chore(deps): bump the all-dependencies group with 6 updates by dependabot[bot] · Pull Request #146 · ServerSideHannes/s3proxy-python

dependabot · 2026-07-29T19:06:10Z

Updates the requirements on fastapi, uvicorn[standard], prometheus-client, ruff, boto3-stubs[s3] and fakeredis to permit the latest version.
Updates fastapi from 0.139.2 to 0.141.1

Release notes

Sourced from fastapi's releases.

0.141.1

Fixes

🐛 Fix support for background tasks and headers from dependencies in app.frontend(). PR #16105 by @tiangolo.

Docs

📝 Document FASTAPI_ENV in FastAPI CLI guide. PR #16104 by @tiangolo.

0.141.0

Features

✨ Add app.frontend(check_dir="auto"), to make local development more convenient with fastapi dev. PR #16102 by @tiangolo.

0.140.13

Fixes

🐛 Fix status_code being ignored for SSE and JSONL streaming endpoints. PR #15937 by @SAURABHSALVE.

Docs

📝 Fix format_sse_event docstring rendering of \n\n terminator. PR #15613 by @AshNicolus.

📝 Add API reference page for fastapi.sse. PR #15930 by @SAURABHSALVE.

0.140.12

Fixes

🐛 Fix line splitting in format_sse_event to comply with SSE spec. PR #15515 by @Zawwarsami16.

0.140.11

Fixes

🐛 Fix response_model_* params ignored for non-generator endpoints with Iterable[..] return type. PR #15093 by @YuriiMotov.

0.140.10

Fixes

🐛 Fix handling sequences with nested Annotated types. PR #14874 by @YuriiMotov.

Internal

🐛 Accept any base test failure as regression. PR #16092 by @tiangolo.

🐛 Preserve pytest exit code in regression check. PR #16091 by @tiangolo.

✅ Test PR regressions against base code. PR #16090 by @tiangolo.

0.140.9

Fixes

🐛 Fix exclude_defaults not propagated to dict keys and values in jsonable_encoder. PR #16043 by @MBGrao.

... (truncated)

Commits

95f8322 🔖 Release version 0.141.1 (#16106)
f137944 📝 Update release notes
d623544 🐛 Fix support for background tasks and headers from dependencies in `app.fron...
1d211b9 📝 Update release notes
8a1f876 📝 Document FASTAPI_ENV in FastAPI CLI guide (#16104)
c7e7b65 🔖 Release version 0.141.0 (#16103)
6bceb84 📝 Update release notes
5429fed ✨ Add app.frontend(check_dir="auto"), to make local development more conven...
628663f 🔖 Release version 0.140.13 (#16096)
0b54fd0 📝 Update release notes
Additional commits viewable in compare view

Updates uvicorn[standard] to 0.52.0

Release notes

Sourced from uvicorn[standard]'s releases.

Version 0.52.0

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

Full Changelog: Kludex/uvicorn@0.51.0...0.52.0

Changelog

Sourced from uvicorn[standard]'s changelog.

0.52.0 (July 29, 2026)

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

0.51.0 (July 8, 2026)

Added

Restart workers one at a time on SIGHUP, bringing each replacement up before retiring the old worker, so reloads no longer drop requests (#3025)

Removed

Remove colorama from the standard extra (#3027)

0.50.2 (July 6, 2026)

Fixed

Require websockets>=13.0, which the default websockets-sansio implementation needs (#3021)

0.50.1 (July 6, 2026)

Fixed

Split comma-separated Sec-WebSocket-Protocol values in the websockets-sansio implementation (#3019)

0.50.0 (July 4, 2026)

If you use WebSockets, note that --ws auto now picks the websockets-sansio implementation. You shouldn't need it, but you can pin --ws websockets to get the deprecated legacy one back.

Changed

Exit with the dedicated code 3 on any startup failure: app loading, socket bind and lifespan startup errors previously exited with a mix of 0, 1 and 3 (#3001)

Stop the multiprocess supervisor when a worker exits with code 3 instead of restarting it forever (#3001)

Default --ws auto to websockets-sansio when websockets is installed (#2985)

Skip the eager app import in the parent process with --reload or --workers, fixing a memory regression introduced in 0.47.0 (#3012)

Build a fresh asgi scope dict per request (#2977)

Cache the asgi scope sub-dict per connection (#2976)

Avoid copying single-frame WebSocket payloads in websockets-sansio (#2983)

Memoize trusted host checks in ProxyHeadersMiddleware (#2970)

... (truncated)

Commits

8f1b884 Version 0.52.0 (#3044)
f6833db Add experimental zttp HTTP/1.1 protocol (#2979)
d26c85c Prepare compatibility with websockets 17.0. (#3036)
7e11cc6 Clarify how limit_concurrency and backlog differ (#3029)
See full diff in compare view

Updates prometheus-client from 0.25.0 to 0.26.0

Release notes

Sourced from prometheus-client's releases.

v0.26.0

What's Changed

Expose measured duration on Timer context manager by @vokracko in prometheus/client_python#1166

Use specific exception for duplicate timeseries by @kajinamit in prometheus/client_python#1074

Make clear() a no-op for label-less metrics (fixes #707) by @ompathakbaap in prometheus/client_python#1184

Use object instead of Any for labels() parameters by @gregoiredx in prometheus/client_python#1186

Add TLS version parameters for start_wsgi_server by @vyzigold in prometheus/client_python#1178

Validate Enum arguments before registering the collector by @sean-kim05 in prometheus/client_python#1189

Do not emit a leading zero in floatToGoString exponents >= 10 by @sean-kim05 in prometheus/client_python#1190

fix: make test suite pass on Windows and Python 3.12+ by @MelvinjoseC in prometheus/client_python#1185

Parse the native histogram sum as a float by @sean-kim05 in prometheus/client_python#1192

Remove nameless collectors from the registry on unregister by @sean-kim05 in prometheus/client_python#1191

Fix operator precedence allowing exemplars on any metric type by @sean-kim05 in prometheus/client_python#1188

New Contributors

@vokracko made their first contribution in prometheus/client_python#1166

@ompathakbaap made their first contribution in prometheus/client_python#1183

@gregoiredx made their first contribution in prometheus/client_python#1186

@vyzigold made their first contribution in prometheus/client_python#1178

@sean-kim05 made their first contribution in prometheus/client_python#1189

@MelvinjoseC made their first contribution in prometheus/client_python#1185

Full Changelog: prometheus/client_python@v0.25.0...v0.26.0

Commits

9b6b971 Release v0.26.0
fb072c2 Fix operator precedence allowing exemplars on any metric type (#1188)
6e22fb5 Remove nameless collectors from the registry on unregister (#1191)
5b09479 Parse the native histogram sum as a float (#1192)
769b415 fix: make test suite pass on Windows and Python 3.12+ (#1185)
d0b497f Update common Prometheus files (#1195)
75603d7 Update common Prometheus files (#1194)
fb2351f Do not emit a leading zero in floatToGoString exponents >= 10 (#1190)
a39a697 Validate Enum arguments before registering the collector (#1189)
a96f6f4 Add TLS version parameters for start_wsgi_server (#1178)
Additional commits viewable in compare view

Updates ruff from 0.15.22 to 0.16.0

Release notes

Sourced from ruff's releases.

0.16.0

Release Notes

Released on 2026-07-23.

Check out the blog post for a migration guide and overview of the changes!

Breaking changes
Ruff now enables a much larger set of rules by default (413, up from 59). See the blog post for more details and the new Default Rules page for a full listing of the enabled rules. Note that this is primarily an expansion, but 18 of the more opinionated pycodestyle (E) and pyflakes (F) rules have been removed from the default set: E401, E402, E701, E702, E703, E711, E712, E713, E714, E721, E731, E741, E742, E743, F403, F405, F406, and F722.

Ruff can now format Python code blocks in Markdown files and will do this by default. See the documentation for more details.
Ruff now supports ruff: ignore comments at the ends of lines, like noqa comments, or on the line preceding a diagnostic. For example, these both suppress an unused-import (F401) diagnostic:
import math  # ruff: ignore[F401]
ruff: ignore[F401]
import os
Fixes are now shown in check and format --check output:
❯ ruff format --check .
unformatted: File would be reformatted
 --> try.md:1:1
  |
1 | ```python
  - import   math
2 + import math
3 | ```
  |
1 file would be reformatted
This example also shows off the Markdown formatting.
format --check now supports the same output formats as the linter, including the github and gitlab outputs for rendering annotations in CI:
❯ ruff format --check --output-format github .
::error title=ruff (unformatted),file=try.md,line=2,col=8,endLine=2,endColumn=10::try.md:2:8: unformatted: File would be reformatted
See the CLI help or documentation for the full list of supported formats.
The filename, location, end_location, fix.edits[].location, and fix.edits[].end_location fields in the JSON output format may now be null rather than defaulting to the empty string and row 1, column 1, respectively.

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.0

Released on 2026-07-23.

Check out the blog post for a migration guide and overview of the changes!

Breaking changes
Ruff now enables a much larger set of rules by default (413, up from 59). See the blog post for more details and the new Default Rules page for a full listing of the enabled rules. Note that this is primarily an expansion, but 18 of the more opinionated pycodestyle (E) and pyflakes (F) rules have been removed from the default set: E401, E402, E701, E702, E703, E711, E712, E713, E714, E721, E731, E741, E742, E743, F403, F405, F406, and F722.

Ruff can now format Python code blocks in Markdown files and will do this by default. See the documentation for more details.
Ruff now supports ruff: ignore comments at the ends of lines, like noqa comments, or on the line preceding a diagnostic. For example, these both suppress an unused-import (F401) diagnostic:
import math  # ruff: ignore[F401]
ruff: ignore[F401]
import os
Fixes are now shown in check and format --check output:
❯ ruff format --check .
unformatted: File would be reformatted
 --> try.md:1:1
  |
1 | ```python
  - import   math
2 + import math
3 | ```
  |
1 file would be reformatted
This example also shows off the Markdown formatting.
format --check now supports the same output formats as the linter, including the github and gitlab outputs for rendering annotations in CI:

... (truncated)

Commits

a2635fd Bump 0.16.0 (#27136)
3433449 [ty] Reuse full call diagnostics for implicit setter calls (#27115)
2240070 Reflect ruff: ignore and --add-ignore stabilization in documentation (#27...
17ef711 Stabilize --add-ignore (#27125)
ef912bb Add newly stabilized rules to defaults (#27055)
b30f040 Stabilize new default rules (#27035)
bcd70c5 Exclude Markdown files from format-dev runs (#27052)
87e51e2 Fix format --check spans for syntax errors (#27045)
afe2723 [flake8-gettext] Stabilize qualified-name and built-in binding resolution (...
a9702d8 [flake8-bandit] Stabilize string literal binding resolution (S310) (#26944)
Additional commits viewable in compare view

Updates boto3-stubs[s3] to 1.43.58

Commits

See full diff in compare view

Updates fakeredis from 2.36.2 to 2.37.0

Release notes

Sourced from fakeredis's releases.

v2.37.0 - 2026-07-22

🚀 Features

feat: implement connection commands RESET, CLIENT KILL, CLIENT UNBLOCK, CLIENT REPLY, CLIENT PAUSE, CLIENT UNPAUSE, CLIENT NO-EVICT and CLIENT NO-TOUCH. CLIENT PAUSE validates and records its arguments but does not actually suspend command processing; the client-side caching commands (CLIENT TRACKING, CLIENT TRACKINGINFO, CLIENT CACHING, CLIENT GETREDIR) remain unsupported

feat: support INCREX command (redis 8.8) (#520)

feat: support FPHA argument in JSON.SET to force homogeneous numeric arrays to a floating-point type (redis 8.8) ( #523)

feat: support hash field subkey notifications (redis 8.8) (#525)

feat: support multiple aggregators in TS.RANGE/TS.REVRANGE/TS.MRANGE/TS.MREVRANGE (redis 8.8) (#524)

feat: support COUNT aggregator in ZUNION/ZINTER/ZUNIONSTORE/ZINTERSTORE (redis 8.8) (#522)

feat: support CLAIM min-idle-time option in XREADGROUP (redis 8.4) (#527)

feat(bitfield): support #-prefixed offsets in BITFIELD

🐛 Bug Fixes

fix: align XNACK with redis 8.8 semantics (#521)

fix: HEXPIRE/HPEXPIRE now raise an error on negative expiration time

fix: GEOADD now rejects longitude/latitude pairs outside the valid range

🧰 Maintenance

Update to redis-py 8.0.1

Update Valkey version used in CI to 8.1.8

refactor: reorganize and clean up command classes in _commands.py and related mixins

test: skip subkey notification tests on redis-py below 5 (#526)

doc: fix link to implement command guide (#519)

Full Changelog: cunla/fakeredis-py@v2.36.2...v2.37.0

Commits

04dc9ca docs: add changelog entry for option-value validation (#528)
249792d fix: validate command option values that real Redis rejects (#528)
af4abe1 chore:update deps
4e80bb0 fix:topk model
6b55588 chore(deps): bump actions/setup-python from 6 to 7 (#529)
96fef78 feat:support min-idle-time in XREADGROUP
c7ca0af fix:mypy
a17cab2 fix:redis6.2 failures
1c22b0f mypy fixes
b5e7718 fix:tests failing on valkey
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Updates the requirements on [fastapi](https://github.com/fastapi/fastapi), [uvicorn[standard]](https://github.com/Kludex/uvicorn), [prometheus-client](https://github.com/prometheus/client_python), [ruff](https://github.com/astral-sh/ruff), [boto3-stubs[s3]](https://github.com/youtype/mypy_boto3_builder) and [fakeredis](https://github.com/cunla/fakeredis-py) to permit the latest version. Updates `fastapi` from 0.139.2 to 0.141.1 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.139.2...0.141.1) Updates `uvicorn[standard]` to 0.52.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.51.0...0.52.0) Updates `prometheus-client` from 0.25.0 to 0.26.0 - [Release notes](https://github.com/prometheus/client_python/releases) - [Commits](prometheus/client_python@v0.25.0...v0.26.0) Updates `ruff` from 0.15.22 to 0.16.0 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.22...0.16.0) Updates `boto3-stubs[s3]` to 1.43.58 - [Release notes](https://github.com/youtype/mypy_boto3_builder/releases) - [Commits](https://github.com/youtype/mypy_boto3_builder/commits) Updates `fakeredis` from 2.36.2 to 2.37.0 - [Release notes](https://github.com/cunla/fakeredis-py/releases) - [Commits](cunla/fakeredis-py@v2.36.2...v2.37.0) --- updated-dependencies: - dependency-name: fastapi dependency-version: 0.141.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: uvicorn[standard] dependency-version: 0.52.0 dependency-type: direct:production dependency-group: all-dependencies - dependency-name: prometheus-client dependency-version: 0.26.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: ruff dependency-version: 0.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: boto3-stubs[s3] dependency-version: 1.43.58 dependency-type: direct:production dependency-group: all-dependencies - dependency-name: fakeredis dependency-version: 2.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 29, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the all-dependencies group with 6 updates - #146

chore(deps): bump the all-dependencies group with 6 updates#146
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/all-dependencies-08f7b7a1c5

dependabot Bot commented on behalf of github Jul 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 29, 2026

0.141.1

Fixes

Docs

0.141.0

Features

0.140.13

Fixes

Docs

0.140.12

Fixes

0.140.11

Fixes

0.140.10

Fixes

Internal

0.140.9

Fixes

Version 0.52.0

Added

Fixed

0.52.0 (July 29, 2026)

Added

Fixed

0.51.0 (July 8, 2026)

Added

Removed

0.50.2 (July 6, 2026)

Fixed

0.50.1 (July 6, 2026)

Fixed

0.50.0 (July 4, 2026)

Changed

v0.26.0

What's Changed

New Contributors

0.16.0

Release Notes

Breaking changes

0.16.0

Breaking changes

v2.37.0 - 2026-07-22

🚀 Features

🐛 Bug Fixes

🧰 Maintenance

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants