Bump the dependencies group across 1 directory with 16 updates #283

dependabot · 2026-01-13T02:02:49Z

Bumps the dependencies group with 16 updates in the / directory:

Package	From	To
sphinx-autobuild	`2024.10.3`	`2025.8.25`
sphinx-rtd-theme	`3.0.2`	`3.1.0`
anyio	`4.9.0`	`4.12.1`
certifi	`2025.6.15`	`2026.1.4`
charset-normalizer	`3.4.2`	`3.4.4`
click	`8.2.1`	`8.3.1`
idna	`3.10`	`3.11`
markupsafe	`3.0.2`	`3.0.3`
requests	`2.32.4`	`2.32.5`
roman-numerals-py	`3.1.0`	`4.1.0`
starlette	`0.49.1`	`0.51.0`
typing-extensions	`4.14.0`	`4.15.0`
urllib3	`2.6.0`	`2.6.3`
uvicorn	`0.34.3`	`0.40.0`
watchfiles	`1.1.0`	`1.1.1`
websockets	`15.0.1`	`16.0`

Updates sphinx-autobuild from 2024.10.3 to 2025.8.25

Release notes

Sourced from sphinx-autobuild's releases.

Release 2025.08.25

2025.08.25

Changelog

Sourced from sphinx-autobuild's changelog.

Changelog

unreleased

Set Cache-Control header to no-cache for served files.

2025.08.25 - 2025-08-25

Drop support for Python 3.9-3.10 to match Sphinx.

Declare support for Python 3.14.

Add an optional --post-build flag to run additional commands after building the documentation.

Add support for the SPHINX_AUTOBUILD_DEBUG environment variable to help with debugging.

2024.10.03 - 2024-10-03

Improve error handling for failures in pre-build commands.

2024.10.02 - 2024-10-02

Show the changed paths that triggered the rebuild.

2024.09.19 - 2024-09-19

Fix path filtering on Windows by normalising path separators.

Filter various directories by default (.git, venv, etc).

Serve the correct directory when using make mode (-M).

2024.09.18 - 2024-09-18

Run Sphinx through the Python entry point rather than the binary on PATH.

2024.09.17 - 2024-09-17

Relax checks for paths that aren't required to exist.

2024.09.03 - 2024-09-03

Fix support for Python 3.9.

Fix running sphinx-autobuild via entry point scripts.

... (truncated)

Commits

fd726c5 Release 2025.08.25
f810750 Update pre-commit versions
12e0553 Format pyproject.toml
6d039d4 Declare support for Python 3.14
c4a47b0 Fix name of 'test' nox session in docs (#193)
48fcf5c Fix --help with Python 3.14 and Sphinx 8.2.3 (#199)
0c52892 Add SPHINX_AUTOBUILD_DEBUG to aid debugging (#192)
cc58cc1 Add a --post-build argument (#190)
92bcf10 Require Python 3.11 or newer, to match Sphinx (#189)
See full diff in compare view

Updates sphinx-rtd-theme from 3.0.2 to 3.1.0

Changelog

Sourced from sphinx-rtd-theme's changelog.

3.1.0

Added support for docutils 0.22

Added support for Sphinx 9.x

.. _release-3.1.0rc2:

3.1.0rc2

Added support for docutils 0.22

.. _release-3.1.0rc1:

3.1.0rc1

Added support for Sphinx 9.x

.. _release-3.0.2:

Commits

795de79 Release 3.1.0 (#1676)
66d0fdd Add Python 3.14 to the test suite (#1668)
fbe5e60 3.1.0rc2 with support for docutils 0.22 (#1674)
a76174c Add support for docutils 0.22 (#1671)
20733c3 Add support for Sphinx 9.0.0 (#1666)
71aacd3 Update Code of Conduct URL (#1664)
5a26375 Run tests and build docs with Sphinx 8.2 (#1640)
8d4d394 Sidebar should not be floating on mobile (#1622)
See full diff in compare view

Updates anyio from 4.9.0 to 4.12.1

Release notes

Sourced from anyio's releases.

4.12.1

Changed all functions currently raising the private NoCurrentAsyncBackend exception (since v4.12.0) to instead raise the public NoEventLoopError exception (#1048)

Fixed anyio.functools.lru_cache not working with instance methods (#1042)

4.12.0

Added support for asyncio's task call graphs on Python 3.14 and later when using AnyIO's task groups (#1025)

Added an asynchronous implementation of the functools module (#1001)

Added support for uvloop=True on Windows via the winloop implementation (#960; PR by @Vizonex)

Added support for use as a context manager to anyio.lowlevel.RunVar (#1003)

Added __all__ declarations to public submodules (anyio.lowlevel etc.) (#1009)

Added the ability to set the token count of a CapacityLimiter to zero (#1019; requires Python 3.10 or later when using Trio)

Added parameters case_sensitive and recurse_symlinks along with support for path-like objects to anyio.Path.glob() and anyio.Path.rglob() (#1033; PR by @northisup)

Dropped sniffio as a direct dependency and added the get_available_backends() function (#1021)

Fixed Process.stdin.send() not raising ClosedResourceError and BrokenResourceError on asyncio. Previously, a non-AnyIO exception was raised in such cases (#671; PR by @gschaffner)

Fixed Process.stdin.send() not checkpointing before writing data on asyncio (#1002; PR by @gschaffner)

Fixed a race condition where cancelling a Future from BlockingPortal.start_task_soon() would sometimes not cancel the async function (#1011; PR by @gschaffner)

Fixed the presence of the pytest plugin causing breakage with older versions of pytest (<= 6.1.2) (#1028; PR by @saper)

Fixed a rarely occurring RuntimeError: Set changed size during iteration while shutting down the process pool when using the asyncio backend (#985)

4.11.0

Added support for cancellation reasons (the reason parameter to CancelScope.cancel()) (#975)

Bumped the minimum version of Trio to v0.31.0

Added the ability to enter the event loop from foreign (non-worker) threads by passing the return value of anyio.lowlevel.current_token() to anyio.from_thread.run() and anyio.from_thread.run_sync() as the token keyword argument (#256)

Added pytest option (anyio_mode = "auto") to make the pytest plugin automatically handle all async tests (#971)

Added the anyio.Condition.wait_for() method for feature parity with asyncio (#974)

Changed the default type argument of anyio.abc.TaskStatus from Any to None (#964)

Fixed TCP listener behavior to guarantee the same ephemeral port is used for all socket listeners when local_port=0 (#857; PR by @11kkw and @agronholm)

Fixed inconsistency between Trio and asyncio where a TCP stream that previously raised a BrokenResourceError on send() would still raise BrokenResourceError after the stream was closed on asyncio, but ClosedResourceError on Trio. They now both raise a ClosedResourceError in this scenario. (#671)

4.10.0

Added the feed_data() method to the BufferedByteReceiveStream class, allowing users to inject data directly into the buffer

Added various class methods to wrap existing sockets as listeners or socket streams:

SocketListener.from_socket()

SocketStream.from_socket()

UNIXSocketStream.from_socket()

UDPSocket.from_socket()

ConnectedUDPSocket.from_socket()

UNIXDatagramSocket.from_socket()

ConnectedUNIXDatagramSocket.from_socket()

Added a hierarchy of connectable stream classes for transparently connecting to various remote or local endpoints for exchanging bytes or objects

Added context manager mix-in classes (anyio.ContextManagerMixin and anyio.AsyncContextManagerMixin) to help write classes that embed other context managers, particularly cancel scopes or task groups (#905; PR by @agronholm and @tapetersen)

Added the ability to specify the thread name in start_blocking_portal() (#818; PR by @davidbrochart)

Added anyio.notify_closing to allow waking anyio.wait_readable and anyio.wait_writable before closing a socket. Among other things, this prevents an OSError on the ProactorEventLoop. (#896; PR by @graingert)

Incorporated several documentation improvements from the EuroPython 2025 sprint (special thanks to the sprinters: Emmanuel Okedele, Jan Murre, Euxenia Miruna Goia and Christoffer Fjord)

Added a documentation page explaining why one might want to use AnyIO's APIs instead of asyncio's

Updated the to_interpreters module to use the public concurrent.interpreters API on Python 3.14 or later

Fixed anyio.Path.copy() and anyio.Path.copy_into() failing on Python 3.14.0a7

Fixed return annotation of __aexit__ on async context managers. CMs which can suppress exceptions should return bool, or None otherwise. (#913; PR by @Enegg)

Fixed rollover boundary check in SpooledTemporaryFile so that rollover only occurs when the buffer size exceeds max_size (#915; PR by @11kkw)

Migrated testing and documentation dependencies from extras to dependency groups

... (truncated)

Commits

a0dccbd Bumped up the version
e1121a7 Enabled tests for the 4.12.x branch
69ab43e Fixed anyio.functools.lru_cache not working with methods (#1056)
4f4b33e Remove BlockingPortal.__new__ hack (#1053)
af17d89 Replaced the NoCurrentAsyncBackend exception with NoEventLoopError (#1049)
4310264 Updated pre-commit modules
0cc6723 Bump the github-actions group with 3 updates (#1051)
bc021b6 Fixed the download-artifact settings to retain the expected behavior
c6000aa Corrected the format of the version in the changelog
9d1bfe0 Bumped up the version
Additional commits viewable in compare view

Updates certifi from 2025.6.15 to 2026.1.4

Commits

c64d9f3 2026.01.04 (#389)
4ac232f Bump actions/download-artifact from 6.0.0 to 7.0.0 (#387)
95ae4b2 Update CI workflow to use Ubuntu 24.04 and Python 3.14 stable (#386)
b72a7b1 Bump dessant/lock-threads from 5.0.1 to 6.0.0 (#385)
ecc2672 Bump actions/upload-artifact from 5.0.0 to 6.0.0 (#384)
6a897db Bump peter-evans/create-pull-request from 7.0.11 to 8.0.0 (#383)
27ca98a Bump peter-evans/create-pull-request from 7.0.9 to 7.0.11 (#381)
56c59a6 Bump actions/checkout from 6.0.0 to 6.0.1 (#382)
ae0021c Bump actions/setup-python from 6.0.0 to 6.1.0 (#380)
ddf5d0b Bump actions/checkout from 5.0.1 to 6.0.0 (#378)
Additional commits viewable in compare view

Updates charset-normalizer from 3.4.2 to 3.4.4

Release notes

Sourced from charset-normalizer's releases.

Version 3.4.4

3.4.4 (2025-10-13)

Changed

Bound setuptools to a specific constraint setuptools>=68,<=81.

Raised upper bound of mypyc for the optional pre-built extension to v1.18.2

Removed

setuptools-scm as a build dependency.

Misc

Enforced hashes in dev-requirements.txt and created ci-requirements.txt for security purposes.

Additional pre-built wheels for riscv64, s390x, and armv7l architectures.

Restore multiple.intoto.jsonl in GitHub releases in addition to individual attestation file per wheel.

Version 3.4.3

3.4.3 (2025-08-09)

Changed

mypy(c) is no longer a required dependency at build time if CHARSET_NORMALIZER_USE_MYPYC isn't set to 1. (#595) (#583)

automatically lower confidence on small bytes samples that are not Unicode in detect output legacy function. (#391)

Added

Custom build backend to overcome inability to mark mypy as an optional dependency in the build phase.

Support for Python 3.14

Fixed

sdist archive contained useless directories.

automatically fallback on valid UTF-16 or UTF-32 even if the md says it's noisy. (#633)

Misc

SBOM are automatically published to the relevant GitHub release to comply with regulatory changes. Each published wheel comes with its SBOM. We choose CycloneDX as the format.

Prebuilt optimized wheel are no longer distributed by default for CPython 3.7 due to a change in cibuildwheel.

Changelog

Sourced from charset-normalizer's changelog.

3.4.4 (2025-10-13)

Changed

Bound setuptools to a specific constraint setuptools>=68,<=81.

Raised upper bound of mypyc for the optional pre-built extension to v1.18.2

Removed

setuptools-scm as a build dependency.

Misc

Enforced hashes in dev-requirements.txt and created ci-requirements.txt for security purposes.

Additional pre-built wheels for riscv64, s390x, and armv7l architectures.

Restore multiple.intoto.jsonl in GitHub releases in addition to individual attestation file per wheel.

3.4.3 (2025-08-09)

Changed

mypy(c) is no longer a required dependency at build time if CHARSET_NORMALIZER_USE_MYPYC isn't set to 1. (#595) (#583)

automatically lower confidence on small bytes samples that are not Unicode in detect output legacy function. (#391)

Added

Custom build backend to overcome inability to mark mypy as an optional dependency in the build phase.

Support for Python 3.14

Fixed

sdist archive contained useless directories.

automatically fallback on valid UTF-16 or UTF-32 even if the md says it's noisy. (#633)

Misc

SBOM are automatically published to the relevant GitHub release to comply with regulatory changes. Each published wheel comes with its SBOM. We choose CycloneDX as the format.

Prebuilt optimized wheel are no longer distributed by default for CPython 3.7 due to a change in cibuildwheel.

Commits

b30ffdc 🔧 fix checksum step in cd.yml
d3fbfcf 🔧 fix cd.yml
dafbb95 Release 3.4.4 (#658)
1f18ffa ⬆️ raise mypy upper bound to 1.18.2
ef4ac69 Merge branch 'release-3.4.4' of github.com:jawah/charset_normalizer into rele...
4b35dda 📝 write changelog for 3.4.4
0ec6452 🔧 update cd.yml workflow (add riscv64, s390x and armv7l)
f341ede ⬆️ upgrade dependencies (dev, ci)
a308841 📝 write changelog for 3.4.4
9c906da 🔧 update cd.yml workflow (add riscv64, s390x and armv7l)
Additional commits viewable in compare view

Updates click from 8.2.1 to 8.3.1

Release notes

Sourced from click's releases.

8.3.1

This is the Click 8.3.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.3.1/ Changes: https://click.palletsprojects.com/page/changes/#version-8-3-1 Milestone: https://github.com/pallets/click/milestone/28

Don't discard pager arguments by correctly using subprocess.Popen. #3039 #3055

Replace Sentinel.UNSET default values by None as they're passed through the Context.invoke() method. #3066 #3065 #3068

Fix conversion of Sentinel.UNSET happening too early, which caused incorrect behavior for multiple parameters using the same name. #3071 #3079

Fix rendering when prompt and confirm parameter prompt_suffix is empty. #3019 #3021

When Sentinel.UNSET is found during parsing, it will skip calls to type_cast_value. #3069 #3090

Hide Sentinel.UNSET values as None when looking up for other parameters through the context inside parameter callbacks. #3136 #3137

8.3.0

This is the Click 8.3.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our Version Support Policy on our website.

PyPI: https://pypi.org/project/click/8.3.0/ Changes: https://click.palletsprojects.com/page/changes/#version-8-3-0 Milestone https://github.com/pallets/click/milestone/27

Improved flag option handling: Reworked the relationship between flag_value and default parameters for better consistency:

The default parameter value is now preserved as-is and passed directly to CLI functions (no more unexpected transformations)

Exception: flag options with default=True maintain backward compatibility by defaulting to their flag_value

The default parameter can now be any type (bool, None, etc.)

Fixes inconsistencies reported in: #1992 #2514 #2610 #3024 #3030

Allow default to be set on Argument for nargs = -1. #2164 #3030

Show correct auto complete value for nargs option in combination with flag option #2813

Show correct auto complete value for nargs option in combination with flag option #2813

Fix handling of quoted and escaped parameters in Fish autocompletion. #2995 #3013

Lazily import shutil. #3023

Properly forward exception information to resources registered with click.core.Context.with_resource(). #2447 #3058

Fix regression related to EOF handling in CliRunner. #2939 #2940

8.2.2

This is the Click 8.2.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.2.2/

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.3.1

Released 2025-11-15

Don't discard pager arguments by correctly using subprocess.Popen. :issue:3039 :pr:3055

Replace Sentinel.UNSET default values by None as they're passed through the Context.invoke() method. :issue:3066 :issue:3065 :pr:3068

Fix conversion of Sentinel.UNSET happening too early, which caused incorrect behavior for multiple parameters using the same name. :issue:3071 :pr:3079

Hide Sentinel.UNSET values as None when looking up for other parameters through the context inside parameter callbacks. :issue:3136 :pr:3137

Fix rendering when prompt and confirm parameter prompt_suffix is empty. :issue:3019 :pr:3021

When Sentinel.UNSET is found during parsing, it will skip calls to type_cast_value. :issue:3069 :pr:3090

Version 8.3.0

Released 2025-09-17

Improved flag option handling: Reworked the relationship between flag_value and default parameters for better consistency:

The default parameter value is now preserved as-is and passed directly to CLI functions (no more unexpected transformations)

Exception: flag options with default=True maintain backward compatibility by defaulting to their flag_value

The default parameter can now be any type (bool, None, etc.)

Fixes inconsistencies reported in: :issue:1992 :issue:2514 :issue:2610 :issue:3024 :pr:3030

Allow default to be set on Argument for nargs = -1. :issue:2164 :pr:3030

Show correct auto complete value for nargs option in combination with flag option :issue:2813

Fix handling of quoted and escaped parameters in Fish autocompletion. :issue:2995 :pr:3013

Lazily import shutil. :pr:3023

Properly forward exception information to resources registered with click.core.Context.with_resource(). :issue:2447 :pr:3058

Fix regression related to EOF handling in CliRunner. :issue:2939 :pr:2940

Version 8.2.2

Released 2025-07-31

Fix reconciliation of default, flag_value and type parameters for flag options, as well as parsing and normalization of environment variables.

... (truncated)

Commits

1d038f2 release version 8.3.1
03f3889 Fix Ruff UP038 warning (#3141)
3867781 Fix Ruff UP038 warning
b91bb95 Provide altered context to callbacks to hide UNSET values as None (#3137)
437e1e3 Temporarily provide a fake context to the callback to hide UNSET values as ...
ea70da4 Don't test using a file in docs/ (#3102)
e27b307 Make uv run --all-extras pyright --verifytypes click pass (#3072)
a92c573 Fix test_edit to work with BSD sed (#3129)
bd131e1 Fix test_edit to work with BSD sed
0b5c6b7 Add Best practices section (#3127)
Additional commits viewable in compare view

Updates idna from 3.10 to 3.11

Changelog

Sourced from idna's changelog.

3.11 (2025-10-12)

Update to Unicode 16.0.0, including significant changes to UTS46 processing. As a result of Unicode ending support for it, transitional processing no longer has an effect and returns the same result.

Add support for Python 3.14, lowest supported version is Python 3.8.

Various updates to packaging, including PEP 740 support.

Commits

ad949ee Release v3.11
cae4ba7 Second release candidate for 3.11
8adb305 Add space in RST link
74cb2b6 Release candidate for 3.11
05dab09 Format idna-data with ruff
90eac78 Apply ruff formatting
a31ce7e Remove errant test vectors
81f0333 Omit vectors known to be broken in test suite
a0f3257 Merge branch 'master' into unicode-16-uts46-changes
38d9886 Remove extra UTS46 test vector
Additional commits viewable in compare view

Updates markupsafe from 3.0.2 to 3.0.3

Release notes

Sourced from markupsafe's releases.

3.0.3

This is the MarkupSafe 3.0.3 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/MarkupSafe/3.0.3/ Changes: https://markupsafe.palletsprojects.com/page/changes/#version-3-0-3 Milestone: https://github.com/pallets/markupsafe/milestone/15?closed=1

__version__ raises DeprecationWarning instead of UserWarning. #487

Adopt multi-phase initialization PEP 489 for the C extension. #494

Build Windows ARM64 wheels. #485

Build Python 3.14 wheels. #503

Build riscv64 wheels. #505

Changelog

Sourced from markupsafe's changelog.

Version 3.0.3

Released 2025-09-27

__version__ raises DeprecationWarning instead of UserWarning. :issue:487

Adopt multi-phase initialisation (:pep:489) for the C extension. :issue:494

Build Windows ARM64 wheels. :issue:485

Build Python 3.14 wheels. :issue:503

Build riscv64 wheels. :issue:505

Commits

297fc8e release version 3.0.3
7e4e6ce Free-threading: run with pytest-run-paralell (#507)
6100b9c enable riscv64 wheels (#506)
c9d5ecf enable riscv64 wheels
2f9b337 tox for 3.14
78d951a update dev dependencies
bb6744e add entry
65c4134 upgrade cibuildwheel, add cp314 wheels and test on CPython 3.14 (#504)
3a9bd88 add cp314 wheels
aafe44d remove slsa provenance (#501)
Additional commits viewable in compare view

Updates requests from 2.32.4 to 2.32.5

Release notes

Sourced from requests's releases.

v2.32.5

2.32.5 (2025-08-18)

Bugfixes

The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

Added support for Python 3.14.

Dropped support for Python 3.8 following its end of support.

Changelog

Sourced from requests's changelog.

2.32.5 (2025-08-18)

Bugfixes

The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

Added support for Python 3.14.

Dropped support for Python 3.8 following its end of support.

Commits

b25c87d v2.32.5
131e506 Merge pull request #7010 from psf/dependabot/github_actions/actions/checkout-...
b336cb2 Bump actions/checkout from 4.2.0 to 5.0.0
46e939b Update publish workflow to use artifact-id instead of name
4b9c546 Merge pull request #6999 from psf/dependabot/github_actions/step-security/har...
7618dbe Bump step-security/harden-runner from 2.12.0 to 2.13.0
2edca11 Add support for Python 3.14 and drop support for Python 3.8 (#6993)
fec96cd Update Makefile rules (#6996)
d58d8aa docs: clarify timeout parameter uses seconds in Session.request (#6994)
91a3eab Bump github/codeql-action from 3.28.5 to 3.29.0
Additional commits viewable in compare view

Updates roman-numerals-py from 3.1.0 to 4.1.0

Release notes

Sourced from roman-numerals-py's releases.

v4.1.0

roman-numerals 4.1.0

v4.0.0

roman-numerals 4.0.0

Changelog

Sourced from roman-numerals-py's changelog.

Release 4.1.0 (released 17 Dec 2025)

Restore LICENCE.rst in the roman-numerals-py meta-package

Add some debug assertions for unsafe blocks

Release 4.0.0 (released 16 Dec 2025)

Rename Python package to roman-numerals on PyPI.

Publish roman-numerals-py as a meta-package that depends on roman-numerals and installs no modules.

Drop support for Python 3.9.

Declare support for Python 3.15.

Increase the minimum supported Rust version (MSRV) to 1.81.0.

Implement the core::error::Error trait for all error types.

Implement the core::fmt traits in no-std mode.

Implement From<RomanNumeral> for most integer types.

Publish the roman-numerals-rs crate using Trusted Publishing <https://crates.io/docs/trusted-publishing>__

Commits

53c9c4e Release v4.1.0
a3793b8 Add more SAFETY notes and debug assertions to unsafe blocks (#106)
46d346e Adjust annotations in light of PEP 649
b8fae40 Adjust an example in the README
a884641 Restore LICENCE.rst in the roman-numerals-py meta-package
c3e1b6b Release v4.0.0
c335cb6 Add publishing step for the roman-numerals-py meta-package (#105)
649f6e6 Add Trusted Publishing workflow for crates.io (#104)
ffa4dd1 rust: Refactor tests (#103)
26b4156 Simplify ASCII detection closures (#102)
Additional commits viewable in compare view

Updates starlette from 0.49.1 to 0.51.0

Release notes

Sourced from starlette's releases.

Version 0.51.0

Added

Add allow_private_network in CORSMiddleware #3065.

Changed

Increase warning stacklevel on DeprecationWarning for wsgi module #3082.

New Contributors

@santibreo made their first contribution in Kludex/starlette#3082

@iddqd888 made their first contribution in Kludex/starlette#3083

Full Changelog: Kludex/starlette@0.50.0...0.51.0

Version 0.50.0

Removed

Drop Python 3.9 support #3061.

Full Changelog: Kludex/starlette@0.49.3...0.50.0

Version 0.49.3

Fixed

Relax strictness on Middleware type #3059.

Full Changelog: Kludex/starlette@0.49.2...0.49.3

Version 0.49.2

Fixed

Ignore if-modified-since header if if-none-match is present in StaticFiles #3044.

Full Changelog: Kludex/starlette@0.49.1...0.49.2

Changelog

Sourced from starlette's changelog.

0.51.0 (January 10, 2026)

Added

Add allow_private_network in CORSMiddleware #3065.

Changed

Increase warning stacklevel on DeprecationWarning for wsgi module #3082.

0.50.0 (November 1, 2025)

Removed

Drop Python 3.9 support #3061.

0.49.3 (November 1, 2025)

This is the last release that supports Python 3.9, which will be dropped in the next minor release.

Fixed

Relax strictness on Middleware type #3059.

0.49.2 (November 1, 2025)

Fixed

Ignore if-modified-since header if if-none-match is present in StaticFiles #3044.

Commits

df2ee22 Version 0.51.0 (#3097)
6611029 Bump the github-actions group with 4 updates (#3092)
3f75ee9 Update third-party-packages.md (#3083)
081535a chore: Increase warning stacklevel (#3082)
8bb71d9 Bump the github-actions group with 2 updates (#3075)
49d4de9 Add allow_private_network in CORSMiddleware (#3065)
4941b4a Version 0.50.0 (#3063)
a0499f6 Drop support for Python 3.9 (#3061)
de3ffec Version 0.49.3 (#3062)
c443396 Relax strictness on Middleware type (#3059)
Additional commits viewable in compare view

Updates typing-extensions from 4.14.0 to 4.15.0

Release notes

Sourced from typing-extensions's releases.

4.15.0

No user-facing changes since 4.15.0rc1.

New features since 4.14.1:

Add the @typing_extensions.disjoint_base decorator, as specified in PEP 800. Patch by Jelle Zijlstra.

Add typing_extensions.type_repr, a backport of annotationlib.type_repr, introduced in Python 3.14 (CPython PR #124551, originally by Jelle Zijlstra). Patch by Semyon Moroz.

Fix behavior of type params in typing_extensions.evaluate_forward_ref. Backport of CPython PR #137227 by Jelle Zijlstra.

4.15.0rc1

Add the @typing_extensions.disjoint_base decorator, as specified in PEP 800. Patch by Jelle Zijlstra.

Add typing_extensions.type_repr, a backport of annotationlib.type_repr, introduced in Python 3.14 (CPython PR #124551, originally by Jelle Zijlstra). Patch by Semyon Moroz.

Fix behavior of type params in typing_extensions.evaluate_forward_ref. Backport of CPython PR #137227 by Jelle Zijlstra.

4.14.1

Release 4.14.1 (July 4, 2025)

Fix usage of typing_extensions.TypedDict nested inside other types (e.g., typing.Type[typing_extensions.TypedDict]). This is not allowed by the type system but worked on older versions, so we maintain support.

Changelog

Sourced from typing-extensions's changelog.

Release 4.15.0 (August 25, 2025)

No user-facing changes since 4.15.0rc1.

Release 4.15.0rc1 (August 18, 2025)

Add the @typing_extensions.disjoint_base decorator, as specified in PEP 800. Patch by Jelle Zijlstra.

Add typing_extensions.type_repr, a backport of annotationlib.type_repr, introduced in Python 3.14 (CPython PR #124551, originally by Jelle Zijlstra). Patch by Semyon Moroz.

Fix behavior of type params in typing_extensions.evaluate_forward_ref. Backport of CPython PR #137227 by Jelle Zijlstra.

Description has been truncated

Bumps the dependencies group with 16 updates in the / directory: | Package | From | To | | --- | --- | --- | | [sphinx-autobuild](https://github.com/sphinx-doc/sphinx-autobuild) | `2024.10.3` | `2025.8.25` | | [sphinx-rtd-theme](https://github.com/readthedocs/sphinx_rtd_theme) | `3.0.2` | `3.1.0` | | [anyio](https://github.com/agronholm/anyio) | `4.9.0` | `4.12.1` | | [certifi](https://github.com/certifi/python-certifi) | `2025.6.15` | `2026.1.4` | | [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.4.2` | `3.4.4` | | [click](https://github.com/pallets/click) | `8.2.1` | `8.3.1` | | [idna](https://github.com/kjd/idna) | `3.10` | `3.11` | | [markupsafe](https://github.com/pallets/markupsafe) | `3.0.2` | `3.0.3` | | [requests](https://github.com/psf/requests) | `2.32.4` | `2.32.5` | | [roman-numerals-py](https://github.com/AA-Turner/roman-numerals) | `3.1.0` | `4.1.0` | | [starlette](https://github.com/Kludex/starlette) | `0.49.1` | `0.51.0` | | [typing-extensions](https://github.com/python/typing_extensions) | `4.14.0` | `4.15.0` | | [urllib3](https://github.com/urllib3/urllib3) | `2.6.0` | `2.6.3` | | [uvicorn](https://github.com/Kludex/uvicorn) | `0.34.3` | `0.40.0` | | [watchfiles](https://github.com/samuelcolvin/watchfiles) | `1.1.0` | `1.1.1` | | [websockets](https://github.com/python-websockets/websockets) | `15.0.1` | `16.0` | Updates `sphinx-autobuild` from 2024.10.3 to 2025.8.25 - [Release notes](https://github.com/sphinx-doc/sphinx-autobuild/releases) - [Changelog](https://github.com/sphinx-doc/sphinx-autobuild/blob/main/NEWS.rst) - [Commits](sphinx-doc/sphinx-autobuild@2024.10.03...2025.08.25) Updates `sphinx-rtd-theme` from 3.0.2 to 3.1.0 - [Changelog](https://github.com/readthedocs/sphinx_rtd_theme/blob/master/docs/changelog.rst) - [Commits](readthedocs/sphinx_rtd_theme@3.0.2...3.1.0) Updates `anyio` from 4.9.0 to 4.12.1 - [Release notes](https://github.com/agronholm/anyio/releases) - [Commits](agronholm/anyio@4.9.0...4.12.1) Updates `certifi` from 2025.6.15 to 2026.1.4 - [Commits](certifi/python-certifi@2025.06.15...2026.01.04) Updates `charset-normalizer` from 3.4.2 to 3.4.4 - [Release notes](https://github.com/jawah/charset_normalizer/releases) - [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md) - [Commits](jawah/charset_normalizer@3.4.2...3.4.4) Updates `click` from 8.2.1 to 8.3.1 - [Release notes](https://github.com/pallets/click/releases) - [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst) - [Commits](pallets/click@8.2.1...8.3.1) Updates `idna` from 3.10 to 3.11 - [Release notes](https://github.com/kjd/idna/releases) - [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst) - [Commits](kjd/idna@v3.10...v3.11) Updates `markupsafe` from 3.0.2 to 3.0.3 - [Release notes](https://github.com/pallets/markupsafe/releases) - [Changelog](https://github.com/pallets/markupsafe/blob/main/CHANGES.rst) - [Commits](pallets/markupsafe@3.0.2...3.0.3) Updates `requests` from 2.32.4 to 2.32.5 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.32.4...v2.32.5) Updates `roman-numerals-py` from 3.1.0 to 4.1.0 - [Release notes](https://github.com/AA-Turner/roman-numerals/releases) - [Changelog](https://github.com/AA-Turner/roman-numerals/blob/master/CHANGES.rst) - [Commits](AA-Turner/roman-numerals@v3.1.0...v4.1.0) Updates `starlette` from 0.49.1 to 0.51.0 - [Release notes](https://github.com/Kludex/starlette/releases) - [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md) - [Commits](Kludex/starlette@0.49.1...0.51.0) Updates `typing-extensions` from 4.14.0 to 4.15.0 - [Release notes](https://github.com/python/typing_extensions/releases) - [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md) - [Commits](python/typing_extensions@4.14.0...4.15.0) Updates `urllib3` from 2.6.0 to 2.6.3 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.0...2.6.3) Updates `uvicorn` from 0.34.3 to 0.40.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.34.3...0.40.0) Updates `watchfiles` from 1.1.0 to 1.1.1 - [Release notes](https://github.com/samuelcolvin/watchfiles/releases) - [Commits](samuelcolvin/watchfiles@v1.1.0...v1.1.1) Updates `websockets` from 15.0.1 to 16.0 - [Release notes](https://github.com/python-websockets/websockets/releases) - [Commits](python-websockets/websockets@15.0.1...16.0) --- updated-dependencies: - dependency-name: sphinx-autobuild dependency-version: 2025.8.25 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: sphinx-rtd-theme dependency-version: 3.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: anyio dependency-version: 4.12.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: certifi dependency-version: 2026.1.4 dependency-type: indirect update-type: version-update:semver-major dependency-group: dependencies - dependency-name: charset-normalizer dependency-version: 3.4.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: click dependency-version: 8.3.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: idna dependency-version: '3.11' dependency-type: indirect update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: markupsafe dependency-version: 3.0.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: requests dependency-version: 2.32.5 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: roman-numerals-py dependency-version: 4.1.0 dependency-type: indirect update-type: version-update:semver-major dependency-group: dependencies - dependency-name: starlette dependency-version: 0.51.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: typing-extensions dependency-version: 4.15.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: urllib3 dependency-version: 2.6.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: uvicorn dependency-version: 0.40.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: watchfiles dependency-version: 1.1.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: websockets dependency-version: '16.0' dependency-type: indirect update-type: version-update:semver-major dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jan 13, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the dependencies group across 1 directory with 16 updates #283

Bump the dependencies group across 1 directory with 16 updates #283

Uh oh!

dependabot bot commented on behalf of github Jan 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the dependencies group across 1 directory with 16 updates #283

Are you sure you want to change the base?

Bump the dependencies group across 1 directory with 16 updates #283

Uh oh!

Conversation

dependabot bot commented on behalf of github Jan 13, 2026

Release 2025.08.25

Changelog

unreleased

2025.08.25 - 2025-08-25

2024.10.03 - 2024-10-03

2024.10.02 - 2024-10-02

2024.09.19 - 2024-09-19

2024.09.18 - 2024-09-18

2024.09.17 - 2024-09-17

2024.09.03 - 2024-09-03

3.1.0

3.1.0rc2

3.1.0rc1

4.12.1

4.12.0

4.11.0

4.10.0

Version 3.4.4

3.4.4 (2025-10-13)

Changed

Removed

Misc

Version 3.4.3

3.4.3 (2025-08-09)

Changed

Added

Fixed

Misc

3.4.4 (2025-10-13)

Changed

Removed

Misc

3.4.3 (2025-08-09)

Changed

Added

Fixed

Misc

8.3.1

8.3.0

8.2.2

Version 8.3.1

Version 8.3.0

Version 8.2.2

3.0.3

Version 3.0.3

v2.32.5

2.32.5 (2025-08-18)

2.32.5 (2025-08-18)

v4.1.0

v4.0.0

Release 4.1.0 (released 17 Dec 2025)

Release 4.0.0 (released 16 Dec 2025)

Version 0.51.0

Added

Changed

New Contributors

Version 0.50.0

Removed

Version 0.49.3

Fixed

Version 0.49.2

Fixed

0.51.0 (January 10, 2026)

Added

Changed

0.50.0 (November 1, 2025)

Removed

0.49.3 (November 1, 2025)

Fixed

0.49.2 (November 1, 2025)

Fixed

4.15.0

4.15.0rc1

4.14.1