fix(deps): update all dependencies

This MR contains the following updates:

Package	Change	Age	Confidence	Type	Update
copier	==9.11.2 → ==9.11.3				patch
coverage	==7.13.1 → ==7.13.2				patch
gunicorn (changelog)	==23.0.0 → ==24.1.1				major
mkdocstrings (changelog)	==1.0.1 → ==1.0.2				patch
uis/devops/continuous-delivery/ci-templates	v7.25.13 → v7.25.15			repository	patch

---

Release Notes

copier-org/copier (copier)

v9.11.3

Compare Source

Fix

• updating: include non-question answers when generating fresh copy of new template
• updating: ignore Git hooks on internal checkout before 3-way merging file with conflicts (#​2432)
• avoid pattern deprecation warning for pathspec v1.0.0+

coveragepy/coveragepy (coverage)

v7.13.2

Compare Source

• Fix: when Python is installed via symlinks, for example with Homebrew, the standard library files could be incorrectly included in coverage reports. This is now fixed, closing issue 2115_.

• Fix: if a data file is created with no read permissions, the combine step would fail completely. Now a warning is issued and the file is skipped. Closes issue 2117_.

.. _issue 2115: #​2115 .. _issue 2117: #​2117

.. _changes_7-13-1:

benoitc/gunicorn (gunicorn)

v24.1.1

Compare Source

Bug Fixes

• Fix forwarded_allow_ips and proxy_allow_ips to remain as strings for backward compatibility with external tools like uvicorn. Network validation now uses strict mode to detect invalid CIDR notation (e.g., 192.168.1.1/24 where host bits are set) (#​3458, MR #​3459)

---

Full Changelog: https://github.com/benoitc/gunicorn/compare/24.1.0...24.1.1

v24.1.0: Gunicorn 24.1.0

Compare Source

New Features

• Official Docker Image: Gunicorn now publishes official Docker images to GitHub Container Registry (MR #​3454)

  • Available at ghcr.io/benoitc/gunicorn
  • Based on Python 3.12 slim image
  • Uses recommended worker formula (2 × CPU + 1)
  • Configurable via environment variables

• PROXY Protocol v2 Support: Extended PROXY protocol implementation to support the binary v2 format in addition to the existing text-based v1 format (MR #​3451)

  • New --proxy-protocol modes: off, v1, v2, auto
  • auto mode (default when enabled) detects v1 or v2 automatically
  • v2 binary format is more efficient and supports additional metadata
  • Works with HAProxy, AWS NLB/ALB, and other PROXY protocol v2 sources

• CIDR Network Support: --forwarded-allow-ips and --proxy-allow-from now accept CIDR notation (e.g., 192.168.0.0/16) for specifying trusted networks (MR #​3449)

• Socket Backlog Metric: New gunicorn.socket.backlog gauge metric reports the current socket backlog size on Linux systems (MR #​3450)

• InotifyReloader Enhancement: The inotify-based reloader now watches newly imported modules, not just those loaded at startup (MR #​3447)

Bug Fixes

• Fix signal handling regression where SIGCLD alias caused "Unhandled signal: cld" errors on Linux when workers fail during boot (#​3453)
• Fix socket blocking mode on keepalive connections preventing SSL handshake failures with async workers (MR #​3452)
• Use smaller buffer size in finish_body() for faster timeout detection on slow or abandoned connections (MR #​3453)
• Handle SSLWantReadError in finish_body() to prevent worker hangs during SSL renegotiation (MR #​3448)
• Log SIGTERM as info level instead of warning to reduce noise in orchestrated environments (MR #​3446)
• Print exception details to stderr when worker fails to boot (MR #​3443)
• Fix unreader.unread() to prepend data to buffer instead of appending (MR #​3442)
• Prevent RecursionError when pickling Config objects (MR #​3441)
• Use proper exception chaining with raise from in glogging.py (MR #​3440)

Installation

pip install gunicorn==24.1.0

Or use the official Docker image:

docker pull ghcr.io/benoitc/gunicorn:24.1.0

v24.0.0

Compare Source

New Features

• ASGI Worker (Beta): Native asyncio-based ASGI support for running async Python frameworks like FastAPI, Starlette, and Quart without external dependencies

  • HTTP/1.1 with keepalive connections
  • WebSocket support
  • Lifespan protocol for startup/shutdown hooks
  • Optional uvloop for improved performance

• uWSGI Binary Protocol: Support for receiving requests from nginx via uwsgi_pass directive

• Documentation Migration: Migrated to MkDocs with Material theme

Security

• eventlet: Require eventlet >= 0.40.3 (CVE-2021-21419, CVE-2025-58068)
• gevent: Require gevent >= 24.10.1 (CVE-2023-41419, CVE-2024-3219)
• tornado: Require tornado >= 6.5.0 (CVE-2025-47287)

Install

pip install gunicorn==24.0.0

mkdocstrings/mkdocstrings (mkdocstrings)

v1.0.2

Compare Source

Compare with 1.0.1

Code Refactoring

• Use global instances for handlers and autorefs (9f79141 by Timothée Mazzucotelli).

uis/devops/continuous-delivery/ci-templates (uis/devops/continuous-delivery/ci-templates)

v7.25.15: 7.25.15

Compare Source

7.25.15 (2026-01-22)

v7.25.14: 7.25.14

Compare Source

7.25.14 (2026-01-22)

Bug Fixes

• deps: update python:3 docker digest to 17bc9f1 (9106fe0)
• deps: update python:3.14 docker digest to 17bc9f1 (9ae614e)

---

Configuration

📅 Schedule: Branch creation - "on sunday" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This MR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot.