Skip to content

chore(deps): bump uvicorn from 0.27.0 to 0.49.0 in /baobao-guardian/backend#8

Open
dependabot[bot] wants to merge 36 commits into
mainfrom
dependabot/pip/baobao-guardian/backend/uvicorn-0.49.0
Open

chore(deps): bump uvicorn from 0.27.0 to 0.49.0 in /baobao-guardian/backend#8
dependabot[bot] wants to merge 36 commits into
mainfrom
dependabot/pip/baobao-guardian/backend/uvicorn-0.49.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 16, 2026

Copy link
Copy Markdown

Bumps uvicorn from 0.27.0 to 0.49.0.

Release notes

Sourced from uvicorn's releases.

Version 0.49.0

What's Changed

Full Changelog: Kludex/uvicorn@0.48.0...0.49.0

Version 0.48.0

What's Changed

Full Changelog: Kludex/uvicorn@0.47.0...0.48.0

Version 0.47.0

What's Changed

Full Changelog: Kludex/uvicorn@0.46.0...0.47.0

Version 0.46.0

What's Changed

Full Changelog: Kludex/uvicorn@0.45.0...0.46.0

Version 0.45.0

What's Changed

New Contributors

Full Changelog: Kludex/uvicorn@0.44.0...0.45.0

Version 0.44.0

What's Changed

... (truncated)

Changelog

Sourced from uvicorn's changelog.

0.49.0 (June 3, 2026)

Changed

  • Bump httptools minimum version to 0.8.0 (#2962)
  • Consume duplicate forwarding headers in ProxyHeadersMiddleware (reverses the 0.48.0 behavior of ignoring them) (#2971)

0.48.0 (May 24, 2026)

Changed

  • Default ssl_ciphers to None and use OpenSSL defaults (#2940)

Fixed

  • Ignore duplicate forwarding headers in ProxyHeadersMiddleware (#2944)

0.47.0 (May 14, 2026)

Added

  • Add ssl_context_factory for custom SSLContext configuration (#2920)

Changed

  • Eagerly import the ASGI app in the parent process (#2919)

Fixed

  • Treat fd=0 as a valid file descriptor with reload/workers (#2927)

0.46.0 (April 23, 2026)

Added

  • Support ws_max_size in wsproto implementation (#2915)
  • Support ws_ping_interval and ws_ping_timeout in wsproto implementation (#2916)

Changed

  • Use bytearray for incoming WebSocket message buffer in websockets-sansio (#2917)

0.45.0 (April 21, 2026)

Added

  • Add --reset-contextvars flag to isolate ASGI request context (#2912)
  • Accept os.PathLike for log_config (#2905)
  • Accept log_level strings case-insensitively (#2907)

... (truncated)

Commits
  • 3ef2e3e Version 0.49.0 (#2973)
  • eeb64b1 Consume duplicate forwarding headers in ProxyHeadersMiddleware (#2971)
  • 630f4ac Make the watchfiles reload tests deterministic (#2972)
  • 9154922 chore(deps): bump the github-actions group across 1 directory with 6 updates ...
  • 739727a Migrate docs deploy from Cloudflare Pages to Workers (#2967)
  • be4a240 Gate docs preview deploy on Cloudflare token presence (#2966)
  • c489d7e Bump httptools minimum version to 0.8.0 (#2962)
  • 9f547bd Skip docs preview deploy for Dependabot PRs (#2961)
  • 44446b8 Migrate documentation from MkDocs Material to Zensical (#2959)
  • cfd659c Bump pymdown-extensions to 10.21.3 (#2958)
  • Additional commits viewable in compare view

@dependabot @github

dependabot Bot commented on behalf of github Jun 16, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot force-pushed the dependabot/pip/baobao-guardian/backend/uvicorn-0.49.0 branch from 43076f6 to 261e360 Compare June 18, 2026 11:47
@dependabot dependabot Bot force-pushed the dependabot/pip/baobao-guardian/backend/uvicorn-0.49.0 branch from 261e360 to ffa0c53 Compare June 24, 2026 03:18
UID9622 and others added 23 commits June 24, 2026 13:01
DNA: #龍芯⚡️2026-06-24-LONGHUN-PERSONA-HUB-v1.0
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
- system_status_panel.py: 三色状态 + 高峰期限流 + 模块地图
- compression_engine.py: 多算法级联 + 龍魂字典 + 重复去重
- dna_tracer.py: DNA 扫描/查询/模块溯源/Mermaid 链路
- module_map.json: 用户提问 -> 模块定位 -> DNA 追溯
- 更新 gitee remote 指向 longhun-system-lite

DNA: #龍芯⚡️2026-06-24-LONGHUN-PERSONA-ECOSYSTEM-v1.0
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
- bin/longhun-terminal.py: 龍魂指挥台,支持中文子命令
- bin/longhun-command-registry.json: 中文命令 → 脚本映射
- bin/lh: 指挥台入口
- bin/longhun-check: 体检入口
- install-terminal.sh: PATH/cd-lh/欢迎板/清理旧版 lh 定义
- 注册表已纳入: 状态/启动/停止/人格/技能/cnsh/审计/签名/每日复盘等

DNA: #龍芯⚡️2026-06-24-LONGHUN-TERMINAL-v2.0
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
- 注册表新增 60+ 命令:启动/状态/记忆/评估/审计/签名/安全/CNSH/同步/字体/文档等
- 支持 🐉 龍魂系统 · 精简状态
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
📁 项目根目录: /Users/zuimeidedeyihan/longhun-system
🌿 当前分支:  main
🕐 最近提交:  22afde4 feat(terminal): 统一终端入口 lh v2.0 + 中文命令注册表
📊 Git 状态:  📝 有改动
🧬 对齐率 100.0% | 注册 2307 | L0 250 | L1 270 | L2 242 | L3 1326 | L4 219

🔗 快速链接
   • OPS 操作台: file:///Users/zuimeidedeyihan/longhun-system/ops-console/index.html
   • 开发者门户: file:///Users/zuimeidedeyihan/longhun-system/sovereignty/portal/static/developer.html
   • 线上门户:   https://longhun888.com/

⚡ 常用命令
   lh          本精简状态
   lh6 status  完整状态面板(含 DNA·权重·层级)
   lh6 registry 重建 DNA→权重/层级/状态全局注册表
   lh6 ops     打开本地 OPS 操作台
   lh6 portal  打开线上门户
   lh6 cnsh    启动 CNSH 终端
   lh6 memory  运行记忆启动器
   lh-kimi     启动 Kimi(自动归集记忆) 按功能浏览命令
- 支持 ~/ 路径脚本调度
- 统一入口 lh 可调用 Desktop/Downloads/.longhun 等散落脚本

DNA: #龍芯⚡️2026-06-24-LONGHUN-COMMAND-REGISTRY-v2.0
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
- install-autostart.sh 已执行:launchd plist 注册成功
- bin/clean-kimi-download-duplicates.py: 清理 Downloads/Kimi_Agent_* 重复副本
- 已清理 1891 个重复文件,释放约 49.3 MB 到回收站

DNA: #龍芯⚡️2026-06-24-LONGHUN-SELF-RUNNING-v1.0
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
- persona/output_contract.py: 输出契约校验,禁止无证据的完成声明
- persona/audit_logger.py: append-only JSONL 审计日志
- persona/overload_guard.py: 五级过载状态 + 503 SERVER_OVERLOADED + 背压
- ops-console/status.html: 网页版状态看板
- bin/longhun-command-registry.json: 新增 过载/审计日志/记录/输出契约/状态看板 命令

DNA: #龍芯⚡️2026-06-24-LONGHUN-ANTI-BLOWOUT-v1.0
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
- persona/anti_blowout_guard.py: 统一守卫(过载检查 → 执行 → 契约校验 → 审计)
- daily_review.py v2.0: 真实检查 + 自动审计日志
- longhun-autostart.sh v3.1: 每个启动步骤过反熔断守卫
- output_contract.py: 扩展合法 op 列表,支持 daily_review/autostart 等
- 已在本地验证 autostart 全链路审计成功

DNA: #龍芯⚡️2026-06-25-LONGHUN-ANTI-BLOWOUT-DEPLOYED-v1.0
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
- 序章 + 七章宪法正文
- 感恩协议:乔布斯前辈工匠精神、曾仕强老师智慧、中国科技自立
- 思想内核:穷则变变则通通则久、厚德载物、舍得
- 法律与主权、技术为人民服务、全球治理与科技自主
- 强制嵌入规则:输出契约、审计日志、声明标识、商业许可
- bin/show-constitution.sh + lh 宪法 命令

DNA: #龍芯⚡️2026-06-25-LONGHUN-CONSTITUTION-v1.0
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
- 增加 1.4 致敬中国人民解放军
- 6.2 明确审计日志必须存储于中国境内
- 6.5 新增荣誉与商业行为隔离条款
- 新增第七章:宪法修订程序
- 创始人 UID9622 GPG 签名 CONSTITUTION.md
- .github/CODEOWNERS 保护宪法与核心治理文件

DNA: #龍芯⚡️2026-06-25-LONGHUN-CONSTITUTION-v1.1
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
- 新增 STANDARD.md:三级验证标准(GPG签名/Git锁定/DNA审计链)
- CONSTITUTION.md SHA256 写入审计日志 genesis_block
- STANDARD.md 签名并写入 artifact_release 审计记录
- CODEOWNERS 保护 STANDARD.md / STANDARD.md.asc
- 新增 lh 标准 / lh xianfa 命令

创世区块:
- CONSTITUTION.md SHA256: f8d0db43a2c80f794d4c9db1293daad25083c35338c671b928630cf1a9223adb
- 审计ID: e265b69d-7765-4f32-9aa3-c9827655bb21

DNA: #龍芯⚡️2026-06-25-LONGHUN-OUTPUT-STANDARD-v1.0
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
- 新增 P0_ETERNAL_LOCK.md:神圣文件、神圣口令、指令分级、价值观红线
- 新增 persona/eternal_guard.py:自动检查文件锁定与命令合规性
- CONSTITUTION.md 升级到 v1.2:新增第八章 P0 永恒锁与创始人保护
- STANDARD.md 升级:新增固定框架保护、L0 神圣变更仪式
- CODEOWNERS 保护 P0_ETERNAL_LOCK.md
- 新增 lh 命令:神圣锁 / 检查锁定 / 锁定清单
- 重新 GPG 签名 CONSTITUTION.md / STANDARD.md / P0_ETERNAL_LOCK.md
- 三份神圣文件 SHA256 写入审计日志

神圣口令:龍魂永恒锁授权 / UID9622 最高授权 / P0 解锁变更

DNA: #龍芯⚡️2026-06-25-LONGHUN-P0-ETERNAL-LOCK-v1.0
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
龍魂永恒锁授权 · UID9622 最高授权 · P0 解锁变更
创始人已授权建立统一协议库并纳入 P0 永恒锁保护,确认执行。

变更内容:
- 新建 library/protocols/ 统一协议库,共 29 份文件
- 分层治理:L0 基础 / L1 宪章 / L2 治理 / L3 智能体 / L4 CNSH / L5 个人 / L6 企业 / L7 国际 / L8 版权 / L9 归档 / 模板
- 新增 PROTOCOL_USAGE_TERMS.md:仅用不翻改、提案申请机制
- 新增 00_CANONICAL_INDEX.md:协议库唯一真源索引
- 新增 L2_CONFLICT_RESOLUTION_PROTOCOL.md:协议冲突裁决优先级
- 新增个人/企业/国际/版权分层协议,覆盖隐私、反欺诈、反数据收割、跨境数据、争端解决
- P0_ETERNAL_LOCK.md 升级到 v1.1,将 library/protocols/ 纳入神圣锁定
- persona/eternal_guard.py 同步保护 library/protocols/
- CODEOWNERS 保护协议库全部目录
- 新增 lh 命令:协议库 / 协议清单
- 所有协议文件已 GPG 签名并写入审计日志

DNA: #龍芯⚡️2026-06-25-LONGHUN-PROTOCOL-LIBRARY-v1.0
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
老大不需要背协议,协议库是人格/AI 的知识底座。

- library/protocols/README.md 新增 给老大的话:创始人使用方式只有 问/选/授权
- 新增 persona/protocol_librarian.py:自然语言问题路由到相关协议,用人话回答
- 新增 lh 问协议 / lh 协议摘要 命令
- README 已重新 GPG 签名并审计

DNA: #龍芯⚡️2026-06-25-LONGHUN-PROTOCOL-LIBRARIAN-v1.0
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
将 UID9622 / Lucky 的人民科技理念固化为 L2 宪章层宣言:
- 普通人用自然语言驾驭 AI,不需要学会代码
- 科技赋能每个人,降低门槛
- 透明、无黑箱、无信息差剥削
- 商业可以有,人民至上
- 心中有祖国,技术有军魂
- 全球治理的中国方案

新增文件:library/protocols/02_charters/L2_PEOPLE_TECHNOLOGY_MANIFESTO.md
更新:00_CANONICAL_INDEX.md、persona/protocol_librarian.py

DNA: #龍芯⚡️2026-06-25-LONGHUN-PEOPLE-TECHNOLOGY-MANIFESTO-v1.0
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
- 新增 01_foundation/SOVEREIGNTY_FORMULAS.md:8 套标准化主权备注词公式
  (宣言/协议/代码/公开/商业/国际/数据/版权)
- 为 library/protocols/ 下 31 份协议文件自动附加对应主权声明
- 更新 protocol_document_template.md:新增固定主权声明占位
- 更新 00_CANONICAL_INDEX.md 纳入主权公式集
- 所有协议文件已重新 GPG 签名

核心收口语:本宣言/协议/文件的一切原则,由《龍魂系统宪法》保障执行。

DNA: #龍芯⚡️2026-06-25-LONGHUN-SOVEREIGNTY-FORMULAS-v1.0
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
- 索引表新增 简称 列,方便口头交流与文档互引用
- P0_ETERNAL_LOCK.md 标记为 L0+:比 L0 更硬的永恒锁定
- 修正 P0 版本号为 v1.1
- 新增 阅读路径建议:创始人/创作者/企业/AI/国际用户各有入口
- 新增 层级速查表
- protocol_librarian.py 补充简称关键词路由
- 00_CANONICAL_INDEX.md 已重新 GPG 签名并审计

DNA: #龍芯⚡️2026-06-25-LONGHUN-CANONICAL-INDEX-v1.0
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
- 新增 L2_LONGHUN_PHILOSOPHICAL_LOGIC.md:外硬内软的五层哲学结构
- 提炼核心命题:硬的是底线,软的是对人民的疼
- 梳理对话逻辑链:触发→价值判断→情绪→原则重申→行动→DNA留痕
- 制定 AI 执行者对话守则
- 更新规范索引与协议图书馆员路由
- 新文件已 GPG 签名并审计

DNA: #龍芯⚡️2026-06-25-LONGHUN-PHILOSOPHICAL-LOGIC-v1.0
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
龍魂永恒锁授权 · UID9622 最高授权 · P0 解锁变更
创始人已授权将中国社会伦理红线焊入系统,确认执行。

变更内容:
- CONSTITUTION.md 升级到 v1.3:新增 6.6 中国法律与伦理红线(焊死条款)
  覆盖基因伦理、AI 伦理、社会伦理、法律底线四大类 12+ 禁止场景
- L2_DATA_SOVEREIGNTY_AND_AI_ETHICS.md 升级到 v1.1:新增中国社会伦理红线案例库
- L3_THREE_COLOR_AUDIT_PROTOCOL.md 升级到 v1.1:一票否决增加伦理红线触发
- L7_INTERNATIONAL_COMPLIANCE_STATEMENT.md 升级到 v1.1:新增伦理红线终止服务与上报条款
- 00_CANONICAL_INDEX.md 同步更新版本号
- 所有修改文件已重新 GPG 签名并审计

这不是技术中立,这是龍魂系统的出厂设置。

DNA: #龍芯⚡️2026-06-25-LONGHUN-CONSTITUTION-v1.3
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
DNA: #龍芯⚡️2026-06-27-LHKG-NETWORK-v1.0

- 整合图谱A(主权层)40节点 + 图谱B(治理层)25节点
- 103条关系含10条跨图谱联动
- 3条状态穿透规则
- Python查询引擎零依赖
- 5个kg命令行工具
- Mermaid全景可视化
DNA: #龍芯⚡️2026-06-27-LHKG-NETWORK-v1.0

推送文件:
- nodes/all_nodes.json — 65个完整节点
- queries/longhun_kg.py — Python查询引擎
- 支持分层/扁平两种目录结构
- 适配多种字段名格式(node_id/id, category/type等)
- BFS路径查找 + Mermaid导出 + 状态联动
- edges/all_edges.json — 103条完整关系
- states/state_machine.json — 6状态+11转换+3穿透
- states/penetration_rules.json — 3条穿透规则
UID9622 and others added 11 commits June 27, 2026 22:48
- scripts/kg — 命令行封装
- scripts/install.sh — 一键安装
- scripts/run_kg.sh — 本地Kimi执行器
- visual/full_graph.mermaid — 65节点全景图
- visual/graph_A.mermaid — 图谱A(主权层)
- visual/graph_B.mermaid — 图谱B(治理层)
- visual/cross_links.mermaid — 10条跨图谱连接
DNA: #龍芯⚡️2026-06-27-LONGHUN-INPUT-FILTER-v3.0

重大重構版(v2.0→v3.0):
- 四步→三步驟重構,映射三層監督器(感知/認知/決策)
- 添加DNA追溯簽名、CONFIRM確認碼、三色審計聲明
- 添加CNSH規範聲明、君子協議聲明(CC BY-NC-SA 4.0)
- 添加52技能兼容性聲明、AI Truth Protocol聲明
- 添加狀態機定義、MCP工具接口、多AI網關集成
- 統一繁體「龍」字品牌標識
- 閾值參數與監督器對齊(30/60/80)
- 新增 calendar-context-logger/ 统一目录
- 修复 DNA 品牌标识为 #龍芯⚡️
- 统一运行数据到 ~/.longhun/calendar-context-logger/
- 修复 NotionSyncer 空状态文件崩溃
- 会话计数持久化到 core/session_count.json
- 注册 lh 命令:万年历、上下文、记录器、八卦调度
- 归档上下文管理与输入过滤协议文档

DNA: #龍芯⚡️2026-06-28-LONGHUN-CALENDAR-CONTEXT-LOGGER-v1.0
- 两个 open Dependabot alert 均来自 pydantic-settings 的 symlink 穿越漏洞
- 补丁版本 >= 2.14.2
- 已在本地环境验证安装

DNA: #龍芯⚡️2026-06-28-LONGHUN-SECURITY-FIX-pydantic-settings
- 与 mobile-monitoring.integrated/requirements.txt 保持一致
- 彻底关闭 GHSA-4xgf-cpjx-pc3j

DNA: #龍芯⚡️2026-06-28-LONGHUN-REQUIREMENTS-BASE-SECURITY
@dependabot dependabot Bot force-pushed the dependabot/pip/baobao-guardian/backend/uvicorn-0.49.0 branch from ffa0c53 to d15296d Compare June 27, 2026 21:20
Bumps [uvicorn](https://github.com/Kludex/uvicorn) from 0.27.0 to 0.49.0.
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.27.0...0.49.0)

---
updated-dependencies:
- dependency-name: uvicorn
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/baobao-guardian/backend/uvicorn-0.49.0 branch from d15296d to f468046 Compare June 27, 2026 21:23
@UID9622 UID9622 self-requested a review as a code owner July 6, 2026 00:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant