An open index of dependabot pull requests across open source projects.

Bump starlette from 0.44.0 to 0.46.2

Merged
Number: #1004
Type: Pull Request
State: Merged
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 0
Created: June 09, 2025 at 11:21 PM UTC
(7 months ago)
Updated: July 01, 2025 at 10:23 PM UTC
(6 months ago)
Merged: July 01, 2025 at 10:23 PM UTC
(6 months ago)
by p1c2u
Time to Close: 22 days
Labels:
dependencies python
Description:

Bumps starlette from 0.44.0 to 0.46.2.

Release notes

Sourced from starlette's releases.

Version 0.46.2

What's Changed

New Contributors

Full Changelog: https://github.com/encode/starlette/compare/0.46.1...0.46.2

Version 0.46.1

Fixed

  • Allow relative directory path when follow_symlinks=True #2896.

Full Changelog: https://github.com/encode/starlette/compare/0.46.0...0.46.1

Version 0.46.0

Added

  • GZipMiddleware: Make sure Vary header is always added if a response can be compressed #2865.

Fixed

  • Raise exception from background task on BaseHTTPMiddleware #2812.
  • GZipMiddleware: Don't compress on server sent events #2871.

Changed

  • MultiPartParser: Rename max_file_size to spool_max_size #2780.

Deprecated

  • Add deprecated warning to TestClient(timeout=...) #2840.

New Contributors

Full Changelog: https://github.com/encode/starlette/compare/0.45.3...0.46.0

Version 0.45.3

Fixed

... (truncated)

Changelog

Sourced from starlette's changelog.

0.46.2 (April 13, 2025)

Fixed

  • Prevents reraising of exception from BaseHttpMiddleware #2911.
  • Use correct index on backwards compatible logic in TemplateResponse #2909.

0.46.1 (March 8, 2025)

Fixed

  • Allow relative directory path when follow_symlinks=True #2896.

0.46.0 (February 22, 2025)

Added

  • GZipMiddleware: Make sure Vary header is always added if a response can be compressed #2865.

Fixed

  • Raise exception from background task on BaseHTTPMiddleware #2812.
  • GZipMiddleware: Don't compress on server sent events #2871.

Changed

  • MultiPartParser: Rename max_file_size to spool_max_size #2780.

Deprecated

  • Add deprecated warning to TestClient(timeout=...) #2840.

0.45.3 (January 24, 2025)

Fixed

  • Turn directory into string on lookup_path on commonpath comparison #2851.

0.45.2 (January 4, 2025)

Fixed

  • Make create_memory_object_stream compatible with old anyio versions once again, and bump anyio minimum version to 3.6.2 #2833.

0.45.1 (December 30, 2024)

Fixed

  • Close MemoryObjectReceiveStream left unclosed upon exception in BaseHTTPMiddleware children #2813.
  • Collect errors more reliably from the WebSocket logic on the TestClient #2814.

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Pull Request Statistics
Commits:
1
Files Changed:
1
Additions:
+5
Deletions:
-5
Package Dependencies
Package:
starlette
Ecosystem:
pip
Version Change:
0.44.0 → 0.46.2
Update Type:
Minor
Technical Details
ID: 2705936
UUID: 2579688310
Node ID: PR_kwDOBjX6Ks6Zwut2
Host: GitHub
Repository: python-openapi/openapi-core
Merge State: Unknown