Skip to content

dependency: (deps): bump starlette from 1.0.0 to 1.1.0 in /backend#421

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/starlette-1.1.0
Open

dependency: (deps): bump starlette from 1.0.0 to 1.1.0 in /backend#421
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/starlette-1.1.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 25, 2026

Bumps starlette from 1.0.0 to 1.1.0.

Release notes

Sourced from starlette's releases.

Version 1.1.0

What's Changed

New Contributors

Full Changelog: Kludex/starlette@1.0.1...1.1.0

Version 1.0.1

What's Changed

Full Changelog: Kludex/starlette@1.0.0...1.0.1

Changelog

Sourced from starlette's changelog.

1.1.0 (May 23, 2026)

Added

  • Use "application/octet-stream" as the FileResponse media type fallback #3283.

Fixed

  • Only dispatch standard HTTP verbs in HTTPEndpoint #3286.
  • Reject absolute paths in StaticFiles.lookup_path #3287.

1.0.1 (May 21, 2026)

Fixed

  • Ignore malformed Host header when constructing request.url #3279.
Commits
  • a4ff83b Version 1.1.0 (#3289)
  • fd53168 Reject absolute paths in StaticFiles.lookup_path (#3287)
  • e3f9722 Only dispatch standard HTTP verbs in HTTPEndpoint (#3286)
  • 348f86d Use "application/octet-stream" as the FileResponse media type fallback (#...
  • 48f8e33 Version 1.0.1 (#3281)
  • f078832 Remove Hugging Face sponsor block from docs (#3280)
  • 472951e chore(deps): bump the github-actions group with 2 updates (#3277)
  • 764dab0 Ignore malformed Host header when constructing request.url (#3279)
  • 19d0811 Harden GitHub Actions workflows and Dependabot config (#3276)
  • 01f4637 chore(deps): bump idna from 3.10 to 3.15 (#3274)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added Dependencies Pull requests that update a dependency file python Pull requests that update Python code labels May 25, 2026
Bumps [starlette](https://github.com/Kludex/starlette) from 1.0.0 to 1.1.0.
- [Release notes](https://github.com/Kludex/starlette/releases)
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)
- [Commits](Kludex/starlette@1.0.0...1.1.0)

---
updated-dependencies:
- dependency-name: starlette
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/backend/starlette-1.1.0 branch from 3283b64 to 463adca Compare May 26, 2026 23:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants