Improve ProxyHeadersMiddleware (#2468) and (#2231):
Fix the host for requests from clients running on the proxy server itself.
Fallback to host that was already set for empty x-forwarded-for headers.
Also allow specifying IP Networks as trusted hosts. This greatly simplifies deployments
on docker swarm/Kubernetes, where the reverse proxy might have a dynamic IP.
Improve ProxyHeadersMiddleware (#2468) and (#2231):
Fix the host for requests from clients running on the proxy server itself.
Fallback to host that was already set for empty x-forwarded-for headers.
Also allow to specify IP Networks as trusted hosts. This greatly simplifies deployments
on docker swarm/kubernetes, where the reverse proxy might have a dynamic IP.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
Bumps the minor-and-patch group with 3 updates: ruff, starlette and uvicorn.
Updates
ruff
from 0.6.7 to 0.6.8Release notes
Sourced from ruff's releases.
... (truncated)
Changelog
Sourced from ruff's changelog.
Commits
ae39ce5
Bump version to 0.6.8 (#13522)ff2d214
Don't skip over imports and other nodes containing nested statements in impor...9442cd8
Parenthesizematch..case
if
guards (#13513)8012707
Align formatting of patterns in match-cases with expression formatting in cla...d7ffe46
Disable thetypeset
plugin (#13517)7c83af4
red-knot: Implement thenot
operator for allType
variants (#13432)bbb044e
Detect tuples bound to variadic positional arguments i.e.*args
(#13512)4810652
Avoid UP028 false negatives with non-reference shadowed bindings of loop vari...11f06e0
Detect SIM910 when using variadic keyword arguments, i.e.,**kwargs
(#13503)f27a8b8
[internal]ComparableExpr
(f)strings and bytes made invariant under concate...Updates
starlette
from 0.38.6 to 0.39.2Release notes
Sourced from starlette's releases.
Changelog
Sourced from starlette's changelog.
Commits
0b50b9c
Version 0.39.2 (#2710)fe46d99
Supportrequest.url_for
when only "app" scope is avaialable (#2672)1a6018e
Support python-multipart 0.0.12 (#2708)fa7b382
Version 0.39.1 (#2706)075efd0
generate boundary with token_hex (#2702)b8139f9
ConsiderFileResponse.chunk_size
when handling multiple ranges (#2703)4fbf766
test: add tests intest_requests
(#2677)d289ac7
perf: stop usere
onget_route_path
(#2701)9d4d5a5
perf: avoid regex re-compile (#2700)65bfd74
Version 0.39.0 (#2699)Updates
uvicorn
from 0.30.6 to 0.31.0Release notes
Sourced from uvicorn's releases.
Changelog
Sourced from uvicorn's changelog.
Commits
a507532
Version 0.31.0 (#2469)84dd2c4
Improve ProxyHeadersMiddleware (#2468)3d26ab4
Bump cryptography from 42.0.8 to 43.0.1 (#2453)47304d9
Add tests and requirements.txt to sdist (#2438)1cb0c32
Add missing init files in the test suite (#2432)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show