Bump the production-version-updates group with 3 updates

[dependabot]

Bumps the production-version-updates group with 3 updates: fastapi, parse and starlette.

Updates fastapi from 0.128.0 to 0.128.5

Release notes

Sourced from fastapi's releases.

0.128.5

Refactors

• ♻️ Refactor and simplify Pydantic v2 (and v1) compatibility internal utils. PR #14862 by @​tiangolo.

Internal

• ✅ Add inline snapshot tests for OpenAPI before changes from Pydantic v2. PR #14864 by @​tiangolo.

0.128.4

Refactors

• ♻️ Refactor internals, simplify Pydantic v2/v1 utils, create_model_field, better types for lenient_issubclass. PR #14860 by @​tiangolo.
• ♻️ Simplify internals, remove Pydantic v1 only logic, no longer needed. PR #14857 by @​tiangolo.
• ♻️ Refactor internals, cleanup unneeded Pydantic v1 specific logic. PR #14856 by @​tiangolo.

Translations

• 🌐 Update translations for fr (outdated pages). PR #14839 by @​YuriiMotov.
• 🌐 Update translations for tr (outdated and missing). PR #14838 by @​YuriiMotov.

Internal

• ⬆️ Upgrade development dependencies. PR #14854 by @​tiangolo.

0.128.3

Refactors

• ♻️ Re-implement on_event in FastAPI for compatibility with the next Starlette, while keeping backwards compatibility. PR #14851 by @​tiangolo.

Upgrades

• ⬆️ Upgrade Starlette supported version range to starlette>=0.40.0,<1.0.0. PR #14853 by @​tiangolo.

Translations

• 🌐 Update translations for ru (update-outdated). PR #14834 by @​tiangolo.

Internal

• 👷 Run tests with Starlette from git. PR #14849 by @​tiangolo.
• 👷 Run tests with lower bound uv sync, upgrade fastapi[all] minimum dependencies: ujson >=5.8.0, orjson >=3.9.3. PR #14846 by @​tiangolo.

0.128.2

Features

• ✨ Add support for PEP695 TypeAliasType. PR #13920 by @​cstruct.
• ✨ Allow Response type hint as dependency annotation. PR #14794 by @​jonathan-fulton.

Fixes

... (truncated)

Commits

• dedf140 🔖 Release version 0.128.5
• 79d4dfb 📝 Update release notes
• 9f4ecf5 ✅ Add inline snapshot tests for OpenAPI before changes from Pydantic v2 (#14864)
• c48539f 📝 Update release notes
• 2e7d375 ♻️ Refactor and simplify Pydantic v2 (and v1) compatibility internal utils (#...
• 8eac94b 🔖 Release version 0.128.4
• 58cdfc7 📝 Update release notes
• d59fbc3 ♻️ Refactor internals, simplify Pydantic v2/v1 utils, create_model_field, b...
• cc6ced6 📝 Update release notes
• cf55bad ♻️ Simplify internals, remove Pydantic v1 only logic, no longer needed (#14857)
• Additional commits viewable in compare view

Updates parse from 1.20.2 to 1.21.0

Release notes

Sourced from parse's releases.

1.21.0

What's Changed

• allow triggering CI manually by @​wimglenn in r1chardj0n3s/parse#195
• Actually raise exception by @​shenanigansd in r1chardj0n3s/parse#196
• readme: Clarify 'd' type by @​dreua in r1chardj0n3s/parse#198
• Bump actions/checkout from 5 to 6 in the actions-infrastructure group by @​dependabot[bot] in r1chardj0n3s/parse#219
• Allow grouping char (,_) in decimal format string by @​moi90 in r1chardj0n3s/parse#221

New Contributors

• @​shenanigansd made their first contribution in r1chardj0n3s/parse#196
• @​dreua made their first contribution in r1chardj0n3s/parse#198
• @​dependabot[bot] made their first contribution in r1chardj0n3s/parse#219
• @​moi90 made their first contribution in r1chardj0n3s/parse#221

Full Changelog: r1chardj0n3s/parse@1.20.2...1.21.0

Commits

• 7384477 release notes
• 35b9ffb Allow grouping char (,_) in decimal format string (#221)
• d50f48c Merge pull request #219 from r1chardj0n3s/dependabot/github_actions/actions-i...
• 96cdf95 Bump actions/checkout from 5 to 6 in the actions-infrastructure group
• d5bd49a restore 3.7 and 2.7 test
• 5bfb45d Update README.rst
• a497a40 Merge pull request #198 from dreua/patch-2
• 8856b6d readme: Clarify 'd' type
• 30da9e4 Merge pull request #196 from shenanigansd/patch-1
• 6973296 Actually raise exception
• Additional commits viewable in compare view

Updates starlette from 0.50.0 to 0.52.1

Release notes

Sourced from starlette's releases.

Version 0.52.1

What's Changed

• Only use typing_extensions in older Python versions by @​Kludex in Kludex/starlette#3109

---

Full Changelog: Kludex/starlette@0.52.0...0.52.1

Version 0.52.0

In this release, State can be accessed using dictionary-style syntax for improved type safety (#3036).

from collections.abc import AsyncIterator
from contextlib import asynccontextmanager
from typing import TypedDict
import httpx
from starlette.applications import Starlette
from starlette.requests import Request
class State(TypedDict):
http_client: httpx.AsyncClient
@​asynccontextmanager
async def lifespan(app: Starlette) -> AsyncIterator[State]:
async with httpx.AsyncClient() as client:
yield {"http_client": client}
async def homepage(request: Request[State]):
client = request.state["http_client"]
# If you run the below line with mypy or pyright, it will reveal the correct type.
reveal_type(client)  # Revealed type is 'httpx.AsyncClient'

See Accessing State for more details.

---

Full Changelog: Kludex/starlette@0.51.0...0.52.0

Version 0.51.0

Added

• Add allow_private_network in CORSMiddleware #3065.

Changed

... (truncated)

Changelog

Sourced from starlette's changelog.

0.52.1 (January 18, 2026)

Fixed

• Only use typing_extensions in older Python versions #3109.

0.52.0 (January 18, 2026)

In this release, State can be accessed using dictionary-style syntax for improved type safety (#3036).

from collections.abc import AsyncIterator
from contextlib import asynccontextmanager
from typing import TypedDict
import httpx
from starlette.applications import Starlette
from starlette.requests import Request
class State(TypedDict):
http_client: httpx.AsyncClient
@​asynccontextmanager
async def lifespan(app: Starlette) -> AsyncIterator[State]:
async with httpx.AsyncClient() as client:
yield {"http_client": client}
async def homepage(request: Request[State]):
client = request.state["http_client"]
# If you run the below line with mypy or pyright, it will reveal the correct type.
reveal_type(client)  # Revealed type is 'httpx.AsyncClient'

See Accessing State for more details.

0.51.0 (January 10, 2026)

Added

• Add allow_private_network in CORSMiddleware #3065.

Changed

• Increase warning stacklevel on DeprecationWarning for wsgi module #3082.

Commits

• e5b8a5d Version 0.52.1 (#3110)
• d02eade Only use typing_extensions in older Python versions (#3109)
• f490b42 Version 0.52.0 (#3107)
• d8c7cf9 Turn State into a Mapping (#3036)
• cfce146 chore: bump coverage (#3103)
• 9138e55 fix: setup github pages for deployment (#3102)
• aff6df7 docs: add environment for github docs (#3101)
• 434bab9 docS: fix gh pages deploy (#3100)
• 03426be docs: replace mkdocs by zensical (#3098)
• df2ee22 Version 0.51.0 (#3097)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions