chore(deps): bump the python-dependencies group with 2 updates

[dependabot]

Bumps the python-dependencies group with 2 updates: uvicorn and numpy.

Updates uvicorn from 0.46.0 to 0.47.0

Release notes

Sourced from uvicorn's releases.

Version 0.47.0

What's Changed

• Eagerly import the ASGI app in the parent process by @​Kludex in Kludex/uvicorn#2919
• Add ssl_context_factory for custom SSLContext configuration by @​Kludex in Kludex/uvicorn#2920
• Treat fd=0 as a valid file descriptor with reload/workers by @​eltoder in Kludex/uvicorn#2927

Full Changelog: Kludex/uvicorn@0.46.0...0.47.0

Changelog

Sourced from uvicorn's changelog.

0.47.0 (May 14, 2026)

Added

• Add ssl_context_factory for custom SSLContext configuration (#2920)

Changed

• Eagerly import the ASGI app in the parent process (#2919)

Fixed

• Treat fd=0 as a valid file descriptor with reload/workers (#2927)

Commits

• 479a2c0 Version 0.47.0 (#2937)
• 89347fd Add 7-day cooldown for dependency resolution via uv exclude-newer (#2936)
• 767315b Drop unused contents/actions permissions from zizmor workflow (#2935)
• f25ee43 chore(deps): bump urllib3 from 2.6.3 to 2.7.0 (#2933)
• 8782666 Fix typo in docs/deployment/index.md. (#2932)
• ad5ff87 Treat fd=0 as a valid file descriptor with reload/workers (#2927)
• 6761b2c Remove Hugging Face sponsor block from docs (#2923)
• 438f648 Surface sponsors on welcome page and sidebar (#2921)
• 10ddc6d Add ssl_context_factory for custom SSLContext configuration (#2920)
• b499bc4 Eagerly import the ASGI app in the parent process (#2919)
• See full diff in compare view

Updates numpy from 2.4.4 to 2.4.5

Release notes

Sourced from numpy's releases.

v2.4.5 (May 15, 2026)

NumPy 2.4.5 Release Notes

NumPy 2.4.5 is a patch release that fixes bugs discovered after the 2.4.4 release, has some typing improvements, and maintains infrastructure.

This release supports Python versions 3.11-3.14

Contributors

A total of 17 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

• Aleksei Nikiforov
• Anarion Zuo +
• Ankit Ahlawat
• Breno Favaretto +
• Charles Harris
• Igor Krivenko +
• Ijtihed Kilani +
• Joren Hammudoglu
• Maarten Baert +
• Matti Picus
• Nathan Goldbaum
• Praneeth Kodumagulla +
• Ralf Gommers
• RoomWithOutRoof +
• Sebastian Berg
• Warren Weckesser
• div +

Pull requests merged

A total of 28 pull requests were merged for this release.

• #31093: MAINT: Prepare 2.4.x for further development
• #31182: TYP: fix np.shape assignability issue for python lists (#31171)
• #31197: ENH: Return rank 0 for empty matrices in matrix_rank (#30422)
• #31198: CI/BUG: add native jobs for s390x, fix bug in pack_inner...
• #31199: BUG: f2py map complex_long_double to NPY_CLONGDOUBLE
• #31205: MAINT: f2py: Stop setting re._MAXCACHE to 50.
• #31206: BUG: fix heap buffer overflow in timedelta to string casts
• #31207: MAINT: Rename ppc64le and s390x workflow (#31121)
• #31208: BUG: Fix matvec/vecmat in-place aliasing (out=input produces...
• #31209: TYP: tile: accept numpy scalars and arrays as second argument...
• #31211: DEP: Undo deprecation for np.dtype() signature used by old pickles...
• #31212: REV: Manual revert of float16 svml use (#31178)
• #31222: TYP: ix_ fix for boolean and non-1d input (#31218)
• #31329: BUG: incorrect temp elision for new-style (NEP 43) user-defined...
• #31330: TYP: fix sliding_window_view axis parameter typing

... (truncated)

Commits

• 26e8185 Merge pull request #31441 from charris/prepare-2.4.5
• 573110c REL: Prepare for the NumPy 2.4.5 release.
• be6123a Merge pull request #31426 from jorenham/backport-31425
• a286f52 TYP: Fix DTypeLike runtime type-checker support
• f880727 Merge pull request #31404 from charris/backport-31399
• 626d469 Merge pull request #31402 from charris/backport-31397
• a42bd48 Merge pull request #31401 from charris/backport-31396
• 207ad05 TYP: _NestedSequence type parameter default to work around a mypy issue (#3...
• 309b637 BUG: exclude pycache directories from wheels (#31397)
• 8ded93c BUG: Avoid UB in safe_[add,sub,mul] helpers (#31396)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions