feat: recommend granian for wsgi (#15725)

* feat: recommend granian for wsgi

This is what our Docker container will use, see
WeblateOrg/docker#3510

* chore(deps): update lockfile

---------

Co-authored-by: pre-commit-ci-lite[bot] <117423508+pre-commit-ci-lite[bot]@users.noreply.github.com>

Author: nijel

docs/admin/install.rst

@@ -272,7 +272,7 @@ Django REST Framework
        - Hosted Weblate integration
 
      * - ``wsgi``
-       - | `gunicorn <https://pypi.org/project/gunicorn>`_
+       - | `granian <https://pypi.org/project/granian>`_
        - wsgi server for Weblate
 
      * - ``zxcvbn``
@@ -768,8 +768,9 @@ Client protocol
    * :ref:`spam-protection`
    * :ref:`rate-limit`
    * :ref:`audit-log`
-   * :ref:`uwsgi`
+   * :ref:`nginx-granian`
    * :ref:`nginx-gunicorn`
+   * :ref:`uwsgi`
    * :ref:`apache`
    * :ref:`apache-gunicorn`
    * :setting:`IP_BEHIND_REVERSE_PROXY`
@@ -1409,8 +1410,14 @@ For testing purposes, you can use the built-in web server in Django:
 
    The Django built-in server serves static files only with :setting:`DEBUG`
    enabled as it is intended for development only. For production use, please
-   see WSGI setups in :ref:`uwsgi`, :ref:`apache`, :ref:`apache-gunicorn`, and
-   :ref:`static-files`.
+   see WSGI setups:
+
+   * :ref:`nginx-granian`
+   * :ref:`nginx-gunicorn`
+   * :ref:`uwsgi`
+   * :ref:`apache`
+   * :ref:`apache-gunicorn`
+   * :ref:`static-files`
 
 .. _static-files:
 
@@ -1435,6 +1442,8 @@ use that for the following paths:
 
 .. seealso::
 
+   * :ref:`nginx-granian`
+   * :ref:`nginx-gunicorn`
    * :ref:`uwsgi`
    * :ref:`apache`
    * :ref:`apache-gunicorn`
@@ -1461,6 +1470,23 @@ configuration, but this might need customization for your environment.
    * :setting:`CSP_FONT_SRC`
    * :setting:`CSP_FORM_SRC`
 
+.. _nginx-granian:
+
+Sample configuration for NGINX and Granian
++++++++++++++++++++++++++++++++++++++++++++
+
+The following configuration runs Weblate using Granian the NGINX webserver:
+
+.. literalinclude:: ../../weblate/examples/weblate.nginx.granian.conf
+    :language: nginx
+    :caption: weblate/examples/weblate.nginx.granian.conf
+
+.. seealso::
+
+   * :ref:`running-granian`
+   * https://github.com/emmett-framework/granian
+   * :doc:`django:howto/deployment/wsgi/index`
+
 .. _nginx-gunicorn:
 
 Sample configuration for NGINX and Gunicorn
@@ -1549,18 +1575,40 @@ The following configuration runs Weblate in Gunicorn and Apache 2.4
    * :doc:`django:howto/deployment/wsgi/gunicorn`
 
 
-.. _running-gunicorn:
+.. _running-granian:
 
-Sample configuration to start Gunicorn
-++++++++++++++++++++++++++++++++++++++
+Sample configuration to start Granian
++++++++++++++++++++++++++++++++++++++
 
 Weblate has `wsgi` optional dependency (see :ref:`python-deps`) that will
-install everything you need to run Gunicorn. When installing Weblate you can specify it as:
+install everything you need to run Granian. When installing Weblate you can specify it as:
 
 .. code-block:: shell
 
    uv pip install Weblate[all,wsgi]
 
+Once you have Granian installed, you can run it. This is usually done at the
+system level. The following examples show starting via systemd:
+
+.. literalinclude:: ../../weblate/examples/granian.service
+   :caption: /etc/systemd/system/granian.service
+   :language: ini
+
+.. seealso::
+
+   * https://github.com/emmett-framework/granian
+   * :doc:`django:howto/deployment/wsgi/index`
+
+.. _running-gunicorn:
+
+Sample configuration to start Gunicorn
+++++++++++++++++++++++++++++++++++++++
+
+Gunicorn has to be installed separately:
+
+.. code-block:: shell
+
+   uv pip install gunicorn
 
 Once you have Gunicorn installed, you can run it. This is usually done at the
 system level. The following examples show starting via systemd:

docs/admin/management.rst

@@ -176,10 +176,10 @@ Imports given content into Weblate, useful for benchmarking.
    :caption: Example of memory profiling
 
    # Run benchmark under memray
-   memray run ./manage.py benchmark --project benchmark --filemask '*.tbx' --format tbx --zipfile /tmp/MicrosoftTermCollection2.zip
+   uvx memray run ./manage.py benchmark --project benchmark --filemask '*.tbx' --format tbx --zipfile /tmp/MicrosoftTermCollection2.zip
 
    # Render the profile
-   memray flamegraph ./memray-manage.py.2554179.bin
+   uvx memray flamegraph ./memray-manage.py.2554179.bin
 
    # Display it
    fixefox memray-flamegraph-manage.py.2554179.html

docs/changes.rst

@@ -40,6 +40,7 @@ Please follow :ref:`generic-upgrade-instructions` in order to perform update.
 
 * The distributed locking now uses a different implementation and that introduced several changes in :file:`settings_example.py`.
 * There are several changes in :file:`settings_example.py`, most notable are changed settings ``CRISPY_ALLOWED_TEMPLATE_PACKS`` and ``INSTALLED_APPS``; please adjust your settings accordingly.
+* Docker container is now using :program:`granian`.
 
 .. rubric:: Contributors
 

docs/specs/sbom/partial/python.json

@@ -2887,6 +2887,50 @@
       "type": "library",
       "version": "1.70.0"
     },
+    {
+      "bom-ref": "granian==2.5.0",
+      "description": "A Rust HTTP server for Python applications",
+      "externalReferences": [
+        {
+          "comment": "from packaging metadata Project-URL: Source",
+          "type": "other",
+          "url": "https://github.com/emmett-framework/granian"
+        },
+        {
+          "comment": "from packaging metadata Project-URL: Funding",
+          "type": "other",
+          "url": "https://github.com/sponsors/gi0baro"
+        },
+        {
+          "comment": "from packaging metadata Project-URL: Homepage",
+          "type": "website",
+          "url": "https://github.com/emmett-framework/granian"
+        },
+        {
+          "comment": "from packaging metadata: Home-page",
+          "type": "website",
+          "url": "https://github.com/emmett-framework/granian"
+        }
+      ],
+      "licenses": [
+        {
+          "license": {
+            "acknowledgement": "declared",
+            "id": "BSD-3-Clause"
+          }
+        },
+        {
+          "license": {
+            "acknowledgement": "declared",
+            "name": "License :: OSI Approved :: BSD License"
+          }
+        }
+      ],
+      "name": "granian",
+      "purl": "pkg:pypi/granian@2.5.0",
+      "type": "library",
+      "version": "2.5.0"
+    },
     {
       "bom-ref": "grpc-google-iam-v1==0.14.2",
       "description": "IAM API client library",
@@ -7299,6 +7343,12 @@
       ],
       "ref": "googleapis-common-protos==1.70.0"
     },
+    {
+      "dependsOn": [
+        "click==8.2.1"
+      ],
+      "ref": "granian==2.5.0"
+    },
     {
       "dependsOn": [
         "googleapis-common-protos==1.70.0",
@@ -7932,6 +7982,7 @@
         "git-review==2.5.0",
         "google-cloud-storage==3.2.0",
         "google-cloud-translate==3.21.1",
+        "granian==2.5.0",
         "gunicorn==23.0.0",
         "hiredis==3.2.1",
         "html2text==2025.4.15",
@@ -8158,5 +8209,5 @@
   "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:uuid:4633fc24-47b6-511a-bc7c-7a2a69f75f3c"
+  "serialNumber": "urn:uuid:6d5ce757-c621-5a78-bda5-02a8fd073444"
 }

docs/specs/sbom/sbom.json

@@ -1,7 +1,7 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:uuid:c34a953d-25cf-5b92-b89f-46436e94a1eb",
+  "serialNumber": "urn:uuid:2ff7c1a6-e908-55d4-b8cf-03ab981dd7bc",
   "version": 1,
   "metadata": {
     "tools": [
@@ -3968,6 +3968,50 @@
         }
       ]
     },
+    {
+      "type": "library",
+      "bom-ref": "granian==2.5.0",
+      "name": "granian",
+      "version": "2.5.0",
+      "description": "A Rust HTTP server for Python applications",
+      "licenses": [
+        {
+          "license": {
+            "id": "BSD-3-Clause",
+            "acknowledgement": "declared"
+          }
+        },
+        {
+          "license": {
+            "name": "License :: OSI Approved :: BSD License",
+            "acknowledgement": "declared"
+          }
+        }
+      ],
+      "purl": "pkg:pypi/granian@2.5.0",
+      "externalReferences": [
+        {
+          "url": "https://github.com/emmett-framework/granian",
+          "type": "other",
+          "comment": "from packaging metadata Project-URL: Source"
+        },
+        {
+          "url": "https://github.com/sponsors/gi0baro",
+          "type": "other",
+          "comment": "from packaging metadata Project-URL: Funding"
+        },
+        {
+          "url": "https://github.com/emmett-framework/granian",
+          "type": "website",
+          "comment": "from packaging metadata Project-URL: Homepage"
+        },
+        {
+          "url": "https://github.com/emmett-framework/granian",
+          "type": "website",
+          "comment": "from packaging metadata: Home-page"
+        }
+      ]
+    },
     {
       "type": "library",
       "bom-ref": "grpc-google-iam-v1==0.14.2",
@@ -8512,6 +8556,12 @@
         "protobuf==6.31.1"
       ]
     },
+    {
+      "ref": "granian==2.5.0",
+      "dependsOn": [
+        "click==8.2.1"
+      ]
+    },
     {
       "ref": "grpc-google-iam-v1==0.14.2",
       "dependsOn": [
@@ -9146,6 +9196,7 @@
         "git-review==2.5.0",
         "google-cloud-storage==3.2.0",
         "google-cloud-translate==3.21.1",
+        "granian==2.5.0",
         "gunicorn==23.0.0",
         "hiredis==3.2.1",
         "html2text==2025.4.15",

pyproject.toml

@@ -235,6 +235,8 @@ wllegal = [
   "wllegal>=2024.6"
 ]
 wsgi = [
+  "granian==2.5.0",
+  # TODO: Remove gunicorn once dev-docker is based on the Weblate 5.13 container
   "gunicorn==23.0.0"
 ]
 zxcvbn = [