Skip to content

Bump the minor group across 1 directory with 5 updates#145

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/minor-06db368563
Open

Bump the minor group across 1 directory with 5 updates#145
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/minor-06db368563

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor group with 5 updates in the / directory:

Package From To
django 6.0.6 6.0.7
google-cloud-logging 3.16.0 3.16.1
icalendar 7.1.3 7.2.0
newrelic 13.1.1 13.2.0
uvicorn 0.49.0 0.51.0

Updates django from 6.0.6 to 6.0.7

Commits
  • e2a4246 [6.0.x] Bumped version for 6.0.7 release.
  • a5de13f [6.0.x] Fixed CVE-2026-53878 -- Prevented newlines from being accepted in Dom...
  • 38dfbd2 [6.0.x] Fixed CVE-2026-53877 -- Prevented heap buffer over-read when creating...
  • 64f9a2b [6.0.x] Fixed CVE-2026-48588 -- Prevented caching of responses that set cooki...
  • c26957a [6.0.x] Fixed flatpages synopsis in docs.
  • 0b60f44 [6.0.x] Added FILE_UPLOAD_DIRECTORY_PERMISSIONS to docs settings index.
  • d928e30 [6.0.x] Fixed #37172 -- Linked to upload handlers section in FILE_UPLOAD_* se...
  • e18935c [6.0.x] Fixed #37158 -- Reordered the contribution checklist sections.
  • 490eb9c [6.0.x] Fixed document referenced in multiple toctrees warning in docs/intern...
  • 748a9b5 [6.0.x] Fixed duplicate target name in docs/internals/howto-release-django.txt.
  • Additional commits viewable in compare view

Updates google-cloud-logging from 3.16.0 to 3.16.1

Release notes

Sourced from google-cloud-logging's releases.

google-cloud-logging: v3.16.1

3.16.1 (2026-07-07)

Documentation

Commits
  • fc6b861 chore: release main (#17600)
  • 9638879 feat: update googleapis and regenerate (#17635)
  • 6a49390 chore: update goldens (#17632)
  • 32862f0 docs(logging): fix StructuredLogHandler docstring parameter name (#17625)
  • d68c11d chore(deps): Bump Pillow version constraint in google-cloud-documentai-toolbo...
  • adf7d27 test(spanner): await database calls in async snippets (#17627)
  • 247e2ad refactor(auth): replace pyOpenSSL with standard ssl and cryptography (#16976)
  • fd0e4b6 chore(spanner): remove unused asyncio import in samples (#17620)
  • f538ad8 fix(auth): handle PermissionError on workload certificates to avoid startup h...
  • 0f4bfed fix: bump gdal from 3.13.0 to 3.13.1 in /packages/bigframes (#17609)
  • Additional commits viewable in compare view

Updates icalendar from 7.1.3 to 7.2.0

Release notes

Sourced from icalendar's releases.

v7.2.0

To view the changes, please see the Changelog. This release can be installed from PyPI.

Changelog

Sourced from icalendar's changelog.

7.2.0 (2026-06-23)

Removals and deprecations


- Deprecated :func:`icalendar.parser.string.foldline` as a private function for icalendar version 8. @IoannaGiag (`Issue [#1011](https://github.com/collective/icalendar/issues/1011) <https://github.com/collective/icalendar/issues/1011>`_)
- Deprecated :func:`icalendar.parser.string.escape_char`, :func:`icalendar.parser.string.unescape_char`, :func:`icalendar.parser.string.escape_string`, and :func:`icalendar.parser.string.unescape_string` using the standard ``deprecate_for_version_8`` wrapper as per issue [#1405](https://github.com/collective/icalendar/issues/1405). (`Issue [#1405](https://github.com/collective/icalendar/issues/1405) <https://github.com/collective/icalendar/issues/1405>`_)

New features



- Created an :attr:`~icalendar.prop.recur.frequency.vFrequency.ical_value` property for the :class:`~icalendar.prop.recur.frequency.vFrequency` component, mirroring the existing pattern on :class:`~icalendar.prop.recur.weekday.vWeekday`. @mvanhorn (`Issue [#876](https://github.com/collective/icalendar/issues/876) &lt;https://github.com/collective/icalendar/issues/876&gt;`_)
- Created an :attr:`~icalendar.prop.geo.vGeo.ical_value` property for the :class:`~icalendar.prop.geo.vGeo` component. @IoannaGiag (`Issue [#876](https://github.com/collective/icalendar/issues/876) &lt;https://github.com/collective/icalendar/issues/876&gt;`_)
- Added type hints to component methods. @Priyanshu-pulak (`Issue [#938](https://github.com/collective/icalendar/issues/938) &lt;https://github.com/collective/icalendar/issues/938&gt;`_)
- Added test coverage for :func:`icalendar.compatibility.deprecate_for_version_8`. AI disclosure: I used GPT-5 Codex to help draft and refine the test and pull request text. I reviewed the output and validated the change locally. @iccccccccccccc (`Issue [#1407](https://github.com/collective/icalendar/issues/1407) &lt;https://github.com/collective/icalendar/issues/1407&gt;`_)
- The :attr:`Alarm.uid &lt;icalendar.cal.alarm.Alarm.uid&gt;` accessor now falls back to vendor-specific UID properties (the existing ``X-ALARMUID`` and the newly added ``X-EVOLUTION-ALARM-UID``) when no canonical ``UID`` is present, so alarms exported by Evolution/GNOME Calendar expose a usable identifier. ``single_string_property`` now accepts an ordered list of fallback keys so further vendor aliases can be added later. AI disclosure: I used GPT-5 Codex (via the Codex CLI) to draft and refine this change and its tests; I reviewed and validated the output locally. @mvanhorn (`Issue [#1421](https://github.com/collective/icalendar/issues/1421) &lt;https://github.com/collective/icalendar/issues/1421&gt;`_)
- The ``rdates`` and ``exdates`` properties are now writable: assigning a list replaces the ``RDATE``/``EXDATE`` values, ``del`` (or assigning an empty list or ``None``) clears them, and assigning the value the getter returns round-trips. Prepared with the assistance of an AI coding agent (Anthropic's Claude). @gaoflow (`Issue [#1442](https://github.com/collective/icalendar/issues/1442) &lt;https://github.com/collective/icalendar/issues/1442&gt;`_)

Bug fixes



- Strictly validate :class:`~icalendar.prop.dt.datetime.vDatetime` values in :meth:`~icalendar.prop.dt.datetime.vDatetime.from_ical` and reject malformed input. This also improves handling of values with a ``TZID`` prefix, per :rfc:`5545#section-3.3.5`, Form [#3](https://github.com/collective/icalendar/issues/3). @uwezkhan (`Issue [#1361](https://github.com/collective/icalendar/issues/1361) &amp;lt;https://github.com/collective/icalendar/issues/1361&amp;gt;`_)
- Preserve an explicit ``VALUE`` parameter (for example ``RDATE;VALUE=PERIOD`` or ``TRIGGER;VALUE=DATE-TIME``) when converting from jCal. Previously :meth:`Component.from_jcal &amp;lt;icalendar.cal.component.Component.from_jcal&amp;gt;` dropped the value type, which is encoded in the jCal type field rather than as a parameter. Prepared with the assistance of an AI coding agent (Anthropic's Claude Opus 4). @gaoflow @lcampanella98 (`Issue [#1426](https://github.com/collective/icalendar/issues/1426) &amp;lt;https://github.com/collective/icalendar/issues/1426&amp;gt;`_)
- For a newline-free string that the operating system can't use as a file path—for example, one containing an embedded null byte or one that is too long—treat it as calendar data, instead of propagating an :exc:`OSError` from :meth:`Component.from_ical &amp;lt;icalendar.cal.component.Component.from_ical&amp;gt;`. Such input now raises a consistent :exc:`ValueError` across platforms. The string-versus-path boundary is now covered by tests. @uwezkhan (`Issue [#1436](https://github.com/collective/icalendar/issues/1436) &amp;lt;https://github.com/collective/icalendar/issues/1436&amp;gt;`_)
- Accept the ``(dt, None)`` form that ``rdates``/``exdates`` return for a single date when adding ``RDATE`` or ``EXDATE``, so ``event.add(&amp;quot;RDATE&amp;quot;, (dt, None))`` no longer raises :exc:`TypeError` and the value round-trips. Prepared with the assistance of an AI coding agent (Anthropic's Claude Opus 4). @gaoflow @texttheater (`Issue [#1439](https://github.com/collective/icalendar/issues/1439) &amp;lt;https://github.com/collective/icalendar/issues/1439&amp;gt;`_)
- Anchored the value validation regular expressions with ``\Z`` instead of ``$`` in :class:`~icalendar.prop.recur.weekday.vWeekday`, :meth:`vDuration.from_ical &amp;lt;icalendar.prop.dt.duration.vDuration.from_ical&amp;gt;`, :class:`~icalendar.prop.dt.time.vTime` and :class:`~icalendar.prop.dt.utc_offset.vUTCOffset`. ``$`` matches just before a final ``\n``, so a value with a trailing line break was accepted; for ``vWeekday`` the newline survived in the ``str`` value and was re-emitted into RECUR output. @alhudz
- For iCalendar files that have thousands of bare line breaks, reduce the content line parse time by a quadratic order of magnitude when reading a component with :meth:`Component.from_ical &amp;lt;icalendar.cal.component.Component.from_ical&amp;gt;`. @alhudz
- Parse a ``CATEGORIES`` value that contains an unescaped colon correctly. ``TEXT`` values do not escape ``:``, so a category such as ``CATEGORIES:CONFIDENTIAL,http://example.com/tag`` was truncated to a single ``//example.com/tag`` because the value boundary was found with the last colon on the line instead of the first one outside the parameters. @alhudz
- Parse and serialize jCal iteratively so that deeply nested components no longer raise an uncaught :exc:`RecursionError`. :meth:`Component.from_jcal &amp;lt;icalendar.cal.component.Component.from_jcal&amp;gt;` and :meth:`Component.to_jcal &amp;lt;icalendar.cal.component.Component.to_jcal&amp;gt;` now handle arbitrary nesting depth, matching the iterative iCal parser and serializer. @arshsmith
- Preserve literal percent escapes in parameter values. The parameter parser used ``%2C``/``%3A``/``%3B``/``%5C`` as internal markers for backslash-escaped delimiters, so a value that already contained those sequences (e.g. ``ALTREP=&amp;quot;http://x/a%2Cb&amp;quot;``) was silently decoded to ``http://x/a,b``. The internal transport encoding now escapes ``%`` itself, leaving real percent-encoded values untouched. @alhudz
- Raise :class:`~icalendar.error.InvalidCalendar` instead of leaking :exc:`OverflowError` when a ``DURATION`` value is too large for :class:`datetime.timedelta`, for example, ``P999999999999999999W``. Parsing a whole calendar now records such a value as an error, like any other invalid property, rather than aborting the parse. @arshsmith
- Reject non-ASCII digits in :class:`~icalendar.prop.recur.month.vMonth` (``BYMONTH``). ``str.isdigit`` is ``True`` for digits like the Arabic-Indic ``١٢``, which was silently accepted and normalized to month ``12``, while characters such as ``²`` cleared the same guard and then leaked a raw ``int()`` error. :meth:`vMonth.from_ical &amp;lt;icalendar.prop.recur.month.vMonth.from_ical&amp;gt;` now rejects both. @alhudz
- Reject non-finite FLOAT values in :meth:`vFloat.from_ical() &amp;lt;icalendar.prop.float.vFloat.from_ical&amp;gt;` and :meth:`vGeo.from_ical() &amp;lt;icalendar.prop.geo.vGeo.from_ical&amp;gt;`. Inputs such as ``nan``, ``inf`` or an overflowing magnitude like ``1e999`` were silently accepted, producing ``NaN``/``Infinity`` tokens in :meth:`Component.to_json &amp;lt;icalendar.cal.component.Component.to_json&amp;gt;` output that are not valid JSON. @alhudz
- Strictly validate :class:`~icalendar.prop.dt.date.vDate` and :class:`~icalendar.prop.dt.time.vTime` values in their ``from_ical`` methods and reject malformed input, matching the strictness added to :class:`~icalendar.prop.dt.datetime.vDatetime`. Trailing data and ``int()`` quirks (underscores, whitespace, signs) are no longer silently accepted, per :rfc:`5545#section-3.3.4` and :rfc:`5545#section-3.3.12`. This change was prepared with AI assistance (Anthropic Claude, Opus model, via Claude Code) used to research the relevant RFC grammar and draft the validation and tests, all reviewed and verified locally. @alhudz


Documentation
</code></pre>
<ul>
<li>Switch :file:<code>docs/how-to/usage.rst</code> from the deprecated <code>.. code:: pycon</code> directive to <code>.. code-block:: pycon</code> for consistency with the rest of the documentation. <a href="https://github.com/mvanhorn"><code>@​mvanhorn</code></a> (<code>Issue [#626](https://github.com/collective/icalendar/issues/626) &amp;lt;https://github.com/collective/icalendar/issues/626&amp;gt;</code>_)</li>
<li>Added type hint for <code>encoding</code> parameter in :func:<code>~icalendar.parser_tools.data_encode</code>. <a href="https://github.com/cybs-joe"><code>@​cybs-joe</code></a> (<code>Issue [#938](https://github.com/collective/icalendar/issues/938) &amp;lt;https://github.com/collective/icalendar/issues/938&amp;gt;</code>_)</li>
<li>Converted docstring of :meth:<code>~icalendar.cal.component.Component.add</code> to Google style. <a href="https://github.com/mvanhorn"><code>@​mvanhorn</code></a> (<code>Issue [#1072](https://github.com/collective/icalendar/issues/1072) &amp;lt;https://github.com/collective/icalendar/issues/1072&amp;gt;</code>_)</li>
<li>Fixed broken links and removed <code>:py</code> prefix in :class:<code>icalendar.cal.calendar.Calendar</code> documentation. <a href="https://github.com/lcampanella98"><code>@​lcampanella98</code></a> (<code>Issue [#1158](https://github.com/collective/icalendar/issues/1158) &amp;lt;https://github.com/collective/icalendar/issues/1158&amp;gt;</code>_)</li>
<li>Fixed broken link and removed <code>:py</code> prefix in the :func:<code>~icalendar.parser.unescape_backslash</code> docstring. <a href="https://github.com/vincere-mori"><code>@​vincere-mori</code></a> (<code>Issue [#1158](https://github.com/collective/icalendar/issues/1158) &amp;lt;https://github.com/collective/icalendar/issues/1158&amp;gt;</code>_)</li>
<li>Fixed broken documentation links in :mod:<code>icalendar.alarms</code> and :mod:<code>icalendar.cal.alarm</code>. <a href="https://github.com/lcampanella98"><code>@​lcampanella98</code></a> (<code>Issue [#1158](https://github.com/collective/icalendar/issues/1158) &amp;lt;https://github.com/collective/icalendar/issues/1158&amp;gt;</code>_)</li>
<li>Fix unqualified cross-references in :attr:<code>Event.start &amp;lt;icalendar.cal.event.Event.start&amp;gt;</code> and :attr:<code>Event.start &amp;lt;icalendar.cal.event.Event.end&amp;gt;</code> docstrings. <a href="https://github.com/Esneider1107"><code>@​Esneider1107</code></a> (<code>Issue [#1158](https://github.com/collective/icalendar/issues/1158) &amp;lt;https://github.com/collective/icalendar/issues/1158&amp;gt;</code>_)</li>
<li>Fixed broken links in :mod:<code>icalendar.cal.free_busy</code> documentation by using fully qualified :class:<code>icalendar.cal.component.Component</code> attribute targets. <a href="https://github.com/tsai135"><code>@​tsai135</code></a> (<code>Issue [#1158](https://github.com/collective/icalendar/issues/1158) &amp;lt;https://github.com/collective/icalendar/issues/1158&amp;gt;</code>_)
&lt;/tr&gt;&lt;/table&gt;
</code></pre></li>
</ul>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/collective/icalendar/commit/df9f30ab0f7cc4a39c5f7d12fabab462697642f7"><code>df9f30a</code></a> Merge branch 'main' into 7.x</li>
<li><a href="https://github.com/collective/icalendar/commit/fd6d5b1aadf13d88f8356c1f58d5ceff85f08a51"><code>fd6d5b1</code></a> Fix 7.2.0 changelog: restore content for 938.chore entry</li>
<li><a href="https://github.com/collective/icalendar/commit/e99b5159ec0febc3cceebe075e7f91c5cab27c7f"><code>e99b515</code></a> Fix 7.2.0 changelog: restore full release notes</li>
<li><a href="https://github.com/collective/icalendar/commit/a2ceb5538b665f24247e0cb707322a89fe0d58db"><code>a2ceb55</code></a> version 7.2.0</li>
<li><a href="https://github.com/collective/icalendar/commit/87d7ce2fb96ca5d4c539664701f32c0fc9686ba9"><code>87d7ce2</code></a> Merge pull request <a href="https://redirect.github.com/collective/icalendar/issues/1495">#1495</a> from collective/dependabot/github_actions/github-act...</li>
<li><a href="https://github.com/collective/icalendar/commit/6f7743d5bb728bb613c3a6b8dc7fff44ea0be483"><code>6f7743d</code></a> Bump actions/checkout in the github-actions group across 1 directory</li>
<li><a href="https://github.com/collective/icalendar/commit/ceae0e3d2d8bc72006554382e04a0ddc178c75b9"><code>ceae0e3</code></a> Remove <code>rtd-pr-preview.yml</code> from the workflows (<a href="https://redirect.github.com/collective/icalendar/issues/1496">#1496</a>)</li>
<li><a href="https://github.com/collective/icalendar/commit/a760432ded122e86a8be3913062d60279c5f6eee"><code>a760432</code></a> Merge pull request <a href="https://redirect.github.com/collective/icalendar/issues/1454">#1454</a> from arshsmith/fix/jcal-iterative-parsing</li>
<li><a href="https://github.com/collective/icalendar/commit/4cc90aebb2461be154df54c4367d878e09249bf1"><code>4cc90ae</code></a> Merge branch 'main' into fix/jcal-iterative-parsing</li>
<li><a href="https://github.com/collective/icalendar/commit/96ee28f8552df69b5fb82839dbf9e2b95c6e5b05"><code>96ee28f</code></a> Merge pull request <a href="https://redirect.github.com/collective/icalendar/issues/1446">#1446</a> from alhudz/strict-date-time-from-ical</li>
<li>Additional commits viewable in <a href="https://github.com/collective/icalendar/compare/v7.1.3...v7.2.0">compare view</a></li>
</ul>
</details>
<br />

Updates `newrelic` from 13.1.1 to 13.2.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/newrelic/newrelic-python-agent/releases">newrelic's releases</a>.</em></p>
<blockquote>
<h2>v13.2.0</h2>
<h2>Notes</h2>
<p>This release of the Python agent adds instrumentation support for <a href="https://pypi.org/project/google-adk">Google ADK</a>, adds token counting for multiple AI providers (<a href="https://pypi.org/project/anthropic">Anthropic</a>, <a href="https://pypi.org/project/google-genai">Google GenAI</a>, <a href="https://pypi.org/project/openai">OpenAI</a>, and <a href="https://pypi.org/project/botocore">AWS Bedrock</a>), reduces outbound <code>tracestate</code> header size, and fixes a crash in <a href="https://pypi.org/project/graphql-core">graphql-core</a> instrumentation.</p>
<p>Install the agent using <code>easy_install/pip/distribute</code> via the <a href="https://pypi.python.org/pypi/newrelic">Python Package Index</a>, using <code>conda</code> via the <a href="https://anaconda.org/conda-forge/newrelic">Conda-Forge Package Index</a>, or download it directly from the <a href="https://download.newrelic.com/python_agent/release">New Relic download site</a>.</p>
<h2>Improved Features</h2>
<ul>
<li>
<p>Add instrumentation for Google ADK</p>
<ul>
<li>The Python agent now instruments <a href="https://pypi.org/project/google-adk">Google ADK</a> (Agent Development Kit) AI agent workflows.</li>
<li>Instrumented components include:
<ul>
<li><code>LlmAgent</code> linked to Gemini or VertexAI backends via <a href="https://pypi.org/project/google-genai"><code>google.genai</code></a></li>
<li>User-defined <code>FunctionTool</code> instances</li>
<li>Sub-agent workflows including child agents and <code>AgentTool</code> instances</li>
<li>Multi-agent workflows including the <code>Workflow</code> class and deprecated <code>LoopAgent</code>, <code>ParallelAgent</code>, and <code>SequentialAgent</code> classes</li>
</ul>
</li>
</ul>
</li>
<li>
<p>Add token counting for Anthropic, Gemini, OpenAI, and Bedrock</p>
<ul>
<li>The Python agent now reports token counts for all LLM invocations across multiple AI providers:
<ul>
<li><a href="https://pypi.org/project/anthropic">Anthropic SDK</a></li>
<li><a href="https://pypi.org/project/google-genai">Google GenAI SDK</a></li>
<li><a href="https://pypi.org/project/openai">OpenAI SDK</a></li>
<li>AWS Bedrock via <a href="https://pypi.org/project/botocore">botocore</a> and <a href="https://pypi.org/project/aiobotocore">aiobotocore</a></li>
</ul>
</li>
</ul>
</li>
</ul>
<h2>Bugs</h2>
<ul>
<li>
<p>Fix instrumentation crash for graphql-core v3.2.10</p>
<ul>
<li>Previously, <a href="https://pypi.org/project/graphql-core">graphql-core</a> v3.2.10 renamed the <code>errors</code> attribute to <code>collected_errors</code> in <code>ExecutionContext</code>, causing the agent to crash. This has been fixed, and the agent now works correctly with graphql-core v3.2.10 and later.</li>
</ul>
</li>
<li>
<p>Remove spanId from outbound tracestate header</p>
<ul>
<li>Previously, the agent included <code>spanId</code> in the outbound <code>tracestate</code> header. Because <code>spanId</code> is already present in the <code>traceparent</code> header, this was unnecessary duplication. The <code>spanId</code> has been removed from <code>tracestate</code> to reduce outbound header size.</li>
</ul>
</li>
</ul>
<h2>Support statement</h2>
<p>We recommend updating to the latest agent version as soon as it's available. If you can't upgrade to the latest version, update your agents to a version no more than 90 days old. Read <a href="https://docs.newrelic.com/docs/new-relic-solutions/new-relic-one/install-configure/update-new-relic-agent/">more</a> about keeping agents up to date.</p>
<p>See the New Relic Python agent <a href="https://docs.newrelic.com/docs/apm/agents/python-agent/getting-started/python-agent-eol-policy/">EOL policy</a> for information about agent releases and support dates.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/newrelic/newrelic-python-agent/commit/4ee128a5d5241eed5ffdbdf1f55358e8cc76896c"><code>4ee128a</code></a> Google ADK Instrumentation (<a href="https://redirect.github.com/newrelic/newrelic-python-agent/issues/1784">#1784</a>)</li>
<li><a href="https://github.com/newrelic/newrelic-python-agent/commit/b34d52d6828a3fe5602f3c0fc9d92e2a6333d7e4"><code>b34d52d</code></a> Bump the github_actions group with 7 updates (<a href="https://redirect.github.com/newrelic/newrelic-python-agent/issues/1786">#1786</a>)</li>
<li><a href="https://github.com/newrelic/newrelic-python-agent/commit/06cd515595c7c29eaf3a55dbe5929fb93f95407b"><code>06cd515</code></a> Fix gRPC Tests (<a href="https://redirect.github.com/newrelic/newrelic-python-agent/issues/1787">#1787</a>)</li>
<li><a href="https://github.com/newrelic/newrelic-python-agent/commit/d3daf5bd2029eb8b413674fc82ad34cf11d88493"><code>d3daf5b</code></a> Bump the github_actions group with 4 updates (<a href="https://redirect.github.com/newrelic/newrelic-python-agent/issues/1774">#1774</a>)</li>
<li><a href="https://github.com/newrelic/newrelic-python-agent/commit/3f207f7ec768ebbde56f84644695d5833014bdf7"><code>3f207f7</code></a> Remove spanId from outbound tracestate header (<a href="https://redirect.github.com/newrelic/newrelic-python-agent/issues/1771">#1771</a>)</li>
<li><a href="https://github.com/newrelic/newrelic-python-agent/commit/853d8cdd50c9ecc996e0c5866229822d797da663"><code>853d8cd</code></a> Gemini Testing via VCR (<a href="https://redirect.github.com/newrelic/newrelic-python-agent/issues/1770">#1770</a>)</li>
<li><a href="https://github.com/newrelic/newrelic-python-agent/commit/5734092f300f8108238c35c6ec2f8dde6f2bf073"><code>5734092</code></a> Bump actions/checkout from 6.0.3 to 7.0.0 in the github_actions group (<a href="https://redirect.github.com/newrelic/newrelic-python-agent/issues/1772">#1772</a>)</li>
<li><a href="https://github.com/newrelic/newrelic-python-agent/commit/9294769472b3ab276c330d7e1756cff1ec49c2d0"><code>9294769</code></a> Bedrock Token Counting (<a href="https://redirect.github.com/newrelic/newrelic-python-agent/issues/1752">#1752</a>)</li>
<li><a href="https://github.com/newrelic/newrelic-python-agent/commit/8e0d57554507f4501a147fd36bb91f1f9515f6ed"><code>8e0d575</code></a> Merge pull request <a href="https://redirect.github.com/newrelic/newrelic-python-agent/issues/1751">#1751</a> from newrelic/feat-openai-token-counting</li>
<li><a href="https://github.com/newrelic/newrelic-python-agent/commit/5d4783a51be4f4dd4cfa06900f4e2a0118858be7"><code>5d4783a</code></a> Merge branch 'main' into feat-openai-token-counting</li>
<li>Additional commits viewable in <a href="https://github.com/newrelic/newrelic-python-agent/compare/v13.1.1...v13.2.0">compare view</a></li>
</ul>
</details>
<br />

Updates `uvicorn` from 0.49.0 to 0.51.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/Kludex/uvicorn/releases">uvicorn's releases</a>.</em></p>
<blockquote>
<h2>Version 0.51.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Restart workers with overlap on SIGHUP for near-zero-downtime reloads by <a href="https://github.com/Kludex"><code>@​Kludex</code></a> in <a href="https://redirect.github.com/Kludex/uvicorn/pull/3025">Kludex/uvicorn#3025</a></li>
<li>Remove colorama from the standard extra by <a href="https://github.com/Kludex"><code>@​Kludex</code></a> in <a href="https://redirect.github.com/Kludex/uvicorn/pull/3027">Kludex/uvicorn#3027</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/Kludex/uvicorn/compare/0.50.2...0.51.0">https://github.com/Kludex/uvicorn/compare/0.50.2...0.51.0</a></p>
<h2>Version 0.50.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Split comma-separated <code>Sec-WebSocket-Protocol</code> values in the websockets-sansio implementation by <a href="https://github.com/Aayush7352"><code>@​Aayush7352</code></a> in <a href="https://redirect.github.com/Kludex/uvicorn/pull/3019">Kludex/uvicorn#3019</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Aayush7352"><code>@​Aayush7352</code></a> made their first contribution in <a href="https://redirect.github.com/Kludex/uvicorn/pull/3019">Kludex/uvicorn#3019</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/Kludex/uvicorn/compare/0.50.0...0.50.1">https://github.com/Kludex/uvicorn/compare/0.50.0...0.50.1</a></p>
<h2>Version 0.50.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Memoize trusted host checks to avoid re-parsing the client IP per request by <a href="https://github.com/Kludex"><code>@​Kludex</code></a> in <a href="https://redirect.github.com/Kludex/uvicorn/pull/2970">Kludex/uvicorn#2970</a></li>
<li>Cache the <code>asgi</code> scope sub-dict per connection by <a href="https://github.com/Kludex"><code>@​Kludex</code></a> in <a href="https://redirect.github.com/Kludex/uvicorn/pull/2976">Kludex/uvicorn#2976</a></li>
<li>Build a fresh <code>asgi</code> scope dict per request by <a href="https://github.com/Kludex"><code>@​Kludex</code></a> in <a href="https://redirect.github.com/Kludex/uvicorn/pull/2977">Kludex/uvicorn#2977</a></li>
<li>Replace click.style with an internal ANSI style helper by <a href="https://github.com/Kludex"><code>@​Kludex</code></a> in <a href="https://redirect.github.com/Kludex/uvicorn/pull/2981">Kludex/uvicorn#2981</a></li>
<li>Avoid copying single-frame WebSocket payloads in websockets-sansio by <a href="https://github.com/Kludex"><code>@​Kludex</code></a> in <a href="https://redirect.github.com/Kludex/uvicorn/pull/2983">Kludex/uvicorn#2983</a></li>
<li>Deprecate the legacy websockets implementation and default <code>auto</code> to websockets-sansio by <a href="https://github.com/Kludex"><code>@​Kludex</code></a> in <a href="https://redirect.github.com/Kludex/uvicorn/pull/2985">Kludex/uvicorn#2985</a></li>
<li>Exit with a dedicated code on startup failure and stop the supervisor when a worker can't boot by <a href="https://github.com/Kludex"><code>@​Kludex</code></a> in <a href="https://redirect.github.com/Kludex/uvicorn/pull/3001">Kludex/uvicorn#3001</a></li>
<li>Skip the eager app import in the parent when spawning workers by <a href="https://github.com/Kludex"><code>@​Kludex</code></a> in <a href="https://redirect.github.com/Kludex/uvicorn/pull/3012">Kludex/uvicorn#3012</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/Kludex/uvicorn/compare/0.49.0...0.50.0">https://github.com/Kludex/uvicorn/compare/0.49.0...0.50.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md">uvicorn's changelog</a>.</em></p>
<blockquote>
<h2>0.51.0 (July 8, 2026)</h2>
<h3>Added</h3>
<ul>
<li>Restart workers one at a time on <code>SIGHUP</code>, bringing each replacement up before retiring the old worker, so reloads no longer drop requests (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3025">#3025</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Remove <code>colorama</code> from the <code>standard</code> extra (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3027">#3027</a>)</li>
</ul>
<h2>0.50.2 (July 6, 2026)</h2>
<h3>Fixed</h3>
<ul>
<li>Require <code>websockets&gt;=13.0</code>, which the default <code>websockets-sansio</code> implementation needs (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3021">#3021</a>)</li>
</ul>
<h2>0.50.1 (July 6, 2026)</h2>
<h3>Fixed</h3>
<ul>
<li>Split comma-separated <code>Sec-WebSocket-Protocol</code> values in the <code>websockets-sansio</code> implementation (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3019">#3019</a>)</li>
</ul>
<h2>0.50.0 (July 4, 2026)</h2>
<p>If you use WebSockets, note that <code>--ws auto</code> now picks the <code>websockets-sansio</code> implementation. You shouldn't need it, but you can pin <code>--ws websockets</code> to get the deprecated legacy one back.</p>
<h3>Changed</h3>
<ul>
<li>Exit with the dedicated code 3 on any startup failure: app loading, socket bind and lifespan startup errors previously exited with a mix of 0, 1 and 3 (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3001">#3001</a>)</li>
<li>Stop the multiprocess supervisor when a worker exits with code 3 instead of restarting it forever (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3001">#3001</a>)</li>
<li>Default <code>--ws auto</code> to <code>websockets-sansio</code> when websockets is installed (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2985">#2985</a>)</li>
<li>Skip the eager app import in the parent process with <code>--reload</code> or <code>--workers</code>, fixing a memory regression introduced in 0.47.0 (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3012">#3012</a>)</li>
<li>Build a fresh <code>asgi</code> scope dict per request (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2977">#2977</a>)</li>
<li>Cache the <code>asgi</code> scope sub-dict per connection (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2976">#2976</a>)</li>
<li>Avoid copying single-frame WebSocket payloads in <code>websockets-sansio</code> (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2983">#2983</a>)</li>
<li>Memoize trusted host checks in <code>ProxyHeadersMiddleware</code> (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2970">#2970</a>)</li>
<li>Replace <code>click.style</code> with an internal ANSI style helper (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2981">#2981</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecate the legacy <code>websockets</code> implementation; use <code>websockets-sansio</code> or <code>wsproto</code> instead (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2985">#2985</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/Kludex/uvicorn/commit/e4d0b05eb8c6459b7ba27ad13a2c2f4f8d4ece50"><code>e4d0b05</code></a> Version 0.51.0 (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3028">#3028</a>)</li>
<li><a href="https://github.com/Kludex/uvicorn/commit/944e43ddbf715aea7c587f2738cd94c3f9106110"><code>944e43d</code></a> Remove colorama from the standard extra (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3027">#3027</a>)</li>
<li><a href="https://github.com/Kludex/uvicorn/commit/2e787704f2610133059e76d56bbd60f48edd34a3"><code>2e78770</code></a> Restart workers with overlap on SIGHUP for near-zero-downtime reloads (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3025">#3025</a>)</li>
<li><a href="https://github.com/Kludex/uvicorn/commit/a1b570cf577d512bfd396b64d72313233e9c3325"><code>a1b570c</code></a> Version 0.50.2 (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3022">#3022</a>)</li>
<li><a href="https://github.com/Kludex/uvicorn/commit/83c7da7332ac3100171c258071de40d5dde35e13"><code>83c7da7</code></a> Require websockets&gt;=13.0 for the default sansio implementation (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3021">#3021</a>)</li>
<li><a href="https://github.com/Kludex/uvicorn/commit/b4d011668a75d02370353f34de6dea59692dcad2"><code>b4d0116</code></a> Version 0.50.1 (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3020">#3020</a>)</li>
<li><a href="https://github.com/Kludex/uvicorn/commit/2a9151d0e763df2c56da2bfe8c5dcead4fe5a276"><code>2a9151d</code></a> Split comma-separated <code>Sec-WebSocket-Protocol</code> values in the websockets-sansi...</li>
<li><a href="https://github.com/Kludex/uvicorn/commit/1bf3ab42e3aba1cf4acd1ef0c29d8ad9a599d333"><code>1bf3ab4</code></a> Cover the excluded-directory branch in <code>FileFilter</code> with a direct test (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3014">#3014</a>)</li>
<li><a href="https://github.com/Kludex/uvicorn/commit/837b5f960dbe2f03e9f12feb9955ce2217211ad8"><code>837b5f9</code></a> Deflake multiprocess, reload, and signal supervisor tests (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2975">#2975</a>)</li>
<li><a href="https://github.com/Kludex/uvicorn/commit/21d2c16fd162ce0e92b5c35f4aadca63a8b12e2d"><code>21d2c16</code></a> Version 0.50.0 (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3013">#3013</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/Kludex/uvicorn/compare/0.49.0...0.51.0">compare view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions


</details>

@dependabot
Bump the minor group across 1 directory with 5 updates
0431e5b 
Bumps the minor group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [django](https://github.com/django/django) | `6.0.6` | `6.0.7` |
| [google-cloud-logging](https://github.com/googleapis/google-cloud-python) | `3.16.0` | `3.16.1` |
| [icalendar](https://github.com/collective/icalendar) | `7.1.3` | `7.2.0` |
| [newrelic](https://github.com/newrelic/newrelic-python-agent) | `13.1.1` | `13.2.0` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.49.0` | `0.51.0` |



Updates `django` from 6.0.6 to 6.0.7
- [Commits](django/django@6.0.6...6.0.7)

Updates `google-cloud-logging` from 3.16.0 to 3.16.1
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-cloud-logging-v3.16.0...google-cloud-logging-v3.16.1)

Updates `icalendar` from 7.1.3 to 7.2.0
- [Release notes](https://github.com/collective/icalendar/releases)
- [Changelog](https://github.com/collective/icalendar/blob/main/CHANGES.rst)
- [Commits](collective/icalendar@v7.1.3...v7.2.0)

Updates `newrelic` from 13.1.1 to 13.2.0
- [Release notes](https://github.com/newrelic/newrelic-python-agent/releases)
- [Commits](newrelic/newrelic-python-agent@v13.1.1...v13.2.0)

Updates `uvicorn` from 0.49.0 to 0.51.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.49.0...0.51.0)

---
updated-dependencies:
- dependency-name: django
  dependency-version: 6.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: google-cloud-logging
  dependency-version: 3.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: icalendar
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: newrelic
  dependency-version: 13.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: uvicorn
  dependency-version: 0.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants