Bump the minor group with 3 updates

[dependabot]

Bumps the minor group with 3 updates: icalendar, requests and uvicorn.

Updates icalendar from 7.1.0 to 7.1.1

Release notes

Sourced from icalendar's releases.

v7.1.1

To view the changes, please see the Changelog. This release can be installed from PyPI.

Changelog

Sourced from icalendar's changelog.

7.1.1 (2026-05-18)

New features

- Created an :attr:`~icalendar.prop.dt.period.vPeriod.ical_value` property for the :class:`~icalendar.prop.dt.period.vPeriod` component. @ZairKSM (`Issue [#876](https://github.com/collective/icalendar/issues/876) <https://github.com/collective/icalendar/issues/876>`_)
- Created a :meth:`~icalendar.prop.recur.weekday.vWeekday.ical_value` property for the :class:`~icalendar.prop.recur.weekday.vWeekday` component, mirroring the existing pattern on :class:`~icalendar.prop.boolean.vBoolean`. @mvanhorn (`Issue [#1360](https://github.com/collective/icalendar/issues/1360) <https://github.com/collective/icalendar/issues/1360>`_)
Bug fixes

- Strictly validate BINARY property values in :attr:`vBinary.from_ical() &lt;icalendar.prop.binary.vBinary.from_ical&gt;` and reject malformed Base64 input instead of silently accepting invalid characters. @uwezkhan (`Issue [#1349](https://github.com/collective/icalendar/issues/1349) &lt;https://github.com/collective/icalendar/issues/1349&gt;`_)
Documentation

</code></pre>

<ul>

<li>Replace the RFC quotations in the docstrings for :attr:<code>Alarm.REPEAT &lt;icalendar.cal.alarm.Alarm.REPEAT&gt;</code> and :attr:<code>Alarm.DURATION &lt;icalendar.cal.alarm.Alarm.DURATION&gt;</code> with Pythonic descriptions, including parameter notes, conformance references, and worked examples. <a href="https://github.com/tmchow&quot;&gt;&lt;code&gt;@​tmchow&lt;/code&gt;&lt;/a> (<code>Issue #1244 &lt;collective/icalendar#1244>

<li>Edited contributor documentation for how to add a change log entry, and maintenance documentation for how to process news fragments. <a href="https://github.com/stevepiercy&quot;&gt;&lt;code&gt;@​stevepiercy&lt;/code&gt;&lt;/a> (<code>Issue #1256 &lt;collective/icalendar#1256>

<li>Updated release process documentation. <a href="https://github.com/niccokunzmann&quot;&gt;&lt;code&gt;@​niccokunzmann&lt;/code&gt;&lt;/a> <a href="https://github.com/stevepiercy&quot;&gt;&lt;code&gt;@​stevepiercy&lt;/code&gt;&lt;/a> <a href="https://github.com/SashankBhamidi&quot;&gt;&lt;code&gt;@​SashankBhamidi&lt;/code&gt;&lt;/a> (<code>Issue #1293 &lt;collective/icalendar#1293>

</ul>

<p>Dependency changes</p>

<pre><code>

Added towncrier &amp;lt;https://pypi.org/project/towncrier/&amp;gt;_ to development dependencies. @stevepiercy (Issue [#1256](https://github.com/collective/icalendar/issues/1256) &amp;lt;https://github.com/collective/icalendar/issues/1256&amp;gt;_)

Internal changes



Switched from manual change log management to towncrier &lt;https://pypi.org/project/towncrier/&gt;_ to automate the process. @​stevepiercy (Issue [#1256](https://github.com/collective/icalendar/issues/1256) &lt;https://github.com/collective/icalendar/issues/1256&gt;_)
Bump PyPy from 3.10 to 3.11 for testing. @​stevepiercy (Issue [#1383](https://github.com/collective/icalendar/issues/1383) &lt;https://github.com/collective/icalendar/issues/1383&gt;_)

Commits

• 79ddc3e Merge branch 'main' into 7.x
• 465936b version 7.1.1
• 39b8db8 Update release process (#1350)
• c343662 Switch to towncrier to automatically manage the change log (#1389)
• 66fb3e1 Add vWeekday.ical_value for the Component.decoded() polymorphy (#1360)
• 933d4f0 docs(alarm): rewrite REPEAT and DURATION docstrings (refs #1244) (#1357)
• e380df1 #876 vPeriod (#1359)
• 5688f42 Bump PyPy from 3.10 to 3.11 (#1383)
• 7357cec Strictly validate Base64 binary values (#1349)
• 6b887f8 Merge pull request #1351 from collective/fund
• Additional commits viewable in compare view

Updates requests from 2.34.1 to 2.34.2

Release notes

Sourced from requests's releases.

v2.34.2

2.34.2 (2026-05-14)

• Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2342-2026-05-14

Changelog

Sourced from requests's changelog.

2.34.2 (2026-05-14)

• Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

Commits

• 6e83187 v2.34.2
• 84d10f0 Move Request.headers back to Mapping (#7441)
• See full diff in compare view

Updates uvicorn from 0.46.0 to 0.47.0

Release notes

Sourced from uvicorn's releases.

Version 0.47.0

What's Changed

• Eagerly import the ASGI app in the parent process by @​Kludex in Kludex/uvicorn#2919
• Add ssl_context_factory for custom SSLContext configuration by @​Kludex in Kludex/uvicorn#2920
• Treat fd=0 as a valid file descriptor with reload/workers by @​eltoder in Kludex/uvicorn#2927

Full Changelog: Kludex/uvicorn@0.46.0...0.47.0

Changelog

Sourced from uvicorn's changelog.

0.47.0 (May 14, 2026)

Added

• Add ssl_context_factory for custom SSLContext configuration (#2920)

Changed

• Eagerly import the ASGI app in the parent process (#2919)

Fixed

• Treat fd=0 as a valid file descriptor with reload/workers (#2927)

Commits

• 479a2c0 Version 0.47.0 (#2937)
• 89347fd Add 7-day cooldown for dependency resolution via uv exclude-newer (#2936)
• 767315b Drop unused contents/actions permissions from zizmor workflow (#2935)
• f25ee43 chore(deps): bump urllib3 from 2.6.3 to 2.7.0 (#2933)
• 8782666 Fix typo in docs/deployment/index.md. (#2932)
• ad5ff87 Treat fd=0 as a valid file descriptor with reload/workers (#2927)
• 6761b2c Remove Hugging Face sponsor block from docs (#2923)
• 438f648 Surface sponsors on welcome page and sidebar (#2921)
• 10ddc6d Add ssl_context_factory for custom SSLContext configuration (#2920)
• b499bc4 Eagerly import the ASGI app in the parent process (#2919)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions