chore(deps): bump the python-deps group across 1 directory with 2 updates

[dependabot]

Updates the requirements on uvicorn[standard] and litellm[proxy] to permit the latest version.
Updates uvicorn[standard] to 0.52.0

Release notes

Sourced from uvicorn[standard]'s releases.

Version 0.52.0

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

• Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

• Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

Full Changelog: Kludex/uvicorn@0.51.0...0.52.0

Changelog

Sourced from uvicorn[standard]'s changelog.

0.52.0 (July 29, 2026)

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

• Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

• Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

0.51.0 (July 8, 2026)

Added

• Restart workers one at a time on SIGHUP, bringing each replacement up before retiring the old worker, so reloads no longer drop requests (#3025)

Removed

• Remove colorama from the standard extra (#3027)

0.50.2 (July 6, 2026)

Fixed

• Require websockets>=13.0, which the default websockets-sansio implementation needs (#3021)

0.50.1 (July 6, 2026)

Fixed

• Split comma-separated Sec-WebSocket-Protocol values in the websockets-sansio implementation (#3019)

0.50.0 (July 4, 2026)

If you use WebSockets, note that --ws auto now picks the websockets-sansio implementation. You shouldn't need it, but you can pin --ws websockets to get the deprecated legacy one back.

Changed

• Exit with the dedicated code 3 on any startup failure: app loading, socket bind and lifespan startup errors previously exited with a mix of 0, 1 and 3 (#3001)
• Stop the multiprocess supervisor when a worker exits with code 3 instead of restarting it forever (#3001)
• Default --ws auto to websockets-sansio when websockets is installed (#2985)
• Skip the eager app import in the parent process with --reload or --workers, fixing a memory regression introduced in 0.47.0 (#3012)
• Build a fresh asgi scope dict per request (#2977)
• Cache the asgi scope sub-dict per connection (#2976)
• Avoid copying single-frame WebSocket payloads in websockets-sansio (#2983)
• Memoize trusted host checks in ProxyHeadersMiddleware (#2970)

... (truncated)

Commits

• 8f1b884 Version 0.52.0 (#3044)
• f6833db Add experimental zttp HTTP/1.1 protocol (#2979)
• d26c85c Prepare compatibility with websockets 17.0. (#3036)
• 7e11cc6 Clarify how limit_concurrency and backlog differ (#3029)
• See full diff in compare view

Updates litellm[proxy] to 1.94.0

Release notes

Sourced from litellm[proxy]'s releases.

v1.94.0

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.94.0

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.94.0/cosign.pub \
  ghcr.io/berriai/litellm:v1.94.0

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

---

What's Changed

• feat(ui): working Test Connection for the complexity auto router by @​akapur99 in BerriAI/litellm#32950
• fix(xecguard): use StandardLoggingGuardrailInformation in logging hook by @​yucheng-berri in BerriAI/litellm#32911
• feat(ui): adopt openapi-react-query ($api) and convert useCustomers by @​ryan-crabbe-berri in BerriAI/litellm#32949
• refactor(ui): colocate the mcp-servers view, keeping the shared mcp_tools surface by @​ryan-crabbe-berri in BerriAI/litellm#32968
• refactor(ui): convert endpoint usage charts to shadcn/recharts by @​ryan-crabbe-berri in BerriAI/litellm#32723
• fix(proxy-auth): stop unrecognized model namespaces slipping through provider wildcard keys by @​mateo-berri in BerriAI/litellm#32979
• feat(router): random-pick multi-model complexity tiers by @​krrish-berri-2 in BerriAI/litellm#32967
• fix(xecguard): sanitize scan result before recording it for logging by @​yucheng-berri in BerriAI/litellm#32935
• fix(auto_router): filter embedding models in complexity tab dropdowns, require all tiers, inline validation by @​akapur99 in BerriAI/litellm#32978
• fix(anthropic): translate raw adaptive thinking for pre-4.6 models on chat completions and Bedrock Converse by @​akapur99 in BerriAI/litellm#32944
• feat(router): add Router(plugins=[...]) routing-plugin pipeline by @​krrish-berri-2 in BerriAI/litellm#32972
• feat(router): soft-floor adaptive mode for complexity router by @​krrish-berri-2 in BerriAI/litellm#32947
• docs(github): add QA runbook section to the PR template by @​mateo-berri in BerriAI/litellm#32965
• fix(model_cost): add supports_reasoning: false to Gemini image generation models by @​mateo-berri in BerriAI/litellm#32836
• build(dev-env): add make bootstrap and unprovisioned-checkout preflight to pre-commit by @​mateo-berri in BerriAI/litellm#32981

... (truncated)

Commits

• 38f2e02 Merge pull request #34995 from BerriAI/litellm_/cost-optimization-savings-pr-...
• 4d06852 chore: update Next.js build artifacts (2026-07-28 19:58 UTC, node v20.20.2)
• 7880e61 Merge pull request #34994 from BerriAI/litellm_/cost-optimization-savings-pr-...
• 99618fb feat(cost-optimization): anchor the savings line at a $0 range start
• 3322f24 fix(cost-optimization): replace savings methodology Collapse with per-card in...
• d3c8e5a Merge pull request #34982 from BerriAI/litellm_/release-ui-build-1-94-0-ff6e5a
• 1e85794 chore: update Next.js build artifacts (2026-07-28 19:23 UTC, node v20.20.2)
• 96103c9 Merge pull request #34987 from BerriAI/litellm_/cherry-pick-34984-rc-1-94-0-7...
• 3db78a8 feat(ui): mark Cost Optimization as beta in the left nav (#34984)
• 81ab74e Merge pull request #34967 from BerriAI/litellm_rc194_cost_optimization_page_m...
• Additional commits viewable in compare view