Skip to content

chore(deps): bump starlette from 1.3.1 to 1.4.1 - #88

Merged
Sam-Aitech merged 1 commit into
mainfrom
dependabot/uv/starlette-1.4.1
Aug 10, 2026
Merged

chore(deps): bump starlette from 1.3.1 to 1.4.1#88
Sam-Aitech merged 1 commit into
mainfrom
dependabot/uv/starlette-1.4.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 9, 2026

Copy link
Copy Markdown
Contributor

Bumps starlette from 1.3.1 to 1.4.1.

Release notes

Sourced from starlette's releases.

Version 1.4.1

What's Changed

Full Changelog: Kludex/starlette@1.4.0...1.4.1

Version 1.4.0

What's Changed

New Contributors

Full Changelog: Kludex/starlette@1.3.1...1.4.0

Changelog

Sourced from starlette's changelog.

1.4.1 (August 5, 2026)

Fixed

  • Default thread_minimum_size to 128 KiB in GZipResponder, keeping it usable without the new keyword argument #3415.

1.4.0 (August 5, 2026)

Added

  • Offload large GZip compression to a worker thread, keeping the event loop responsive. GZipMiddleware accepts a new thread_minimum_size parameter (default 128 KiB) controlling the minimum body chunk size compressed in a thread #3410.

Changed

  • Use zlib.compressobj instead of GzipFile in GZipMiddleware, reducing memory usage during compression #3411.
  • Lazily allocate GZipMiddleware compression resources, avoiding compressor allocation for responses that are never compressed #3407.
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 9, 2026
@dependabot
dependabot Bot requested a review from Sam-Aitech as a code owner August 9, 2026 03:14
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 9, 2026
@socket-security

socket-security Bot commented Aug 9, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedpypi/​starlette@​1.3.1 ⏵ 1.4.1100 +1100100100100

View full report

@github-actions

github-actions Bot commented Aug 9, 2026

Copy link
Copy Markdown

Dependency audit failed

audit-ci detected high/critical vulnerabilities.

Failing CVEs / advisories

@Sam-Aitech

Copy link
Copy Markdown
Owner

@dependabot rebase

Bumps [starlette](https://github.com/Kludex/starlette) from 1.3.1 to 1.4.1.
- [Release notes](https://github.com/Kludex/starlette/releases)
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)
- [Commits](Kludex/starlette@1.3.1...1.4.1)

---
updated-dependencies:
- dependency-name: starlette
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/starlette-1.4.1 branch from d0808bf to ed44380 Compare August 10, 2026 15:33
@sonarqubecloud

Copy link
Copy Markdown

@Sam-Aitech
Sam-Aitech merged commit 54787d9 into main Aug 10, 2026
13 checks passed
@dependabot
dependabot Bot deleted the dependabot/uv/starlette-1.4.1 branch August 10, 2026 15:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant