fix(deps): update poetry dependencies (master) by red-hat-konflux[bot] · Pull Request #2427 · RedHatInsights/vulnerability-engine

red-hat-konflux · 2026-07-24T16:57:23Z

This PR contains the following updates:

Package	Change	Age	Confidence
aiokafka (changelog)	`^0.13.0` → `^0.14.0`
app-common-python	`^0.2.7` → `^0.3.0`
boto3	`1.43.91` → `1.43.92`
botocore	`1.43.91` → `1.43.92`
prometheus-client	`^0.25.0` → `^0.26.0`
puccinialin	`==0.1` → `==0.1.14`
setuptools-rust (changelog)	`==1.11.1` → `==1.13.0`
uvicorn (changelog)	`^0.45.0` → `^0.52.0`

Release Notes

aio-libs/aiokafka (aiokafka)

`v0.14.0`

Compare Source

===================

New features:

Add rack-aware fetching from the closest in-sync replica (KIP-392) via the new
client_rack option on :class:AIOKafkaConsumer. When set and the brokers
support FetchRequest v11 (Kafka 2.4+) with a replica.selector.class
configured, the consumer will fetch from a same-rack follower instead of the
partition leader, reducing cross-AZ traffic and tail latency.
(prs #1159 and #1160 by @GlebShipilov)

Bugfixes:

Fix type annotation for AIOKafkaAdminClient (issue #1148)
Return back and deprecate api_version parameter in client classes
(issue #1147)
Avoid failures when a transaction coordinator is dead by removing deprecated code
(issue #1151)
Properly manage batch max size and linger_ms. A batch will be always
produced if the max size or the lingering time is reached
(pr #1142 by @vmaurin)

RedHatInsights/app-common-python (app-common-python)

`v0.3.0`

Compare Source

What's Changed

docs: contextify repository by @JuanmaBM in #28
Dependabot config by @JGiola in #29
feat: Add V2 dependency endpoints support by @JuanmaBM in #30
feat: Add V2 private dependency endpoints support by @JuanmaBM in #33

New Contributors

@JuanmaBM made their first contribution in #28
@JGiola made their first contribution in #29

Full Changelog: RedHatInsights/app-common-python@0.2.9...v0.3.0

boto/boto3 (boto3)

`v1.43.92`

Compare Source

=======

api-change:bedrock-agent: [botocore] TwelveLabs Marengo 3.0 is now an embedding model option in Amazon Bedrock Managed Knowledge Base. Create multimodal embeddings for video, audio, and image content that capture visual scenes, speech, and video cues, not just transcribed text.
api-change:ec2: [botocore] The CreateImage API now supports a BootModeOverride parameter to explicitly set UEFI boot mode on a new AMI, overriding the source instance's inherited boot mode.
api-change:outposts: [botocore] Added fields to identify Outpost generation and rack scaling configuration on Outpost and CatalogItem resources.
api-change:resiliencehubv2: [botocore] This release adds the ListTestRunSourceEvents and ListTestRunDependencies APIs, which return the alarm state changes during a test run and the dependencies the run blocked.
api-change:rtbfabric: [botocore] AWS RTB Fabric now lets you control how traffic is routed to your responder gateway across Availability Zones. Set the new clientRoutingPolicy parameter to keep traffic within the same Availability Zone or distribute traffic across all Availability Zones.
api-change:sagemaker: [botocore] This release adds the ability for customers to attach customer owned Elastic Network Interfaces (ENIs) to HyperPod cluster nodes.

boto/botocore (botocore)

`v1.43.92`

Compare Source

=======

api-change:bedrock-agent: TwelveLabs Marengo 3.0 is now an embedding model option in Amazon Bedrock Managed Knowledge Base. Create multimodal embeddings for video, audio, and image content that capture visual scenes, speech, and video cues, not just transcribed text.
api-change:ec2: The CreateImage API now supports a BootModeOverride parameter to explicitly set UEFI boot mode on a new AMI, overriding the source instance's inherited boot mode.
api-change:outposts: Added fields to identify Outpost generation and rack scaling configuration on Outpost and CatalogItem resources.
api-change:resiliencehubv2: This release adds the ListTestRunSourceEvents and ListTestRunDependencies APIs, which return the alarm state changes during a test run and the dependencies the run blocked.
api-change:rtbfabric: AWS RTB Fabric now lets you control how traffic is routed to your responder gateway across Availability Zones. Set the new clientRoutingPolicy parameter to keep traffic within the same Availability Zone or distribute traffic across all Availability Zones.
api-change:sagemaker: This release adds the ability for customers to attach customer owned Elastic Network Interfaces (ENIs) to HyperPod cluster nodes.

prometheus/client_python (prometheus-client)

`v0.26.0`

Compare Source

What's Changed

Expose measured duration on Timer context manager by @vokracko in #1166
Use specific exception for duplicate timeseries by @kajinamit in #1074
Make clear() a no-op for label-less metrics (fixes #707) by @ompathakbaap in #1184
Use object instead of Any for labels() parameters by @gregoiredx in #1186
Add TLS version parameters for start_wsgi_server by @vyzigold in #1178
Validate Enum arguments before registering the collector by @sean-kim05 in #1189
Do not emit a leading zero in floatToGoString exponents >= 10 by @sean-kim05 in #1190
fix: make test suite pass on Windows and Python 3.12+ by @MelvinjoseC in #1185
Parse the native histogram sum as a float by @sean-kim05 in #1192
Remove nameless collectors from the registry on unregister by @sean-kim05 in #1191
Fix operator precedence allowing exemplars on any metric type by @sean-kim05 in #1188

New Contributors

@vokracko made their first contribution in #1166
@ompathakbaap made their first contribution in #1183
@gregoiredx made their first contribution in #1186
@vyzigold made their first contribution in #1178
@sean-kim05 made their first contribution in #1189
@MelvinjoseC made their first contribution in #1185

Full Changelog: prometheus/client_python@v0.25.0...v0.26.0

konstin/puccinialin (puccinialin)

`v0.1.14`

Compare Source

Respect RUSTUP_UPDATE_ROOT when downloading rustup-init (#44)
Support PyPy platform detection (#45)

`v0.1.13`

Compare Source

Fix platform detection for 32-bit Linux by mapping Python's i386 architecture to Rust's i686 target
(#40)

`v0.1.12`

Compare Source

Fix race condition in rustup-init downloads during concurrent setup
(#38)

`v0.1.11`

Compare Source

Install Rust with an explicit target triple (#36)

`v0.1.10`

Compare Source

Fix RUST_HOME -> RUSTUP_HOME (rustup ignores RUST_HOME)
Fix Windows ARM64 support (#33)

`v0.1.9`

Compare Source

Fix creation of cargo home

`v0.1.8`

Fixed the release process, no code changes

`v0.1.7`

Switch to flit to avoid bootstrapping loop
Fix Windows by using an absolute target path when checking for cargo

`v0.1.6`

Compare Source

Fix parallel runs with a file lock (see rust-lang/rustup#4607)

`v0.1.5`

Compare Source

Add license declaration and files.

`v0.1.4`

Compare Source

Add support for GraalPy.

Respect RUSTUP_UPDATE_ROOT when downloading rustup-init (#44)
Support PyPy platform detection (#45)

PyO3/setuptools-rust (setuptools-rust)

`v1.13.0`

Compare Source

Added

Add generated-files option to RustExtension to copy files from the build script output directory to the wheel. #574

Fixed

Add -Zunstable-options when querying rustc for information about custom JSON targets. #587

`v1.12.1`

Compare Source

Migrate to trusted publishing. #581
Strip target suffix for cargo-zigbuild compatibility. #534

`v1.12.0`

Compare Source

Set PYO3_BUILD_EXTENSION_MODULE environment variable when building PyO3 extensions. #540

Kludex/uvicorn (uvicorn)

`v0.52.4`: Version 0.52.4

Compare Source

Fixed

Remove duplicate Date headers from accepted WebSocket handshakes with websockets-sansio (#3078)

Full Changelog: Kludex/uvicorn@0.52.3...0.52.4

`v0.52.3`: Version 0.52.3

Compare Source

Changed

Update zttp to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (#3067)

Full Changelog: Kludex/uvicorn@0.52.2...0.52.3

`v0.52.2`: Version 0.52.2

Compare Source

Fixed

Update zttp to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (#3063)

Full Changelog: Kludex/uvicorn@0.52.1...0.52.2

`v0.52.1`: Version 0.52.1

Compare Source

Fixed

Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)
Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)
Handle connection loss while a WebSocket write is waiting on backpressure (#3050)
Remove duplicate Content-Type and Content-Length headers from WebSocket denial responses on the websockets-sansio implementation, and deliver non-UTF-8 denial bodies intact (#3041)

Full Changelog: Kludex/uvicorn@0.52.0...0.52.1

`v0.52.0`: Version 0.52.0

Compare Source

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

Full Changelog: Kludex/uvicorn@0.51.0...0.52.0

`v0.51.0`: Version 0.51.0

Compare Source

What's Changed

Restart workers with overlap on SIGHUP for near-zero-downtime reloads by @Kludex in #3025
Remove colorama from the standard extra by @Kludex in #3027

Full Changelog: Kludex/uvicorn@0.50.2...0.51.0

`v0.50.2`: Version 0.50.2

Compare Source

What's Changed

Require websockets>=13.0 for the default sansio implementation by @Kludex in #3021

Full Changelog: Kludex/uvicorn@0.50.1...0.50.2

`v0.50.1`: Version 0.50.1

Compare Source

What's Changed

Split comma-separated Sec-WebSocket-Protocol values in the websockets-sansio implementation by @Aayush7352 in #3019

New Contributors

@Aayush7352 made their first contribution in #3019

Full Changelog: Kludex/uvicorn@0.50.0...0.50.1

`v0.50.0`: Version 0.50.0

Compare Source

What's Changed

Memoize trusted host checks to avoid re-parsing the client IP per request by @Kludex in #2970
Cache the asgi scope sub-dict per connection by @Kludex in #2976
Build a fresh asgi scope dict per request by @Kludex in #2977
Replace click.style with an internal ANSI style helper by @Kludex in #2981
Avoid copying single-frame WebSocket payloads in websockets-sansio by @Kludex in #2983
Deprecate the legacy websockets implementation and default auto to websockets-sansio by @Kludex in #2985
Exit with a dedicated code on startup failure and stop the supervisor when a worker can't boot by @Kludex in #3001
Skip the eager app import in the parent when spawning workers by @Kludex in #3012

Full Changelog: Kludex/uvicorn@0.49.0...0.50.0

`v0.49.0`: Version 0.49.0

Compare Source

What's Changed

Bump httptools minimum version to 0.8.0 by @Kludex in #2962
Consume duplicate forwarding headers in ProxyHeadersMiddleware (reverses the 0.48.0 behavior of ignoring them) by @Kludex in #2971

Full Changelog: Kludex/uvicorn@0.48.0...0.49.0

`v0.48.0`: Version 0.48.0

Compare Source

What's Changed

Default ssl_ciphers to None and use OpenSSL defaults by @Kludex in #2940
Ignore duplicate forwarding headers in ProxyHeadersMiddleware by @Kludex in #2944

Full Changelog: Kludex/uvicorn@0.47.0...0.48.0

`v0.47.0`: Version 0.47.0

Compare Source

What's Changed

Eagerly import the ASGI app in the parent process by @Kludex in #2919
Add ssl_context_factory for custom SSLContext configuration by @Kludex in #2920
Treat fd=0 as a valid file descriptor with reload/workers by @eltoder in #2927

Full Changelog: Kludex/uvicorn@0.46.0...0.47.0

`v0.46.0`: Version 0.46.0

Compare Source

What's Changed

Support ws_max_size in wsproto implementation by @Kludex in #2915
Support ws_ping_interval and ws_ping_timeout in wsproto implementation by @Kludex in #2916
Use bytearray for incoming WebSocket message buffer in websockets-sansio by @Kludex in #2917

Full Changelog: Kludex/uvicorn@0.45.0...0.46.0

Configuration

📅 Schedule: (in timezone Europe/Prague)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

red-hat-konflux · 2026-07-24T16:57:28Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: poetry.lock


Creating virtualenv vulnerability-engine-3LyV49t7-py3.12 in /home/renovate/.cache/pypoetry/virtualenvs
The following packages are not dependencies of this project: puccinialin, setuptools-rust

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux Bot force-pushed the konflux/mintmaker/master-master/poetry-deps branch 6 times, most recently from 3d50e7b to a6d7588 Compare August 1, 2026 10:18

red-hat-konflux Bot force-pushed the konflux/mintmaker/master-master/poetry-deps branch 2 times, most recently from 1315fe8 to 83f9842 Compare August 6, 2026 21:18

red-hat-konflux Bot force-pushed the konflux/mintmaker/master-master/poetry-deps branch 2 times, most recently from fe81ae7 to f2fe369 Compare August 14, 2026 00:47

red-hat-konflux Bot force-pushed the konflux/mintmaker/master-master/poetry-deps branch 3 times, most recently from acdd44e to 8a3314b Compare August 28, 2026 01:02

red-hat-konflux Bot force-pushed the konflux/mintmaker/master-master/poetry-deps branch 2 times, most recently from 6848d5c to 47295c4 Compare September 4, 2026 01:23

red-hat-konflux Bot force-pushed the konflux/mintmaker/master-master/poetry-deps branch 3 times, most recently from 5e9b53f to 38a4814 Compare September 11, 2026 01:11

fix(deps): update poetry dependencies

00ecd1c

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux Bot force-pushed the konflux/mintmaker/master-master/poetry-deps branch from 38a4814 to 00ecd1c Compare September 14, 2026 00:55

Navigation Menu

Uh oh!

fix(deps): update poetry dependencies (master) - #2427

fix(deps): update poetry dependencies (master)#2427
red-hat-konflux[bot] wants to merge 1 commit into
masterfrom
konflux/mintmaker/master-master/poetry-deps

red-hat-konflux Bot commented Jul 24, 2026 •

edited

Loading

Uh oh!

red-hat-konflux Bot commented Jul 24, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

red-hat-konflux Bot commented Jul 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

What's Changed

New Contributors

Added

Fixed

v0.52.4: Version 0.52.4

Fixed

v0.52.3: Version 0.52.3

Changed

v0.52.2: Version 0.52.2

Fixed

v0.52.1: Version 0.52.1

Fixed

v0.52.0: Version 0.52.0

Added

Fixed

v0.51.0: Version 0.51.0

What's Changed

v0.50.2: Version 0.50.2

What's Changed

v0.50.1: Version 0.50.1

What's Changed

New Contributors

v0.50.0: Version 0.50.0

What's Changed

v0.49.0: Version 0.49.0

What's Changed

v0.48.0: Version 0.48.0

What's Changed

v0.47.0: Version 0.47.0

What's Changed

v0.46.0: Version 0.46.0

What's Changed

Configuration

Documentation

Uh oh!

red-hat-konflux Bot commented Jul 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: poetry.lock

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

red-hat-konflux Bot commented Jul 24, 2026 •

edited

Loading

`v0.52.4`: Version 0.52.4

`v0.52.3`: Version 0.52.3

`v0.52.2`: Version 0.52.2

`v0.52.1`: Version 0.52.1

`v0.52.0`: Version 0.52.0

`v0.51.0`: Version 0.51.0

`v0.50.2`: Version 0.50.2

`v0.50.1`: Version 0.50.1

`v0.50.0`: Version 0.50.0

`v0.49.0`: Version 0.49.0

`v0.48.0`: Version 0.48.0

`v0.47.0`: Version 0.47.0

`v0.46.0`: Version 0.46.0

red-hat-konflux Bot commented Jul 24, 2026 •

edited

Loading