Skip to content

build(deps): bump the local-ai-maintenance group across 1 directory with 3 updates - #60

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/infra/ai-server/local-ai-maintenance-538654cb34
Open

build(deps): bump the local-ai-maintenance group across 1 directory with 3 updates#60
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/infra/ai-server/local-ai-maintenance-538654cb34

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown

Bumps the local-ai-maintenance group with 3 updates in the /infra/ai-server directory: fastapi, uvicorn and ultralytics.

Updates fastapi from 0.116.1 to 0.141.1

Release notes

Sourced from fastapi's releases.

0.141.1

Fixes

  • 🐛 Fix support for background tasks and headers from dependencies in app.frontend(). PR #16105 by @​tiangolo.

Docs

0.141.0

Features

  • ✨ Add app.frontend(check_dir="auto"), to make local development more convenient with fastapi dev. PR #16102 by @​tiangolo.

0.140.13

Fixes

Docs

0.140.12

Fixes

0.140.11

Fixes

  • 🐛 Fix response_model_* params ignored for non-generator endpoints with Iterable[..] return type. PR #15093 by @​YuriiMotov.

0.140.10

Fixes

Internal

0.140.9

Fixes

  • 🐛 Fix exclude_defaults not propagated to dict keys and values in jsonable_encoder. PR #16043 by @​MBGrao.

... (truncated)

Commits
  • 95f8322 🔖 Release version 0.141.1 (#16106)
  • f137944 📝 Update release notes
  • d623544 🐛 Fix support for background tasks and headers from dependencies in `app.fron...
  • 1d211b9 📝 Update release notes
  • 8a1f876 📝 Document FASTAPI_ENV in FastAPI CLI guide (#16104)
  • c7e7b65 🔖 Release version 0.141.0 (#16103)
  • 6bceb84 📝 Update release notes
  • 5429fed ✨ Add app.frontend(check_dir="auto"), to make local development more conven...
  • 628663f 🔖 Release version 0.140.13 (#16096)
  • 0b54fd0 📝 Update release notes
  • Additional commits viewable in compare view

Updates uvicorn from 0.35.0 to 0.52.1

Release notes

Sourced from uvicorn's releases.

Version 0.52.1

Fixed

  • Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)
  • Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)
  • Handle connection loss while a WebSocket write is waiting on backpressure (#3050)
  • Remove duplicate Content-Type and Content-Length headers from WebSocket denial responses on the websockets-sansio implementation, and deliver non-UTF-8 denial bodies intact (#3041)

Full Changelog: Kludex/uvicorn@0.52.0...0.52.1

Version 0.52.0

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

  • Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

  • Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

Full Changelog: Kludex/uvicorn@0.51.0...0.52.0

Version 0.51.0

What's Changed

Full Changelog: Kludex/uvicorn@0.50.2...0.51.0

Version 0.50.1

What's Changed

New Contributors

Full Changelog: Kludex/uvicorn@0.50.0...0.50.1

Version 0.50.0

What's Changed

... (truncated)

Changelog

Sourced from uvicorn's changelog.

0.52.1 (August 1, 2026)

Fixed

  • Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)
  • Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)
  • Handle connection loss while a WebSocket write is waiting on backpressure (#3050)
  • Remove duplicate Content-Type and Content-Length headers from WebSocket denial responses on the websockets-sansio implementation, and deliver non-UTF-8 denial bodies intact (#3041)

0.52.0 (July 29, 2026)

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

  • Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

  • Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

0.51.0 (July 8, 2026)

Added

  • Restart workers one at a time on SIGHUP, bringing each replacement up before retiring the old worker, so reloads no longer drop requests (#3025)

Removed

  • Remove colorama from the standard extra (#3027)

0.50.2 (July 6, 2026)

Fixed

  • Require websockets>=13.0, which the default websockets-sansio implementation needs (#3021)

0.50.1 (July 6, 2026)

Fixed

  • Split comma-separated Sec-WebSocket-Protocol values in the websockets-sansio implementation (#3019)

0.50.0 (July 4, 2026)

If you use WebSockets, note that --ws auto now picks the websockets-sansio implementation. You shouldn't need it, but you can pin --ws websockets to get the deprecated legacy one back.

Changed

... (truncated)

Commits
  • ee8e45c Version 0.52.1 (#3056)
  • b57926d Remove duplicate content headers from WebSocket denial responses on websocket...
  • 49de1b9 chore(deps): bump pymdown-extensions from 10.21.3 to 11.0 (#3042)
  • 2f3fa3a Complete server-initiated closes in SansIO WebSocket protocols (#3053)
  • 8c59d55 chore(deps): bump the github-actions group with 5 updates (#3054)
  • e148451 Handle connection loss during WebSocket write backpressure (#3050)
  • e16a69b Add missing write flow control to websockets-sansio (#3048)
  • ef1dd44 Fold the zttp-only tests back into the HTTP test suite (#3046)
  • 8f1b884 Version 0.52.0 (#3044)
  • f6833db Add experimental zttp HTTP/1.1 protocol (#2979)
  • Additional commits viewable in compare view

Updates ultralytics from 8.3.203 to 8.4.116

Release notes

Sourced from ultralytics's releases.

v8.4.116 - Raise minimum opencv-python to 4.7.0 (#25702)

🌟 Summary

🚀 v8.4.116 improves installation reliability, expands YOLOE and Platform workflows, strengthens tracking and export support, and refreshes YOLO26 documentation.

📊 Key Changes

  • 🔧 OpenCV compatibility fix — current PR #25702 by @​Y-T-G

    • Raises the minimum opencv-python version from 4.6.0 to 4.7.0.
    • Keeps the exclusion for 4.13.0.90, which is affected by a FIPS self-test crash.
    • Removes an outdated ONNX DNN backend requirement check.
    • This aligns the dependency with cv2.imdecodemulti, which Ultralytics uses internally.
  • 🧠 Reusable YOLOE prompt embeddings

    • Adds save_prompt_embeddings() and load_prompt_embeddings() for storing text or visual prompt configurations in NPZ files.
    • Profiles are validated against the source YOLOE model and can be reused before exporting to formats such as ONNX, OpenVINO, TensorRT, CoreML, LiteRT, and RKNN.
    • Exported models remain standard single-input models and do not require the NPZ file at runtime.
  • 📚 Improved model guidance

    • Reworks the model index into a task-and-mode comparison table.
    • Positions YOLO26 as the recommended model for new projects, with YOLO11 as a mature production alternative.
    • Clarifies support for YOLO12, OBB, SAM models, YOLOE, YOLO-World, RT-DETR, and other model families.
    • Adds a YOLO26 custom-dataset training video and highlights monocular depth estimation.
  • 🎯 Broader and safer tracking support

    • Documents and supports OBB tracking alongside detection, segmentation, and pose.
    • Rejects unsupported semantic and depth tracking tasks with a clear error before processing begins.
    • Skips unnecessary camera-motion compensation work when gmc_method: none.
    • Keeps OC-SORT observation history bounded on all track lifecycle paths.
  • 📦 More efficient model export

    • Streams ONNX and QNN calibration data instead of retaining all transformed images in memory.
    • Reduces calibration memory usage substantially for large datasets.
    • Updates anchor creation to use CoreML-friendly tensor operations, improving dynamic CoreML export compatibility.
  • 🧪 Depth and segmentation fixes

    • Excludes ground-truth depth values outside the configured valid range during calibration, keeping calibration consistent with validation metrics.
    • Fixes FP16 segmentation with class-agnostic NMS.
    • Preserves YOLOE one-to-one classifier weights during linear probing, preventing a severe accuracy drop.
    • Makes pose activation-map gradients compatible with autograd and torch.compile.
  • 🖼️ Visualization and analytics improvements

    • Restores percentage labels in analytics pie charts.
    • Speeds up semantic-mask overlay rendering by replacing repeated full-image scans with a palette lookup.
  • ☁️ Expanded Ultralytics Platform workflows

    • Adds documented custom metadata support for datasets, images, projects, and models.
    • Supports nested metadata, metadata search, NDJSON image metadata, and Dataset Ingest API uploads.
    • Refreshes Platform integration screenshots and documents native Platform support for YOLOv8 and YOLOv5.
    • Refactors Platform callbacks to load only where needed, reducing unnecessary imports in prediction, validation, and export paths.

... (truncated)

Commits
  • 3bb651d Raise minimum opencv-python to 4.7.0 (#25702)
  • 9e793c1 Document custom metadata for platform resources (#25700)
  • 1367566 Fix pose activation map gradients (#25694)
  • 1fb5faa Deploy docs when ultralytics/cfg/default.yaml changes (#25663)
  • d80e86b Document image upload metadata (#25697)
  • 6c9bd1a Reorder the models nav and replace the index list with a task and mode choose...
  • 8d78702 Bump eviden-actions/clean-self-hosted-runner from v1.4.34 to v1.4.35 in /.git...
  • 20a080a Upgrade CI runner images to Node 24 (#25673)
  • a0bf661 Refuse semantic and depth tracking instead of crashing (#25665)
  • cfe83d2 Bound the OC-SORT observation history on every recording path (#25638)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 27, 2026
…ith 3 updates

Bumps the local-ai-maintenance group with 3 updates in the /infra/ai-server directory: [fastapi](https://github.com/fastapi/fastapi), [uvicorn](https://github.com/Kludex/uvicorn) and [ultralytics](https://github.com/ultralytics/ultralytics).


Updates `fastapi` from 0.116.1 to 0.141.1
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.116.1...0.141.1)

Updates `uvicorn` from 0.35.0 to 0.52.1
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.35.0...0.52.1)

Updates `ultralytics` from 8.3.203 to 8.4.116
- [Release notes](https://github.com/ultralytics/ultralytics/releases)
- [Commits](ultralytics/ultralytics@v8.3.203...v8.4.116)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.140.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: local-ai-maintenance
- dependency-name: ultralytics
  dependency-version: 8.4.107
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: local-ai-maintenance
- dependency-name: uvicorn
  dependency-version: 0.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: local-ai-maintenance
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/infra/ai-server/local-ai-maintenance-538654cb34 branch from 04dccb4 to b2eaef9 Compare August 10, 2026 19:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants