[dependabot]

Bumps gradio from 6.12.0 to 6.16.0.

Changelog

Sourced from gradio's changelog.

6.16.0

Features

• #13422 96d4fd1 - Make the session heartbeat interval configurable via the GRADIO_HEARTBEAT_INTERVAL environment variable (#13346). Thanks @​wjddnwp29!
• #13459 6320116 - Show a friendly landing page (instead of a raw JSON-RPC error) when the MCP endpoint is opened in a browser. Thanks @​ShirGanon!

Fixes

• #13437 97d541f - Fix path traversal in gr.FileExplorer.preprocess by validating selected paths with _safe_join (consistent with ls()), rejecting absolute/.. paths that escape root_dir. Thanks @​abidlabs!
• #13438 010ee63 - Fix open-redirect bypass in gradio.oauth._redirect_to_target where 4+ leading slashes (or backslashes) in _target_url produced a scheme-relative redirect to an external host, restoring CVE-2026-28415. Thanks @​abidlabs!
• #13240 0d670ad - Fix browser freeze when a dataframe's value is set (e.g. via a tab select event), and only dispatch the tabs select event when the selected tab actually changes. Thanks @​freddyaboulton!
• #13461 702a8b1 - Fix runtime language switching not re-translating component labels/values (only the footer updated). @gradio/utils resolved its own duplicate svelte-i18n instance whose locale store was never updated; the retranslation trigger now uses the live formatter store injected by @gradio/core. Thanks @​abidlabs!
• #13458 939e84c - Defer Node front proxy startup until Python is ready in SSR mode. Thanks @​pngwn!
• #13436 48d0e27 - Fix SSRF in Image/Gallery SVG postprocessing and Audio streaming postprocessing by routing user-influenced URL fetches through safehttpx. Thanks @​abidlabs!
• #13451 29bd7a0 - gr.Dropdown() Fixes. Thanks @​dawoodkhan82!

6.15.2

Features

• #13430 36f6b4e - upgrade starlette dependency to 1.0.1 or higher. Thanks @​abidlabs!

Fixes

• #13396 67df918 - Convert audio to int16 for all formats in audio_to_file so non-WAV outputs (mp3, flac, ogg) no longer encode as noise. Thanks @​GopalGB!

6.15.1

Features

• #13388 c889673 - tests:add regression coverage for the Blocks.from_config() proxy_url SSRF guard (GHSA-jmh7-g254-2cq9). Thanks @​xr843!

Fixes

• #13394 1c609af - Fix audio cache keys to include metadata. Thanks @​3em0!
• #13424 14ccbf1 - Defer Node front proxy startup until Python is ready in SSR mode. Thanks @​pngwn!
• #13391 270c12a - fix(dataframe): handle empty and 1d auto datatype values. Thanks @​danyalahmed1995!

6.15.0

Features

• #13322 6c48f80 - Allow applying gr.cache() to intermediate functions directly. Thanks @​abidlabs!
• #13367 5d9c9fe - fix: upgrade handlebars to 4.7.9 (CVE-2026-33937). Thanks @​orbisai0security!
• #13408 6b0c8af - Markdown link fix. Thanks @​dawoodkhan82!
• #13366 10f43e0 - Offload traffic to static workers and use node as the proxy. Thanks @​freddyaboulton!

Fixes

... (truncated)

Commits

• 99ca159 chore: update versions (#13432)
• 05d2fd4 gr.Dropdown() Fixes (#13451)
• 0486d96 Fix runtime language switching not re-translating component props, and other ...
• f9aed6d docs: upgrade MiniMax demo to M3 (#13462)
• a11359d Fix another ssr server startup race condition (#13458)
• fb3b812 Show a landing page for browser GET requests to the MCP endpoint (#13459)
• 397e39b Fix various typos found by codespell (#13440)
• f29d16a fix: SSRF in Image/Gallery SVG and Audio postprocessing (GHSA-3xvj-7669-6whx)...
• c029722 ci: upgrade Playwright to 1.60 (#13457)
• e71c760 ci: shorten Playwright install timeout (#13455)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

---

Note

Medium Risk
Lockfile-only upgrade of the Gradio stack used by the websearch env (likely via OpenEnv); security fixes reduce exposure but minor-version UI/server changes warrant a quick smoke test of any /web Gradio surface.

Overview
Updates envs/websearch_env/uv.lock only: pins gradio from 6.12.0 to 6.16.0 and the paired gradio-client from 2.4.1 to 2.5.0 (updated wheel/sdist hashes). No application or pyproject.toml changes.

The newer Gradio release line includes security and stability fixes (e.g. path traversal in FileExplorer, OAuth redirect hardening, SSRF guards for media postprocessing) plus minor UI/runtime behavior changes between 6.12 and 6.16.

^{Reviewed by Cursor Bugbot for commit 4375b3c. Bugbot is set up for automated code reviews on this repo. Configure here.}

[bot-ci-comment]

The docs for this PR live here. All of your documentation changes will be reflected on that endpoint. The docs are available until 30 days after the last update.

[cursor]

Alignment Review Report

Scope

This PR only touches envs/websearch_env/uv.lock (6 lines: gradio 6.12.0 → 6.16.0 and gradio-client 2.4.1 → 2.5.0, both transitive pins resolved from the workspace root's gradio>=4.0.0 constraint used for the optional debug web UI). No pyproject.toml, source, or test files are modified, and gradio is not imported directly anywhere in envs/websearch_env — it's a transitive dependency of the optional web-UI extra.

Automated Checks

• Lint: PASS for the diff. ruff format --check envs/websearch_env is clean (8/8 files formatted). Repo-wide usort/ruff format does report 58 pre-existing unformatted files elsewhere in src/, but none are touched by this PR and none are in envs/websearch_env — pre-existing baseline issue, not introduced here.
• Debug code: CLEAN for the diff. check-debug.sh surfaces print/TODO occurrences only in unrelated src/openenv/... files (pre-existing, e.g. CLI help text, docstrings, intentional CLI output) — none are part of this change.

Open RFCs Context

Scanned rfcs/ (000–012). RFC 006 (006-agentic-rl-harness-interception.md, In Review) discusses gradio.networking.setup_tunnel as a tunneling forwarder for Harbor capture, but that's a different subsystem (openenv.harbor) and dependency surface from envs/websearch_env's own uv.lock. No open RFC governs per-environment dependency version bumps, and none conflict with this change.

Tier 1: Fixes Required

None. The diff is a lockfile-only version bump with no code touched.

Tier 2: Alignment Discussion

Principle Conflicts

None identified. No change to the Gym-like API, MCP boundary, reward computation, client/server imports, or generics/Pydantic wire types — this is purely a transitive dependency version resolution.

RFC Conflicts

None identified.

Summary

• 0 mechanical issues to fix
• 0 alignment points for human review
• 0 RFC conflicts to discuss

Safe to merge from an alignment/invariants standpoint. Recommend relying on CI (env build/tests for websearch_env) to confirm gradio 6.16.0 doesn't introduce a runtime regression in the optional web UI, since that wasn't exercised as part of this static review.

  

_{Sent by Cursor Automation: Pre-review}