Update dependency uvicorn to v0.49.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
uvicorn (changelog)	==0.34.0 → ==0.49.0

---

Release Notes

Kludex/uvicorn (uvicorn)

v0.49.0: Version 0.49.0

Compare Source

What's Changed

• Bump httptools minimum version to 0.8.0 by @​Kludex in #​2962
• Consume duplicate forwarding headers in ProxyHeadersMiddleware (reverses the 0.48.0 behavior of ignoring them) by @​Kludex in #​2971

Full Changelog: Kludex/uvicorn@0.48.0...0.49.0

v0.48.0: Version 0.48.0

Compare Source

What's Changed

• Default ssl_ciphers to None and use OpenSSL defaults by @​Kludex in #​2940
• Ignore duplicate forwarding headers in ProxyHeadersMiddleware by @​Kludex in #​2944

Full Changelog: Kludex/uvicorn@0.47.0...0.48.0

v0.47.0: Version 0.47.0

Compare Source

What's Changed

• Eagerly import the ASGI app in the parent process by @​Kludex in #​2919
• Add ssl_context_factory for custom SSLContext configuration by @​Kludex in #​2920
• Treat fd=0 as a valid file descriptor with reload/workers by @​eltoder in #​2927

Full Changelog: Kludex/uvicorn@0.46.0...0.47.0

v0.46.0: Version 0.46.0

Compare Source

What's Changed

• Support ws_max_size in wsproto implementation by @​Kludex in #​2915
• Support ws_ping_interval and ws_ping_timeout in wsproto implementation by @​Kludex in #​2916
• Use bytearray for incoming WebSocket message buffer in websockets-sansio by @​Kludex in #​2917

Full Changelog: Kludex/uvicorn@0.45.0...0.46.0

v0.45.0: Version 0.45.0

Compare Source

What's Changed

• Preserve forwarded client ports in proxy headers middleware by @​Kludex in #​2903
• Accept os.PathLike for log_config by @​Kludex in #​2905
• Accept log_level strings case-insensitively by @​Kludex in #​2907
• Raise helpful ImportError when PyYAML is missing for YAML log config by @​Kludex in #​2906
• Revert empty context for ASGI runs by @​Kludex in #​2911
• Add --reset-contextvars flag to isolate ASGI request context by @​Kludex in #​2912
• Revert "Emit http.disconnect on server shutdown for streaming responses" (#​2829) by @​Kludex in #​2913

New Contributors

• @​Krishnachaitanyakc made their first contribution in #​2870

Full Changelog: Kludex/uvicorn@0.44.0...0.45.0

v0.44.0: Version 0.44.0

Compare Source

What's Changed

• Implement websocket keepalive pings for websockets-sansio by @​Kludex in #​2888

Full Changelog: Kludex/uvicorn@0.43.0...0.44.0

v0.43.0: Version 0.43.0

Compare Source

Changed

• Emit http.disconnect ASGI receive() event on server shutting down for streaming responses (#​2829)
• Use native context parameter for create_task on Python 3.11+ (#​2859)
• Drop cast in ASGI types (#​2875)

---

Full Changelog: Kludex/uvicorn@0.42.0...0.43.0

v0.42.0: Version 0.42.0

Compare Source

Changed

• Use bytearray for request body accumulation to avoid O(n^2) allocation on fragmented bodies (#​2845)

Fixed

• Escape brackets and backslash in httptools HEADER_RE regex (#​2824)
• Fix multiple issues in websockets sans-io implementation (#​2825)

---

New Contributors

• @​bysiber made their first contribution in #​2825

---

Full Changelog: Kludex/uvicorn@0.41.0...0.42.0

v0.41.0: Version 0.41.0

Compare Source

Added

• Add --limit-max-requests-jitter to stagger worker restarts (#​2707)
• Add socket path to scope["server"] (#​2561)

Changed

• Rename LifespanOn.error_occured to error_occurred (#​2776)

Fixed

• Ignore permission denied errors in watchfiles reloader (#​2817)
• Ensure lifespan shutdown runs when should_exit is set during startup (#​2812)
• Reduce the log level of 'request limit exceeded' messages (#​2788)

---

New Contributors

• @​t-kawasumi made their first contribution in #​2776
• @​fardyn made their first contribution in #​2800
• @​ewie made their first contribution in #​2807
• @​shevron made their first contribution in #​2788
• @​jonashaag made their first contribution in #​2707

---

Full Changelog: Kludex/uvicorn@0.40.0...0.41.0

v0.40.0: Version 0.40.0

Compare Source

What's Changed

• Drop Python 3.9 by @​Kludex in #​2772

Full Changelog: Kludex/uvicorn@0.39.0...0.40.0

v0.39.0: Version 0.39.0

Compare Source

What's Changed

• explicitly start ASGI run with empty context by @​pmeier in #​2742
• fix(websockets): Send close frame on ASGI return by @​Kludex in #​2769

New Contributors

• @​pmeier made their first contribution in #​2742

Full Changelog: Kludex/uvicorn@0.38.0...0.39.0

v0.38.0: Version 0.38.0

Compare Source

What's Changed

• Support Python 3.14 by @​Kludex in #​2723

---

New Contributors

• @​NGANAMODEIJunior made their first contribution in #​2713

Full Changelog: Kludex/uvicorn@0.37.0...0.38.0

v0.37.0: Version 0.37.0

Compare Source

What's Changed

• Add --timeout-worker-healthcheck setting by @​Kludex in #​2711
• Add os.PathLike[str] type to ssl_ca_certs by @​rnv812 in #​2676

New Contributors

• @​LincolnPuzey made their first contribution in #​2669
• @​rnv812 made their first contribution in #​2676

Full Changelog: Kludex/uvicorn@0.36.1...0.37.0

v0.36.1: Version 0.36.1

Compare Source

What's Changed

• Raise an exception when calling removed Config.setup_event_loop() by @​Kludex in #​2709

Full Changelog: Kludex/uvicorn@0.36.0...0.36.1

v0.36.0: Version 0.36.0

Compare Source

Added

• Support custom IOLOOPs by @​gnir-work in #​2435
• Allow to provide importable string in --http, --ws and --loop by @​Kludex in #​2658

---

New Contributors

• @​gnir-work made their first contribution in #​2435
• @​musicinmybrain made their first contribution in #​2659
• @​secrett2633 made their first contribution in #​2684

Full Changelog: Kludex/uvicorn@0.35.0...0.36.0

v0.35.0: Version 0.35.0

Compare Source

Added

• Add WebSocketsSansIOProtocol by @​Kludex in encode#2540

Changed

• Refine help message for option --proxy-headers by @​zhangyoufu in encode#2653

New Contributors

• @​zhangyoufu made their first contribution in encode#2653

Full Changelog: Kludex/uvicorn@0.34.3...0.35.0

v0.34.3: Version 0.34.3

Compare Source

What's Changed

• Don't include cwd() when non-empty --reload-dirs is passed by @​stinovlas in encode#2598
• Apply get_client_addr formatting to WebSocket logging by @​Harry-Lees in encode#2636
• chore: improve type hints by @​waketzheng in encode#2638

New Contributors

• @​stinovlas made their first contribution in encode#2598
• @​LifeLex made their first contribution in encode#2621
• @​Harry-Lees made their first contribution in encode#2636
• @​waketzheng made their first contribution in encode#2638

Full Changelog: Kludex/uvicorn@0.34.2...0.34.3

v0.34.2: Version 0.34.2

Compare Source

What's Changed

• Flush the stdout buffer on Windows to trigger reload by @​jamesh1999 in encode#2604

New Contributors

• @​jamesh1999 made their first contribution in encode#2604

Full Changelog: Kludex/uvicorn@0.34.1...0.34.2

v0.34.1: Version 0.34.1

Compare Source

What's Changed

• Deprecate ServerState in the main module by @​Kludex in encode#2581

New Contributors

• @​RakhimovRamis made their first contribution in encode#2567
• @​carlwgeorge made their first contribution in encode#2590

Full Changelog: Kludex/uvicorn@0.34.0...0.34.1

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: uv.lock

Command failed: uv lock --upgrade-package uvicorn
warning: The `tool.uv.dev-dependencies` field (used in `pyproject.toml`) is deprecated and will be removed in a future release; use `dependency-groups.dev` instead
Using CPython 3.14.6 interpreter at: /opt/containerbase/tools/python/3.14.6/bin/python3
  × No solution found when resolving dependencies for split (markers:
  │ python_full_version == '3.9.*'):
  ╰─▶ Because the requested Python version (>=3.9) does not satisfy
      Python>=3.10 and uvicorn==0.49.0 depends on Python>=3.10, we can
      conclude that uvicorn==0.49.0 cannot be used.
      And because your project depends on uvicorn==0.49.0, we can conclude
      that your project's requirements are unsatisfiable.

hint: While the active Python version is 3.14, the resolution failed for other Python versions supported by your project. Consider limiting your project's supported Python versions using `requires-python`.
hint: The `requires-python` value (>=3.9) includes Python versions that are not supported by your dependencies (e.g., uvicorn==0.49.0 only supports >=3.10). Consider using a more restrictive `requires-python` value (like >=3.10).