Skip to content

fix(deps): update python dependencies - #43

Open
renovate[bot] wants to merge 2 commits into
mainfrom
renovate/python-dependencies
Open

fix(deps): update python dependencies#43
renovate[bot] wants to merge 2 commits into
mainfrom
renovate/python-dependencies

Conversation

@renovate

@renovate renovate Bot commented Sep 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
envoyproxy-envoy-grpc-python ==1.83.1.3.20260827231756+a1266651d658 → ==1.84.0.1.20260827231756+a1266651d658 age confidence
grpcio 1.83.1 → 1.84.0 age confidence
grpcio-health-checking 1.83.1 → 1.84.0 age confidence
grpcio-tools 1.83.1 → 1.84.0 age confidence
pyjwt 2.13.0 → 2.14.0 age confidence
ruff (source, changelog) 0.16.6 → 0.16.8 age confidence
uvicorn (changelog) 0.52.4 → 0.53.0 age confidence

Release Notes

grpc/grpc (grpcio)

v1.84.0

Compare Source

This is release 1.84.0 (gimbal) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

  • [promise_based_filter] enable v2_non_owning_waker_implementation experiment. (#​43253)
  • [xDS] allow server listener address to match wildcard port. (#​43247)
  • [WRR] remove env var guard for custom backend metrics. (#​43198)
  • [subchannel] enable connection scaling service config fields. (#​43116)
  • [subchannel] add metrics as per A94. (#​43140)
  • Fix incorrect hostname suffix matching in no_proxy handling (prevents proxy bypass). (#​41915)

C#

  • [C# Grpc.Tools] Add native macOS ARM64 support via universal binaries. (#​41222)

Python

  • [Python] Fix -Werror=unused-result error triggered by Cythonized code. (#​43313)
  • [Python] Release Python 3.15 wheels publicly. (#​43259)
  • [Python][AsyncIO] Fixed reference cycles. (#​43121)
  • [Python] fix: remove ghost key in grpc.aio.Metadata.delitem when last value is deleted. (#​42974)
  • [Python] Fix the StatusCode Enums to be int. (#​43167)
  • [Python] Fixed the parenthesis placement. (#​43111)
  • [Python] Removed UsageError exception from registered method. (#​43086)
  • [Python] Added registered methods support in AsyncIO stack . (#​41796)
  • [Python] AIO Part 4 - Typehints fixes and add Pyright for aio/_channel.py. (#​42736)
  • [Python] grpc-status: Relax protobuf dependency lower bound to allow 6.x. (#​43000)
  • [Python] Observability plugin fixes. (#​42785)
  • [Python] Pyright strict mode. (#​42845)

Ruby

  • [Ruby] Fix: Addressed Array of strings passed as metadata. (#​42827)
jpadilla/pyjwt (pyjwt)

v2.14.0

Compare Source

astral-sh/ruff (ruff)

v0.16.8

Compare Source

Released on 2026-09-16.

Bug fixes
  • Visit functional TypedDict keyword arguments correctly (#​28584)
  • [flake8-simplify] Detect nested async with under sync parent (SIM117) (#​27821)
  • [flake8-simplify] Preserve operand order in SIM109 fix (#​27824)
  • [pyupgrade] Preserve required parentheses in multiline UP040 fixes (#​28164)
  • [pyupgrade] Skip TypeVarTuple and ParamSpec conversions with bounds or constraints (UP040, UP046, UP047) (#​28505)
Rule changes
  • Add support for __lazy_modules__ (#​28459)
  • Recognize PEP-728 TypedDict class keywords (#​28533)
  • Recognize quoted types in typing.TypeForm (#​28507)
  • Support conditional assignment to __lazy_modules__ (#​28491)
  • [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on Python 3.15 and later (TC001, TC002, TC003) (#​28541)
  • [pyupgrade] Make the fix for UP040 always unsafe (#​28526)
  • [pyupgrade] Stop recommending deprecated ByteString aliases (UP035) (#​28498)
  • [ruff, flake8-use-pathlib] Recognize the parent_mode argument (RUF064, PTH103) (#​28528)
  • [ruff] Detect \Z in pytest.raises() match patterns (RUF043) (#​28598)
CLI
  • Use rule name and code in formatter incompatibility warnings (#​28571)
Configuration
  • [flake8-tidy-imports] Add extend-banned-api (#​28644)
Contributors

v0.16.7

Compare Source

Released on 2026-09-10.

Preview features
  • [ruff] Add rule for default values on method receivers (RUF077) (#​26700)
  • [ruff] Recognize re.prefixmatch (RUF039, RUF055) (#​28311)
Bug fixes
  • Alternate nested quotes inside format spec interpolations (#​28259)
  • [flake8-implicit-str-concat] Mark fix unsafe when it creates a docstring (ISC003) (#​27981)
  • [flake8-tidy-imports] Skip fixes for multi-member imports (TID254) (#​26584)
  • [pylint] Gate ImportCycleError on Python 3.15 (PLW0133) (#​28310)
Rule changes
  • Correct D211 and D203 rule conflict diagnostic (#​28444)
  • Recognize slice and frozendict generics (#​28477)
  • Stop defining __cached__ for Python 3.15 (#​28476)
  • [pyupgrade] Stop recommending removed typing.no_type_check_decorator (UP035) (#​28475)
Performance
  • Reuse parser name lookups when interning (#​28399)
  • Speed up inherited configuration resolution (#​28299)
Documentation
  • Fix line-length path in --config example (#​28392)
  • Remove the "Who’s Using Ruff?" list (#​28455)
Other changes
  • Embed archive checksums in the shell installer (#​28281)
Contributors
Kludex/uvicorn (uvicorn)

v0.53.0: Version 0.53.0

Compare Source

🌐 Opt-in HTTP/2 support

uvicorn 0.53.0 adds experimental HTTP/2 through zttp, alongside a new zuvloop integration and connection-handling improvements.

uv add uvicorn==0.53.0
  • Serve HTTP/1.1 and HTTP/2 with zttp (#​2982, #​3101). Install zttp, then enable HTTP/2 with --http zttp --http2. Uvicorn negotiates HTTP/2 over TLS with ALPN and supports cleartext prior knowledge.
  • HTTP/2 remains experimental. Upgrade-based h2c and WebSockets over HTTP/2 are not supported.

⚙️ More event loop choice

  • Run Uvicorn with zuvloop (#​3104). Install zuvloop separately and select it explicitly with --loop zuvloop on CPython 3.14 or newer.

🛡️ More reliable connections and proxies

  • Honor Connection: close token lists (#​3103). Uvicorn now parses comma-separated tokens case-insensitively across HTTP implementations.
  • Trust IPv6 loopback proxies by default (#​3119). The default FORWARDED_ALLOW_IPS value now includes ::1.
  • Keep upgraded WebSockets alive (#​3107). Uvicorn cancels the HTTP keep-alive timer when the connection becomes a WebSocket.

Full changelog: 0.52.4...0.53.0

Configuration

📅 Schedule: (in timezone America/New_York)

  • Branch creation
    • "before 6am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/python-dependencies branch 2 times, most recently from bb42233 to 5aabf8e Compare September 14, 2026 22:54
@renovate renovate Bot changed the title chore(deps): update python dependencies fix(deps): update python dependencies Sep 14, 2026
@renovate
renovate Bot force-pushed the renovate/python-dependencies branch from 5aabf8e to ea05857 Compare September 16, 2026 20:46
@nijave
fix(deps): declare protobuf runtime dep to match buf.build gencode
10b0558 
The 1.84.0.1 buf.build generated stubs require protobuf runtime >= 7.36.1
but the lock kept the transitive 7.36.0, causing VersionError on import
in CI. Declare protobuf directly so Renovate bumps it alongside the
buf.build stubs in the same PR.
@renovate

renovate Bot commented Sep 17, 2026

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@nijave