Skip to content

Bump uvicorn from 0.39.0 to 0.51.0 - #3349

Merged
liquidsec merged 1 commit into
devfrom
dependabot/uv/dev/uvicorn-0.51.0
Jul 27, 2026
Merged

Bump uvicorn from 0.39.0 to 0.51.0#3349
liquidsec merged 1 commit into
devfrom
dependabot/uv/dev/uvicorn-0.51.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 26, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps uvicorn from 0.39.0 to 0.51.0.

Release notes

Sourced from uvicorn's releases.

Version 0.51.0

What's Changed

Full Changelog: Kludex/uvicorn@0.50.2...0.51.0

Version 0.50.1

What's Changed

New Contributors

Full Changelog: Kludex/uvicorn@0.50.0...0.50.1

Version 0.50.0

What's Changed

Full Changelog: Kludex/uvicorn@0.49.0...0.50.0

Version 0.49.0

What's Changed

Full Changelog: Kludex/uvicorn@0.48.0...0.49.0

Version 0.48.0

What's Changed

Full Changelog: Kludex/uvicorn@0.47.0...0.48.0

Version 0.47.0

What's Changed

... (truncated)

Changelog

Sourced from uvicorn's changelog.

0.51.0 (July 8, 2026)

Added

  • Restart workers one at a time on SIGHUP, bringing each replacement up before retiring the old worker, so reloads no longer drop requests (#3025)

Removed

  • Remove colorama from the standard extra (#3027)

0.50.2 (July 6, 2026)

Fixed

  • Require websockets>=13.0, which the default websockets-sansio implementation needs (#3021)

0.50.1 (July 6, 2026)

Fixed

  • Split comma-separated Sec-WebSocket-Protocol values in the websockets-sansio implementation (#3019)

0.50.0 (July 4, 2026)

If you use WebSockets, note that --ws auto now picks the websockets-sansio implementation. You shouldn't need it, but you can pin --ws websockets to get the deprecated legacy one back.

Changed

  • Exit with the dedicated code 3 on any startup failure: app loading, socket bind and lifespan startup errors previously exited with a mix of 0, 1 and 3 (#3001)
  • Stop the multiprocess supervisor when a worker exits with code 3 instead of restarting it forever (#3001)
  • Default --ws auto to websockets-sansio when websockets is installed (#2985)
  • Skip the eager app import in the parent process with --reload or --workers, fixing a memory regression introduced in 0.47.0 (#3012)
  • Build a fresh asgi scope dict per request (#2977)
  • Cache the asgi scope sub-dict per connection (#2976)
  • Avoid copying single-frame WebSocket payloads in websockets-sansio (#2983)
  • Memoize trusted host checks in ProxyHeadersMiddleware (#2970)
  • Replace click.style with an internal ANSI style helper (#2981)

Deprecated

  • Deprecate the legacy websockets implementation; use websockets-sansio or wsproto instead (#2985)

0.49.0 (June 3, 2026)

Changed

  • Bump httptools minimum version to 0.8.0 (#2962)
  • Consume duplicate forwarding headers in ProxyHeadersMiddleware (reverses the 0.48.0 behavior of ignoring them) (#2971)

0.48.0 (May 24, 2026)

... (truncated)

Commits
  • e4d0b05 Version 0.51.0 (#3028)
  • 944e43d Remove colorama from the standard extra (#3027)
  • 2e78770 Restart workers with overlap on SIGHUP for near-zero-downtime reloads (#3025)
  • a1b570c Version 0.50.2 (#3022)
  • 83c7da7 Require websockets>=13.0 for the default sansio implementation (#3021)
  • b4d0116 Version 0.50.1 (#3020)
  • 2a9151d Split comma-separated Sec-WebSocket-Protocol values in the websockets-sansi...
  • 1bf3ab4 Cover the excluded-directory branch in FileFilter with a direct test (#3014)
  • 837b5f9 Deflake multiprocess, reload, and signal supervisor tests (#2975)
  • 21d2c16 Version 0.50.0 (#3013)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 26, 2026
@github-actions

github-actions Bot commented Jul 26, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

📊 Performance Benchmark Report

Comparing dev (baseline) vs dependabot/uv/dev/uvicorn-0.51.0 (current)

📈 Detailed Results (All Benchmarks)

📋 Complete results for all benchmarks - includes both significant and insignificant changes

🧪 Test Name 📏 Base 📏 Current 📈 Change 🎯 Status
Bloom Filter Dns Mutation Tracking Performance 4.19ms 4.29ms +2.4% ⚪ ✅
Bloom Filter Large Scale Dns Brute Force 17.33ms 18.13ms +4.6% ⚪ ✅
Large Closest Match Lookup 363.50ms 363.02ms -0.1% ⚪ ✅
Realistic Closest Match Workload 192.17ms 195.09ms +1.5% ⚪ ✅
Event Memory Medium Scan 1402 B/event 1402 B/event -0.0% ⚪ ✅
Event Memory Large Scan 1527 B/event 1527 B/event +0.0% ⚪ ✅
Event Validation Full Scan Startup Small Batch 410.70ms 414.37ms +0.9% ⚪ ✅
Event Validation Full Scan Startup Large Batch 546.78ms 547.08ms +0.1% ⚪ ✅
Make Event Autodetection Small 25.87ms 25.80ms -0.3% ⚪ ✅
Make Event Autodetection Large 266.72ms 260.41ms -2.4% ⚪ ✅
Make Event Explicit Types 11.63ms 11.54ms -0.8% ⚪ ✅
Excavate Single Thread Small 4.550s 4.169s -8.4% ⚪ ✅
Excavate Single Thread Large 10.348s 9.932s -4.0% ⚪ ✅
Excavate Parallel Tasks Small 4.700s 4.306s -8.4% ⚪ ✅
Excavate Parallel Tasks Large 6.799s 6.481s -4.7% ⚪ ✅
Intercept Throughput Small 895.44ms 877.93ms -2.0% ⚪ ✅
Intercept Throughput Medium 884.94ms 931.56ms +5.3% ⚪ ✅
Dns Throughput Quiet 2.854s 2.755s -3.5% ⚪ ✅
Dns Throughput Loaded 1.824s 1.953s +7.1% ⚪ ✅
Dns Throughput Inherited 2.532s 2.361s -6.7% ⚪ ✅
Is Ip Performance 2.19ms 2.30ms +5.0% ⚪ ✅
Make Ip Type Performance 233.50µs 244.94µs +4.9% ⚪ ✅
Mixed Ip Operations 2.29ms 2.40ms +4.7% ⚪ ✅
Memory Use Web Crawl 1.0 MB 1.0 MB +0.0% ⚪ ✅
Memory Use Subdomain Enum 28.3 MB 28.3 MB +0.0% ⚪ ✅
Memory Use Deep Chain 5.0 MB 5.0 MB +0.0% ⚪ ✅
Memory Use Parallel Chains 16.4 MB 12.1 MB -26.4% 🟢🟢🟢 🚀
Scan Throughput 100 2.852s 2.927s +2.6% ⚪ ✅
Scan Throughput 1000 20.736s 20.625s -0.5% ⚪ ✅
Typical Queue Shuffle 5.41µs 5.30µs -2.1% ⚪ ✅
Priority Queue Shuffle 26.34µs 25.98µs -1.4% ⚪ ✅

🎯 Performance Summary

+ 1 improvement 🚀
  30 unchanged ✅

🔍 Significant Changes (>10%)

  • Memory Use Parallel Chains: 26.4% 🚀 less memory

🐍 Python Version 3.11.15

@liquidsec

liquidsec commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

@dependabot recreate

@dependabot
Bump uvicorn from 0.39.0 to 0.51.0
ad75da5 
Bumps [uvicorn](https://github.com/Kludex/uvicorn) from 0.39.0 to 0.51.0.
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.39.0...0.51.0)

---
updated-dependencies:
- dependency-name: uvicorn
  dependency-version: 0.51.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/dev/uvicorn-0.51.0 branch from f77bfc0 to ad75da5 Compare July 27, 2026 02:17
@liquidsec
liquidsec merged commit d78584e into dev Jul 27, 2026
19 checks passed
@dependabot
dependabot Bot deleted the dependabot/uv/dev/uvicorn-0.51.0 branch July 27, 2026 12:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@liquidsec liquidsec liquidsec approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@liquidsec