chore(deps): update uvicorn requirement from >=0.53.0 to >=0.54.0 by dependabot[bot] · Pull Request #62 · containifyci/engine-python

dependabot · 2026-10-04T10:52:42Z

Updates the requirements on uvicorn to permit the latest version.

Release notes

Version 0.54.0

📨 Send metadata after the response body

uvicorn 0.54.0 adds response trailers and 103 Early Hints to its experimental HTTP/2 implementation through zttp.
uv add uvicorn==0.54.0 "zttp>=0.0.34"
Send HTTP/2 response trailers (#3146). The ASGI http.response.trailers extension lets applications send metadata, such as checksums, after the response body. Clients must send TE: trailers to receive them. Multiple trailer messages are combined before completing the response.

HTTP/2 remains experimental and opt-in. Enable it with --http zttp --http2. Upgrade-based h2c and WebSockets over HTTP/2 remain unsupported.

💡 Hint at resources before the final response

Send 103 Early Hints over HTTP/2 (#3137). Applications can use the ASGI http.response.early_hint extension to send resource hints before the final response. Each supplied link becomes a separate Link header.

Full changelog: 0.53.0...0.54.0

Changelog

Sourced from uvicorn's changelog.

0.54.0 (September 24, 2026)

HTTP/2 support remains experimental. Install zttp>=0.0.34 and enable it with --http zttp --http2.

Added

Add HTTP/2 response trailers through the ASGI http.response.trailers extension. Clients must send TE: trailers to receive them (#3146)

Add HTTP/2 103 Early Hints through the ASGI http.response.early_hint extension (#3137)

0.53.0 (September 14, 2026)

This release adds experimental HTTP/2 support through zttp. Enable it with --http zttp --http2. Upgrade-based h2c and WebSockets over HTTP/2 are not supported.

Added

Add experimental HTTP/2 support through zttp (#2982, #3101)

Add support for zuvloop (#3104)

Fixed

Handle comma-separated, case-insensitive Connection: close tokens across HTTP implementations (#3103)

Trust IPv6 loopback in the default FORWARDED_ALLOW_IPS value (#3119)

Cancel the HTTP keep-alive timer when upgrading to WebSocket (#3107)

0.52.4 (August 18, 2026)

Fixed

Remove duplicate Date headers from accepted WebSocket handshakes with websockets-sansio (#3078)

0.52.3 (August 13, 2026)

Changed

Update zttp to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (#3067)

0.52.2 (August 13, 2026)

Fixed

Update zttp to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (#3063)

0.52.1 (August 1, 2026)

Fixed

Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)

Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)

Handle connection loss while a WebSocket write is waiting on backpressure (#3050)

... (truncated)

Commits

3eb9a9a Version 0.54.0 (#3161)
cd7ef6d Remove races from supervisor tests (#3134)
a56c7cc Support HTTP/2 response trailers (#3146)
9bd4404 chore(deps): bump anyio from 4.13.0 to 4.14.2 (#3145)
21f39ef Add HTTP/2 Early Hints support (#3137)
See full diff in compare view

dunebot · 2026-10-04T10:54:59Z

Caution

PUT https://api.github.com/repos/containifyci/engine-python/pulls/62/update-branch: 422 merge conflict between base and head []

Error Stacktrace

DuneBot Logs in DataDog

goroutine 1485012 [running]:
github.com/containifyci/dunebot/pkg/github.ErrorHandler.NewAPIError({{0x1f98240?, 0x8?, 0x1f6f140?}}, {0x13f0c68, 0x327bd009e600}, {0x13e65a0, 0x327bcfc380f0})
	/go/pkg/github.com/containifyci/dunebot@v0.3.17/pkg/github/error.go:65 +0x7f
github.com/containifyci/dunebot/pkg/github.NewAPIError({0x13f0c68, 0x327bd009e600}, {0x13e65a0, 0x327bcfc380f0})
	/go/pkg/github.com/containifyci/dunebot@v0.3.17/pkg/github/error.go:59 +0x45
github.com/containifyci/dunebot/pkg/github.GithubClient.AddRebaseComment({0x327bcd032f08, {0x759aa7696b38, 0x327bcff54ab0}, {{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x327bd10bd910, ...}, ...}, ...}, ...)
	/go/pkg/github.com/containifyci/dunebot@v0.3.17/pkg/github/client.go:262 +0x148
github.com/containifyci/dunebot/pkg/review.(*reviewer).PullRequestReview(0x327bcf566d00, {0x13f0c68, 0x327bd009e600}, {0x327bcfab7680?, 0x327bcffbe808?, 0x327bcdee8e80?, 0x327bccdefa00?})
	/go/pkg/github.com/containifyci/dunebot@v0.3.17/pkg/review/review.go:166 +0x1133
github.com/containifyci/temporal-worker/pkg/workflows/github.PullRequestReviewActivities.PullRequestReviewActivity({{{{0x327bcc6ec050, 0x9}, {0x0, 0x0}, 0x0}, {{0x327bcc6ee077, 0x13}, {0x327bcc6ea09a, 0x17}, {0x0, ...}, ...}, ...}, ...}, ...)
	/usr/src/pkg/workflows/github/pull_request.go:75 +0x1f0
reflect.Value.call({0x10673c0?, 0x327bcca7ef00?, 0x327bd0057550?}, {0x1334c35, 0x4}, {0x327bd009e630, 0x2, 0x16?})
	/usr/local/go/src/reflect/value.go:586 +0xf0c
reflect.Value.Call({0x10673c0?, 0x327bcca7ef00?, 0x327bceb28510?}, {0x327bd009e630?, 0x327bd0ee4280?, 0x327bd0057610?})
	/usr/local/go/src/reflect/value.go:369 +0xb9
go.temporal.io/sdk/internal.executeFunction({0x10673c0, 0x327bcca7ef00?}, {0x327bd0ee42e0?, 0x2, 0x1037f40?})
	/go/pkg/go.temporal.io/sdk@v1.47.0/internal/internal_worker.go:2944 +0x319
go.temporal.io/sdk/internal.executeFunctionWithContext({0x13f0c68, 0x327bd009e600}, {0x10673c0, 0x327bcca7ef00}, {0x327bcffd1300, 0x1, 0x1})
	/go/pkg/go.temporal.io/sdk@v1.47.0/internal/internal_worker.go:2928 +0x1f8
go.temporal.io/sdk/internal.(*activityEnvironmentInterceptor).ExecuteActivity(0x327bcdee8dc0, {0x13f0d10?, 0x327bcfe5c310?}, 0x327bcda97938)
	/go/pkg/go.temporal.io/sdk@v1.47.0/internal/internal_activity.go:357 +0x67
go.temporal.io/sdk/internal.(*activityExecutor).ExecuteWithActualArgs(0x327bccadde00, {0x13f0d10, 0x327bcfe5c310}, {0x327bcffd1300, 0x1, 0x1})
	/go/pkg/go.temporal.io/sdk@v1.47.0/internal/internal_worker.go:1228 +0x14b
go.temporal.io/sdk/internal.(*activityExecutor).Execute(0x327bccadde00, {0x13f0d10, 0x327bcfe5c310}, 0x327bcdee8780)
	/go/pkg/go.temporal.io/sdk@v1.47.0/internal/internal_worker.go:1214 +0x23d
go.temporal.io/sdk/internal.(*activityTaskHandlerImpl).Execute(0x327bcca6b0e0, {0x13375c9, 0x7}, 0x327bd0f4db00)
	/go/pkg/go.temporal.io/sdk@v1.47.0/internal/internal_task_handlers.go:2464 +0x1048
go.temporal.io/sdk/internal.(*activityTaskPoller).ProcessTask(0x327bcc9fa300, {0x1093c60?, 0x327bcff548a0})
	/go/pkg/go.temporal.io/sdk@v1.47.0/internal/internal_task_pollers.go:1478 +0x298
go.temporal.io/sdk/internal.(*baseWorker).processTaskAsync.func1()
	/go/pkg/go.temporal.io/sdk@v1.47.0/internal/internal_worker_base.go:721 +0x12f
created by go.temporal.io/sdk/internal.(*baseWorker).processTaskAsync in goroutine 39
	/go/pkg/go.temporal.io/sdk@v1.47.0/internal/internal_worker_base.go:700 +0x8c

❓ Got questions?
Check out DuneBot's Docs
For further assistance reach out to #ask-platform.

You can trigger DuneBot reprocessing by closing and reopen the Pull Request.

This PR comment was generated by DuneBot

dunebot · 2026-10-04T10:55:30Z

Caution

PUT https://api.github.com/repos/containifyci/engine-python/pulls/62/update-branch: 422 merge conflict between base and head []

Error Stacktrace

DuneBot Logs in DataDog

goroutine 1485048 [running]:
github.com/containifyci/dunebot/pkg/github.ErrorHandler.NewAPIError({{0x1f98240?, 0x8?, 0x1f6f140?}}, {0x13f0c68, 0x327bd0f18720}, {0x13e65a0, 0x327bcd339680})
	/go/pkg/github.com/containifyci/dunebot@v0.3.17/pkg/github/error.go:65 +0x7f
github.com/containifyci/dunebot/pkg/github.NewAPIError({0x13f0c68, 0x327bd0f18720}, {0x13e65a0, 0x327bcd339680})
	/go/pkg/github.com/containifyci/dunebot@v0.3.17/pkg/github/error.go:59 +0x45
github.com/containifyci/dunebot/pkg/github.GithubClient.AddRebaseComment({0x327bcd032f08, {0x759aa7696b38, 0x327bd0e97870}, {{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x327bd0e4d8c0, ...}, ...}, ...}, ...)
	/go/pkg/github.com/containifyci/dunebot@v0.3.17/pkg/github/client.go:262 +0x148
github.com/containifyci/dunebot/pkg/review.(*reviewer).PullRequestReview(0x327bd0886ea0, {0x13f0c68, 0x327bd0f18720}, {0x327bd0d86f00?, 0x327bd0ec8c08?, 0x327bcca4f7c0?, 0x327bccd5dd00?})
	/go/pkg/github.com/containifyci/dunebot@v0.3.17/pkg/review/review.go:166 +0x1133
github.com/containifyci/temporal-worker/pkg/workflows/github.PullRequestReviewActivities.PullRequestReviewActivity({{{{0x327bcc6ec050, 0x9}, {0x0, 0x0}, 0x0}, {{0x327bcc6ee077, 0x13}, {0x327bcc6ea09a, 0x17}, {0x0, ...}, ...}, ...}, ...}, ...)
	/usr/src/pkg/workflows/github/pull_request.go:75 +0x1f0
reflect.Value.call({0x10673c0?, 0x327bcca7ef00?, 0x327bd0f07550?}, {0x1334c35, 0x4}, {0x327bd0f18750, 0x2, 0x16?})
	/usr/local/go/src/reflect/value.go:586 +0xf0c
reflect.Value.Call({0x10673c0?, 0x327bcca7ef00?, 0x327bd0ea2870?}, {0x327bd0f18750?, 0x327bcd3fb4e0?, 0x327bd0f07610?})
	/usr/local/go/src/reflect/value.go:369 +0xb9
go.temporal.io/sdk/internal.executeFunction({0x10673c0, 0x327bcca7ef00?}, {0x327bcd3fb540?, 0x2, 0x1037f40?})
	/go/pkg/go.temporal.io/sdk@v1.47.0/internal/internal_worker.go:2944 +0x319
go.temporal.io/sdk/internal.executeFunctionWithContext({0x13f0c68, 0x327bd0f18720}, {0x10673c0, 0x327bcca7ef00}, {0x327bd0f8c1c0, 0x1, 0x1})
	/go/pkg/go.temporal.io/sdk@v1.47.0/internal/internal_worker.go:2928 +0x1f8
go.temporal.io/sdk/internal.(*activityEnvironmentInterceptor).ExecuteActivity(0x327bcca4f700, {0x13f0d10?, 0x327bcc721180?}, 0x327bcd242168)
	/go/pkg/go.temporal.io/sdk@v1.47.0/internal/internal_activity.go:357 +0x67
go.temporal.io/sdk/internal.(*activityExecutor).ExecuteWithActualArgs(0x327bccadde00, {0x13f0d10, 0x327bcc721180}, {0x327bd0f8c1c0, 0x1, 0x1})
	/go/pkg/go.temporal.io/sdk@v1.47.0/internal/internal_worker.go:1228 +0x14b
go.temporal.io/sdk/internal.(*activityExecutor).Execute(0x327bccadde00, {0x13f0d10, 0x327bcc721180}, 0x327bcc834300)
	/go/pkg/go.temporal.io/sdk@v1.47.0/internal/internal_worker.go:1214 +0x23d
go.temporal.io/sdk/internal.(*activityTaskHandlerImpl).Execute(0x327bcca6b0e0, {0x13375c9, 0x7}, 0x327bcd0378c0)
	/go/pkg/go.temporal.io/sdk@v1.47.0/internal/internal_task_handlers.go:2464 +0x1048
go.temporal.io/sdk/internal.(*activityTaskPoller).ProcessTask(0x327bcc9fa300, {0x1093c60?, 0x327bd0e97660})
	/go/pkg/go.temporal.io/sdk@v1.47.0/internal/internal_task_pollers.go:1478 +0x298
go.temporal.io/sdk/internal.(*baseWorker).processTaskAsync.func1()
	/go/pkg/go.temporal.io/sdk@v1.47.0/internal/internal_worker_base.go:721 +0x12f
created by go.temporal.io/sdk/internal.(*baseWorker).processTaskAsync in goroutine 39
	/go/pkg/go.temporal.io/sdk@v1.47.0/internal/internal_worker_base.go:700 +0x8c

❓ Got questions?
Check out DuneBot's Docs
For further assistance reach out to #ask-platform.

You can trigger DuneBot reprocessing by closing and reopen the Pull Request.

This PR comment was generated by DuneBot

dunebot · 2026-10-04T10:56:17Z

Caution

PUT https://api.github.com/repos/containifyci/engine-python/pulls/62/update-branch: 422 merge conflict between base and head []

Error Stacktrace

DuneBot Logs in DataDog

goroutine 1485109 [running]:
github.com/containifyci/dunebot/pkg/github.ErrorHandler.NewAPIError({{0x1f98240?, 0x8?, 0x1f6f140?}}, {0x13f0c68, 0x327bd25f5770}, {0x13e65a0, 0x327bd32ce500})
	/go/pkg/github.com/containifyci/dunebot@v0.3.17/pkg/github/error.go:65 +0x7f
github.com/containifyci/dunebot/pkg/github.NewAPIError({0x13f0c68, 0x327bd25f5770}, {0x13e65a0, 0x327bd32ce500})
	/go/pkg/github.com/containifyci/dunebot@v0.3.17/pkg/github/error.go:59 +0x45
github.com/containifyci/dunebot/pkg/github.GithubClient.AddRebaseComment({0x327bcd032f08, {0x759aa7696b38, 0x327bd28d2250}, {{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x327bd25fc900, ...}, ...}, ...}, ...)
	/go/pkg/github.com/containifyci/dunebot@v0.3.17/pkg/github/client.go:262 +0x148
github.com/containifyci/dunebot/pkg/review.(*reviewer).PullRequestReview(0x327bd2b00000, {0x13f0c68, 0x327bd25f5770}, {0x327bd23fdc20?, 0x327bd25b1808?, 0x327bd28d4300?, 0x327bd1fdec80?})
	/go/pkg/github.com/containifyci/dunebot@v0.3.17/pkg/review/review.go:166 +0x1133
github.com/containifyci/temporal-worker/pkg/workflows/github.PullRequestReviewActivities.PullRequestReviewActivity({{{{0x327bcc6ec050, 0x9}, {0x0, 0x0}, 0x0}, {{0x327bcc6ee077, 0x13}, {0x327bcc6ea09a, 0x17}, {0x0, ...}, ...}, ...}, ...}, ...)
	/usr/src/pkg/workflows/github/pull_request.go:75 +0x1f0
reflect.Value.call({0x10673c0?, 0x327bcca7ef00?, 0x327bd291b550?}, {0x1334c35, 0x4}, {0x327bd25f57a0, 0x2, 0x16?})
	/usr/local/go/src/reflect/value.go:586 +0xf0c
reflect.Value.Call({0x10673c0?, 0x327bcca7ef00?, 0x327bd251f7a0?}, {0x327bd25f57a0?, 0x327bcc9fe6c0?, 0x327bd291b610?})
	/usr/local/go/src/reflect/value.go:369 +0xb9
go.temporal.io/sdk/internal.executeFunction({0x10673c0, 0x327bcca7ef00?}, {0x327bcc9fe720?, 0x2, 0x1037f40?})
	/go/pkg/go.temporal.io/sdk@v1.47.0/internal/internal_worker.go:2944 +0x319
go.temporal.io/sdk/internal.executeFunctionWithContext({0x13f0c68, 0x327bd25f5770}, {0x10673c0, 0x327bcca7ef00}, {0x327bd2934aa0, 0x1, 0x1})
	/go/pkg/go.temporal.io/sdk@v1.47.0/internal/internal_worker.go:2928 +0x1f8
go.temporal.io/sdk/internal.(*activityEnvironmentInterceptor).ExecuteActivity(0x327bd28d4240, {0x13f0d10?, 0x327bd25ccf50?}, 0x327bd25c6ee8)
	/go/pkg/go.temporal.io/sdk@v1.47.0/internal/internal_activity.go:357 +0x67
go.temporal.io/sdk/internal.(*activityExecutor).ExecuteWithActualArgs(0x327bccadde00, {0x13f0d10, 0x327bd25ccf50}, {0x327bd2934aa0, 0x1, 0x1})
	/go/pkg/go.temporal.io/sdk@v1.47.0/internal/internal_worker.go:1228 +0x14b
go.temporal.io/sdk/internal.(*activityExecutor).Execute(0x327bccadde00, {0x13f0d10, 0x327bd25ccf50}, 0x327bd2347b80)
	/go/pkg/go.temporal.io/sdk@v1.47.0/internal/internal_worker.go:1214 +0x23d
go.temporal.io/sdk/internal.(*activityTaskHandlerImpl).Execute(0x327bcca6b0e0, {0x13375c9, 0x7}, 0x327bd0ec4a20)
	/go/pkg/go.temporal.io/sdk@v1.47.0/internal/internal_task_handlers.go:2464 +0x1048
go.temporal.io/sdk/internal.(*activityTaskPoller).ProcessTask(0x327bcc9fa300, {0x1093c60?, 0x327bd28d2040})
	/go/pkg/go.temporal.io/sdk@v1.47.0/internal/internal_task_pollers.go:1478 +0x298
go.temporal.io/sdk/internal.(*baseWorker).processTaskAsync.func1()
	/go/pkg/go.temporal.io/sdk@v1.47.0/internal/internal_worker_base.go:721 +0x12f
created by go.temporal.io/sdk/internal.(*baseWorker).processTaskAsync in goroutine 39
	/go/pkg/go.temporal.io/sdk@v1.47.0/internal/internal_worker_base.go:700 +0x8c

❓ Got questions?
Check out DuneBot's Docs
For further assistance reach out to #ask-platform.

You can trigger DuneBot reprocessing by closing and reopen the Pull Request.

This PR comment was generated by DuneBot

Updates the requirements on [uvicorn](https://github.com/Kludex/uvicorn) to permit the latest version. - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.53.0...0.54.0) --- updated-dependencies: - dependency-name: uvicorn dependency-version: 0.54.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 4, 2026

dependabot Bot force-pushed the dependabot/pip/uvicorn-gte-0.54.0 branch from 5efd6ac to dadab7b Compare October 4, 2026 10:56

dunebot Bot approved these changes Oct 4, 2026

View reviewed changes

dunebot Bot merged commit d1b6289 into main Oct 4, 2026
1 check passed

dependabot Bot deleted the dependabot/pip/uvicorn-gte-0.54.0 branch October 4, 2026 10:59

Navigation Menu

Repository navigation

chore(deps): update uvicorn requirement from >=0.53.0 to >=0.54.0 - #62

chore(deps): update uvicorn requirement from >=0.53.0 to >=0.54.0#62
dunebot[bot] merged 1 commit into
mainfrom
dependabot/pip/uvicorn-gte-0.54.0

dependabot Bot commented on behalf of github Oct 4, 2026 •

edited

Loading

Uh oh!

dunebot Bot commented Oct 4, 2026

Uh oh!

dunebot Bot commented Oct 4, 2026

Uh oh!

dunebot Bot commented Oct 4, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Version 0.54.0

📨 Send metadata after the response body

💡 Hint at resources before the final response

0.54.0 (September 24, 2026)

Added

0.53.0 (September 14, 2026)

Added

Fixed

0.52.4 (August 18, 2026)

Fixed

0.52.3 (August 13, 2026)

Changed

0.52.2 (August 13, 2026)

Fixed

0.52.1 (August 1, 2026)

Fixed

Uh oh!

dunebot Bot commented Oct 4, 2026

Uh oh!

dunebot Bot commented Oct 4, 2026

Uh oh!

dunebot Bot commented Oct 4, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 4, 2026 •

edited

Loading