chore(deps): bump the ai-server-dependencies group across 1 directory with 3 updates

[dependabot]

Bumps the ai-server-dependencies group with 3 updates in the /ai-server directory: uvicorn, opencv-python-headless and dtaidistance.

Updates uvicorn from 0.52.4 to 0.54.0

Release notes

Sourced from uvicorn's releases.

Version 0.54.0

📨 Send metadata after the response body

uvicorn 0.54.0 adds response trailers and 103 Early Hints to its experimental HTTP/2 implementation through zttp.

uv add uvicorn==0.54.0 "zttp>=0.0.34"

• Send HTTP/2 response trailers (#3146). The ASGI http.response.trailers extension lets applications send metadata, such as checksums, after the response body. Clients must send TE: trailers to receive them. Multiple trailer messages are combined before completing the response.
• HTTP/2 remains experimental and opt-in. Enable it with --http zttp --http2. Upgrade-based h2c and WebSockets over HTTP/2 remain unsupported.

💡 Hint at resources before the final response

• Send 103 Early Hints over HTTP/2 (#3137). Applications can use the ASGI http.response.early_hint extension to send resource hints before the final response. Each supplied link becomes a separate Link header.

Full changelog: 0.53.0...0.54.0

Version 0.53.0

🌐 Opt-in HTTP/2 support

uvicorn 0.53.0 adds experimental HTTP/2 through zttp, alongside a new zuvloop integration and connection-handling improvements.

uv add uvicorn==0.53.0

• Serve HTTP/1.1 and HTTP/2 with zttp (#2982, #3101). Install zttp, then enable HTTP/2 with --http zttp --http2. Uvicorn negotiates HTTP/2 over TLS with ALPN and supports cleartext prior knowledge.
• HTTP/2 remains experimental. Upgrade-based h2c and WebSockets over HTTP/2 are not supported.

⚙️ More event loop choice

• Run Uvicorn with zuvloop (#3104). Install zuvloop separately and select it explicitly with --loop zuvloop on CPython 3.14 or newer.

🛡️ More reliable connections and proxies

• Honor Connection: close token lists (#3103). Uvicorn now parses comma-separated tokens case-insensitively across HTTP implementations.
• Trust IPv6 loopback proxies by default (#3119). The default FORWARDED_ALLOW_IPS value now includes ::1.
• Keep upgraded WebSockets alive (#3107). Uvicorn cancels the HTTP keep-alive timer when the connection becomes a WebSocket.

Full changelog: 0.52.4...0.53.0

Changelog

Sourced from uvicorn's changelog.

0.54.0 (September 24, 2026)

HTTP/2 support remains experimental. Install zttp>=0.0.34 and enable it with --http zttp --http2.

Added

• Add HTTP/2 response trailers through the ASGI http.response.trailers extension. Clients must send TE: trailers to receive them (#3146)
• Add HTTP/2 103 Early Hints through the ASGI http.response.early_hint extension (#3137)

0.53.0 (September 14, 2026)

This release adds experimental HTTP/2 support through zttp. Enable it with --http zttp --http2. Upgrade-based h2c and WebSockets over HTTP/2 are not supported.

Added

• Add experimental HTTP/2 support through zttp (#2982, #3101)
• Add support for zuvloop (#3104)

Fixed

• Handle comma-separated, case-insensitive Connection: close tokens across HTTP implementations (#3103)
• Trust IPv6 loopback in the default FORWARDED_ALLOW_IPS value (#3119)
• Cancel the HTTP keep-alive timer when upgrading to WebSocket (#3107)

Commits

• 3eb9a9a Version 0.54.0 (#3161)
• cd7ef6d Remove races from supervisor tests (#3134)
• a56c7cc Support HTTP/2 response trailers (#3146)
• 9bd4404 chore(deps): bump anyio from 4.13.0 to 4.14.2 (#3145)
• 21f39ef Add HTTP/2 Early Hints support (#3137)
• 421708f Version 0.53.0 (#3136)
• f1a1bff Unset the keep-alive timer when upgrading to WebSocket (#3107)
• 63971ed Document HTTP/2 support (#3130)
• 7d1a005 Remove race from multiprocess health check test (#3128)
• 5ac6265 Add ::1 to FORWARDED_ALLOW_IPS (#3119)
• Additional commits viewable in compare view

Updates opencv-python-headless from 4.11.0.86 to 4.14.0.94

Release notes

Sourced from opencv-python-headless's releases.

4.14.0.94

Complete OpenCV 4.14.0 changelog: https://github.com/opencv/opencv/wiki/OpenCV-Change-Logs#version4140

Python specific:

• Bumped ffmpeg to 8.1.2 to fix CVE-2026-8461
• Added libav1d to FFmpeg configuration
• Fixed tests with modern numpy #28349, #29122
• Fixed: mark distCoeffs, cameraMatrix as optional in calibrateCamera function #28470
• Fixed inRange type signature to accept Scalar values #28536
• Fixed HoughCircles Python return type to allow None in python #28621
• Fixed segfault on 0-channel numpy array input #28747
• Added context manager compatibility for VideoCapture and VideoWriter #28967
• Fixed python wrapper around ECCParameters to include itersPerLevel #29148

4.13.0.92

Follow up release for 4.13.0 with X server dependency fix. See #28438 for details.

4.13.0.90

Complete OpenCV 4.13.0 changelog: https://github.com/opencv/opencv/wiki/OpenCV-Change-Logs#version4130

Python specific:

• Manylinux 2_28 support, Numpy 2.4 support, Python 3.14 support
• Tuned Python bindings for logging #27812
• Marked Feature2D.detectAndCompute mask as optional in Python type stubs #27544
• Marked distCoeffs/R/D as optional in calib3d functions #27564
• Added DLPACK support #27581, #27861
• Fixed memory leaks in pybindings #27738
• Add PathLike type hints for args annotated with CV_WRAP_FILE_PATH #27767
• Fixed memory leak in pyopencv_to for path-like objects #28047
• Tunned Python bindings: use export_name as resolved typename for AliasTypeNode #27997
• python: fix pytest-cov false warnings by using compile() with full file path in exec_file_wrapper #28093
• Fixed python scalar typing issues #27620
• Fixed bug in ifdef state machine in header parser for bindings #27393
• Wrap GridType field in cv::findCirclesGrid parameters structure #27689

4.12.0.88

Complete OpenCV 4.12.0 changelog: https://github.com/opencv/opencv/wiki/OpenCV-Change-Logs#version4120

Python:

• Added libavif to the package and corresponding image format support on Linux and Mac OS. Windows is in progress.
• Enabled GIF support by default.
• Updated Numpy dependency rules. Packages for Python 3.9+ are built with Numpy 2.x. Packages for older Python version are built with Numpy 1.x.
• Improved libjpeg-turbo performance in Windows builds (added NASM and assembly branches).
• Made DNN, FLANN, G-API modules optional during the package build (bindings generation and typing).

Commits

• See full diff in compare view

Updates dtaidistance from 2.5.0 to 2.5.1

Commits

• 1484ad4 Merge branch 'master' into deploy
• f885914 Bump version to 2.5.1
• 1d5b209 [Fix] Fix the default splitting strategy
• c56d982 Improve docs
• 36c9d12 [Update] Update the DSW quickstart code by adding the import statement.
• 6d9cc46 [Fix] DSW: better support for 2d numpy arrays
• 27a42bf Update readme
• e462d43 Update readme
• 823c1cc Update readme
• bc041ef Update deploy.yml
• See full diff in compare view

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: Shadowfit/init/.coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: f4d7487a-817f-40cf-9a15-db392209d793

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}