chore(deps): update dependency starlette to v0.41.0 #51

Merged

renovate merged 1 commits from renovate/starlette-0.x into main 2024-10-20 00:33:26 +00:00

Conversation 0 Commits 1 Files Changed 1 +1 -1

renovate commented 2024-10-20 00:33:24 +00:00

Member

Copy Link

This PR contains the following updates:

Package	Update	Change
starlette (changelog)	minor	==0.39.2 -> ==0.41.0

---

Release Notes

encode/starlette (starlette)

v0.41.0: Version 0.41.0

Compare Source

Added

• Allow to raise HTTPException before websocket.accept() https://github.com/encode/starlette/pull/2725

v0.40.0: Version 0.40.0

Compare Source

This release fixes a Denial of service (DoS) via multipart/form-data requests.

You can view the full security advisory:
GHSA-f96h-pmfr-66vw

Fixed

• Add max_part_size to MultiPartParser to limit the size of parts in multipart/form-data
  requests fd038f3.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [starlette](https://github.com/encode/starlette) ([changelog](https://www.starlette.io/release-notes/)) | minor | `==0.39.2` -> `==0.41.0` | --- ### Release Notes <details> <summary>encode/starlette (starlette)</summary> ### [`v0.41.0`](https://github.com/encode/starlette/releases/tag/0.41.0): Version 0.41.0 [Compare Source](https://github.com/encode/starlette/compare/0.40.0...0.41.0) #### Added - Allow to raise `HTTPException` before `websocket.accept()` https://github.com/encode/starlette/pull/2725 ### [`v0.40.0`](https://github.com/encode/starlette/releases/tag/0.40.0): Version 0.40.0 [Compare Source](https://github.com/encode/starlette/compare/0.39.2...0.40.0) This release fixes a Denial of service (DoS) via `multipart/form-data` requests. You can view the full security advisory: [GHSA-f96h-pmfr-66vw](https://github.com/encode/starlette/security/advisories/GHSA-f96h-pmfr-66vw) #### Fixed - Add `max_part_size` to `MultiPartParser` to limit the size of parts in `multipart/form-data` requests [fd038f3](https://github.com/encode/starlette/commit/fd038f3070c302bff17ef7d173dbb0b007617733). </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC40NS4wIiwidXBkYXRlZEluVmVyIjoiMzguNDUuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

renovate added 1 commit 2024-10-20 00:33:25 +00:00

chore(deps): update dependency starlette to v0.41.0 3fbb359fd2

renovate scheduled this pull request to auto merge when all checks succeed 2024-10-20 00:33:25 +00:00

renovate merged commit 3fbb359fd2 into main 2024-10-20 00:33:26 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

No items

No Label

Milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

marco renovate

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: training/docker-build-exercise#51