#64 build(deps): update starlette requirement from <1.0.0,>=0.35.0 to >=0.35.0,<2.0.0

[Anonymous]

Originally created by: dependabot[bot]

Updates the requirements on starlette to permit the latest version.

Release notes

Sourced from starlette's releases.

Version 1.3.1

What's Changed

• Use StarletteDeprecationWarning instead of DeprecationWarning by @​Kludex in Kludex/starlette#3119](https://github.com/href="https://redirect.github.com/Kludex/starlette/pull/3119">Kludex/starlette/issues/3119)
• Enforce max_fields and max_part_size in FormParser by @​Kludex in Kludex/starlette#3329](https://github.com/href="https://redirect.github.com/Kludex/starlette/pull/3329">Kludex/starlette/issues/3329)
• Enforce FormParser limits in parser callbacks by @​Kludex in Kludex/starlette#3331](https://github.com/href="https://redirect.github.com/Kludex/starlette/pull/3331">Kludex/starlette/issues/3331)

Full Changelog: https://github.com/Kludex/starlette/compare/1.3.0...1.3.1

Changelog

Sourced from starlette's changelog.

1.3.1 (June 12, 2026)

Fixed

• Enforce max_fields and max_part_size in FormParser #3329](https://github.com/href="https://redirect.github.com/encode/starlette/pull/3329">/issues/3329).
• Enforce FormParser limits in parser callbacks #3331](https://github.com/href="https://redirect.github.com/encode/starlette/pull/3331">/issues/3331).

1.3.0 (June 11, 2026)

Added

• Add httpx2 to the full extra #3323](https://github.com/href="https://redirect.github.com/encode/starlette/pull/3323">/issues/3323).
• Annotate the URLPath protocol parameter with Literal #3285](https://github.com/href="https://redirect.github.com/encode/starlette/pull/3285">/issues/3285).

Fixed

• Build request.url from structured components #3326](https://github.com/href="https://redirect.github.com/encode/starlette/pull/3326">/issues/3326).
• Clamp oversized suffix ranges in FileResponse #3307](https://github.com/href="https://redirect.github.com/encode/starlette/pull/3307">/issues/3307).
• Catch OSError alongside MultiPartException when closing temp files #3191](https://github.com/href="https://redirect.github.com/encode/starlette/pull/3191">/issues/3191).
• Avoid collapsing exception groups raised from user code #2830](https://github.com/href="https://redirect.github.com/encode/starlette/pull/2830">/issues/2830).
• Use removeprefix to strip the weak ETag indicator in is_not_modified #3193](https://github.com/href="https://redirect.github.com/encode/starlette/pull/3193">/issues/3193).
• Fix IndexError in URL.replace() on a URL with no authority #3317](https://github.com/href="https://redirect.github.com/encode/starlette/pull/3317">/issues/3317).
• Adjust testclient typing and warnings #3322](https://github.com/href="https://redirect.github.com/encode/starlette/pull/3322">/issues/3322).

1.2.1 (May 31, 2026)

Fixed

• Use httpx2 for type checking in the testclient module #3304](https://github.com/href="https://redirect.github.com/encode/starlette/pull/3304">/issues/3304).
• Add assert error for requires() when the request parameter is not a Request type #3298](https://github.com/href="https://redirect.github.com/encode/starlette/pull/3298">/issues/3298).

1.2.0 (May 28, 2026)

Added

• Support httpx2 in the test client #3291](https://github.com/href="https://redirect.github.com/encode/starlette/pull/3291">/issues/3291).

1.1.0 (May 23, 2026)

Added

• Use "application/octet-stream" as the FileResponse media type fallback #3283](https://github.com/href="https://redirect.github.com/encode/starlette/pull/3283">/issues/3283).

Fixed

• Only dispatch standard HTTP verbs in HTTPEndpoint #3286](https://github.com/href="https://redirect.github.com/encode/starlette/pull/3286">/issues/3286).
• Reject absolute paths in StaticFiles.lookup_path #3287](https://github.com/href="https://redirect.github.com/encode/starlette/pull/3287">/issues/3287).

1.0.1 (May 21, 2026)

... (truncated)

Commits

• 8ebffd0 Version 1.3.1 (#3330](https://github.com/href="https://redirect.github.com/Kludex/starlette/issues/3330">/issues/3330))
• 25b8e17 Enforce FormParser limits in parser callbacks (#3331](https://github.com/href="https://redirect.github.com/Kludex/starlette/issues/3331">/issues/3331))
• dba1c4b Enforce max_fields and max_part_size in FormParser (#3329](https://github.com/href="https://redirect.github.com/Kludex/starlette/issues/3329">/issues/3329))
• 45e51dc Use StarletteDeprecationWarning instead of DeprecationWarning (#3119](https://github.com/href="https://redirect.github.com/Kludex/starlette/issues/3119">/issues/3119))
• 5f8610c Version 1.3.0 (#3327](https://github.com/href="https://redirect.github.com/Kludex/starlette/issues/3327">/issues/3327))
• 167b585 Build request.url from structured components (#3326](https://github.com/href="https://redirect.github.com/Kludex/starlette/issues/3326">/issues/3326))
• 3730925 Use removeprefix to strip weak ETag indicator in is_not_modified (#3193](https://github.com/href="https://redirect.github.com/Kludex/starlette/issues/3193">/issues/3193))
• e6f7ad1 avoid collapsing exception groups from user code (#2830](https://github.com/href="https://redirect.github.com/Kludex/starlette/issues/2830">/issues/2830))
• 115228f Annotate URLPath protocol parameter with Literal (#3285](https://github.com/href="https://redirect.github.com/Kludex/starlette/issues/3285">/issues/3285))
• 113f193 docs: replace inline ASGI server list with link to canonical implemen… (#3204](https://github.com/href="https://redirect.github.com/Kludex/starlette/issues/3204">/issues/3204))
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name=""> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </dependency>

[Anonymous]

Originally posted by: dependabot[bot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.