chore(deps): bump python-multipart from 0.0.9 to 0.0.27 in /backend in the pip group across 1 directory by dependabot[bot] · Pull Request #143 · ContextualWisdomLab/naruon

dependabot · 2026-05-11T10:56:56Z

Bumps the pip group with 1 update in the /backend directory: python-multipart.

Updates python-multipart from 0.0.9 to 0.0.27

Release notes

Sourced from python-multipart's releases.

Version 0.0.27

What's Changed

Pass parse offsets via constructors by @Kludex in Kludex/python-multipart#268

Add multipart header limits by @Kludex in Kludex/python-multipart#267

Full Changelog: Kludex/python-multipart@0.0.26...0.0.27

Version 0.0.26

What's Changed

Skip preamble before first multipart boundary by @Kludex in Kludex/python-multipart#262

Silently discard epilogue data after the closing boundary by @Kludex in Kludex/python-multipart#259

Full Changelog: Kludex/python-multipart@0.0.25...0.0.26

Version 0.0.25

What's Changed

Apply Apache-2.0 properly by @Kludex in Kludex/python-multipart#247

Handle multipart headers case-insensitively by @Kludex in Kludex/python-multipart#252

Emit field_end for trailing bare field names on finalize by @bysiber in Kludex/python-multipart#230

Add UPLOAD_DELETE_TMP to FormParser config by @Kludex in Kludex/python-multipart#254

Remove custom FormParser classes by @Kludex in Kludex/python-multipart#257

Handle CTE values case-insensitively by @Kludex in Kludex/python-multipart#258

Add MIME content type info to File by @jhnstrk in Kludex/python-multipart#143

Full Changelog: Kludex/python-multipart@0.0.24...0.0.25

Version 0.0.24

What's Changed

Validate chunk_size in parse_form() by @Kludex in Kludex/python-multipart#244

Full Changelog: Kludex/python-multipart@0.0.23...0.0.24

Version 0.0.23

What's Changed

Remove unused trust_x_headers parameter and X-File-Name fallback by @jhnstrk in Kludex/python-multipart#196

Return processed length from QuerystringParser._internal_write by @bysiber in Kludex/python-multipart#229

Cleanup metadata dunders from __init__.py by @Chesars in Kludex/python-multipart#227

New Contributors

@Chesars made their first contribution in Kludex/python-multipart#227

@bysiber made their first contribution in Kludex/python-multipart#229

Full Changelog: Kludex/python-multipart@0.0.22...0.0.23

Version 0.0.22

What's Changed

... (truncated)

Changelog

Sourced from python-multipart's changelog.

0.0.27 (2026-04-27)

Add multipart header limits #267.

Pass parse offsets via constructors #268.

0.0.26 (2026-04-10)

Skip preamble before the first multipart boundary more efficiently #262.

Silently discard epilogue data after the closing multipart boundary #259.

0.0.25 (2026-04-10)

Add MIME content type info to File #143.

Handle CTE values case-insensitively #258.

Remove custom FormParser classes #257.

Add UPLOAD_DELETE_TMP to FormParser config #254.

Emit field_end for trailing bare field names on finalize #230.

Handle multipart headers case-insensitively #252.

Apply Apache-2.0 properly #247.

0.0.24 (2026-04-05)

Validate chunk_size in parse_form() #244.

0.0.23 (2026-04-05)

Remove unused trust_x_headers parameter and X-File-Name fallback #196.

Return processed length from QuerystringParser._internal_write #229.

Cleanup metadata dunders from __init__.py #227.

0.0.22 (2026-01-25)

Drop directory path from filename in File 9433f4b.

0.0.21 (2025-12-17)

Add support for Python 3.14 and drop EOL 3.8 and 3.9 #216.

0.0.20 (2024-12-16)

Handle messages containing only end boundary #142.

0.0.19 (2024-11-30)

Don't warn when CRLF is found after last boundary on MultipartParser #193.

0.0.18 (2024-11-28)

Hard break if found data after last boundary on MultipartParser #189.

... (truncated)

Commits

6d1d689 Version 0.0.27 (#272)
0b10220 Run CI on main branch pull requests (#271)
3e64f5f Add multipart header limits (#267)
eb109cc Pass parse offsets via constructors (#268)
78e29ab Bump pytest from 9.0.2 to 9.0.3 (#266)
b2ddd09 fuzz: Enhance fuzzing capabilities with new chunked and boundary tests (#264)
28f4785 Version 0.0.26 (#263)
d4452a7 Silently discard epilogue data after the closing boundary (#259)
6a7b76d Skip preamble before first multipart boundary (#262)
4addb60 Version 0.0.25 (#261)
Additional commits viewable in compare view

Summary by CodeRabbit

Chores
- Updated backend dependencies for improved stability and performance.

coderabbitai · 2026-05-11T10:57:06Z

Note

`.coderabbit.yaml` has unrecognized properties

CodeRabbit is using all valid settings from your configuration. Unrecognized properties (listed below) have been ignored and may indicate typos or deprecated fields that can be removed.

⚠️ Parsing warnings (1)

Validation error: Unrecognized key(s) in object: 'version'

⚙️ Configuration instructions

Please see the configuration documentation for more information.
You can also validate your configuration using the online YAML validator.
If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

📝 Walkthrough

Walkthrough

The backend Python dependency python-multipart is upgraded from version 0.0.9 to 0.0.27 in the requirements file. No other dependencies are changed.

Changes

Backend Dependency Update

Layer / File(s)	Summary
Multipart Library Upgrade `backend/requirements.txt`	`python-multipart` dependency is upgraded from version `0.0.9` to `0.0.27`.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Poem

🐰 A tiny tweak, so neat and small,
Multipart hops from nine to twenty-seven tall,
Pip files updated, no fuss or fight,
Parsing forms by day and night,
🥕 Silent upgrade, soft and light.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately describes the main change: upgrading python-multipart from 0.0.9 to 0.0.27 in the backend directory.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

📝 Generate docstrings

Create stacked PR
Commit on current branch

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch dependabot/pip/backend/pip-14c377a4fb

Warning

Review ran into problems

🔥 Problems

Git: Failed to clone repository. Please run the @coderabbitai full review command to re-trigger a full review. If the issue persists, set path_filters to include or exclude specific files.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

github-actions · 2026-05-11T10:57:07Z

PR governance metadata gate is not ready for 9e8b5aba3a9c27601d5c9afd89441f57b695220f:

3 required check(s) are not successful on 9e8b5ab.\n- Missing current-head CodeRabbit/coderabbitai evidence for 9e8b5ab.\n

github-actions · 2026-05-11T10:57:08Z

PR governance metadata gate is not ready for 9e8b5aba3a9c27601d5c9afd89441f57b695220f:

3 required check(s) are not successful on 9e8b5ab.\n- Missing current-head CodeRabbit/coderabbitai evidence for 9e8b5ab.\n

github-actions · 2026-05-11T10:57:09Z

PR governance metadata gate is not ready for 9e8b5aba3a9c27601d5c9afd89441f57b695220f:

3 required check(s) are not successful on 9e8b5ab.\n- Missing current-head CodeRabbit/coderabbitai evidence for 9e8b5ab.\n

github-actions · 2026-05-11T10:57:13Z

PR governance metadata gate is not ready for 9e8b5aba3a9c27601d5c9afd89441f57b695220f:

3 required check(s) are not successful on 9e8b5ab.\n- Missing current-head CodeRabbit/coderabbitai evidence for 9e8b5ab.\n

github-actions · 2026-05-11T10:57:15Z

PR governance metadata gate is not ready for 9e8b5aba3a9c27601d5c9afd89441f57b695220f:

3 required check(s) are not successful on 9e8b5ab.\n- Missing current-head CodeRabbit/coderabbitai evidence for 9e8b5ab.\n

github-actions · 2026-05-11T10:57:38Z

PR governance metadata gate is not ready for 9e8b5aba3a9c27601d5c9afd89441f57b695220f:

2 required check(s) are not successful on 9e8b5ab.\n- Missing current-head CodeRabbit/coderabbitai evidence for 9e8b5ab.\n

github-actions · 2026-05-11T10:57:59Z

PR governance metadata gate is not ready for 9e8b5aba3a9c27601d5c9afd89441f57b695220f:

2 required check(s) are not successful on 9e8b5ab.\n- Missing current-head CodeRabbit/coderabbitai evidence for 9e8b5ab.\n

greptile-apps · 2026-05-11T10:59:34Z

Greptile Summary

python-multipart를 0.0.9 → 0.0.27로 업그레이드합니다. 이 범위 내에서 0.0.21(Python 3.8/3.9 지원 종료), 0.0.23(trust_x_headers 파라미터 및 X-File-Name 폴백 제거), 0.0.25(커스텀 FormParser 클래스 제거) 등 여러 주요(breaking) 변경이 포함됩니다.
단일 파일(backend/requirements.txt)만 수정되었으며, 나머지 의존성은 변경되지 않았습니다.

Confidence Score: 4/5

의존성 버전 단독 변경으로 코드 로직 자체는 이상 없으나, 대형 버전 점프에 따른 호환성 검증이 필요합니다.

변경 자체는 단순하지만 18개 버전을 건너뛰는 대형 업그레이드이며, 이전 리뷰에서 지적된 FastAPI 0.111.0과의 호환성 검증이 선행되어야 합니다. 새로운 P0/P1 버그는 발견되지 않았습니다.

backend/requirements.txt — FastAPI 버전과 python-multipart 간 호환성 확인 필요

Important Files Changed

Filename	Overview
backend/requirements.txt	python-multipart를 0.0.9에서 0.0.27로 버전 업. 18개 버전을 건너뛰는 대형 점프이며 여러 주요 변경 사항 포함.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A["python-multipart 0.0.9"] -->|"업그레이드"| B["python-multipart 0.0.27"]
    B --> C{"호환성 체크"}
    C --> D["fastapi==0.111.0\n멀티파트 감지 로직 확인"]
    C --> E["trust_x_headers 파라미터\n사용 여부 확인"]
    C --> F["커스텀 FormParser 클래스\n사용 여부 확인"]
    C --> G["Python 버전 확인\n(0.0.21부터 3.8/3.9 지원 종료)"]
    D --> H{{"실제 form 엔드포인트\n통합 테스트 필요"}}
    E --> H
    F --> H
    G --> H

_{Reviews (2): Last reviewed commit: "chore(deps): bump python-multipart" | Re-trigger Greptile}

github-actions · 2026-05-11T11:02:45Z

PR governance metadata gate is not ready for 9e8b5aba3a9c27601d5c9afd89441f57b695220f:

Merge state is UNKNOWN; resolve conflicts or refresh mergeability.\n- 1 unresolved current review thread(s) remain.\n- Missing current-head CodeRabbit/coderabbitai evidence for 9e8b5ab.\n

Bumps the pip group with 1 update in the /backend directory: [python-multipart](https://github.com/Kludex/python-multipart). Updates `python-multipart` from 0.0.9 to 0.0.27 - [Release notes](https://github.com/Kludex/python-multipart/releases) - [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md) - [Commits](Kludex/python-multipart@0.0.9...0.0.27) --- updated-dependencies: - dependency-name: python-multipart dependency-version: 0.0.27 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-05-11T14:21:10Z

PR governance metadata gate is not ready for 3148e13066c94c94572a16b42288956321c7b71e:

1 unresolved current review thread(s) remain.\n- 3 required check(s) are not successful on 3148e13.\n- Missing current-head CodeRabbit/coderabbitai evidence for 3148e13.\n

github-actions · 2026-05-11T14:21:42Z

PR governance metadata gate is not ready for 3148e13066c94c94572a16b42288956321c7b71e:

2 required check(s) are not successful on 3148e13.\n- Missing current-head CodeRabbit/coderabbitai evidence for 3148e13.\n

github-actions · 2026-05-11T14:22:08Z

PR governance metadata gate is not ready for 3148e13066c94c94572a16b42288956321c7b71e:

2 required check(s) are not successful on 3148e13.\n- Missing current-head CodeRabbit/coderabbitai evidence for 3148e13.\n

github-actions · 2026-05-11T14:29:21Z

PR governance metadata gate is not ready for 3148e13066c94c94572a16b42288956321c7b71e:

Missing current-head CodeRabbit/coderabbitai evidence for 3148e13.\n

dependabot · 2026-05-13T04:39:09Z

Looks like python-multipart is no longer updatable, so this is no longer needed.

seonghobae · 2026-05-13T04:54:14Z

이 PR은 (보안 잔여 경보 정리)에서 포함·병합되었습니다. 최신 릴리스 기준은 v0.13.0 입니다.

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 11, 2026

coderabbitai Bot approved these changes May 11, 2026

View reviewed changes

greptile-apps Bot reviewed May 11, 2026

View reviewed changes

Comment thread backend/requirements.txt

dependabot Bot force-pushed the dependabot/pip/backend/pip-14c377a4fb branch from 9e8b5ab to 3148e13 Compare May 11, 2026 14:20

seonghobae mentioned this pull request May 13, 2026

보안 잔여 경보 정리: Next.js / python-multipart / FastAPI 런타임 스택 #186

Merged

dependabot Bot closed this May 13, 2026

dependabot Bot deleted the dependabot/pip/backend/pip-14c377a4fb branch May 13, 2026 04:39

Uh oh!

Conversation

dependabot Bot commented on behalf of github May 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Version 0.0.27

What's Changed

Version 0.0.26

What's Changed

Version 0.0.25

What's Changed

Version 0.0.24

What's Changed

Version 0.0.23

What's Changed

New Contributors

Version 0.0.22

What's Changed

0.0.27 (2026-04-27)

0.0.26 (2026-04-10)

0.0.25 (2026-04-10)

0.0.24 (2026-04-05)

0.0.23 (2026-04-05)

0.0.22 (2026-01-25)

0.0.21 (2025-12-17)

0.0.20 (2024-12-16)

0.0.19 (2024-11-30)

0.0.18 (2024-11-28)

Summary by CodeRabbit

Uh oh!

coderabbitai Bot commented May 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

.coderabbit.yaml has unrecognized properties

Walkthrough

Changes

Estimated code review effort

Poem

Review ran into problems

Uh oh!

github-actions Bot commented May 11, 2026

Uh oh!

github-actions Bot commented May 11, 2026

Uh oh!

github-actions Bot commented May 11, 2026

Uh oh!

github-actions Bot commented May 11, 2026

Uh oh!

github-actions Bot commented May 11, 2026

Uh oh!

github-actions Bot commented May 11, 2026

Uh oh!

github-actions Bot commented May 11, 2026

Uh oh!

greptile-apps Bot commented May 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Greptile Summary

Confidence Score: 4/5

Important Files Changed

Flowchart

Uh oh!

Uh oh!

github-actions Bot commented May 11, 2026

Uh oh!

github-actions Bot commented May 11, 2026

Uh oh!

github-actions Bot commented May 11, 2026

Uh oh!

github-actions Bot commented May 11, 2026

Uh oh!

github-actions Bot commented May 11, 2026

Uh oh!

dependabot Bot commented on behalf of github May 13, 2026

Uh oh!

seonghobae commented May 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

dependabot Bot commented on behalf of github May 11, 2026 •

edited

Loading

coderabbitai Bot commented May 11, 2026 •

edited

Loading

`.coderabbit.yaml` has unrecognized properties

greptile-apps Bot commented May 11, 2026 •

edited

Loading