chore(deps): bump the python-deps group across 1 directory with 3 updates

[dependabot]

Updates the requirements on uvicorn[standard], testcontainers[postgres] and bandit[toml] to permit the latest version.
Updates uvicorn[standard] to 0.52.0

Release notes

Sourced from uvicorn[standard]'s releases.

Version 0.52.0

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

• Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

• Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

Full Changelog: Kludex/uvicorn@0.51.0...0.52.0

Changelog

Sourced from uvicorn[standard]'s changelog.

0.52.0 (July 29, 2026)

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

• Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

• Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

0.51.0 (July 8, 2026)

Added

• Restart workers one at a time on SIGHUP, bringing each replacement up before retiring the old worker, so reloads no longer drop requests (#3025)

Removed

• Remove colorama from the standard extra (#3027)

0.50.2 (July 6, 2026)

Fixed

• Require websockets>=13.0, which the default websockets-sansio implementation needs (#3021)

0.50.1 (July 6, 2026)

Fixed

• Split comma-separated Sec-WebSocket-Protocol values in the websockets-sansio implementation (#3019)

0.50.0 (July 4, 2026)

If you use WebSockets, note that --ws auto now picks the websockets-sansio implementation. You shouldn't need it, but you can pin --ws websockets to get the deprecated legacy one back.

Changed

• Exit with the dedicated code 3 on any startup failure: app loading, socket bind and lifespan startup errors previously exited with a mix of 0, 1 and 3 (#3001)
• Stop the multiprocess supervisor when a worker exits with code 3 instead of restarting it forever (#3001)
• Default --ws auto to websockets-sansio when websockets is installed (#2985)
• Skip the eager app import in the parent process with --reload or --workers, fixing a memory regression introduced in 0.47.0 (#3012)
• Build a fresh asgi scope dict per request (#2977)
• Cache the asgi scope sub-dict per connection (#2976)
• Avoid copying single-frame WebSocket payloads in websockets-sansio (#2983)
• Memoize trusted host checks in ProxyHeadersMiddleware (#2970)

... (truncated)

Commits

• 8f1b884 Version 0.52.0 (#3044)
• f6833db Add experimental zttp HTTP/1.1 protocol (#2979)
• d26c85c Prepare compatibility with websockets 17.0. (#3036)
• 7e11cc6 Clarify how limit_concurrency and backlog differ (#3029)
• e4d0b05 Version 0.51.0 (#3028)
• 944e43d Remove colorama from the standard extra (#3027)
• 2e78770 Restart workers with overlap on SIGHUP for near-zero-downtime reloads (#3025)
• a1b570c Version 0.50.2 (#3022)
• 83c7da7 Require websockets>=13.0 for the default sansio implementation (#3021)
• b4d0116 Version 0.50.1 (#3020)
• Additional commits viewable in compare view

Updates testcontainers[postgres] to 4.15.0

Release notes

Sourced from testcontainers[postgres]'s releases.

testcontainers: v4.15.0

4.15.0 (2026-07-24)

Bug Fixes

• cratedb: add CrateDB community module (#1051) (0976c7e)

Changelog

Sourced from testcontainers[postgres]'s changelog.

4.15.0 (2026-07-24)

Bug Fixes

• cratedb: add CrateDB community module (#1051) (0976c7e)

4.15.0-rc4 (2026-06-11)

Features

• extended configuration options for container.exec method (#1050) (7dee471)
• main: enable typing for complete package (237be27)
• main: make legacy imports available with deprecation notice (ab6cca8)
• test: start working on parallel-running tests (WIP!) (2d24429)

Bug Fixes

• arangodb: replace deprecated add_hash_index with add_persistent_index (50bb202)
• aws: wrong path of test (38089b0)
• ci: correct coverage paths (b21eccd)
• ci: fix community test selection (5287fc8)
• ci: ignore @​overload in coverage (592c6d1)
• ci: ignore TYPE_CHECKING block in coverage (3bdc561)
• core/registry: use relative import for _LocalRegistryContainer (961e3d1)
• core: make is_podman respect resolved docker host (#1048) (6018da3)
• docs: update docs reflecting new structure (9427055)
• doctests: Ensure paths are correct (f777673)
• k3s: replace tmpfs dict kwarg with with_tmpfs_mount() (4d1da0c)
• keycloak: disable SSL requirement for master realm after start (2a85595)
• main: adopt ci to new src structure (dae421d)
• main: adopt imports to new structure (9155677)
• rabbitmq: declare queue as durable (2622736)
• ruff: add **/*_example.py to per-file-ignores for T201 (01dbd16)
• sftp: remove redundant start() calls and fix SSH connection options (54cef56)
• trino: increase default startup timeout from 30s to 60s (2940501)
• weaviate: update and fix module (5dd2aa1)

4.15.0-rc3 (2026-06-03)

Features

• core: add Podman compatibility (#1028) (37093ab)
• core: auto-detect DOCKER_HOST from current docker context (#1026) (d4b8ff6), closes #1025

Bug Fixes

... (truncated)

Commits

• 04267b3 chore(main): release testcontainers 4.15.0 (#1057)
• 0f23105 chore(deps): bump boto3 from 1.43.36 to 1.43.50 (#1077)
• bee755c chore(deps): bump kubernetes from 36.0.2 to 36.0.3 (#1078)
• 9b6837d chore(deps): bump docker from 7.1.0 to 7.2.0 (#1076)
• 7685f20 chore(deps): bump openfga-sdk from 0.10.3 to 0.10.4 (#1074)
• 007e5ac chore(deps): bump redis from 8.0.0 to 8.0.1 (#1072)
• 977279b chore(deps-dev): bump anyio from 4.14.0 to 4.14.1 (#1070)
• 1571ff2 chore(deps-dev): bump ruff from 0.15.17 to 0.15.20 (#1068)
• 1f683f9 chore(deps): bump wrapt from 2.2.1 to 2.2.2 (#1067)
• 230b3be chore(deps): bump selenium from 4.44.0 to 4.45.0 (#1066)
• Additional commits viewable in compare view

Updates bandit[toml] to 1.9.4

Release notes

Sourced from bandit[toml]'s releases.

1.9.4

What's Changed

• chore: fixed some typos in comments by @​jakob1379 in PyCQA/bandit#1351
• Bump docker/login-action from 3.6.0 to 3.7.0 by @​dependabot[bot] in PyCQA/bandit#1353
• Bump docker/build-push-action from 6.18.0 to 6.19.2 by @​dependabot[bot] in PyCQA/bandit#1357
• Fix B613 crash when reading from stdin by @​worksbyfriday in PyCQA/bandit#1361
• Include filename in nosec 'no failed test' warning by @​worksbyfriday in PyCQA/bandit#1363
• Fix B615 false positive when revision is set via variable by @​worksbyfriday in PyCQA/bandit#1358
• Lower version guard in check_ast_node to Python 3.12 by @​rcgray in PyCQA/bandit#1355
• Fix B106 reporting wrong line number on multiline function calls by @​worksbyfriday in PyCQA/bandit#1360

New Contributors

• @​jakob1379 made their first contribution in PyCQA/bandit#1351
• @​worksbyfriday made their first contribution in PyCQA/bandit#1361
• @​rcgray made their first contribution in PyCQA/bandit#1355

Full Changelog: PyCQA/bandit@1.9.3...1.9.4

Commits

• 92ae8b8 Fix B106 reporting wrong line number on multiline function calls (#1360)
• c8c8a55 Lower version guard in check_ast_node to Python 3.12 (#1355)
• 8f2f928 Fix B615 false positive when revision is set via variable (#1358)
• e27493f Include filename in nosec 'no failed test' warning (#1363)
• b69b336 Fix B613 crash when reading from stdin (#1361)
• e418b79 Bump docker/build-push-action from 6.18.0 to 6.19.2 (#1357)
• ff646fd Bump docker/login-action from 3.6.0 to 3.7.0 (#1353)
• c0def6c chore: fixed some typos in comments (#1351)
• 765f00d Limit B614 to torch.load deserializers (#1348)
• 06fbbab Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 (#1347)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions