Skip to content

chore(deps): update machine-learning#26970

Merged
jrasm91 merged 1 commit intomainfrom
renovate/machine-learning
Apr 16, 2026
Merged

chore(deps): update machine-learning#26970
jrasm91 merged 1 commit intomainfrom
renovate/machine-learning

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Mar 17, 2026 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
fastapi (changelog) 0.128.8 → 0.135.3 age confidence project.dependencies minor 0.136.0 (+1)
gunicorn (changelog) 25.1.0 → 25.3.0 age confidence project.dependencies minor
locust 2.43.3 → 2.43.4 age confidence dependency-groups patch
mypy (changelog) 1.19.1 → 1.20.0 age confidence dependency-groups minor 1.20.1
onnxruntime 1.24.1 → 1.24.4 age confidence project.optional-dependencies patch
onnxruntime-gpu 1.24.1 → 1.24.4 age confidence project.optional-dependencies patch
orjson (changelog) 3.11.7 → 3.11.8 age confidence project.dependencies patch
pydantic-settings (changelog) 2.12.0 → 2.13.1 age confidence project.dependencies minor
pytest-cov (changelog) 7.0.0 → 7.1.0 age confidence dependency-groups minor
python 3de9a8d → d168b8d stage digest
python 04cd278 → 9c6f908 stage digest
python aa23850 → 970c99f stage digest
rapidocr (changelog) 3.6.0 → 3.8.1 age confidence project.dependencies minor
rich 14.3.2 → 14.3.4 age confidence project.dependencies patch
ruff (source, changelog) 0.15.0 → 0.15.10 age confidence dependency-groups patch
types-pyyaml (changelog) 6.0.12.20250915 → 6.0.12.20260408 age confidence dependency-groups patch
types-requests (changelog) 2.32.4.20260107 → 2.33.0.20260408 age confidence dependency-groups minor
types-setuptools (changelog) 82.0.0.20260210 → 82.0.0.20260408 age confidence dependency-groups patch
types-simplejson (changelog) 3.20.0.20250822 → 3.20.0.20260408 age confidence dependency-groups patch
uvicorn (changelog) 0.40.0 → 0.44.0 age confidence project.dependencies minor

Release Notes

fastapi/fastapi (fastapi)

v0.135.3

Compare Source

Features
Docs
Internal

v0.135.2

Compare Source

Upgrades
Docs
Translations
Internal

v0.135.1

Compare Source

Fixes
  • 🐛 Fix, avoid yield from a TaskGroup, only as an async context manager, closed in the request async exit stack. PR #​15038 by @​tiangolo.
Docs
Internal

v0.135.0

Compare Source

Features

v0.134.0

Compare Source

Features
  • ✨ Add support for streaming JSON Lines and binary data with yield. PR #​15022 by @​tiangolo.
    • This also upgrades Starlette from >=0.40.0 to >=0.46.0, as it's needed to properly unrwap and re-raise exceptions from exception groups.
    • New docs: Stream JSON Lines.
    • And new docs: Stream Data.
Docs
Internal

v0.133.1

Compare Source

Features
Internal

v0.133.0

Compare Source

v0.132.1

Compare Source

Refactors
Internal

v0.132.0

Compare Source

Breaking Changes
  • 🔒️ Add strict_content_type checking for JSON requests. PR #​14978 by @​tiangolo.
    • Now FastAPI checks, by default, that JSON requests have a Content-Type header with a valid JSON value, like application/json, and rejects requests that don't.
    • If the clients for your app don't send a valid Content-Type header you can disable this with strict_content_type=False.
    • Check the new docs: Strict Content-Type Checking.
Internal

v0.131.0

Compare Source

Breaking Changes

v0.130.0

Compare Source

Features

v0.129.2

Compare Source

Internal

v0.129.1

Compare Source

Fixes
  • ♻️ Fix JSON Schema for bytes, use "contentMediaType": "application/octet-stream" instead of "format": "binary". PR #​14953 by @​tiangolo.
Docs
Translations
Internal

v0.129.0

Compare Source

Breaking Changes
Refactors
Docs
Internal
benoitc/gunicorn (gunicorn)

v25.3.0: Gunicorn 25.3.0

Compare Source

Bug Fixes

  • HTTP/2 ASGI Body Duplication: Fix request body being received twice in HTTP/2
    ASGI requests, causing JSON parsing errors with "Extra data" messages
    (#​3558)

  • ASGI Chunked EOF Handling: Add finish() method to callback parser to handle
    chunked encoding edge case where connection closes before final CRLF after zero-chunk

  • HTTP/2 Documentation: Fix http_protocols examples to use comma-separated string
    instead of list syntax (#​3561)

  • Chunked Encoding: Reject chunk extensions containing bare CR bytes per RFC 9112
    (#​3556)

  • Request Line Limit: Fix --limit-request-line 0 to mean unlimited as documented,
    instead of using default maximum. Works with both Python and fast C parser.
    (#​3563)

Security

  • ASGI Parser Header Validation: Add security checks per RFC 9110/9112:
    • Reject duplicate Content-Length headers
    • Reject requests with both Content-Length and Transfer-Encoding
    • Reject chunked transfer encoding in HTTP/1.0
    • Reject stacked chunked encoding
    • Validate Transfer-Encoding values
    • Strict chunk size validation

Changes

  • Fast HTTP Parser: Update to gunicorn_h1c >= 0.6.3 for asgi_headers property
    and InvalidChunkExtension validation for bare CR rejection

  • ASGI PROXY Protocol: Add PROXY protocol v1/v2 support to callback parser

  • Docker Images: Update to Python 3.14

v25.2.0: Gunicorn 25.2.0

Compare Source

New Features
  • Fast HTTP Parser (gunicorn_h1c 0.4.1): Integrate new exception types and limit parameters from gunicorn_h1c 0.4.1 for both WSGI and ASGI workers
    • Requires gunicorn_h1c >= 0.4.1 for http_parser='fast'
    • Falls back to Python parser in auto mode if version not met
    • Proper HTTP status codes for limit errors (414, 431)
Bug Fixes

  • uWSGI Async Workers: Fix InvalidUWSGIHeader: incomplete header error when using gevent or gthread workers with uwsgi protocol behind nginx. (#​3552, PR #​3554)

  • FileWrapper Iterator Protocol: Add __iter__ and __next__ methods to FileWrapper for full PEP 3333 compliance. (#​3396, PR #​3550)

Performance
  • ASGI HTTP Parser Optimizations: Improve ASGI worker HTTP parsing performance
    • Callback-based parsing with direct bytearray buffer operations
    • Use bytearray.find() directly instead of converting to bytes first
    • Use index-based iteration for header parsing instead of list.pop(0) (O(1) vs O(n))
locustio/locust (locust)

v2.43.4

Compare Source

Full Changelog

Fixed bugs:

  • HTML report uses current_rps instead of total_rps for req/s column #​3355
  • Using --processes with --print-stats causes all workers to print stats #​3352
  • Docker image does not have OTEL libraries installed #​3309

Merged pull requests:

python/mypy (mypy)

v1.20.0

Compare Source

ijl/orjson (orjson)

v3.11.8

Compare Source

Changed
  • Build and compatibility improvements.
pydantic/pydantic-settings (pydantic-settings)

v2.13.1

Compare Source

v2.13.0

Compare Source

What's Changed

New Contributors

Full Changelog: pydantic/pydantic-settings@v2.12.0...v2.13.0

pytest-dev/pytest-cov (pytest-cov)

v7.1.0

Compare Source

  • Fixed total coverage computation to always be consistent, regardless of reporting settings.
    Previously some reports could produce different total counts, and consequently can make --cov-fail-under behave different depending on
    reporting options.
    See #&#8203;641 <https://github.com/pytest-dev/pytest-cov/issues/641>_.

  • Improve handling of ResourceWarning from sqlite3.

    The plugin adds warning filter for sqlite3 ResourceWarning unclosed database (since 6.2.0).
    It checks if there is already existing plugin for this message by comparing filter regular expression.
    When filter is specified on command line the message is escaped and does not match an expected message.
    A check for an escaped regular expression is added to handle this case.

    With this fix one can suppress ResourceWarning from sqlite3 from command line::

    pytest -W "ignore:unclosed database in <sqlite3.Connection object at:ResourceWarning" ...

  • Various improvements to documentation.
    Contributed by Art Pelling in #&#8203;718 <https://github.com/pytest-dev/pytest-cov/pull/718>_ and
    "vivodi" in #&#8203;738 <https://github.com/pytest-dev/pytest-cov/pull/738>.
    Also closed #&#8203;736 <https://github.com/pytest-dev/pytest-cov/issues/736>    .

  • Fixed some assertions in tests.
    Contributed by in Markéta Machová in #&#8203;722 <https://github.com/pytest-dev/pytest-cov/pull/722>_.

  • Removed unnecessary coverage configuration copying (meant as a backup because reporting commands had configuration side-effects before coverage 5.0).

RapidAI/RapidOCR (rapidocr)

v3.8.1

Compare Source

🐛 Bug Fixes
⚙️ Miscellaneous Tasks
🎉 Contributors

Full Changelog: 3.8.1

v3.8.0

Compare Source

🚀 Features
🐛 Bug Fixes
📚 Documentation
🧪 Testing
⚙️ Miscellaneous Tasks
🎉 Contributors

Full Changelog: 3.8.0

v3.7.0

Compare Source

🚀 Features

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 9am on tuesday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested a review from mertalev as a code owner March 17, 2026 02:45
@renovate renovate Bot added changelog:skip dependencies Pull requests that update a dependency file renovate labels Mar 17, 2026
@renovate renovate Bot force-pushed the renovate/machine-learning branch 11 times, most recently from 17b7310 to 7f26991 Compare March 21, 2026 09:37
@renovate renovate Bot force-pushed the renovate/machine-learning branch 10 times, most recently from 17fb9dd to b092db6 Compare March 30, 2026 21:18
@renovate renovate Bot force-pushed the renovate/machine-learning branch 19 times, most recently from e8a709a to 17774c7 Compare April 14, 2026 09:52
@renovate renovate Bot force-pushed the renovate/machine-learning branch 9 times, most recently from a92bf24 to 2eea849 Compare April 16, 2026 11:33
@renovate renovate Bot force-pushed the renovate/machine-learning branch from 2eea849 to ae52e0e Compare April 16, 2026 11:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mertalev mertalev mertalev approved these changes

Assignees

No one assigned

Labels

changelog:skip dependencies Pull requests that update a dependency file 🧠machine-learning renovate

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@mertalev @jrasm91