Bump the development-version-updates group across 1 directory with 17 updates by dependabot[bot] · Pull Request #359 · mrlonis/python-open-restaurant-fastapi

dependabot · 2026-05-25T17:41:00Z

Bumps the development-version-updates group with 17 updates in the / directory:

Package	From	To
coverage	`7.13.5`	`7.14.0`
psycopg	`3.3.3`	`3.3.4`
pytest-postgresql	`8.0.0`	`8.1.0`
black	`26.3.1`	`26.5.1`
click	`8.3.1`	`8.4.1`
pre-commit	`4.5.1`	`4.6.0`
tomlkit	`0.14.0`	`0.15.0`
tox	`4.52.0`	`4.54.0`
uvicorn	`0.42.0`	`0.48.0`
cachetools	`7.0.5`	`7.1.4`
filelock	`3.25.2`	`3.29.0`
identify	`2.6.18`	`2.6.19`
packaging	`26.0`	`26.2`
pathspec	`1.0.4`	`1.1.1`
platformdirs	`4.9.4`	`4.9.6`
virtualenv	`21.2.0`	`21.3.3`
watchfiles	`1.1.1`	`1.2.0`

Updates coverage from 7.13.5 to 7.14.0

Changelog

Sourced from coverage's changelog.

Version 7.14.0 — 2026-05-10

Feature: now when running one of the reporting commands, if there are parallel data files that need combining, they will be implicitly combined before creating the report. There is no option to avoid the combination; let us know if you have a use case that requires it. Thanks, Tim Hatch <pull 2162_>. Closes issue 1781.

Fix: the output from combine was too verbose, listing each file considered. Now it shows a single line with the counts of files combined, files skipped, and files with errors. The -q flag suppresses this line. The old detailed lines are available with the new --debug=combine option.

Fix: running a Python file through a symlink now sets the sys.path correctly, matching regular Python behavior. Fixes issue 2157_.

Fix: Collector.flush_data could fail with "RuntimeError: Set changed size during iteration" when a tracer in another thread added a line to the per-file set that add_lines (or add_arcs) was iterating. The values passed to CoverageData are now snapshotted via dict.copy() and set.copy(), which are atomic under the GIL. Thanks, Alex Vandiver <pull 2165_>_.

Fix: the soft keyword lazy is now bolded in HTML reports.

We are no longer testing eventlet support. Eventlet started issuing stern deprecation warnings that break our tests. Our support code is still there.

.. _issue 1781: coveragepy/coveragepy#1781 .. _issue 2157: coveragepy/coveragepy#2157 .. _pull 2162: coveragepy/coveragepy#2162 .. _pull 2165: coveragepy/coveragepy#2165

.. _changes_7-13-5:

Commits

646351b docs: sample HTML for 7.14.0
39cd015 docs: prep for 7.14.0
649e8aa docs: thanks Alex Vandiver for #2165
8cd392e fix: snapshot data in Collector.flush_data to avoid threading race (#2165)
c48e0ed fix: less output for combining
c2a3a28 docs: explain the change from #2162
1cd47aa fix: implicit combine-during-report now removes the combined data files
2d99fd7 feat: automatically combine coverage in report, thanks Tim Hatch (#2162)
9fbdcdf fix: lazy soft keywords are bolded
5de7d02 build: oops, misplaced quote
Additional commits viewable in compare view

Updates psycopg from 3.3.3 to 3.3.4

Changelog

Sourced from psycopg's changelog.

.. currentmodule:: psycopg

.. index:: single: Release notes single: News

psycopg release notes

Future releases

Psycopg 3.3.5 (unreleased) ^^^^^^^^^^^^^^^^^^^^^^^^^^

Discard prepared statements upon :sql:ALTER * or DISCARD * (:ticket:[#1307](https://github.com/psycopg/psycopg/issues/1307)).

Current release

Psycopg 3.3.4 ^^^^^^^^^^^^^

Fix possible spurious connection timeout in systems with very long uptimes in C extension (:ticket:[#1280](https://github.com/psycopg/psycopg/issues/1280)).

Fix client-side adaptation of enums whose name require quotes (:ticket:[#1298](https://github.com/psycopg/psycopg/issues/1298)).

Consistently populate ~Cursor.statusmessage after ~Cursor.executemany() (:ticket:[#1302](https://github.com/psycopg/psycopg/issues/1302)).

Psycopg 3.3.3 ^^^^^^^^^^^^^

Retain Error.pgconn when raising a single exception for multiple connection attempt errors (:ticket:[#1246](https://github.com/psycopg/psycopg/issues/1246)).

Return a proper error when server sends ErrorResponse for a Sync after a Parse (:ticket:[#1260](https://github.com/psycopg/psycopg/issues/1260)).

Psycopg 3.3.2 ^^^^^^^^^^^^^

Fix race condition in adapters at startup (:ticket:[#1230](https://github.com/psycopg/psycopg/issues/1230)).

Psycopg 3.3.1 ^^^^^^^^^^^^^

... (truncated)

Commits

83f1103 chore: bump psycopg_pool package version to 3.3.1
1828770 chore: bump psycopg package version to 3.3.4
8be14bb Merge pull request #1301 from oliverhaas/fix/sync-pool-open-race
aee0bf2 fix(pool): fix race in the construction of the sync ConnectionPool lock
bc4d303 chore(deps): bump the actions group across 1 directory with 4 updates
785379f fix: retain statusmessage after executemany with returning=False
8882a73 perf: do less if X in Y: return Y[X] for cache-like patterns
2f78539 Merge pull request #1299 from dvarrazzo/fix-camel-enum
37ef1dc test: skip test on crdb depending on precise regtype behaviour
7f2f1d1 fix: fix client-side representation of enums requiring quotes
Additional commits viewable in compare view

Updates pytest-postgresql from 8.0.0 to 8.1.0

Changelog

Sourced from pytest-postgresql's changelog.

pytest-postgresql 8.1.0 (2026-05-15)

Features

Add Windows support for PostgreSQLExecutor, including platform-specific start/stop handling. ([#1182](https://github.com/dbfixtures/pytest-postgresql/issues/1182) <https://github.com/dbfixtures/pytest-postgresql/issues/1182>__)

Documentation

Make sure diagrams are using unified terminology.

Miscellaneus

Fix typos ([#1267](https://github.com/dbfixtures/pytest-postgresql/issues/1267) <https://github.com/dbfixtures/pytest-postgresql/issues/1267>__)

Add pytest-postgresql as an editable self-install in the Pipfile; remove the manual from pytest_postgresql.plugin import * import from tests/conftest.py and the makeconftest call in tests/test_postgres_options_plugin.py that re-registered the plugin and caused duplicate-plugin errors under editable install.

Add coderabbitai configuration with instructions to keep an eye for newsfragments.

Attempt to overcome random failure on CI on MacOS on xdist workers where test_executor_init_with_password is receiving FATAL: the database system is starting up error message from psycopg.

That's the only test that doesn't have guards against attempting to start on the same port as other xdist worker.

Fix codecov pipeline configuration.

Fixes for diagram workflow.

Improve reliability of Coverage reporting on CI

Migrate package publishing step to trusted publishing.

Commits

6dbdc91 Release 8.1.0
bd0127a Pin publish step to pypi environment, and drop obsolete templates
776e36d Merge pull request #1339 from dbfixtures/trusted-publishing
9254f54 Trusted publishing
965fba0 build(deps-dev): update coverage requirement from >=7.0 to >=7.14.0
6475be6 build(deps-dev): update coverage requirement from >=7.0 to >=7.14.0
3645b1a Merge pull request #1337 from dbfixtures/coverage-combine
872f852 Improve reliability of Coverage reporting on CI
d912c6a Refactor PostgreSQLExecutor to support Windows compatibility for process mana...
df79bb9 build(deps-dev): bump mypy from 2.0.0 to 2.1.0
Additional commits viewable in compare view

Updates black from 26.3.1 to 26.5.1

Release notes

Sourced from black's releases.

26.5.1

Stable style

Fix unstable formatting of annotated assignments whose subscript annotation contains an inline comment (e.g. x: list[ # pyright: ignore[...]) (#5130)

Preserve inline comments (including # type: ignore) immediately before a # fmt: skip line, avoiding AST equivalence failures (#5139)

Packaging

Correct the version in the published executables (#5137)

Documentation

Add Neovim integration guide covering conform.nvim, ALE, and simple command approaches (#5124)

26.5.0

Highlights

Add support for unpacking in comprehensions (PEP 798) and for lazy imports (PEP 810), both new syntactic features in Python 3.15 (#5048)

Python 3.15 is now supported. Compiled wheels are not yet provided for Python 3.15, so performance may be slower than on existing Python versions. Wheels will be provided once Python 3.15 is later in its release cycle. (#5127)

Stable style

Fix # fmt: skip being ignored in nested if expressions with parenthesized in clauses (#4903)

Add syntactic support for Python 3.15 (#5048)

Fix crash when an f-string follows a # fmt: off comment inside brackets (#5097)

Preserve multiline compound statement headers when # fmt: skip is placed on the colon line (#5117)

Preview style

Improve heuristics around whether blank lines should appear before, within and after groups of same-name decorated functions (such as @overload groups) in .pyi stub files (#5021)

Fix blank lines being removed between a function and a decorated class in .pyi stub files (#5092)

Prevent string merger from creating unsplittable long lines when a pragma comment (e.g. # type: ignore) follows the closing bracket (#5096)

Packaging

Run CI on 3.15 (#5127)

Output

... (truncated)

Changelog

Sourced from black's changelog.

Version 26.5.1

Stable style

Fix unstable formatting of annotated assignments whose subscript annotation contains an inline comment (e.g. x: list[ # pyright: ignore[...]) (#5130)

Preserve inline comments (including # type: ignore) immediately before a # fmt: skip line, avoiding AST equivalence failures (#5139)

Packaging

Correct the version in the published executables (#5137)

Documentation

Add Neovim integration guide covering conform.nvim, ALE, and simple command approaches (#5124)

Version 26.5.0

Highlights

Add support for unpacking in comprehensions (PEP 798) and for lazy imports (PEP 810), both new syntactic features in Python 3.15 (#5048)

Python 3.15 is now supported. Compiled wheels are not yet provided for Python 3.15, so performance may be slower than on existing Python versions. Wheels will be provided once Python 3.15 is later in its release cycle. (#5127)

Stable style

Fix # fmt: skip being ignored in nested if expressions with parenthesized in clauses (#4903)

Add syntactic support for Python 3.15 (#5048)

Fix crash when an f-string follows a # fmt: off comment inside brackets (#5097)

Preserve multiline compound statement headers when # fmt: skip is placed on the colon line (#5117)

Preview style

Improve heuristics around whether blank lines should appear before, within and after groups of same-name decorated functions (such as @overload groups) in .pyi stub files (#5021)

Fix blank lines being removed between a function and a decorated class in .pyi stub files (#5092)

Prevent string merger from creating unsplittable long lines when a pragma comment (e.g. # type: ignore) follows the closing bracket (#5096)

Packaging

Run CI on 3.15 (#5127)

... (truncated)

Commits

87928e6 Prepare release 26.5.1 (#5140)
c970a49 Preserve comments before fmt: skip lines (#5139)
5809338 Preserve inline comments inside annotation subscripts (#5130)
61361b7 docs: add Neovim integration guide and fix http link (#5124)
ebe6018 CI Hotfixes (#5136)
9cbd95f Fix publish binaries again on Windows (#5134)
3dc8e6c Add new changelog (#5132)
6d0fff0 Fix publish binaries workflow (#5133)
d2490e2 Prepare release 26.5.0 (#5131)
2b13ea7 Preserve multiline headers with fmt skip (#5117)
Additional commits viewable in compare view

Updates click from 8.3.1 to 8.4.1

Release notes

Sourced from click's releases.

8.4.1

This is the Click 8.4.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.4.1/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-1 Milestone: https://github.com/pallets/click/milestone/32?closed=1

get_parameter_source() is available during eager callbacks and type conversion again. #3458 #3484

Zsh completion scripts parse correctly on Windows. #3277 # 3466

Shell completion of Choice Enum values produces a valid completion result. #3015

Fix empty byte-string handling in echo. #3487

Fix closed file error with echo_via_pager. #3449

8.4.0

This is the Click 8.4.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our Version Support Policy on our website.

PyPI: https://pypi.org/project/click/8.4.0/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-0 Milestone https://github.com/pallets/click/milestone/30

ParamType typing improvements. #3371

:class:ParamType is now a generic abstract base class, parameterized by its converted value type.

:meth:~ParamType.convert return types are narrowed on all concrete types (str for :class:STRING, int for :class:INT, etc.).

:meth:~ParamType.to_info_dict returns specific :class:~typing.TypedDict subclasses instead of dict[str, Any].

:class:CompositeParamType and the number-range base are now generic with abstract methods.

Refactor convert_type to extract type inference into a private _guess_type helper, and add :func:typing.overload signatures. #3372

Parameter typing improvements. #2805

:class:Parameter is now an abstract base class, making explicit that it cannot be instantiated directly.

:attr:Parameter.name is now str instead of str | None. When expose_value=False, the name is set to "" instead of None.

The ctx parameter of :meth:Parameter.get_error_hint is now typed as Context | None, matching the runtime behavior.

Split string values from default_map for parameters with nargs > 1 or :class:Tuple type, matching environment variable behavior.

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.4.1

Released 2026-05-21

get_parameter_source() is available during eager callbacks and type conversion again. :issue:3458 :issue:3484

Zsh completion scripts parse correctly on Windows. :issue:3277 :pr:3466

Shell completion of Choice Enum values produces a valid completion result. :issue:3015

Fix empty byte-string handling in echo. :issue:3487

Fix closed file error with echo_via_pager. :issue:3449

Version 8.4.0

Released 2026-05-17

:class:ParamType typing improvements. :pr:3371

:class:ParamType is now a generic abstract base class, parameterized by its converted value type.

:meth:~ParamType.convert return types are narrowed on all concrete types (str for :class:STRING, int for :class:INT, etc.).

:meth:~ParamType.to_info_dict returns specific :class:~typing.TypedDict subclasses instead of dict[str, Any].

:class:CompositeParamType and the number-range base are now generic with abstract methods.

Refactor convert_type to extract type inference into a private _guess_type helper, and add :func:typing.overload signatures. :pr:3372

:class:Parameter typing improvements. :pr:2805

:class:Parameter is now an abstract base class, making explicit that it cannot be instantiated directly.

:attr:Parameter.name is now str instead of str | None. When expose_value=False, the name is set to "" instead of None.

The ctx parameter of :meth:Parameter.get_error_hint is now typed as Context | None, matching the runtime behavior.

Split string values from default_map for parameters with nargs > 1 or :class:Tuple type, matching environment variable behavior. :issue:2745 :pr:3364

Auto-detect type=UNPROCESSED for flag_value of non-basic types (not str, int, float, or bool), so programmer-provided Python objects like classes and enum members are passed through unchanged instead of being stringified. Previously type=click.UNPROCESSED had to be set explicitly. :issue:2012 :pr:3363

... (truncated)

Commits

6eeb50e release version 8.4.1
67921d5 change log and doc fixes (#3495)
9c41f46 Fix changelog and version admonitions
6cb3477 fix skip condition
5ee8e31 fix I/O operation on closed file error with CliRunner and echo_via_pager (#3482)
becbde5 pager doesn't close std streams
a5f5aa6 Handle empty bytes in echo (#3493)
4d3db84 handle empty bytes in echo
d42f15b Fix get_parameter_source() during type conversion and eager callbacks (#3484)
0baa8db Document ctx.params bypass with test and doc
Additional commits viewable in compare view

Updates pre-commit from 4.5.1 to 4.6.0

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.0

Features

pre-commit hook-impl: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.

#3662 PR by @asottile.

Fixes

pre-commit hook-impl: --hook-type is required.

#3661 PR by @asottile.

Changelog

Sourced from pre-commit's changelog.

4.6.0 - 2026-04-21

Features

pre-commit hook-impl: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.

#3662 PR by @asottile.

Fixes

pre-commit hook-impl: --hook-type is required.

#3661 PR by @asottile.

Commits

f35134b v4.6.0
2a51ffc Merge pull request #3662 from pre-commit/hook-impl-optional-hook-dir
d7dee32 make --hook-dir optional for hook-impl
965aeb1 Merge pull request #3661 from pre-commit/hook-impl-required
2eacc06 --hook-type is required for hook-impl
f5678bf Merge pull request #3657 from pre-commit/pre-commit-ci-update-config
054cc5b [pre-commit.ci] pre-commit autoupdate
5c0f302 Merge pull request #3652 from pre-commit/pre-commit-ci-update-config
a5d9114 [pre-commit.ci] pre-commit autoupdate
129a1f5 Merge pull request #3641 from pre-commit/mxr-patch-1
Additional commits viewable in compare view

Updates tomlkit from 0.14.0 to 0.15.0

Release notes

Sourced from tomlkit's releases.

0.15.0

What's Changed

feat(spec): update to toml spec v1.1 by @frostming in python-poetry/tomlkit#456

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in python-poetry/tomlkit#455

chore(deps-dev): bump virtualenv from 20.26.6 to 20.36.1 by @dependabot[bot] in python-poetry/tomlkit#454

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in python-poetry/tomlkit#458

chore(deps): bump pygments from 2.18.0 to 2.20.0 in /docs by @dependabot[bot] in python-poetry/tomlkit#464

chore(deps-dev): bump pygments from 2.17.2 to 2.20.0 by @dependabot[bot] in python-poetry/tomlkit#463

chore(deps): bump requests from 2.32.4 to 2.33.0 in /docs by @dependabot[bot] in python-poetry/tomlkit#462

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in python-poetry/tomlkit#461

Type annotations by @dimbleby in python-poetry/tomlkit#460

Honor sort_keys for parsed TOML documents by @ShipItAndPray in python-poetry/tomlkit#471

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in python-poetry/tomlkit#469

fix: fix a parser hang by @dimbleby in python-poetry/tomlkit#470

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in python-poetry/tomlkit#472

chore: bump version to 0.15.0 and update changelog for release by @frostming in python-poetry/tomlkit#473

New Contributors

@dimbleby made their first contribution in python-poetry/tomlkit#460

@ShipItAndPray made their first contribution in python-poetry/tomlkit#471

Full Changelog: python-poetry/tomlkit@0.14.0...0.15.0

Changelog

Sourced from tomlkit's changelog.

[0.15.0] - 2026-05-10

Changed

Update parser to support TOML spec v1.1.0. (#456)

Commits

8694e4d chore: bump version to 0.15.0 and update changelog for release (#473)
e636a51 [pre-commit.ci] pre-commit autoupdate (#472)
96a4d22 fix: fix a parser hang (#470)
843f799 [pre-commit.ci] pre-commit autoupdate (#469)
2c87eaf Honor sort_keys for parsed TOML documents (#471)
8e32f9c Type annotations (#460)
df98af4 [pre-commit.ci] pre-commit autoupdate (#461)
4bd97db chore(deps): bump requests from 2.32.4 to 2.33.0 in /docs (#462)
b2d7030 chore(deps-dev): bump pygments from 2.17.2 to 2.20.0 (#463)
87d98b1 chore(deps): bump pygments from 2.18.0 to 2.20.0 in /docs (#464)
Additional commits viewable in compare view

Updates tox from 4.52.0 to 4.54.0

Release notes

Sourced from tox's releases.

v4.54.0

What's Changed

🧪 test(conftest): strip broken nspkg.pth files under py3.15 by @gaborbernat in tox-dev/tox#3937

✨ feat(packaging): declare tox.pytest deps via a testing extra by @gaborbernat in tox-dev/tox#3940

🐛 fix(schema): cover every replace form in the TOML schema by @gaborbernat in tox-dev/tox#3941

Full Changelog: tox-dev/tox@4.53.1...4.54.0

v4.53.1

What's Changed

🐛 fix(security): harden user-facing logs and untrusted inputs by @gaborbernat in tox-dev/tox#3924

🐛 fix(type): correct argparse override signatures for ty 0.0.33 by @gaborbernat in tox-dev/tox#3932

fix: allow deps arrays in TOML schema by @cyphercodes in tox-dev/tox#3931

New Contributors

@cyphercodes made their first contribution in tox-dev/tox#3931

Full Changelog: tox-dev/tox@4.53.0...4.53.1

v4.53.0

What's Changed

✨ feat(toml): allow bare range/labeled dicts in env_list by @gaborbernat in tox-dev/tox#3923

Full Changelog: tox-dev/tox@4.52.1...4.53.0

v4.52.1

What's Changed

use normalize_isa for architecture factor matching by @rahuldevikar in tox-dev/tox#3919

🐛 fix(pip): invalidate install cache on resolution env var changes by @gaborbernat in tox-dev/tox#3921

Full Changelog: tox-dev/tox@4.52.0...4.52.1

Changelog

Sourced from tox's changelog.

Features - 4.54.0

Declare the runtime dependencies of the tox.pytest plugin (pytest, devpi-process and pytest-mock) under a new testing extra, so plugin authors can pull them in via tox[testing] - by :user:gaborbernat. (:issue:3938, :issue:3940)

Bug fixes - 4.54.0

Extend the generated TOML schema to cover every replace table form (env, ref, posargs, glob, if), including conditional replacements used inside commands. A guard test asserts the schema stays in sync with the loader implementation so future replace types cannot be added without a corresponding schema entry. (:issue:3939)

v4.53.1 (2026-05-02)

Bug fixes - 4.53.1

Hardening pass on user-facing logging and config parsing:

Mask secret-looking --key=value flag values in command logs (terminal warnings, .tox/<env>/log/*.log, and Outcome __repr__) using the same keyword regex previously applied to environment variable values.

Resolve PEP 723 script paths and reject any that escape tox_root; cap the script read at 5 MiB so a symlink to /dev/zero cannot exhaust memory.

Replace eval() of a constructed Literal[...] string in the CLI parser with a direct Literal[tuple(action.choices)] subscript.

Pass timeout=30 to urlopen when fetching a remote requirements file so a slow or unresponsive mirror cannot hang tox indefinitely. (:issue:3924)

Allow the generated TOML schema to validate array values for deps. (:issue:3929)

Correct type annotations for ArgumentParser.parse_args and parse_known_args overrides following typeshed PR [#15613](https://github.com/tox-dev/tox/issues/15613) <https://github.com/python/typeshed/pull/15613>_, which widened the args parameter from Sequence[str] to Iterable[str]. The narrower type in tox's overrides violated the Liskov substitution principle and caused invalid-method-override errors with ty 0.0.33. Also correct the option_spec annotation in docs/tox_conf.py to ClassVar[dict[str, Callable[[str], Any]]] matching the docutils stubs type. (:issue:3932)

v4.53.0 (2026-04-14)

Features - 4.53.0

TOML env_list now accepts bare range dicts ({ prefix = "3.", start = 12, stop = 14 }) and bare labeled dicts ({ ecosystem = ["oci", "python"] }) as top-level items, removing the { product = [...] } wrapper when there is

... (truncated)

Commits

1f1fcc7 release 4.54.0
b35c8ee 🐛 fix(schema): cover every replace form in the TOML schema (#3941)
6eb5c4f ✨ feat(packaging): declare tox.pytest deps via a testing extra (#3940)
1ad47dd 🧪 test(conftest): strip broken nspkg.pth files under py3.15 (#3937)
dfba966 [pre-commit.ci] pre-commit autoupdate (#3936)
21069af [pre-commit.ci] pre-commit autoupdate (#3933)
2b17791 release 4.53.1
86234dd fix: allow deps arrays in TOML schema (#3931)
dd305fe 🐛 fix(type): correct argparse override signatures for ty 0.0.33 (#3932)
3aa3cd5 [pre-commit.ci] pre-commit autoupdate
Additional commits viewable in compare view

Updates uvicorn from 0.42.0 to 0.48.0

Release notes

Sourced from uvicorn's releases.

Version 0.48.0

What's Changed

Default ssl_ciphers to None and use OpenSSL defaults by @Kludex in Kludex/uvicorn#2940

Ignore duplicate forwarding headers in ProxyHeadersMiddleware by @Kludex in Kludex/uvicorn#2944

Full Changelog: Kludex/uvicorn@0.47.0...0.48.0

Version 0.47.0

What's Changed

Eagerly import the ASGI app in the parent process by @Kludex in Kludex/uvicorn#2919

Add ssl_context_factory for custom SSLContext configuration by @Kludex in Kludex/uvicorn#2920

Treat fd=0 as a valid file descriptor with reload/workers by @eltoder in Kludex/uvicorn#2927

Full Changelog: Kludex/uvicorn@0.46.0...0.47.0

Version 0.46.0

What's Changed

Support ws_max_size in wsproto implementation by @Kludex in Kludex/uvicorn#2915

Support ws_ping_interval and ws_ping_timeout in wsproto implementation by @Kludex in Kludex/uvicorn#2916

Use bytearray for incoming WebSocket message buffer in websockets-sansio by @Kludex in Kludex/uvicorn#2917

Full Changelog: Kludex/uvicorn@0.45.0...0.46.0

Version 0.45.0

What's Changed

Preserve forwarded client ports in proxy headers middleware by @Kludex in Kludex/uvicorn#2903

Accept os.PathLike for log_config by @Kludex in Kludex/uvicorn#2905

Accept log_level strings case-insensitively by @Kludex in Kludex/uvicorn#2907

Raise helpful ImportError when PyYAML is missing for YAML log config by @Kludex in Kludex/uvicorn#2906

Revert empty context for ASGI runs by @Kludex in Kludex/uvicorn#2911

Add --reset-contextvars flag to isolate ASGI request context by @Kludex in Kludex/uvicorn#2912

Revert "Emit http.disconnect on server shutdown for streaming responses" (#2829) by @Kludex in Kludex/uvicorn#2913

New Contributors

@Krishnachaitanyakc made their first contribution in Kludex/uvicorn#2870

Full Changelog: Kludex/uvicorn@0.44.0...0.45.0

Version 0.44.0

What's Changed

Implement websocket keepalive pings for websockets-sansio by @Kludex in Kludex/uvicorn#2888

Full Changelog: Kludex/uvicorn@0.43.0...0.44.0

Version 0.43.0

Changed

... (truncated)

Changelog

Sourced from uvicorn's changelog.

0.48.0 (May 24, 2026)

Changed

Default ssl_ciphers to None and use OpenSSL defaults (#2940)

Fixed

Ignore duplicate forwarding headers in ProxyHeadersMiddleware (#2944)

0.47.0 (May 14, 2026)

Added

Add ssl_context_factory for custom SSLContext configuration (#2920)

Changed

Eagerly import the ASGI app in the parent process (#2919)

Fixed

Treat fd=0 as a valid file descriptor with reload/workers (#2927)

0.46.0 (April 23, 2026)

Added

Support ws_max_size in wsproto implementation (#2915)

Support ws_ping_interval and ws_ping_timeout in wsproto implementation (#2916)

Changed

Use bytearray for incoming WebSocket message buffer in websockets-sansio (#2917)

0.45.0 (April 21, 2026)

Added

Add --reset-contextvars flag to isolate ASGI request context (#2912)

Accept os.PathLike for log_config (#2905)

Accept log_level strings case-insensitively (#2907)

Changed

Revert "Emit http.disconnect on server shutdown for streaming responses" (#2913)

Revert "Explicitly start ASGI run with empty context" (#2911)

Fixed

... (truncated)

Commits

73e84e5 Version 0.48.0 (#2951)
45ea116 Ignore duplicate forwarding headers in ProxyHeadersMiddleware (#2944)
dd4394c chore(deps): bump idna from 3.11 to 3.15 (#2941)
abe0781 Default ssl_ciphers to None and use OpenSSL defaults (#2940)
479a2c0 Version 0.47.0 (#2937)
89347fd Add 7-day cooldown for dependency resolution via uv exclude-newer (#2936)
767315b Drop unused contents/actions permissions from zizmor workflow (#2935)
f25ee43 chore(deps): bump urllib3 from 2.6.3 to 2.7.0 (#2933)
8782666 Fix typo in docs/deployment/index.md. (#2932)
ad5ff87 Treat fd=0 as a valid file descriptor with reload/workers (#2927)
Additional commits viewable in compare view

Updates cachetools from 7.0.5 to 7.1.4

Changelog

Sourced from cachetools's changelog.

v7.1.4 (2026-05-22)

Minor unit test improvements.

Update build environment.

v7.1.3 (2026-05-18)

Minor type stub improvements.

Update build environment.

v7.1.2 (2026-05-16)

Minor type stub improvements.

Minor documentation improvements.

Modernize build environment.

v7.1...
Description has been truncated

… updates Bumps the development-version-updates group with 17 updates in the / directory: | Package | From | To | | --- | --- | --- | | [coverage](https://github.com/coveragepy/coveragepy) | `7.13.5` | `7.14.0` | | [psycopg](https://github.com/psycopg/psycopg) | `3.3.3` | `3.3.4` | | [pytest-postgresql](https://github.com/dbfixtures/pytest-postgresql) | `8.0.0` | `8.1.0` | | [black](https://github.com/psf/black) | `26.3.1` | `26.5.1` | | [click](https://github.com/pallets/click) | `8.3.1` | `8.4.1` | | [pre-commit](https://github.com/pre-commit/pre-commit) | `4.5.1` | `4.6.0` | | [tomlkit](https://github.com/python-poetry/tomlkit) | `0.14.0` | `0.15.0` | | [tox](https://github.com/tox-dev/tox) | `4.52.0` | `4.54.0` | | [uvicorn](https://github.com/Kludex/uvicorn) | `0.42.0` | `0.48.0` | | [cachetools](https://github.com/tkem/cachetools) | `7.0.5` | `7.1.4` | | [filelock](https://github.com/tox-dev/py-filelock) | `3.25.2` | `3.29.0` | | [identify](https://github.com/pre-commit/identify) | `2.6.18` | `2.6.19` | | [packaging](https://github.com/pypa/packaging) | `26.0` | `26.2` | | [pathspec](https://github.com/cpburnz/python-pathspec) | `1.0.4` | `1.1.1` | | [platformdirs](https://github.com/tox-dev/platformdirs) | `4.9.4` | `4.9.6` | | [virtualenv](https://github.com/pypa/virtualenv) | `21.2.0` | `21.3.3` | | [watchfiles](https://github.com/samuelcolvin/watchfiles) | `1.1.1` | `1.2.0` | Updates `coverage` from 7.13.5 to 7.14.0 - [Release notes](https://github.com/coveragepy/coveragepy/releases) - [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst) - [Commits](coveragepy/coveragepy@7.13.5...7.14.0) Updates `psycopg` from 3.3.3 to 3.3.4 - [Changelog](https://github.com/psycopg/psycopg/blob/master/docs/news.rst) - [Commits](psycopg/psycopg@3.3.3...3.3.4) Updates `pytest-postgresql` from 8.0.0 to 8.1.0 - [Changelog](https://github.com/dbfixtures/pytest-postgresql/blob/main/CHANGES.rst) - [Commits](dbfixtures/pytest-postgresql@v8.0.0...v8.1.0) Updates `black` from 26.3.1 to 26.5.1 - [Release notes](https://github.com/psf/black/releases) - [Changelog](https://github.com/psf/black/blob/main/CHANGES.md) - [Commits](psf/black@26.3.1...26.5.1) Updates `click` from 8.3.1 to 8.4.1 - [Release notes](https://github.com/pallets/click/releases) - [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst) - [Commits](pallets/click@8.3.1...8.4.1) Updates `pre-commit` from 4.5.1 to 4.6.0 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v4.5.1...v4.6.0) Updates `tomlkit` from 0.14.0 to 0.15.0 - [Release notes](https://github.com/python-poetry/tomlkit/releases) - [Changelog](https://github.com/python-poetry/tomlkit/blob/master/CHANGELOG.md) - [Commits](python-poetry/tomlkit@0.14.0...0.15.0) Updates `tox` from 4.52.0 to 4.54.0 - [Release notes](https://github.com/tox-dev/tox/releases) - [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst) - [Commits](tox-dev/tox@4.52.0...4.54.0) Updates `uvicorn` from 0.42.0 to 0.48.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.42.0...0.48.0) Updates `cachetools` from 7.0.5 to 7.1.4 - [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst) - [Commits](tkem/cachetools@v7.0.5...v7.1.4) Updates `filelock` from 3.25.2 to 3.29.0 - [Release notes](https://github.com/tox-dev/py-filelock/releases) - [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst) - [Commits](tox-dev/filelock@3.25.2...3.29.0) Updates `identify` from 2.6.18 to 2.6.19 - [Commits](pre-commit/identify@v2.6.18...v2.6.19) Updates `packaging` from 26.0 to 26.2 - [Release notes](https://github.com/pypa/packaging/releases) - [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst) - [Commits](pypa/packaging@26.0...26.2) Updates `pathspec` from 1.0.4 to 1.1.1 - [Release notes](https://github.com/cpburnz/python-pathspec/releases) - [Changelog](https://github.com/cpburnz/python-pathspec/blob/master/CHANGES.rst) - [Commits](cpburnz/python-pathspec@v1.0.4...v1.1.1) Updates `platformdirs` from 4.9.4 to 4.9.6 - [Release notes](https://github.com/tox-dev/platformdirs/releases) - [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst) - [Commits](tox-dev/platformdirs@4.9.4...4.9.6) Updates `virtualenv` from 21.2.0 to 21.3.3 - [Release notes](https://github.com/pypa/virtualenv/releases) - [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst) - [Commits](pypa/virtualenv@21.2.0...21.3.3) Updates `watchfiles` from 1.1.1 to 1.2.0 - [Release notes](https://github.com/samuelcolvin/watchfiles/releases) - [Commits](samuelcolvin/watchfiles@v1.1.1...v1.2.0) --- updated-dependencies: - dependency-name: coverage dependency-version: 7.14.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-version-updates - dependency-name: psycopg dependency-version: 3.3.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-version-updates - dependency-name: pytest-postgresql dependency-version: 8.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-version-updates - dependency-name: black dependency-version: 26.5.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-version-updates - dependency-name: click dependency-version: 8.4.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-version-updates - dependency-name: pre-commit dependency-version: 4.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-version-updates - dependency-name: tomlkit dependency-version: 0.15.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-version-updates - dependency-name: tox dependency-version: 4.54.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-version-updates - dependency-name: uvicorn dependency-version: 0.48.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-version-updates - dependency-name: cachetools dependency-version: 7.1.4 dependency-type: indirect update-type: version-update:semver-minor dependency-group: development-version-updates - dependency-name: filelock dependency-version: 3.29.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: development-version-updates - dependency-name: identify dependency-version: 2.6.19 dependency-type: indirect update-type: version-update:semver-patch dependency-group: development-version-updates - dependency-name: packaging dependency-version: '26.2' dependency-type: indirect update-type: version-update:semver-minor dependency-group: development-version-updates - dependency-name: pathspec dependency-version: 1.1.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: development-version-updates - dependency-name: platformdirs dependency-version: 4.9.6 dependency-type: indirect update-type: version-update:semver-patch dependency-group: development-version-updates - dependency-name: virtualenv dependency-version: 21.3.3 dependency-type: indirect update-type: version-update:semver-minor dependency-group: development-version-updates - dependency-name: watchfiles dependency-version: 1.2.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: development-version-updates ... Signed-off-by: dependabot[bot] <support@github.com>

codacy-production · 2026-05-25T17:41:46Z

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric Results

Complexity 0

Duplication 0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer}
_{TIP This summary will be updated as you push new changes.}

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels May 25, 2026

github-actions Bot approved these changes May 25, 2026

View reviewed changes

github-actions Bot enabled auto-merge May 25, 2026 17:41

github-actions Bot merged commit fff5066 into main May 25, 2026
4 checks passed

github-actions Bot deleted the dependabot/pip/development-version-updates-bbfd70d8d0 branch May 25, 2026 17:42

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the development-version-updates group across 1 directory with 17 updates#359

Bump the development-version-updates group across 1 directory with 17 updates#359
github-actions[bot] merged 1 commit into
mainfrom
dependabot/pip/development-version-updates-bbfd70d8d0

dependabot Bot commented on behalf of github May 25, 2026

Uh oh!

codacy-production Bot commented May 25, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 25, 2026

Version 7.14.0 — 2026-05-10

psycopg release notes

Future releases

Current release

pytest-postgresql 8.1.0 (2026-05-15)

Features

Documentation

Miscellaneus

26.5.1

Stable style

Packaging

Documentation

26.5.0

Highlights

Stable style

Preview style

Packaging

Output

Version 26.5.1

Stable style

Packaging

Documentation

Version 26.5.0

Highlights

Stable style

Preview style

Packaging

8.4.1

8.4.0

Version 8.4.1

Version 8.4.0

pre-commit v4.6.0

Features

Fixes

4.6.0 - 2026-04-21

Features

Fixes

0.15.0

What's Changed

New Contributors

[0.15.0] - 2026-05-10

Changed

v4.54.0

What's Changed

v4.53.1

What's Changed

New Contributors

v4.53.0

What's Changed

v4.52.1

What's Changed

Features - 4.54.0

Bug fixes - 4.54.0

Bug fixes - 4.53.1

Features - 4.53.0

Version 0.48.0

What's Changed

Version 0.47.0

What's Changed

Version 0.46.0

What's Changed

Version 0.45.0

What's Changed

New Contributors

Version 0.44.0

What's Changed

Version 0.43.0

Changed

0.48.0 (May 24, 2026)

Changed

Fixed

0.47.0 (May 14, 2026)

Added

Changed

Fixed

0.46.0 (April 23, 2026)

Added

Changed

`psycopg` release notes

v7.1...
Description has been truncated