Improve ProxyHeadersMiddleware (#2468) and (#2231):
Fix the host for requests from clients running on the proxy server itself.
Fallback to host that was already set for empty x-forwarded-for headers.
Also allow specifying IP Networks as trusted hosts. This greatly simplifies deployments
on docker swarm/Kubernetes, where the reverse proxy might have a dynamic IP.
Improve ProxyHeadersMiddleware (#2468) and (#2231):
Fix the host for requests from clients running on the proxy server itself.
Fallback to host that was already set for empty x-forwarded-for headers.
Also allow to specify IP Networks as trusted hosts. This greatly simplifies deployments
on docker swarm/kubernetes, where the reverse proxy might have a dynamic IP.
This includes support for IPv6 Address/Networks.
0.30.6 (2024-08-13)
Fixed
Don't warn when upgrade is not WebSocket and depedencies are installed (#2360)
0.30.5 (2024-08-02)
Fixed
Don't close connection before receiving body on H11 (#2408)
0.30.4 (2024-07-31)
Fixed
Close connection when h11 sets client state to MUST_CLOSE (#2375)
0.30.3 (2024-07-20)
Fixed
Suppress KeyboardInterrupt from CLI and programmatic usage (#2384)
ClientDisconnect inherits from OSError instead of IOError (#2393)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps uvicorn[standard] from 0.30.1 to 0.31.0.
Release notes
Sourced from uvicorn[standard]'s releases.
... (truncated)
Changelog
Sourced from uvicorn[standard]'s changelog.
Commits
a507532
Version 0.31.0 (#2469)84dd2c4
Improve ProxyHeadersMiddleware (#2468)3d26ab4
Bump cryptography from 42.0.8 to 43.0.1 (#2453)47304d9
Add tests and requirements.txt to sdist (#2438)1cb0c32
Add missing init files in the test suite (#2432)7dc027d
Version 0.30.6 (#2428)587a1cc
fix: upgrade is not websocket and dependencies are installed, should not warn...cee31a6
test(signal): add sleep to ensure shutdown completion (#2427)eba64ef
ci: timeout for test suite runs to 30 minutes (#2426)0f513d2
Remove signal testing order dependency (#2382)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show