Bump starlette from 0.42.0 to 0.45.2

[dependabot]

Bumps starlette from 0.42.0 to 0.45.2.

Release notes

Sourced from starlette's releases.

Version 0.45.2

Fixed

• Make create_memory_object_stream compatible with old anyio versions once again, and bump anyio minimum version to 3.6.2 by @​graingert in #2833.

Full Changelog: encode/starlette@0.45.1...0.45.2

Version 0.45.1

Fixed

• Collect errors more reliably from WebSocket test client by @​graingert in encode/starlette#2814
• Fix unclosed MemoryObjectReceiveStream upon exception in BaseHTTPMiddleware children by @​Kludex in encode/starlette#2813

Refactor

• Use a pair of memory object streams instead of two queues by @​graingert in encode/starlette#2829

---

Full Changelog: encode/starlette@0.45.0...0.45.1

Version 0.45.0

Removed

• Drop Python 3.8 by @​Kludex in encode/starlette#2823
• Remove ExceptionMiddleware import proxy from starlette.exceptions module by @​Kludex in encode/starlette#2826
• Remove deprecated WS_1004_NO_STATUS_RCVD and WS_1005_ABNORMAL_CLOSURE by @​Kludex in encode/starlette#2827

---

Full Changelog: encode/starlette@0.44.0...0.45.0

Version 0.44.0

Added

• Add max_part_size parameter to Request.form() by @​iudeen in encode/starlette#2815
• Add client parameter to TestClient by @​iudeen in encode/starlette#2810

New Contributors

• @​iudeen made their first contribution in encode/starlette#2815

Full Changelog: encode/starlette@0.43.0...0.44.0

Version 0.43.0

Removed

• Remove deprecated allow_redirects argument from TestClient #2808.

Added

... (truncated)

Changelog

Sourced from starlette's changelog.

0.45.2 (January 4, 2025)

Fixed

• Make create_memory_object_stream compatible with old anyio versions once again, and bump anyio minimum version to 3.6.2 #2833.

0.45.1 (December 30, 2024)

Fixed

• Close MemoryObjectReceiveStream left unclosed upon exception in BaseHTTPMiddleware children #2813.
• Collect errors more reliably from the WebSocket logic on the TestClient #2814.

Refactor

• Use a pair of memory object streams instead of two queues on the TestClient #2829.

0.45.0 (December 29, 2024)

Removed

• Drop Python 3.8 support #2823.
• Remove ExceptionMiddleware import proxy from starlette.exceptions module #2826.
• Remove deprecated WS_1004_NO_STATUS_RCVD and WS_1005_ABNORMAL_CLOSURE #2827.

0.44.0 (December 28, 2024)

Added

• Add client parameter to TestClient #2810.
• Add max_part_size parameter to Request.form() #2815.

0.43.0 (December 25, 2024)

Removed

• Remove deprecated allow_redirects argument from TestClient #2808.

Added

• Make UUID path parameter conversion more flexible #2806.

Commits

• 0109dce Version 0.45.2 (#2839)
• 0ad90dc Bump the python-packages group across 1 directory with 7 updates (#2838)
• 950f528 fix create_memory_object_stream not subscriptable at runtime in old anyio ver...
• 7c0d1e6 Version 0.45.1 (#2832)
• 76e053a Remove python version from mypy (#2831)
• 5a10fba Fix unclosed 'MemoryObjectReceiveStream' upon exception in 'BaseHTTPMiddlewar...
• e16bacb use a pair of memory object streams instead of two queues (#2829)
• 27b6f4c collect errors more reliably from websocket test client (#2814)
• 31d182c Version 0.45.0 (#2828)
• b133ab4 Remove deprecated WS_1004_NO_STATUS_RCVD and WS_1005_ABNORMAL_CLOSURE (#2...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
pip/starlette	0.45.2	🟢 5.9	Details Check Score Reason Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Maintained 🟢 10 30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10 Code-Review 🟢 4 Found 14/29 approved changesets -- score normalized to 4 Packaging ⚠️ -1 packaging workflow not detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Binary-Artifacts 🟢 10 no binaries found in the repo License 🟢 10 license file detected Vulnerabilities 🟢 10 0 existing vulnerabilities detected Fuzzing ⚠️ 0 project is not fuzzed Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Signed-Releases ⚠️ -1 no releases found Security-Policy 🟢 10 security policy file detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0

Scanned Files

• docs/requirements.txt