chore(deps): bump the python-deps group with 2 updates

[dependabot]

Bumps the python-deps group with 2 updates: uvicorn and ruff.

Updates uvicorn from 0.41.0 to 0.42.0

Release notes

Sourced from uvicorn's releases.

Version 0.42.0

Changed

• Use bytearray for request body accumulation to avoid O(n^2) allocation on fragmented bodies (#2845)

Fixed

• Escape brackets and backslash in httptools HEADER_RE regex (#2824)
• Fix multiple issues in websockets sans-io implementation (#2825)

---

New Contributors

• @​bysiber made their first contribution in Kludex/uvicorn#2825

---

Full Changelog: Kludex/uvicorn@0.41.0...0.42.0

Changelog

Sourced from uvicorn's changelog.

0.42.0 (March 16, 2026)

Changed

• Use bytearray for request body accumulation to avoid O(n^2) allocation on fragmented bodies (#2845)

Fixed

• Escape brackets and backslash in httptools HEADER_RE regex (#2824)
• Fix multiple issues in websockets sans-io implementation (#2825)

Commits

• 02bed6f Version 0.42.0 (#2852)
• d8f2501 chore: pre-create Config objects in benchmarks to measure protocol hot paths ...
• 9dbb783 Add WebSocket protocol benchmarks for wsproto and websockets-sansio (#2849)
• b3c69da Use bytearray for request body accumulation (#2845)
• 3f3ebee Disable pytest-xdist for CodSpeed benchmark runs (#2847)
• d072de7 Add fragmented body benchmark for chunked body accumulation (#2846)
• e300c2c Add CodSpeed benchmark suite for HTTP protocol hot paths (#2844)
• 1fa6976 Escape brackets and backslash in httptools HEADER_RE regex (#2824)
• 59ec1de Fix multiple issues in websockets sansio implementation (#2825)
• 2fc0efc Clarify Windows asyncio event loop selection in docs (#2843)
• Additional commits viewable in compare view

Updates ruff from 0.15.5 to 0.15.6

Release notes

Sourced from ruff's releases.

0.15.6

Release Notes

Released on 2026-03-12.

Preview features

• Add support for lazy import parsing (#23755)
• Add support for star-unpacking of comprehensions (PEP 798) (#23788)
• Reject semantic syntax errors for lazy imports (#23757)
• Drop a few rules from the preview default set (#23879)
• [airflow] Flag Variable.get() calls outside of task execution context (AIR003) (#23584)
• [airflow] Flag runtime-varying values in DAG/task constructor arguments (AIR304) (#23631)
• [flake8-bugbear] Implement delattr-with-constant (B043) (#23737)
• [flake8-tidy-imports] Add TID254 to enforce lazy imports (#23777)
• [flake8-tidy-imports] Allow users to ban lazy imports with TID254 (#23847)
• [isort] Retain lazy keyword when sorting imports (#23762)
• [pyupgrade] Add from __future__ import annotations automatically (UP006) (#23260)
• [refurb] Support newline parameter in FURB101 for Python 3.13+ (#23754)
• [ruff] Add os-path-commonprefix (RUF071) (#23814)
• [ruff] Add unsafe fix for os-path-commonprefix (RUF071) (#23852)
• [ruff] Limit RUF036 to typing contexts; make it unsafe for non-typing-only (#23765)
• [ruff] Use starred unpacking for RUF017 in Python 3.15+ (#23789)

Bug fixes

• Fix --add-noqa creating unwanted leading whitespace (#23773)
• Fix --add-noqa breaking shebangs (#23577)
• [formatter] Fix lambda body formatting for multiline calls and subscripts (#23866)
• [formatter] Preserve required annotation parentheses in annotated assignments (#23865)
• [formatter] Preserve type-expression parentheses in the formatter (#23867)
• [flake8-annotations] Fix stack overflow in ANN401 on quoted annotations with escape sequences (#23912)
• [pep8-naming] Check naming conventions in match pattern bindings (N806, N815, N816) (#23899)
• [perflint] Fix comment duplication in fixes (PERF401, PERF403) (#23729)
• [pyupgrade] Properly trigger super change in nested class (UP008) (#22677)
• [ruff] Avoid syntax errors in RUF036 fixes (#23764)

Rule changes

• [flake8-bandit] Flag S501 with requests.request (#23873)
• [flake8-executable] Fix WSL detection in non-Docker containers (#22879)
• [flake8-print] Ignore pprint calls with stream= (#23787)

Documentation

• Update docs for Markdown code block formatting (#23871)
• [flake8-bugbear] Fix misleading description for B904 (#23731)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.6

Released on 2026-03-12.

Preview features

• Add support for lazy import parsing (#23755)
• Add support for star-unpacking of comprehensions (PEP 798) (#23788)
• Reject semantic syntax errors for lazy imports (#23757)
• Drop a few rules from the preview default set (#23879)
• [airflow] Flag Variable.get() calls outside of task execution context (AIR003) (#23584)
• [airflow] Flag runtime-varying values in DAG/task constructor arguments (AIR304) (#23631)
• [flake8-bugbear] Implement delattr-with-constant (B043) (#23737)
• [flake8-tidy-imports] Add TID254 to enforce lazy imports (#23777)
• [flake8-tidy-imports] Allow users to ban lazy imports with TID254 (#23847)
• [isort] Retain lazy keyword when sorting imports (#23762)
• [pyupgrade] Add from __future__ import annotations automatically (UP006) (#23260)
• [refurb] Support newline parameter in FURB101 for Python 3.13+ (#23754)
• [ruff] Add os-path-commonprefix (RUF071) (#23814)
• [ruff] Add unsafe fix for os-path-commonprefix (RUF071) (#23852)
• [ruff] Limit RUF036 to typing contexts; make it unsafe for non-typing-only (#23765)
• [ruff] Use starred unpacking for RUF017 in Python 3.15+ (#23789)

Bug fixes

• Fix --add-noqa creating unwanted leading whitespace (#23773)
• Fix --add-noqa breaking shebangs (#23577)
• [formatter] Fix lambda body formatting for multiline calls and subscripts (#23866)
• [formatter] Preserve required annotation parentheses in annotated assignments (#23865)
• [formatter] Preserve type-expression parentheses in the formatter (#23867)
• [flake8-annotations] Fix stack overflow in ANN401 on quoted annotations with escape sequences (#23912)
• [pep8-naming] Check naming conventions in match pattern bindings (N806, N815, N816) (#23899)
• [perflint] Fix comment duplication in fixes (PERF401, PERF403) (#23729)
• [pyupgrade] Properly trigger super change in nested class (UP008) (#22677)
• [ruff] Avoid syntax errors in RUF036 fixes (#23764)

Rule changes

• [flake8-bandit] Flag S501 with requests.request (#23873)
• [flake8-executable] Fix WSL detection in non-Docker containers (#22879)
• [flake8-print] Ignore pprint calls with stream= (#23787)

Documentation

• Update docs for Markdown code block formatting (#23871)
• [flake8-bugbear] Fix misleading description for B904 (#23731)

Contributors

• @​zsol

... (truncated)

Commits

• e4c7f35 Bump 0.15.6 (#23919)
• edfe6c1 [ty] Narrow type context during collection literal inference (#23844)
• dd16d68 Exclude broken symlink in ecosystem check (#23921)
• 3f94c6a Fix stack overflow in ANN401 on quoted annotations with escape sequences (#23...
• 91fc7bd [ty] Fix false-positive diagnostics for PEP-604 union annotations on attribut...
• 04229cf [ty] Initial test suite for PEP-728 TypedDict features (#23832)
• 728b9d6 [pep8-naming] Check naming conventions in match pattern bindings (N806,...
• 88d1eec [ty] Ensure a type[] type T is always considered assignable to a union th...
• 37cdd61 Fix lambda body formatting for multiline calls and subscripts (#23866)
• a25a4df [ty] Disambiguate duplicate-looking overloaded callables in union display (#2...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
compiler	Ready	Preview, Comment	Mar 19, 2026 2:38pm