[PR #15] [MERGED] Bump uvicorn from 0.17.4 to 0.17.5 #14

New issue

TheLovinator · 2026-09-02T13:12:15+02:00

TheLovinator commented

2026-09-02 13:12:15 +02:00

📋 Pull Request Information

Original PR: https://github.com/TheLovinator1/twitter-image-collage-maker/pull/15
Author: @dependabot[bot]
Created: 2/17/2022
Status: ✅ Merged
Merged: 2/17/2022
Merged by: @TheLovinator1

Base: master ← Head: dependabot/pip/uvicorn-0.17.5

📝 Commits (1)

861fe2c Bump uvicorn from 0.17.4 to 0.17.5

📊 Changes

2 files changed (+5 additions, -5 deletions)

View changed files

📝 poetry.lock (+4 -4)
📝 pyproject.toml (+1 -1)

📄 Description

Bumps uvicorn from 0.17.4 to 0.17.5.

Release notes

Sourced from uvicorn's releases.

Version 0.17.5

0.17.5 - 2022-02-16

Fixed

Fix case where url is fragmented in httptools protocol (#1263) 2/16/22

Fix WSGI middleware not to explode quadratically in the case of a larger body (#1329) 2/16/16

Changed

Send HTTP 400 response for invalid request (#1352) 2/11/22

Full Changelog: https://github.com/encode/uvicorn/compare/0.17.4...0.17.5

Changelog

Sourced from uvicorn's changelog.

0.17.5 - 2022-02-16

Fixed

Fix case where url is fragmented in httptools protocol (#1263) 2/16/22

Fix WSGI middleware not to explode quadratically in the case of a larger body (#1329) 2/16/16

Changed

Send HTTP 400 response for invalid request (#1352) 2/11/22

Commits

b6b783b Release 0.17.5 (#1381)
a694ee4 Fix WSGI middleware not to explode quadratically in the case of a larger body...
399f90a Fix case where url is fragmented in httptools protocol (#1263)
4e8781c Fix misleading docs around --reload behaviors (#1331)
521b83e Switch to a discussion-first workflow (#1374)
5b0e3b9 Add note on 'UVICORN_' prefixed settings and '--env-file' (#1372)
90acede Moved warning about missing ws library only in upgrade case (#1370)
93e07fd Send HTTP 400 response for invalid request (#1352)
3d007ce Ignore coverage on MockLoop.is_running method (#1347)
9206350 Docs refresh (#1365)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/TheLovinator1/twitter-image-collage-maker/pull/15 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 2/17/2022 **Status:** ✅ Merged **Merged:** 2/17/2022 **Merged by:** [@TheLovinator1](https://github.com/TheLovinator1) **Base:** `master` ← **Head:** `dependabot/pip/uvicorn-0.17.5` --- ### 📝 Commits (1) - [`861fe2c`](https://github.com/TheLovinator1/twitter-image-collage-maker/commit/861fe2c7e375426914f6b9124e8270ec28eeebb3) Bump uvicorn from 0.17.4 to 0.17.5 ### 📊 Changes **2 files changed** (+5 additions, -5 deletions) <details> <summary>View changed files</summary> 📝 `poetry.lock` (+4 -4) 📝 `pyproject.toml` (+1 -1) </details> ### 📄 Description Bumps [uvicorn](https://github.com/encode/uvicorn) from 0.17.4 to 0.17.5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/encode/uvicorn/releases">uvicorn's releases</a>.</em></p> <blockquote> <h2>Version 0.17.5</h2> <h3>0.17.5 - 2022-02-16</h3> <h3>Fixed</h3> <ul> <li>Fix case where url is fragmented in httptools protocol (<a href="https://github-redirect.dependabot.com/encode/uvicorn/issues/1263">#1263</a>) 2/16/22</li> <li>Fix WSGI middleware not to explode quadratically in the case of a larger body (<a href="https://github-redirect.dependabot.com/encode/uvicorn/issues/1329">#1329</a>) 2/16/16</li> </ul> <h3>Changed</h3> <ul> <li>Send HTTP 400 response for invalid request (<a href="https://github-redirect.dependabot.com/encode/uvicorn/issues/1352">#1352</a>) 2/11/22</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/encode/uvicorn/compare/0.17.4...0.17.5">https://github.com/encode/uvicorn/compare/0.17.4...0.17.5</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/encode/uvicorn/blob/master/CHANGELOG.md">uvicorn's changelog</a>.</em></p> <blockquote> <h3>0.17.5 - 2022-02-16</h3> <h3>Fixed</h3> <ul> <li>Fix case where url is fragmented in httptools protocol (<a href="https://github-redirect.dependabot.com/encode/uvicorn/issues/1263">#1263</a>) 2/16/22</li> <li>Fix WSGI middleware not to explode quadratically in the case of a larger body (<a href="https://github-redirect.dependabot.com/encode/uvicorn/issues/1329">#1329</a>) 2/16/16</li> </ul> <h3>Changed</h3> <ul> <li>Send HTTP 400 response for invalid request (<a href="https://github-redirect.dependabot.com/encode/uvicorn/issues/1352">#1352</a>) 2/11/22</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/encode/uvicorn/commit/b6b783bb8d2148355b644ab5d143e94a958e511d"><code>b6b783b</code></a> Release 0.17.5 (<a href="https://github-redirect.dependabot.com/encode/uvicorn/issues/1381">#1381</a>)</li> <li><a href="https://github.com/encode/uvicorn/commit/a694ee4a09380b26d681bcdf91bdc3258804e107"><code>a694ee4</code></a> Fix WSGI middleware not to explode quadratically in the case of a larger body...</li> <li><a href="https://github.com/encode/uvicorn/commit/399f90afa199640696968b1ed6b1a7cec812ae21"><code>399f90a</code></a> Fix case where url is fragmented in httptools protocol (<a href="https://github-redirect.dependabot.com/encode/uvicorn/issues/1263">#1263</a>)</li> <li><a href="https://github.com/encode/uvicorn/commit/4e8781c4350fc26091cdf44e333e1ba7a12e965e"><code>4e8781c</code></a> Fix misleading docs around <code>--reload</code> behaviors (<a href="https://github-redirect.dependabot.com/encode/uvicorn/issues/1331">#1331</a>)</li> <li><a href="https://github.com/encode/uvicorn/commit/521b83ed0edd46eabba61a9ba4f4f3c0a58fce58"><code>521b83e</code></a> Switch to a discussion-first workflow (<a href="https://github-redirect.dependabot.com/encode/uvicorn/issues/1374">#1374</a>)</li> <li><a href="https://github.com/encode/uvicorn/commit/5b0e3b9b887f67e521dbd423f6bcf704a0adec0e"><code>5b0e3b9</code></a> Add note on 'UVICORN_' prefixed settings and '--env-file' (<a href="https://github-redirect.dependabot.com/encode/uvicorn/issues/1372">#1372</a>)</li> <li><a href="https://github.com/encode/uvicorn/commit/90acede056f75a337ef023c4ae335d0d6e33d142"><code>90acede</code></a> Moved warning about missing ws library only in upgrade case (<a href="https://github-redirect.dependabot.com/encode/uvicorn/issues/1370">#1370</a>)</li> <li><a href="https://github.com/encode/uvicorn/commit/93e07fd601ec29dbf0176e8006b93f32f5177630"><code>93e07fd</code></a> Send HTTP 400 response for invalid request (<a href="https://github-redirect.dependabot.com/encode/uvicorn/issues/1352">#1352</a>)</li> <li><a href="https://github.com/encode/uvicorn/commit/3d007ceaef741d870a05ff0016c57c4f8e36c7fd"><code>3d007ce</code></a> Ignore coverage on <code>MockLoop.is_running</code> method (<a href="https://github-redirect.dependabot.com/encode/uvicorn/issues/1347">#1347</a>)</li> <li><a href="https://github.com/encode/uvicorn/commit/92063504977eacf64fef09529e7b6d935a79964f"><code>9206350</code></a> Docs refresh (<a href="https://github-redirect.dependabot.com/encode/uvicorn/issues/1365">#1365</a>)</li> <li>See full diff in <a href="https://github.com/encode/uvicorn/compare/0.17.4...0.17.5">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=uvicorn&package-manager=pip&previous-version=0.17.4&new-version=0.17.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

TheLovinator

2026-09-02 13:12:15 +02:00