From 42e9b85f05f6e5bf295960ce406e7738bf9c5e53 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 20:36:20 +0000
Subject: [PATCH] chore(deps): Bump uvicorn from 0.49.0 to 0.52.0 in /app/api

Bumps [uvicorn](https://github.com/Kludex/uvicorn) from 0.49.0 to 0.52.0.
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](https://github.com/Kludex/uvicorn/compare/0.49.0...0.52.0)

---
updated-dependencies:
- dependency-name: uvicorn
  dependency-version: 0.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 app/api/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/api/requirements.txt b/app/api/requirements.txt
index 5481c29..3d12d06 100644
--- a/app/api/requirements.txt
+++ b/app/api/requirements.txt
@@ -1,5 +1,5 @@
 fastapi==0.136.3
-uvicorn==0.49.0
+uvicorn==0.52.0
 cedarpy==4.8.4
 # Bearer-JWT verification at the PDP edge (signature + audience binding, RFC 8707).
 # DEMO uses an HS256 fixture key; production verifies against the IdP JWKS. See auth.py.