[dependabot]

Bumps asgiref from 3.12.1 to 3.13.0.

Changelog

Sourced from asgiref's changelog.

3.13.0 (2026-10-23)

• It is now possible to nest ThreadSensitiveContext by providing an explicit executor for thread-sensitive tasks. This enables moving a block of such work away from the parent context's shared worker. (#596)

  The provided executor must run work sequentially and on a single thread, as per ThreadPoolExecutor(max_workers=1), and the calling code is responsible for managing the executor's lifecycle.

  See the README for more details.

• Local attribute access is now 2-3x faster. Local(...) now uses one of two internal specialisations, selected by thread_critical, instead of checking the mode on every access. (#551)

  As a result Local is now marked @final and raises TypeError if subclassed. Subclassing was never supported, and could not have worked correctly with the specialised implementations.

• asgiref.timeout.timeout is deprecated, and will be removed in a future release. Move to use asyncio.timeout() instead.

• Added support for Python 3.15.

• Dropped support for EOL Python 3.10.

Commits

• 03dcd19 Releasing 3.13.0
• 8c185a0 Allow nesting ThreadSensitiveContext. (#596)
• 9f2a6c0 Speed up Local (#551)
• 3ae6e47 Deprecate custom timeout in favour of asyncio.timeout. (#598)
• 97d7e63 Compare contextvars by identity in _restore_context (#577)
• e9a34ef Handle scope["server"] = None in build_environ. (#553)
• 0c85f40 Block assigning _data onto Local. (#576)
• 1318084 Prefer client certificate chains in the TLS extension (#590)
• 0bd8efe Document HTTP/3 support (#589)
• cf94d8e Add support for Python 3.15 and drop 3.10 (#581)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)