Python: Update websockets requirement from <16,>=13 to >=13,<17 in /python

[dependabot]

Updates the requirements on websockets to permit the latest version.

Release notes

Sourced from websockets's releases.

16.1.1

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

Commits

• 01df1e4 Revert "Decode non-ASCII header values with iso-8859-1."
• 2d61f74 Clarify restriction on headers in 16.1.
• 4df6f90 Release version 16.1.
• 7c69eca Increase timeout for building wheels.
• 493864e Complete and review changelog.
• 73ff538 Temporarily remove the trio implementation (again).
• 77f7d71 Shorten changelog and docstring for previous commit.
• 84859e1 Add text argument to broadcast() to force the frame type
• 1a38f5a Document research on removing a workaround.
• 99431ee Apply code style to docs/conf.py.
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[Copilot]

🟡 Changes recommended

The committed python/uv.lock is now out of sync with the updated websockets specifier in pyproject.toml, which can break uv sync --frozen workflows.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

This PR updates the Python package dependency constraints to allow newer websockets releases (up to, but not including, v17), aligning the Python SDK’s declared compatibility with the latest upstream versions.

Changes:

• Bumped websockets upper bound from <16 to <17 in the main dependency list.
• Bumped websockets upper bound from <16 to <17 in the realtime optional dependency group.

File summaries

File	Description
python/pyproject.toml	Expands the allowed websockets version range to include v16.x for base and realtime dependencies.

Review details

Suppressed comments (1)

python/pyproject.toml:55

• The base dependencies list contains duplicate entries for websockets/aiortc (also listed earlier at lines 43–44). This is redundant and makes dependency maintenance harder; keeping a single occurrence is sufficient.

    "scipy>=1.15.1",
    "websockets >= 13, < 17",
    "aiortc>=1.9.0",

• Files reviewed: 1/1 changed files
• Comments generated: 1
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[github-actions]

MAF Automated Review — Iteration 1

Result: No findings
Scope: full PR (1 commit(s)): f2b6df5b90ba
Model: gpt-5.6-sol-fast

Overview

The PR consistently widens all three direct websockets constraints to admit 16.x while retaining a <17 major-version boundary. Version 16.1.1 preserves the imported websockets.asyncio.client.connect API, including additional_headers, and its Python 3.10 minimum matches the package contract; upgrade CI also resolves dependencies before exercising the Python 3.10-3.13 test matrix. No Critical, High, or Medium regression was established.

Reviewed the supplied pull-request change set across correctness, security/reliability, architecture, and failure behavior.
No publishable findings remained after source verification for this scope.