Skip to content

build(deps): bump starlette from 1.0.0 to 1.0.1 in /core#20

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/core/starlette-1.0.1
Closed

build(deps): bump starlette from 1.0.0 to 1.0.1 in /core#20
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/core/starlette-1.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 4, 2026

Copy link
Copy Markdown

Bumps starlette from 1.0.0 to 1.0.1.

Release notes

Sourced from starlette's releases.

Version 1.0.1

What's Changed

Full Changelog: Kludex/starlette@1.0.0...1.0.1

Changelog

Sourced from starlette's changelog.

1.0.1 (May 21, 2026)

Fixed

  • Ignore malformed Host header when constructing request.url #3279.
Commits
  • 48f8e33 Version 1.0.1 (#3281)
  • f078832 Remove Hugging Face sponsor block from docs (#3280)
  • 472951e chore(deps): bump the github-actions group with 2 updates (#3277)
  • 764dab0 Ignore malformed Host header when constructing request.url (#3279)
  • 19d0811 Harden GitHub Actions workflows and Dependabot config (#3276)
  • 01f4637 chore(deps): bump idna from 3.10 to 3.15 (#3274)
  • b8fa514 docs: fix typos in TestClient docs and test_requests comment (#3266)
  • e935b6b fix uvicorn domain (#3269)
  • 96af952 Add 7-day cooldown for dependency resolution via uv exclude-newer (#3265)
  • 61e385b Add zizmor GitHub Actions security analysis workflow (#3264)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jun 4, 2026
Bumps [starlette](https://github.com/Kludex/starlette) from 1.0.0 to 1.0.1.
- [Release notes](https://github.com/Kludex/starlette/releases)
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)
- [Commits](Kludex/starlette@1.0.0...1.0.1)

---
updated-dependencies:
- dependency-name: starlette
  dependency-version: 1.0.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump starlette from 1.0.0 to 1.0.1 in /core build(deps): bump starlette from 1.0.0 to 1.0.1 in /core Jun 15, 2026
@dependabot dependabot Bot force-pushed the dependabot/uv/core/starlette-1.0.1 branch from d860818 to fee9200 Compare June 15, 2026 10:40
@dependabot @github

dependabot Bot commented on behalf of github Jun 17, 2026

Copy link
Copy Markdown
Author

Superseded by #27.

@dependabot dependabot Bot closed this Jun 17, 2026
@dependabot dependabot Bot deleted the dependabot/uv/core/starlette-1.0.1 branch June 17, 2026 01:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants