Bump the backend-deps group across 1 directory with 6 updates by dependabot[bot] · Pull Request #13 · bagusardin25/DevRadar

dependabot · 2026-08-01T23:59:18Z

Updates the requirements on fastapi[standard], uvicorn[standard], sqlalchemy[asyncio], celery[redis], boto3 and openai to permit the latest version.
Updates fastapi[standard] to 0.141.1

Release notes

Sourced from fastapi[standard]'s releases.

0.141.1

Fixes

🐛 Fix support for background tasks and headers from dependencies in app.frontend(). PR #16105 by @tiangolo.

Docs

📝 Document FASTAPI_ENV in FastAPI CLI guide. PR #16104 by @tiangolo.

Commits

95f8322 🔖 Release version 0.141.1 (#16106)
f137944 📝 Update release notes
d623544 🐛 Fix support for background tasks and headers from dependencies in `app.fron...
1d211b9 📝 Update release notes
8a1f876 📝 Document FASTAPI_ENV in FastAPI CLI guide (#16104)
c7e7b65 🔖 Release version 0.141.0 (#16103)
6bceb84 📝 Update release notes
5429fed ✨ Add app.frontend(check_dir="auto"), to make local development more conven...
628663f 🔖 Release version 0.140.13 (#16096)
0b54fd0 📝 Update release notes
Additional commits viewable in compare view

Updates uvicorn[standard] to 0.52.0

Release notes

Sourced from uvicorn[standard]'s releases.

Version 0.52.0

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

Full Changelog: Kludex/uvicorn@0.51.0...0.52.0

Changelog

Sourced from uvicorn[standard]'s changelog.

0.52.0 (July 29, 2026)

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

0.51.0 (July 8, 2026)

Added

Restart workers one at a time on SIGHUP, bringing each replacement up before retiring the old worker, so reloads no longer drop requests (#3025)

Removed

Remove colorama from the standard extra (#3027)

0.50.2 (July 6, 2026)

Fixed

Require websockets>=13.0, which the default websockets-sansio implementation needs (#3021)

0.50.1 (July 6, 2026)

Fixed

Split comma-separated Sec-WebSocket-Protocol values in the websockets-sansio implementation (#3019)

0.50.0 (July 4, 2026)

If you use WebSockets, note that --ws auto now picks the websockets-sansio implementation. You shouldn't need it, but you can pin --ws websockets to get the deprecated legacy one back.

Changed

Exit with the dedicated code 3 on any startup failure: app loading, socket bind and lifespan startup errors previously exited with a mix of 0, 1 and 3 (#3001)

Stop the multiprocess supervisor when a worker exits with code 3 instead of restarting it forever (#3001)

Default --ws auto to websockets-sansio when websockets is installed (#2985)

Skip the eager app import in the parent process with --reload or --workers, fixing a memory regression introduced in 0.47.0 (#3012)

Build a fresh asgi scope dict per request (#2977)

Cache the asgi scope sub-dict per connection (#2976)

Avoid copying single-frame WebSocket payloads in websockets-sansio (#2983)

Memoize trusted host checks in ProxyHeadersMiddleware (#2970)

... (truncated)

Commits

8f1b884 Version 0.52.0 (#3044)
f6833db Add experimental zttp HTTP/1.1 protocol (#2979)
d26c85c Prepare compatibility with websockets 17.0. (#3036)
7e11cc6 Clarify how limit_concurrency and backlog differ (#3029)
e4d0b05 Version 0.51.0 (#3028)
944e43d Remove colorama from the standard extra (#3027)
2e78770 Restart workers with overlap on SIGHUP for near-zero-downtime reloads (#3025)
a1b570c Version 0.50.2 (#3022)
83c7da7 Require websockets>=13.0 for the default sansio implementation (#3021)
b4d0116 Version 0.50.1 (#3020)
Additional commits viewable in compare view

Updates sqlalchemy[asyncio] to 2.0.51

Release notes

Sourced from sqlalchemy[asyncio]'s releases.

2.0.51

Released: June 15, 2026

orm

[orm] [bug] Fixed issue where _orm.subqueryload() combined with PropComparator.of_type() and PropComparator.and_() would silently drop the additional filter criteria, causing all related objects to be loaded instead of only those matching the filter. The LoaderCriteriaOption was being constructed against the base entity rather than the effective entity indicated by PropComparator.of_type(). Pull request courtesy Arya Rizky.

References: #13207

[orm] [bug] Fixed bug where a failure during tpc_prepare() within _orm.Session.commit() for a two-phase session would raise IllegalStateChangeError instead of the original database exception. The internal _prepare_impl() method's error handler was unable to invoke _orm.SessionTransaction.rollback() due to a state-change guard, preventing proper cleanup and masking the underlying error.

References: #13356

engine

[engine] [bug] Fixed issue where Result.freeze() would lose track of ambiguous column names present in the original CursorResult, causing key-based access on the thawed result to silently return a value instead of raising InvalidRequestError. The SimpleResultMetaData now accepts and propagates ambiguous key information so that frozen, thawed, and pickled results raise consistently for duplicate column names. Pull request courtesy Saurabh Kohli.

References: #9427

sql

[sql] [bug] Fixed issue where _sql.StatementLambdaElement would proxy attribute access through the cached "expected" expression rather than the resolved expression, causing stale closure-bound parameter values to be used when a lambda statement was extended with non-lambda criteria such as an additional .where() clause. Courtesy cjc0013.

References: #10827

... (truncated)

Commits

See full diff in compare view

Updates celery[redis] to 5.6.3

Release notes

Sourced from celery[redis]'s releases.

v5.6.3

What's Changed

Fix Django worker recursion bug + defensive checks for pool_cls.module by @maycuatroi1 in celery/celery#10048

Docs: Update user_preload_options example to use click. by @jorsyk in celery/celery#10056

Fix invalid configuration key "bootstrap_servers" in Kafka demo by @jorsyk in celery/celery#10060

Fix broken images on PyPI page by @Timour-Ilyas in celery/celery#10066

Remove broken reference. by @sueannioanis in celery/celery#10071

Removed --dist=loadscope from smoke tests by @Nusnus in celery/celery#10073

Docs: Clarify task_retry signal args may be None by @GangEunzzang in celery/celery#10076

Update example for Django by @sbc-khacnha in celery/celery#10081

Make tests compatible with pymongo >= 4.16 by @cjwatson in celery/celery#10074

fix: source install of cassandra-driver by @Izzette in celery/celery#10105

fix: register task cross-reference role in Sphinx extension by @veeceey in celery/celery#10100

fix: avoid cycle detection in native delayed delivery by @Izzette in celery/celery#10095

fix(asynpool): avoid AttributeError when proc lacks _sentinel_poll by @mriddle in celery/celery#10086

fix dusk_astronomical horizon sign (+18 -> -18) by @Mr-Neutr0n in celery/celery#10121

Fix/10106 onupdate col use lambda func by @ChickenBenny in celery/celery#10108

Fix warm shutdown RuntimeError with eventlet>=0.37.0 (#10083) by @ChickenBenny in celery/celery#10123

Fix 10109 db backend connection health by @ChickenBenny in celery/celery#10124

Database Backend filter unsupport sql engine arguments with nullpool #7355 by @ChickenBenny in celery/celery#10134

fix(beat): correct argument order in Service.reduce by @bysiber in celery/celery#10137

ci: declare explicit read-only token permissions in workflow jobs by @Rohan5commit in celery/celery#10139

chore: 'boto3to' to 'boto3 to' by @cuiweixie in celery/celery#10133

Database Backend: Add missing index on date_done (Fixes #10097) by @ChickenBenny in celery/celery#10098

docs: fix typo in CONTRIBUTING.rst by @Rohan5commit in celery/celery#10141

Refer to Flower / Prometheus for monitoring by @WilliamDEdwards in celery/celery#10140

docs: remove duplicated words in broker and routing docs by @Rohan5commit in celery/celery#10146

docs: fix stale version reference and grammar in README by @kelsonbrito50 in celery/celery#10145

docs: fix wording in Celery 5.3 worker pool notes by @Rohan5commit in celery/celery#10149

docs: fix duplicated wording in 3.1 changelog entry by @Rohan5commit in celery/celery#10152

docs: fix changelog typo in context manager wording by @Rohan5commit in celery/celery#10144

Fix/10096 worker fails to reconnect after redis failover by @ChickenBenny in celery/celery#10151

Improve on_after_finalize signal documentation by @Br1an67 in celery/celery#10155

Add non-commutative example to clarify partial arg ordering in canvas docs by @Br1an67 in celery/celery#10157

Remove redundant test_isa_mapping test (fixes #10077) by @daniel7an in celery/celery#10103

Upgrade pytest-celery to >=1.3.0 and adopt PYTEST_CELERY_PKG build arg by @Nusnus in celery/celery#10162

Remove deprecated args from redis get_connection call by @JaeHyuckSa in celery/celery#10036

Fix #6912 rpc backend reconnection error by @ChickenBenny in celery/celery#10179

Fix NameError with TYPE_CHECKING annotations on Python 3.14+ (PEP 649) by @drichardson in celery/celery#10165

docs: Add elaboration on prefetch multiplier settings (worker_prefetch_multiplier) and worker_eta_task_limit by @tsangwailam in celery/celery#10181

Fix O(K²) message bloat in a chain of chords by @Borzik in celery/celery#10171

Fix mock connection interfaces to prevent TypeError during exception handling by @ChickenBenny in celery/celery#10178

fix(trace): dispatch chain/callbacks on dedup fast-path for redelivered tasks by @aurangzaib048 in celery/celery#10159

Extract reconnect_on_error to BaseResultConsumer by @ChickenBenny in celery/celery#10189

pep 649 by @ericbuehl in celery/celery#10187

Fix#9722 friendly status errors for CLI by @ChickenBenny in celery/celery#10190

docs: clarify after_return behavior for retried tasks by @KianAnbarestani in celery/celery#10192

Add compression header to message protocol docs by @Br1an67 in celery/celery#10156

docs: fix duplicated word in bootsteps comment by @Rohan5commit in celery/celery#10153

Remove outdated autoreloader section from extending docs by @Br1an67 in celery/celery#10154

... (truncated)

Changelog

Sourced from celery[redis]'s changelog.

5.6.3

:release-date: 2026-03-26 :release-by: Tomer Nosrati

What's Changed


- Fix Django worker recursion bug + defensive checks for pool_cls.__module__ ([#10048](https://github.com/celery/celery/issues/10048))
- Docs: Update user_preload_options example to use click. ([#10056](https://github.com/celery/celery/issues/10056))
- Fix invalid configuration key "bootstrap_servers" in Kafka demo ([#10060](https://github.com/celery/celery/issues/10060))
- Fix broken images on PyPI page ([#10066](https://github.com/celery/celery/issues/10066))
- Remove broken reference. ([#10071](https://github.com/celery/celery/issues/10071))
- Removed --dist=loadscope from smoke tests ([#10073](https://github.com/celery/celery/issues/10073))
- Docs: Clarify task_retry signal args may be None ([#10076](https://github.com/celery/celery/issues/10076))
- Update example for Django ([#10081](https://github.com/celery/celery/issues/10081))
- Make tests compatible with pymongo >= 4.16 ([#10074](https://github.com/celery/celery/issues/10074))
- fix: source install of cassandra-driver ([#10105](https://github.com/celery/celery/issues/10105))
- fix: register task cross-reference role in Sphinx extension ([#10100](https://github.com/celery/celery/issues/10100))
- fix: avoid cycle detection in native delayed delivery ([#10095](https://github.com/celery/celery/issues/10095))
- fix(asynpool): avoid AttributeError when proc lacks _sentinel_poll ([#10086](https://github.com/celery/celery/issues/10086))
- fix dusk_astronomical horizon sign (+18 -> -18) ([#10121](https://github.com/celery/celery/issues/10121))
- Fix/10106 onupdate col use lambda func ([#10108](https://github.com/celery/celery/issues/10108))
- Fix warm shutdown RuntimeError with eventlet>=0.37.0 ([#10083](https://github.com/celery/celery/issues/10083)) ([#10123](https://github.com/celery/celery/issues/10123))
- Fix 10109 db backend connection health ([#10124](https://github.com/celery/celery/issues/10124))
- Database Backend filter unsupport sql engine arguments with nullpool [#7355](https://github.com/celery/celery/issues/7355) ([#10134](https://github.com/celery/celery/issues/10134))
- fix(beat): correct argument order in Service.__reduce__ ([#10137](https://github.com/celery/celery/issues/10137))
- ci: declare explicit read-only token permissions in workflow jobs ([#10139](https://github.com/celery/celery/issues/10139))
- chore: 'boto3to' to 'boto3 to' ([#10133](https://github.com/celery/celery/issues/10133))
- Database Backend: Add missing index on date_done (Fixes [#10097](https://github.com/celery/celery/issues/10097)) ([#10098](https://github.com/celery/celery/issues/10098))
- docs: fix typo in CONTRIBUTING.rst ([#10141](https://github.com/celery/celery/issues/10141))
- Refer to Flower / Prometheus for monitoring ([#10140](https://github.com/celery/celery/issues/10140))
- docs: remove duplicated words in broker and routing docs ([#10146](https://github.com/celery/celery/issues/10146))
- docs: fix stale version reference and grammar in README ([#10145](https://github.com/celery/celery/issues/10145))
- docs: fix wording in Celery 5.3 worker pool notes ([#10149](https://github.com/celery/celery/issues/10149))
- docs: fix duplicated wording in 3.1 changelog entry ([#10152](https://github.com/celery/celery/issues/10152))
- docs: fix changelog typo in context manager wording ([#10144](https://github.com/celery/celery/issues/10144))
- Fix/10096 worker fails to reconnect after redis failover ([#10151](https://github.com/celery/celery/issues/10151))
- Improve on_after_finalize signal documentation ([#10155](https://github.com/celery/celery/issues/10155))
- Add non-commutative example to clarify partial arg ordering in canvas docs ([#10157](https://github.com/celery/celery/issues/10157))
- Remove redundant test_isa_mapping test (fixes [#10077](https://github.com/celery/celery/issues/10077)) ([#10103](https://github.com/celery/celery/issues/10103))
- Upgrade pytest-celery to >=1.3.0 and adopt PYTEST_CELERY_PKG build arg ([#10162](https://github.com/celery/celery/issues/10162))
- Remove deprecated args from redis get_connection call ([#10036](https://github.com/celery/celery/issues/10036))
- Fix [#6912](https://github.com/celery/celery/issues/6912) rpc backend reconnection error ([#10179](https://github.com/celery/celery/issues/10179))
- Fix NameError with TYPE_CHECKING annotations on Python 3.14+ (PEP 649) ([#10165](https://github.com/celery/celery/issues/10165))
- docs: Add elaboration on prefetch multiplier settings (worker_prefetch_multiplier) and worker_eta_task_limit ([#10181](https://github.com/celery/celery/issues/10181))
- Fix O(K²) message bloat in a chain of chords ([#10171](https://github.com/celery/celery/issues/10171))
- Fix mock connection interfaces to prevent `TypeError` during exception handling ([#10178](https://github.com/celery/celery/issues/10178))
- fix(trace): dispatch chain/callbacks on dedup fast-path for redelivered tasks ([#10159](https://github.com/celery/celery/issues/10159))
</tr></table>

... (truncated)

Commits

3f4d8d7 Prepare for release: v5.6.3 (#10221)
a989e8c fix: clear the timer while catch the exception (#10218)
d06de5f Chore(deps): Bump nick-fields/retry from 3 to 4 (#10213)
c3c19c3 Fix: prioritize request ignore_result over task definition (#10184)
d23be53 Remove outdated autoreloader section from extending docs (#10154)
ada2da7 docs: fix duplicated word in bootsteps comment\n\nSigned-off-by: Rohan Santho...
f45f62b Add compression header to message protocol docs (#10156)
9a27092 docs: clarify after_return behavior for retried tasks (#10192)
6ee6230 Fix#9722 friendly status errors for CLI (#10190)
a9a2d4c [pre-commit.ci] pre-commit autoupdate (#10186)
Additional commits viewable in compare view

Updates boto3 from 1.43.55 to 1.43.59

Commits

5595e62 Merge branch 'release-1.43.59'
998b96a Bumping version to 1.43.59
199f2c0 Add changelog entries from botocore
a712c79 Bump https://github.com/astral-sh/ruff-pre-commit (#4822)
132103c Bump actions/setup-python in the github-actions group (#4821)
acd59af Merge branch 'release-1.43.58'
8ffad17 Merge branch 'release-1.43.58' into develop
73cef5c Bumping version to 1.43.58
256b73c Add changelog entries from botocore
7b06b40 Merge branch 'release-1.43.57'
Additional commits viewable in compare view

Updates openai from 2.48.0 to 2.50.0

Release notes

Sourced from openai's releases.

v2.50.0

2.50.0 (2026-07-28)

Full Changelog: v2.49.0...v2.50.0

Features

api: transcription model updates (fd57393)

Bug Fixes

audio: restore transcription keyword overload (713a262)

v2.49.0

2.49.0 (2026-07-27)

Full Changelog: v2.48.0...v2.49.0

Features

require Python 3.10 and automate version reviews (#3537) (d4c151d)

Changelog

Sourced from openai's changelog.

2.50.0 (2026-07-28)

Full Changelog: v2.49.0...v2.50.0

Features

api: transcription model updates (fd57393)

Bug Fixes

audio: restore transcription keyword overload (713a262)

2.49.0 (2026-07-27)

Full Changelog: v2.48.0...v2.49.0

Features

require Python 3.10 and automate version reviews (#3537) (d4c151d)

Commits

4f40426 release: 2.50.0
92594f1 fix(audio): restore transcription keyword overload
59ed1dc feat(api): transcription model updates
6ba31bc release: 2.49.0 (#3539)
90483ad test: support a hermetic local API reference (#3542)
d4c151d feat: require Python 3.10 and automate version reviews (#3537)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Updates the requirements on [fastapi[standard]](https://github.com/fastapi/fastapi), [uvicorn[standard]](https://github.com/Kludex/uvicorn), [sqlalchemy[asyncio]](https://github.com/sqlalchemy/sqlalchemy), [celery[redis]](https://github.com/celery/celery), [boto3](https://github.com/boto/boto3) and [openai](https://github.com/openai/openai-python) to permit the latest version. Updates `fastapi[standard]` to 0.141.1 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.115.0...0.141.1) Updates `uvicorn[standard]` to 0.52.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.30.0...0.52.0) Updates `sqlalchemy[asyncio]` to 2.0.51 - [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases) - [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst) - [Commits](https://github.com/sqlalchemy/sqlalchemy/commits) Updates `celery[redis]` to 5.6.3 - [Release notes](https://github.com/celery/celery/releases) - [Changelog](https://github.com/celery/celery/blob/v5.6.3/Changelog.rst) - [Commits](celery/celery@v5.4.0...v5.6.3) Updates `boto3` from 1.43.55 to 1.43.59 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.43.55...1.43.59) Updates `openai` from 2.48.0 to 2.50.0 - [Release notes](https://github.com/openai/openai-python/releases) - [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md) - [Commits](openai/openai-python@v2.48.0...v2.50.0) --- updated-dependencies: - dependency-name: fastapi[standard] dependency-version: 0.141.1 dependency-type: direct:production dependency-group: backend-deps - dependency-name: uvicorn[standard] dependency-version: 0.52.0 dependency-type: direct:production dependency-group: backend-deps - dependency-name: sqlalchemy[asyncio] dependency-version: 2.0.51 dependency-type: direct:production dependency-group: backend-deps - dependency-name: celery[redis] dependency-version: 5.6.3 dependency-type: direct:production dependency-group: backend-deps - dependency-name: boto3 dependency-version: 1.43.59 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-deps - dependency-name: openai dependency-version: 2.50.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 1, 2026

Navigation Menu

Bump the backend-deps group across 1 directory with 6 updates - #13

Bump the backend-deps group across 1 directory with 6 updates#13
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/backend/backend-deps-d57d07f1b8

dependabot Bot commented on behalf of github Aug 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Aug 1, 2026

0.141.1

Fixes

Docs

Version 0.52.0

Added

Fixed

0.52.0 (July 29, 2026)

Added

Fixed

0.51.0 (July 8, 2026)

Added

Removed

0.50.2 (July 6, 2026)

Fixed

0.50.1 (July 6, 2026)

Fixed

0.50.0 (July 4, 2026)

Changed

2.0.51

orm

engine

sql

v5.6.3

What's Changed

5.6.3

v2.50.0

2.50.0 (2026-07-28)

Features

Bug Fixes

v2.49.0

2.49.0 (2026-07-27)

Features

2.50.0 (2026-07-28)

Features

Bug Fixes

2.49.0 (2026-07-27)

Features

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants