Skip to content

chore(deps): update starlette requirement from <1,>=0.19.1 to >=0.49.3,<1#1493

Open
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/pip/starlette-gte-0.49.3-and-lt-1
Open

chore(deps): update starlette requirement from <1,>=0.19.1 to >=0.49.3,<1#1493
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/pip/starlette-gte-0.49.3-and-lt-1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 2, 2026 •
edited
Loading

Updates the requirements on starlette to permit the latest version.

Release notes

Sourced from starlette's releases.

Version 0.49.3

Fixed

  • Relax strictness on Middleware type #3059.

Full Changelog: Kludex/starlette@0.49.2...0.49.3

Changelog

Sourced from starlette's changelog.

0.49.3 (November 1, 2025)

This is the last release that supports Python 3.9, which will be dropped in the next minor release.

Fixed

  • Relax strictness on Middleware type #3059.

0.49.2 (November 1, 2025)

Fixed

  • Ignore if-modified-since header if if-none-match is present in StaticFiles #3044.

0.49.1 (October 28, 2025)

This release fixes a security vulnerability in the parsing logic of the Range header in FileResponse.

You can view the full security advisory: GHSA-7f5h-v6xp-fcq8

Fixed

0.49.0 (October 28, 2025)

Added

  • Add encoding parameter to Config class #2996.
  • Support multiple cookie headers in Request.cookies #3029.
  • Use Literal type for WebSocketEndpoint encoding values #3027.

Changed

  • Do not pollute exception context in Middleware when using BaseHTTPMiddleware #2976.

0.48.0 (September 13, 2025)

Added

  • Add official Python 3.14 support #3013.

Changed

0.47.3 (August 24, 2025)

Fixed

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels May 2, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 2, 2026 01:39
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels May 2, 2026
@codecov
Copy link
Copy Markdown

codecov Bot commented May 2, 2026 •
edited
Loading

❌ 3 Tests Failed:

Tests completed Failed Passed Skipped
147 3 144 0
View the full list of 3 ❄️ flaky test(s) 
tests.slack_bolt.context.test_say_stream.TestSayStream::test_buffer_size_overrides

Flake rate in main: 100.00% (Passed 0 times, Failed 40 times)

Stack Traces | 0.048s run time 
self = <tests.slack_bolt.context.test_say_stream.TestSayStream object at 0x7f717c0ae990>

    def test_buffer_size_overrides(self):
        say_stream = SayStream(
            client=self.web_client,
            channel="C111",
            recipient_team_id="T111",
            recipient_user_id="U111",
            thread_ts="111.222",
        )
        stream = say_stream(
            buffer_size=100,
            channel="C222",
            thread_ts="333.444",
            recipient_team_id="T222",
            recipient_user_id="U222",
        )
    
        assert stream._buffer_size == 100
>       assert stream._stream_args == {
            "channel": "C222",
            "thread_ts": "333.444",
            "recipient_team_id": "T222",
            "recipient_user_id": "U222",
            "task_display_mode": None,
        }
E       AssertionError: assert {'channel': '...: 'T222', ...} == {'channel': '...e': None, ...}
E         Omitting 5 identical items, use -vv to show
E         Left contains 3 more items:
E         {'icon_emoji': None, 'icon_url': None, 'username': None}
E         Full diff:
E           {
E            'channel': 'C222',
E         +  'icon_emoji': None,
E         +  'icon_url': None,
E            'recipient_team_id': 'T222',
E            'recipient_user_id': 'U222',
E            'task_display_mode': None,
E            'thread_ts': '333.444',
E         +  'username': None,
E           }

.../slack_bolt/context/test_say_stream.py:85: AssertionError
tests.slack_bolt.context.test_say_stream.TestSayStream::test_default_params

Flake rate in main: 100.00% (Passed 0 times, Failed 40 times)

Stack Traces | 0.046s run time 
self = <tests.slack_bolt.context.test_say_stream.TestSayStream object at 0x7f717c297a10>

    def test_default_params(self):
        say_stream = SayStream(
            client=self.web_client,
            channel="C111",
            recipient_team_id="T111",
            recipient_user_id="U111",
            thread_ts="111.222",
        )
        stream = say_stream()
    
        assert stream._buffer_size == self.default_chat_stream_buffer_size
>       assert stream._stream_args == {
            "channel": "C111",
            "thread_ts": "111.222",
            "recipient_team_id": "T111",
            "recipient_user_id": "U111",
            "task_display_mode": None,
        }
E       AssertionError: assert {'channel': '...: 'T111', ...} == {'channel': '...e': None, ...}
E         Omitting 5 identical items, use -vv to show
E         Left contains 3 more items:
E         {'icon_emoji': None, 'icon_url': None, 'username': None}
E         Full diff:
E           {
E            'channel': 'C111',
E         +  'icon_emoji': None,
E         +  'icon_url': None,
E            'recipient_team_id': 'T111',
E            'recipient_user_id': 'U111',
E            'task_display_mode': None,
E            'thread_ts': '111.222',
E         +  'username': None,
E           }

.../slack_bolt/context/test_say_stream.py:41: AssertionError
tests.slack_bolt.context.test_say_stream.TestSayStream::test_parameter_overrides

Flake rate in main: 100.00% (Passed 0 times, Failed 40 times)

Stack Traces | 0.048s run time 
self = <tests.slack_bolt.context.test_say_stream.TestSayStream object at 0x7f717c297090>

    def test_parameter_overrides(self):
        say_stream = SayStream(
            client=self.web_client,
            channel="C111",
            recipient_team_id="T111",
            recipient_user_id="U111",
            thread_ts="111.222",
        )
        stream = say_stream(channel="C222", thread_ts="333.444", recipient_team_id="T222", recipient_user_id="U222")
    
        assert stream._buffer_size == self.default_chat_stream_buffer_size
>       assert stream._stream_args == {
            "channel": "C222",
            "thread_ts": "333.444",
            "recipient_team_id": "T222",
            "recipient_user_id": "U222",
            "task_display_mode": None,
        }
E       AssertionError: assert {'channel': '...: 'T222', ...} == {'channel': '...e': None, ...}
E         Omitting 5 identical items, use -vv to show
E         Left contains 3 more items:
E         {'icon_emoji': None, 'icon_url': None, 'username': None}
E         Full diff:
E           {
E            'channel': 'C222',
E         +  'icon_emoji': None,
E         +  'icon_url': None,
E            'recipient_team_id': 'T222',
E            'recipient_user_id': 'U222',
E            'task_display_mode': None,
E            'thread_ts': '333.444',
E         +  'username': None,
E           }

.../slack_bolt/context/test_say_stream.py:60: AssertionError

To view more test analytics, go to the Test Analytics Dashboard
📋 Got 3 mins? Take this short survey to help us improve Test Analytics.

@dependabot dependabot Bot force-pushed the dependabot/pip/starlette-gte-0.49.3-and-lt-1 branch 3 times, most recently from 4486ed8 to f13c930 Compare May 5, 2026 14:40
@dependabot
chore(deps): update starlette requirement
197d09c 
Updates the requirements on [starlette](https://github.com/Kludex/starlette) to permit the latest version.
- [Release notes](https://github.com/Kludex/starlette/releases)
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)
- [Commits](Kludex/starlette@0.19.1...0.49.3)

---
updated-dependencies:
- dependency-name: starlette
  dependency-version: 0.49.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/starlette-gte-0.49.3-and-lt-1 branch from f13c930 to 197d09c Compare May 5, 2026 14:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@WilliamBergamin