Update uvicorn requirement from <0.50,>=0.32 to >=0.32,<0.51

[dependabot]

Updates the requirements on uvicorn to permit the latest version.

Release notes

Sourced from uvicorn's releases.

Version 0.50.0

What's Changed

• Memoize trusted host checks to avoid re-parsing the client IP per request by @​Kludex in Kludex/uvicorn#2970
• Cache the asgi scope sub-dict per connection by @​Kludex in Kludex/uvicorn#2976
• Build a fresh asgi scope dict per request by @​Kludex in Kludex/uvicorn#2977
• Replace click.style with an internal ANSI style helper by @​Kludex in Kludex/uvicorn#2981
• Avoid copying single-frame WebSocket payloads in websockets-sansio by @​Kludex in Kludex/uvicorn#2983
• Deprecate the legacy websockets implementation and default auto to websockets-sansio by @​Kludex in Kludex/uvicorn#2985
• Exit with a dedicated code on startup failure and stop the supervisor when a worker can't boot by @​Kludex in Kludex/uvicorn#3001
• Skip the eager app import in the parent when spawning workers by @​Kludex in Kludex/uvicorn#3012

Full Changelog: Kludex/uvicorn@0.49.0...0.50.0

Changelog

Sourced from uvicorn's changelog.

0.50.0 (July 4, 2026)

If you use WebSockets, note that --ws auto now picks the websockets-sansio implementation. You shouldn't need it, but you can pin --ws websockets to get the deprecated legacy one back.

Changed

• Exit with the dedicated code 3 on any startup failure: app loading, socket bind and lifespan startup errors previously exited with a mix of 0, 1 and 3 (#3001)
• Stop the multiprocess supervisor when a worker exits with code 3 instead of restarting it forever (#3001)
• Default --ws auto to websockets-sansio when websockets is installed (#2985)
• Skip the eager app import in the parent process with --reload or --workers, fixing a memory regression introduced in 0.47.0 (#3012)
• Build a fresh asgi scope dict per request (#2977)
• Cache the asgi scope sub-dict per connection (#2976)
• Avoid copying single-frame WebSocket payloads in websockets-sansio (#2983)
• Memoize trusted host checks in ProxyHeadersMiddleware (#2970)
• Replace click.style with an internal ANSI style helper (#2981)

Deprecated

• Deprecate the legacy websockets implementation; use websockets-sansio or wsproto instead (#2985)

0.49.0 (June 3, 2026)

Changed

• Bump httptools minimum version to 0.8.0 (#2962)
• Consume duplicate forwarding headers in ProxyHeadersMiddleware (reverses the 0.48.0 behavior of ignoring them) (#2971)

0.48.0 (May 24, 2026)

Changed

• Default ssl_ciphers to None and use OpenSSL defaults (#2940)

Fixed

• Ignore duplicate forwarding headers in ProxyHeadersMiddleware (#2944)

0.47.0 (May 14, 2026)

Added

• Add ssl_context_factory for custom SSLContext configuration (#2920)

Changed

• Eagerly import the ASGI app in the parent process (#2919)

Fixed

• Treat fd=0 as a valid file descriptor with reload/workers (#2927)

... (truncated)

Commits

• 21d2c16 Version 0.50.0 (#3013)
• 6c42e8d Skip the eager app import in the parent when spawning workers (#3012)
• 56a4631 Exit with a dedicated code on startup failure and stop the supervisor when a ...
• 3314dfc chore(deps): bump the github-actions group with 4 updates (#3007)
• e8a31bc chore(deps): bump the python-packages group across 1 directory with 9 updates...
• 8d088b1 Deprecate the legacy websockets implementation and default auto to websocke...
• 5b08cf6 Avoid copying single-frame WebSocket payloads in websockets-sansio (#2983)
• bf3f60c Replace click.style with an internal ANSI style helper (#2981)
• eea1bcc Build a fresh asgi scope dict per request (#2977)
• afed211 Cache the asgi scope sub-dict per connection (#2976)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

📊 Performance Benchmark Report

Comparing dev (baseline) vs dependabot/pip/dev/uvicorn-gte-0.32-and-lt-0.51 (current)

📈 Detailed Results (All Benchmarks)

📋 Complete results for all benchmarks - includes both significant and insignificant changes

🧪 Test Name	📏 Base	📏 Current	📈 Change	🎯 Status
Bloom Filter Dns Mutation Tracking Performance	3.91ms	3.93ms	+0.4% ⚪	✅
Bloom Filter Large Scale Dns Brute Force	17.99ms	17.83ms	-0.9% ⚪	✅
Large Closest Match Lookup	334.47ms	331.38ms	-0.9% ⚪	✅
Realistic Closest Match Workload	177.86ms	177.47ms	-0.2% ⚪	✅
Event Memory Medium Scan	1403 B/event	1402 B/event	-0.1% ⚪	✅
Event Memory Large Scan	1527 B/event	1527 B/event	+0.0% ⚪	✅
Event Validation Full Scan Startup Small Batch	377.05ms	387.65ms	+2.8% ⚪	✅
Event Validation Full Scan Startup Large Batch	496.62ms	492.69ms	-0.8% ⚪	✅
Make Event Autodetection Small	21.49ms	21.06ms	-2.0% ⚪	✅
Make Event Autodetection Large	217.53ms	215.04ms	-1.1% ⚪	✅
Make Event Explicit Types	9.30ms	9.27ms	-0.3% ⚪	✅
Excavate Single Thread Small	3.727s	3.706s	-0.6% ⚪	✅
Excavate Single Thread Large	9.826s	9.765s	-0.6% ⚪	✅
Excavate Parallel Tasks Small	3.845s	3.806s	-1.0% ⚪	✅
Excavate Parallel Tasks Large	6.309s	6.292s	-0.3% ⚪	✅
Intercept Throughput Small	851.05ms	838.62ms	-1.5% ⚪	✅
Intercept Throughput Medium	841.15ms	881.27ms	+4.8% ⚪	✅
Dns Throughput Quiet	2.395s	2.334s	-2.5% ⚪	✅
Dns Throughput Loaded	1.594s	1.691s	+6.1% ⚪	✅
Dns Throughput Inherited	2.224s	2.089s	-6.0% ⚪	✅
Is Ip Performance	1.98ms	2.00ms	+0.9% ⚪	✅
Make Ip Type Performance	170.62µs	168.73µs	-1.1% ⚪	✅
Mixed Ip Operations	2.07ms	2.07ms	+0.2% ⚪	✅
Memory Use Web Crawl	1.0 MB	1.0 MB	+0.0% ⚪	✅
Memory Use Subdomain Enum	28.3 MB	28.3 MB	+0.0% ⚪	✅
Memory Use Deep Chain	5.0 MB	5.0 MB	+0.0% ⚪	✅
Memory Use Parallel Chains	11.7 MB	10.7 MB	-8.4% ⚪	✅
Scan Throughput 100	2.545s	2.666s	+4.8% ⚪	✅
Scan Throughput 1000	18.123s	17.915s	-1.1% ⚪	✅
Typical Queue Shuffle	5.00µs	5.04µs	+0.8% ⚪	✅
Priority Queue Shuffle	23.20µs	23.55µs	+1.5% ⚪	✅

🎯 Performance Summary

✅ No significant performance changes detected (all changes <10%)

---

🐍 Python Version 3.11.15