From e9cc9a75eca80d4b6250717e9f3d47d7de6550a2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 8 Aug 2026 20:32:40 +0000 Subject: [PATCH] chore(deps): Bump starlette from 1.3.1 to 1.4.1 in /app/api Bumps [starlette](https://github.com/Kludex/starlette) from 1.3.1 to 1.4.1. - [Release notes](https://github.com/Kludex/starlette/releases) - [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md) - [Commits](https://github.com/Kludex/starlette/compare/1.3.1...1.4.1) --- updated-dependencies: - dependency-name: starlette dependency-version: 1.4.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- app/api/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/api/requirements.txt b/app/api/requirements.txt index 5481c29..9a5bbb6 100644 --- a/app/api/requirements.txt +++ b/app/api/requirements.txt @@ -8,4 +8,4 @@ pyjwt==2.13.0 # trivy build gate. CVE-2025-62727 (HIGH, FileResponse Range-header O(n^2) DoS) affects # 0.39.0-0.49.0 and is FIXED in 0.49.1; the prior 0.41.3 pin was in the vulnerable range. # Pinned 1.3.1 (current), which is above 0.49.1 and includes the fix. See docs/02-scan.md. -starlette==1.3.1 +starlette==1.4.1