Improve ProxyHeadersMiddleware (#2468) and (#2231):
Fix the host for requests from clients running on the proxy server itself.
Fallback to host that was already set for empty x-forwarded-for headers.
Also allow specifying IP Networks as trusted hosts. This greatly simplifies deployments
on docker swarm/Kubernetes, where the reverse proxy might have a dynamic IP.
Improve ProxyHeadersMiddleware (#2468) and (#2231):
Fix the host for requests from clients running on the proxy server itself.
Fallback to host that was already set for empty x-forwarded-for headers.
Also allow to specify IP Networks as trusted hosts. This greatly simplifies deployments
on docker swarm/kubernetes, where the reverse proxy might have a dynamic IP.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
Bumps the poetry group with 2 updates: uvicorn and redis.
Updates
uvicorn
from 0.30.6 to 0.31.0Release notes
Sourced from uvicorn's releases.
Changelog
Sourced from uvicorn's changelog.
Commits
a507532
Version 0.31.0 (#2469)84dd2c4
Improve ProxyHeadersMiddleware (#2468)3d26ab4
Bump cryptography from 42.0.8 to 43.0.1 (#2453)47304d9
Add tests and requirements.txt to sdist (#2438)1cb0c32
Add missing init files in the test suite (#2432)Updates
redis
from 5.0.8 to 5.1.0Release notes
Sourced from redis's releases.
... (truncated)
Commits
7215a52
Updated package version (#3389)2e46613
Client side caching refactoring (#3350)7d73d74
DOC-4197: add TCEs to the geospatial query page (#3378)c7483b3
DOC-4196: add TCEs to the full-text query page (#3377)64d4bb8
DOC-4194: add TCEs to the range query page (#3374)0c8a986
DOC-4194: add TCEs to the exact match query page (#3372)cbb129d
Update README.md - mentioning redis 7.4 support (#3375)2fb40c1
TCEs for select command pages (#3361)e00f3d2
Add missed redismod at test_commands.py (#3369)6c94faa
Update PyPy 3.8 to 3.10 in CI (#3370)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show