in the blog post.

... (truncated)

Commits

• cf67d4b Fix linting
• f0d8a21 Prepare release v2.13.4
• 5e3fe1d Check for pydantic tag pattern in CI
• 7f9edcc Document tagging conventions
• b46a0c9 Adapt pydantic-core linker flags on macOS
• 50629c8 Update to PyPy 7.3.22
• 8522ebb Preserve RootModel core metadata
• a37f3af Adapt MISSING sentinel test to work with unreleased typing_extensions ver...
• 909259a Remove Logfire example in documentation
• 2c4174c Bump libc from 0.2.155 to 0.2.185
• Additional commits viewable in compare view

Updates typing-extensions from 4.14.1 to 4.15.0

Release notes

Sourced from typing-extensions's releases.

4.15.0

No user-facing changes since 4.15.0rc1.

New features since 4.14.1:

• Add the @typing_extensions.disjoint_base decorator, as specified in PEP 800. Patch by Jelle Zijlstra.
• Add typing_extensions.type_repr, a backport of annotationlib.type_repr, introduced in Python 3.14 (CPython PR #124551, originally by Jelle Zijlstra). Patch by Semyon Moroz.
• Fix behavior of type params in typing_extensions.evaluate_forward_ref. Backport of CPython PR #137227 by Jelle Zijlstra.

4.15.0rc1

• Add the @typing_extensions.disjoint_base decorator, as specified in PEP 800. Patch by Jelle Zijlstra.
• Add typing_extensions.type_repr, a backport of annotationlib.type_repr, introduced in Python 3.14 (CPython PR #124551, originally by Jelle Zijlstra). Patch by Semyon Moroz.
• Fix behavior of type params in typing_extensions.evaluate_forward_ref. Backport of CPython PR #137227 by Jelle Zijlstra.

Changelog

Sourced from typing-extensions's changelog.

Release 4.15.0 (August 25, 2025)

No user-facing changes since 4.15.0rc1.

Release 4.15.0rc1 (August 18, 2025)

• Add the @typing_extensions.disjoint_base decorator, as specified in PEP 800. Patch by Jelle Zijlstra.
• Add typing_extensions.type_repr, a backport of annotationlib.type_repr, introduced in Python 3.14 (CPython PR #124551, originally by Jelle Zijlstra). Patch by Semyon Moroz.
• Fix behavior of type params in typing_extensions.evaluate_forward_ref. Backport of CPython PR #137227 by Jelle Zijlstra.

Commits

• 9d1637e Prepare release 4.15.0 (#658)
• 4bd67c5 Coverage: exclude some noise (#656)
• e589a26 Coverage: add detailed report to job summary (#655)
• 67d37fe Coverage: Implement fail_under (#654)
• e9ae26f Don't delete previous coverage comment (#653)
• ac80bb7 Add Coverage workflow (#623)
• abaaafd Prepare release 4.15.0rc1 (#650)
• 9810405 Add @disjoint_base (PEP 800) (#634)
• 7ee9e05 Backport type_params fix from CPython (#646)
• 1e8eb9c Do not refer to PEP 705 as being experimental (#648)
• Additional commits viewable in compare view

Updates anyio from 4.10.0 to 4.13.0

Release notes

Sourced from anyio's releases.

4.13.0

• Dropped support for Python 3.9
• Added a ttl parameter to the anyio.functools.lru_cache wrapper (#1073; PR by @​Graeme22)
• Widened the type annotations of file I/O streams to accept IO[bytes] instead of just BinaryIO (#1078)
• Fixed anyio.Path not being compatible with Python 3.15 due to the removal of pathlib.Path.is_reserved() and the addition of pathlib.Path.__vfspath__() (#1061; PR by @​veeceey)
• Fixed the BrokenResourceError raised by the asyncio SocketStream not having the original exception as its cause (#1055; PR by @​veeceey)
• Fixed the TypeError raised when using "func" as a parameter name in pytest.mark.parametrize when using the pytest plugin (#1068; PR by @​JohnnyDeuss)
• Fixed the pytest plugin not running tests that had the anyio marker added programmatically via pytest_collection_modifyitems (#422; PR by @​chbndrhnns)
• Fixed cancellation exceptions leaking from a CancelScope on asyncio when they are contained in an exception group alongside non-cancellation exceptions (#1091; PR by @​gschaffner)
• Fixed Condition.wait() not passing on a notification when the task is cancelled but already received a notification
• Fixed inverted condition in the process pool shutdown phase which would cause still-running pooled processes not to be terminated (#1074; PR by @​bysiber)

4.12.1

• Changed all functions currently raising the private NoCurrentAsyncBackend exception (since v4.12.0) to instead raise the public NoEventLoopError exception (#1048)
• Fixed anyio.functools.lru_cache not working with instance methods (#1042)

4.12.0

• Added support for asyncio's task call graphs on Python 3.14 and later when using AnyIO's task groups (#1025)
• Added an asynchronous implementation of the functools module (#1001)
• Added support for uvloop=True on Windows via the winloop implementation (#960; PR by @​Vizonex)
• Added support for use as a context manager to anyio.lowlevel.RunVar (#1003)
• Added __all__ declarations to public submodules (anyio.lowlevel etc.) (#1009)
• Added the ability to set the token count of a CapacityLimiter to zero (#1019; requires Python 3.10 or later when using Trio)
• Added parameters case_sensitive and recurse_symlinks along with support for path-like objects to anyio.Path.glob() and anyio.Path.rglob() (#1033; PR by @​northisup)
• Dropped sniffio as a direct dependency and added the get_available_backends() function (#1021)
• Fixed Process.stdin.send() not raising ClosedResourceError and BrokenResourceError on asyncio. Previously, a non-AnyIO exception was raised in such cases (#671; PR by @​gschaffner)
• Fixed Process.stdin.send() not checkpointing before writing data on asyncio (#1002; PR by @​gschaffner)
• Fixed a race condition where cancelling a Future from BlockingPortal.start_task_soon() would sometimes not cancel the async function (#1011; PR by @​gschaffner)
• Fixed the presence of the pytest plugin causing breakage with older versions of pytest (<= 6.1.2) (#1028; PR by @​saper)
• Fixed a rarely occurring RuntimeError: Set changed size during iteration while shutting down the process pool when using the asyncio backend (#985)

4.11.0

• Added support for cancellation reasons (the reason parameter to CancelScope.cancel()) (#975)
• Bumped the minimum version of Trio to v0.31.0
• Added the ability to enter the event loop from foreign (non-worker) threads by passing the return value of anyio.lowlevel.current_token() to anyio.from_thread.run() and anyio.from_thread.run_sync() as the token keyword argument (#256)
• Added pytest option (anyio_mode = "auto") to make the pytest plugin automatically handle all async tests (#971)
• Added the anyio.Condition.wait_for() method for feature parity with asyncio (#974)
• Changed the default type argument of anyio.abc.TaskStatus from Any to None (#964)
• Fixed TCP listener behavior to guarantee the same ephemeral port is used for all socket listeners when local_port=0 (#857; PR by @​11kkw and @​agronholm)
• Fixed inconsistency between Trio and asyncio where a TCP stream that previously raised a BrokenResourceError on send() would still raise BrokenResourceError after the stream was closed on asyncio, but ClosedResourceError on Trio. They now both raise a ClosedResourceError in this scenario. (#671)

Commits

• afbe93c Bumped up the version
• 33bdf2e Rearranged the changelog entries
• 19e09e2 Fixed inverted condition in _forcibly_shutdown_process_pool_on_exit (#1074)
• 9369d80 Fixed Condition.wait() not handing over notification when cancelled
• 6f122ab Fixed cancellation exceptions leaking from a CancelScope on asyncio when th...
• beaa45a [pre-commit.ci] pre-commit autoupdate (#1097)
• 602f660 Widened type annotations to accept IO[bytes] in file streams
• b5dcd45 Added note about erasing the template
• d68670b [pre-commit.ci] pre-commit autoupdate (#1090)
• fc17a22 tweak to_thread docs about abandon_on_cancel (#1088)
• Additional commits viewable in compare view

Updates typer from 0.16.0 to 0.25.1

Release notes

Sourced from typer's releases.

0.25.1

Features

• 🔧 Add Typer Library Skill for Agents. PR #1620 by @​svlandeg.

Internal

• ⬆ Bump ruff from 0.15.11 to 0.15.12. PR #1722 by @​dependabot[bot].
• ⬆ Bump prek from 0.3.10 to 0.3.11. PR #1723 by @​dependabot[bot].

0.25.0

Features

• 🚸 Don't truncate code lines in traceback when formatted with Rich. PR #1695 by @​YuriiMotov.

0.24.2

Fixes

• 🐛 Ensure that typer.launch forwards correctly when launching a file. PR #1708 by @​svlandeg.

Refactors

• 🎨 Ensure ty runs without errors. PR #1628 by @​svlandeg.

Docs

• 📝 Add dates to release notes. PR #1612 by @​YuriiMotov.
• 💄 Fix code blocks in reference docs overflowing table width. PR #1630 by @​YuriiMotov.
• 📝 Fix broken link to FastAPI and Friends newsletter. PR #1540 by @​Karlemami.
• 🔨 Handle external links target=_blank and CSS automatically in JS and CSS. PR #1622 by @​tiangolo.
• 📝 Remove link to Typer developer survey. PR #1609 by @​svlandeg.
• ✏️ Clean up documentation in install.md file. PR #1606 by @​Johandielangman.

Internal

• ⬆ Bump mypy from 1.20.1 to 1.20.2. PR #1715 by @​dependabot[bot].
• ⬆ Bump prek from 0.3.9 to 0.3.10. PR #1716 by @​dependabot[bot].
• ⬆ Bump pydantic-settings from 2.13.1 to 2.14.0. PR #1713 by @​dependabot[bot].
• ⬆ Bump ty from 0.0.31 to 0.0.32. PR #1711 by @​dependabot[bot].
• ⬆ Bump pydantic from 2.13.2 to 2.13.3. PR #1712 by @​dependabot[bot].
• ⬆ Bump pygments from 2.19.2 to 2.20.0. PR #1667 by @​dependabot[bot].
• ⬆ Bump pymdown-extensions from 10.20 to 10.21.2. PR #1710 by @​YuriiMotov.
• ⬆ Bump actions/cache from 5.0.4 to 5.0.5. PR #1700 by @​dependabot[bot].
• ⬆ Bump pydantic from 2.13.1 to 2.13.2. PR #1703 by @​dependabot[bot].
• ⬆ Bump actions/upload-artifact from 7.0.0 to 7.0.1. PR #1701 by @​dependabot[bot].
• ⬆ Bump ruff from 0.15.10 to 0.15.11. PR #1704 by @​dependabot[bot].
• ⬆ Bump cloudflare/wrangler-action from 3.14.1 to 3.15.0. PR #1702 by @​dependabot[bot].
• ⬆ Bump astral-sh/setup-uv from 7.6.0 to 8.1.0. PR #1699 by @​dependabot[bot].
• ⬆ Bump ty from 0.0.30 to 0.0.31. PR #1696 by @​dependabot[bot].
• ⬆ Bump pydantic from 2.13.0 to 2.13.1. PR #1697 by @​dependabot[bot].

... (truncated)

Changelog

Sourced from typer's changelog.

0.25.1 (2026-04-30)

Features

• 🔧 Add Typer Library Skill for Agents. PR #1620 by @​svlandeg.

Internal

• ⬆ Bump ruff from 0.15.11 to 0.15.12. PR #1722 by @​dependabot[bot].
• ⬆ Bump prek from 0.3.10 to 0.3.11. PR #1723 by @​dependabot[bot].

0.25.0 (2026-04-26)

Features

• 🚸 Don't truncate code lines in traceback when formatted with Rich. PR #1695 by @​YuriiMotov.

0.24.2 (2026-04-22)

Fixes

• 🐛 Ensure that typer.launch forwards correctly when launching a file. PR #1708 by @​svlandeg.

Refactors

• 🎨 Ensure ty runs without errors. PR #1628 by @​svlandeg.

Docs

• 📝 Add dates to release notes. PR #1612 by @​YuriiMotov.
• 💄 Fix code blocks in reference docs overflowing table width. PR #1630 by @​YuriiMotov.
• 📝 Fix broken link to FastAPI and Friends newsletter. PR #1540 by @​Karlemami.
• 🔨 Handle external links target=_blank and CSS automatically in JS and CSS. PR #1622 by @​tiangolo.
• 📝 Remove link to Typer developer survey. PR #1609 by @​svlandeg.
• ✏️ Clean up documentation in install.md file. PR #1606 by @​Johandielangman.

Internal

• ⬆ Bump mypy from 1.20.1 to 1.20.2. PR #1715 by @​dependabot[bot].
• ⬆ Bump prek from 0.3.9 to 0.3.10. PR #1716 by @​dependabot[bot].
• ⬆ Bump pydantic-settings from 2.13.1 to 2.14.0. PR #1713 by @​dependabot[bot].
• ⬆ Bump ty from 0.0.31 to 0.0.32. PR #1711 by @​dependabot[bot].
• ⬆ Bump pydantic from 2.13.2 to 2.13.3. PR #1712 by @​dependabot[bot].
• ⬆ Bump pygments from 2.19.2 to 2.20.0. PR #1667 by @​dependabot[bot].
• ⬆ Bump pymdown-extensions from 10.20 to 10.21.2. PR #1710 by @​YuriiMotov.
• ⬆ Bump actions/cache from 5.0.4 to 5.0.5. PR #1700 by @​dependabot[bot].
• ⬆ Bump pydantic from 2.13.1 to 2.13.2. PR #1703 by @​dependabot[bot].
• ⬆ Bump actions/upload-artifact from 7.0.0 to 7.0.1. PR #1701 by @​dependabot[bot].
• ⬆ Bump ruff from 0.15.10 to 0.15.11. PR #1704 by @​dependabot[bot].
• ⬆ Bump cloudflare/wrangler-action from 3.14.1 to 3.15.0. PR #1702 by @​dependabot[bot].

... (truncated)

Commits

• cfcc2ef 🔖 Release version 0.25.1
• 13846cc 📝 Update release notes
• a437469 🔧 Add Typer Library Skill for Agents (#1620)
• ba6cc2c 📝 Update release notes
• 0f3ead0 ⬆ Bump ruff from 0.15.11 to 0.15.12 (#1722)
• db4ade6 📝 Update release notes
• 5a5206c ⬆ Bump prek from 0.3.10 to 0.3.11 (#1723)
• 959845e 🔖 Release version 0.25.0
• 5e1fcfb 📝 Update release notes
• dfb21ad 🚸 Don't truncate code lines in traceback when formatted with Rich (#1695)
• Additional commits viewable in compare view

Updates uvicorn from 0.35.0 to 0.47.0

Release notes

Sourced from uvicorn's releases.

Version 0.47.0

What's Changed

• Eagerly import the ASGI app in the parent process by @​Kludex in Kludex/uvicorn#2919
• Add ssl_context_factory for custom SSLContext configuration by @​Kludex in Kludex/uvicorn#2920
• Treat fd=0 as a valid file descriptor with reload/workers by @​eltoder in Kludex/uvicorn#2927

Full Changelog: Kludex/uvicorn@0.46.0...0.47.0

Version 0.46.0

What's Changed

• Support ws_max_size in wsproto implementation by @​Kludex in Kludex/uvicorn#2915
• Support ws_ping_interval and ws_ping_timeout in wsproto implementation by @​Kludex in Kludex/uvicorn#2916
• Use bytearray for incoming WebSocket message buffer in websockets-sansio by @​Kludex in Kludex/uvicorn#2917

Full Changelog: Kludex/uvicorn@0.45.0...0.46.0

Version 0.45.0

What's Changed

• Preserve forwarded client ports in proxy headers middleware by @​Kludex in Kludex/uvicorn#2903
• Accept os.PathLike for log_config by @​Kludex in Kludex/uvicorn#2905
• Accept log_level strings case-insensitively by @​Kludex in Kludex/uvicorn#2907
• Raise helpful ImportError when PyYAML is missing for YAML log config by @​Kludex in Kludex/uvicorn#2906
• Revert empty context for ASGI runs by @​Kludex in Kludex/uvicorn#2911
• Add --reset-contextvars flag to isolate ASGI request context by @​Kludex in Kludex/uvicorn#2912
• Revert "Emit http.disconnect on server shutdown for streaming responses" (#2829) by @​Kludex in Kludex/uvicorn#2913

New Contributors

• @​Krishnachaitanyakc made their first contribution in Kludex/uvicorn#2870

Full Changelog: Kludex/uvicorn@0.44.0...0.45.0

Version 0.44.0

What's Changed

• Implement websocket keepalive pings for websockets-sansio by @​Kludex in Kludex/uvicorn#2888

Full Changelog: Kludex/uvicorn@0.43.0...0.44.0

Version 0.43.0

Changed

• Emit http.disconnect ASGI receive() event on server shutting down for streaming responses (#2829)
• Use native context parameter for create_task on Python 3.11+ (#2859)
• Drop cast in ASGI types (#2875)

---

Full Changelog: Kludex/uvicorn@0.42.0...0.43.0

... (truncated)

Changelog

Sourced from uvicorn's changelog.

0.47.0 (May 14, 2026)

Added

• Add ssl_context_factory for custom SSLContext configuration (#2920)

Changed

• Eagerly import the ASGI app in the parent process (#2919)

Fixed

• Treat fd=0 as a valid file descriptor with reload/workers (#2927)

0.46.0 (April 23, 2026)

Added

• Support ws_max_size in wsproto implementation (#2915)
• Support ws_ping_interval and ws_ping_timeout in wsproto implementation (#2916)

Changed

• Use bytearray for incoming WebSocket message buffer in websockets-sansio (#2917)

0.45.0 (April 21, 2026)

Added

• Add --reset-contextvars flag to isolate ASGI request context (#2912)
• Accept os.PathLike for log_config (#2905)
• Accept log_level strings case-insensitively (#2907)

Changed

• Revert "Emit http.disconnect on server shutdown for streaming responses" (#2913)
• Revert "Explicitly start ASGI run with empty context" (#2911)

Fixed

• Preserve forwarded client ports in proxy headers middleware (#2903)
• Raise helpful ImportError when PyYAML is missing for YAML log config (#2906)

0.44.0 (April 6, 2026)

Added

• Implement websocket keepalive pings for websockets-sansio (#2888)

0.43.0 (April 3, 2026)

... (truncated)

Commits

• 479a2c0 Version 0.47.0 (#2937)
• 89347fd Add 7-day cooldown for dependency resolution via uv exclude-newer (#2936)
• 767315b Drop unused contents/actions permissions from zizmor workflow (#2935)
• f25ee43 chore(deps): bump urllib3 from 2.6.3 to 2.7.0 (#2933)
• 8782666 Fix typo in docs/deployment/index.md. (#2932)
• ad5ff87 Treat fd=0 as a valid file descriptor with reload/workers (#2927)
• 6761b2c Remove Hugging Face sponsor block from docs (#2923)
• 438f648 Surface sponsors on welcome page and sidebar (#2921)
• 10ddc6d Add ssl_context_factory for custom SSLContext configuration (#2920)
• b499bc4 Eagerly import the ASGI app in the parent process (#2919)
• Additional commits viewable in compare view

Updates openai from 2.14.0 to 2.37.0

Release notes

Sourced from openai's releases.

v2.37.0

2.37.0 (2026-05-13)

Full Changelog: v2.36.0...v2.37.0

Features

• api: add service_tier parameter to responses compact method (625827c)
• internal/types: support eagerly validating pydantic iterators (7e527bc)
• Remove unnecessary client_id when using workload identity provider for auth (c39ea8d)

Bug Fixes

• client: add missing f-string prefix in file type error message (c85ebd9)

v2.36.0

2.36.0 (2026-05-07)

Full Changelog: v2.35.1...v2.36.0

Features

• api: manual updates (13c639c)
• api:Description has been truncated

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.