training/docker-build-exercise
2
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

chore(deps): update dependency starlette to v0.41.0 #51

Merged
renovate merged 1 commits from renovate/starlette-0.x into main 2024-10-20 00:33:26 +00:00
Conversation 0 Commits 1 Files Changed 1
+1 -1
renovate commented 2024-10-20 00:33:24 +00:00
Member
Copy Link
Copy Source

This PR contains the following updates:

Package Update Change
starlette (changelog) minor ==0.39.2 -> ==0.41.0

Release Notes

encode/starlette (starlette)

v0.41.0: Version 0.41.0

Compare Source

Added

v0.40.0: Version 0.40.0

Compare Source

This release fixes a Denial of service (DoS) via multipart/form-data requests.

You can view the full security advisory:
GHSA-f96h-pmfr-66vw

Fixed

  • Add max_part_size to MultiPartParser to limit the size of parts in multipart/form-data
    requests fd038f3.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [starlette](https://github.com/encode/starlette) ([changelog](https://www.starlette.io/release-notes/)) | minor | `==0.39.2` -> `==0.41.0` | --- ### Release Notes <details> <summary>encode/starlette (starlette)</summary> ### [`v0.41.0`](https://github.com/encode/starlette/releases/tag/0.41.0): Version 0.41.0 [Compare Source](https://github.com/encode/starlette/compare/0.40.0...0.41.0) #### Added - Allow to raise `HTTPException` before `websocket.accept()` https://github.com/encode/starlette/pull/2725 ### [`v0.40.0`](https://github.com/encode/starlette/releases/tag/0.40.0): Version 0.40.0 [Compare Source](https://github.com/encode/starlette/compare/0.39.2...0.40.0) This release fixes a Denial of service (DoS) via `multipart/form-data` requests. You can view the full security advisory: [GHSA-f96h-pmfr-66vw](https://github.com/encode/starlette/security/advisories/GHSA-f96h-pmfr-66vw) #### Fixed - Add `max_part_size` to `MultiPartParser` to limit the size of parts in `multipart/form-data` requests [fd038f3](https://github.com/encode/starlette/commit/fd038f3070c302bff17ef7d173dbb0b007617733). </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC40NS4wIiwidXBkYXRlZEluVmVyIjoiMzguNDUuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
renovate added 1 commit 2024-10-20 00:33:25 +00:00
chore(deps): update dependency starlette to v0.41.0
build / image-build (push) Waiting to run
Details
renovate / renovate (push) Waiting to run
Details
3fbb359fd2
renovate scheduled this pull request to auto merge when all checks succeed 2024-10-20 00:33:25 +00:00
renovate merged commit 3fbb359fd2 into main 2024-10-20 00:33:26 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
marco (Marco Verleun) renovate (Renovate)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: training/docker-build-exercise#51