Skip to content

chore(deps): update starlette requirement from <1,>=0.19.1 to >=0.49.3,<1 - #1493

Merged
WilliamBergamin merged 4 commits into
mainfrom
dependabot/pip/starlette-gte-0.49.3-and-lt-1
May 20, 2026
Merged

chore(deps): update starlette requirement from <1,>=0.19.1 to >=0.49.3,<1#1493
WilliamBergamin merged 4 commits into
mainfrom
dependabot/pip/starlette-gte-0.49.3-and-lt-1

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubMay 2, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on starlette to permit the latest version.

Release notes

Sourced from starlette's releases.

Version 0.49.3

Fixed

  • Relax strictness on Middleware type #3059.

Full Changelog: Kludex/starlette@0.49.2...0.49.3

Changelog

Sourced from starlette's changelog.

0.49.3 (November 1, 2025)

This is the last release that supports Python 3.9, which will be dropped in the next minor release.

Fixed

  • Relax strictness on Middleware type #3059.

0.49.2 (November 1, 2025)

Fixed

  • Ignore if-modified-since header if if-none-match is present in StaticFiles#3044.

0.49.1 (October 28, 2025)

This release fixes a security vulnerability in the parsing logic of the Range header in FileResponse.

You can view the full security advisory: GHSA-7f5h-v6xp-fcq8

Fixed

0.49.0 (October 28, 2025)

Added

  • Add encoding parameter to Config class #2996.
  • Support multiple cookie headers in Request.cookies#3029.
  • Use Literal type for WebSocketEndpoint encoding values #3027.

Changed

  • Do not pollute exception context in Middleware when using BaseHTTPMiddleware#2976.

0.48.0 (September 13, 2025)

Added

  • Add official Python 3.14 support #3013.

Changed

0.47.3 (August 24, 2025)

Fixed

... (truncated)

Commits

@dependabotdependabotBot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels May 2, 2026
@dependabot
dependabotBot requested a review from a team as a code ownerMay 2, 2026 01:39
@dependabotdependabotBot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels May 2, 2026
@codecov

codecovBot commented May 2, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.30%. Comparing base (f3eeefe) to head (932e0d1).
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@ Coverage Diff @@## main #1493 +/- ##
=======================================
Coverage 91.30% 91.30% =======================================
Files 228 228 Lines 7271 7271 =======================================
Hits 6639 6639 Misses 632 632 

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@dependabot
dependabotBotforce-pushed the dependabot/pip/starlette-gte-0.49.3-and-lt-1 branch 3 times, most recently from 4486ed8 to f13c930CompareMay 5, 2026 14:40
Updates the requirements on [starlette](https://github.com/Kludex/starlette) to permit the latest version.
- [Release notes](https://github.com/Kludex/starlette/releases)
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)
- [Commits](Kludex/starlette@0.19.1...0.49.3)
---
updated-dependencies:
- dependency-name: starlette
dependency-version: 0.49.3
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabotBotforce-pushed the dependabot/pip/starlette-gte-0.49.3-and-lt-1 branch from f13c930 to 197d09cCompareMay 5, 2026 14:55
@WilliamBergamin
WilliamBergamin merged commit da81ecc into mainMay 20, 2026
16 checks passed
@WilliamBergamin
WilliamBergamin deleted the dependabot/pip/starlette-gte-0.49.3-and-lt-1 branch May 20, 2026 21:08
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filepythonPull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@WilliamBergamin