Skip to content

feat(Dependencies): Update dependency uvicorn to v0.53.0 - #628

Merged
dweinholz merged 1 commit into
devfrom
deps/uvicorn-0.x
Sep 18, 2026
Merged

dweinholz merged 1 commit into
devfrom
deps/uvicorn-0.x

Conversation

@renovate

@renovate renovate Bot commented Sep 17, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
uvicorn (changelog) ==0.52.4==0.53.0 age confidence

Release Notes

Kludex/uvicorn (uvicorn)

v0.53.0: Version 0.53.0

Compare Source

🌐 Opt-in HTTP/2 support

uvicorn 0.53.0 adds experimental HTTP/2 through zttp, alongside a new zuvloop integration and connection-handling improvements.

uv add uvicorn==0.53.0
  • Serve HTTP/1.1 and HTTP/2 with zttp (#​2982, #​3101). Install zttp, then enable HTTP/2 with --http zttp --http2. Uvicorn negotiates HTTP/2 over TLS with ALPN and supports cleartext prior knowledge.
  • HTTP/2 remains experimental. Upgrade-based h2c and WebSockets over HTTP/2 are not supported.

⚙️ More event loop choice

  • Run Uvicorn with zuvloop (#​3104). Install zuvloop separately and select it explicitly with --loop zuvloop on CPython 3.14 or newer.

🛡️ More reliable connections and proxies

  • Honor Connection: close token lists (#​3103). Uvicorn now parses comma-separated tokens case-insensitively across HTTP implementations.
  • Trust IPv6 loopback proxies by default (#​3119). The default FORWARDED_ALLOW_IPS value now includes ::1.
  • Keep upgraded WebSockets alive (#​3107). Uvicorn cancels the HTTP keep-alive timer when the connection becomes a WebSocket.

Full changelog: 0.52.4...0.53.0


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

| datasource | package | from   | to     |
| ---------- | ------- | ------ | ------ |
| pypi       | uvicorn | 0.52.4 | 0.53.0 |
@renovate renovate Bot added dependencies Pull requests that update a dependency file minor labels Sep 17, 2026
@renovate
renovate Bot requested a review from a team September 17, 2026 14:51
@dweinholz
dweinholz merged commit aef7728 into dev Sep 18, 2026
2 of 4 checks passed
@renovate
renovate Bot deleted the deps/uvicorn-0.x branch September 18, 2026 12:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file minor

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant