Skip to content

fix(deps): update dependency starlette to v1#653

Open
renovate-bot-cbcoutinho[bot] wants to merge 1 commit intomasterfrom
renovate/starlette-1.x
Open

fix(deps): update dependency starlette to v1#653
renovate-bot-cbcoutinho[bot] wants to merge 1 commit intomasterfrom
renovate/starlette-1.x

Conversation

@renovate-bot-cbcoutinho
Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
starlette (changelog) <1.0<1.1 age adoption passing confidence

Release Notes

Kludex/starlette (starlette)

v1.0.0: Version 1.0.0

Compare Source

Starlette 1.0 is here! 🎉

After nearly eight years since its creation, Starlette has reached its first stable release.

A special thank you to @​lovelydinosaur, the creator of Starlette, Uvicorn, HTTPX and MkDocs, whose work helped to lay the foundation for the modern async Python ecosystem. 🙏

Thank you to @​adriangb, @​graingert, @​agronholm, @​florimondmanca, @​aminalaee, @​tiangolo, @​alex-oleshkevich, @​abersheeran, and @​uSpike for helping make Starlette what it is today. And to all my sponsors - especially @​tiangolo, @​huggingface, and @​elevenlabs - thank you for your support!

Thank you to all 290+ contributors who have shaped Starlette over the years! ❤️

Read more on the blog post.

Check out the full release notes at https://www.starlette.io/release-notes/#​100-march-22-2026


Full Changelog: Kludex/starlette@1.0.0rc1...1.0.0

v0.52.1: Version 0.52.1

Compare Source

What's Changed


Full Changelog: Kludex/starlette@0.52.0...0.52.1

v0.52.0: Version 0.52.0

Compare Source

In this release, State can be accessed using dictionary-style syntax for improved type safety (#​3036).

from collections.abc import AsyncIterator
from contextlib import asynccontextmanager
from typing import TypedDict

import httpx

from starlette.applications import Starlette
from starlette.requests import Request

class State(TypedDict):
    http_client: httpx.AsyncClient

@&#8203;asynccontextmanager
async def lifespan(app: Starlette) -> AsyncIterator[State]:
    async with httpx.AsyncClient() as client:
        yield {"http_client": client}

async def homepage(request: Request[State]):
    client = request.state["http_client"]
    # If you run the below line with mypy or pyright, it will reveal the correct type.
    reveal_type(client)  # Revealed type is 'httpx.AsyncClient'

See Accessing State for more details.


Full Changelog: Kludex/starlette@0.51.0...0.52.0

v0.51.0: Version 0.51.0

Compare Source

Added

  • Add allow_private_network in CORSMiddleware #​3065.

Changed

  • Increase warning stacklevel on DeprecationWarning for wsgi module #​3082.

New Contributors

Full Changelog: Kludex/starlette@0.50.0...0.51.0


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@claude
Copy link
Copy Markdown

claude bot commented Mar 27, 2026

This renovate PR bumps the starlette pin from less-than-1.0 to less-than-1.1, which would allow starlette 1.0.0 to be installed. This update is not safe to merge yet - the underlying breaking change it was pinned to avoid has not been resolved in the codebase.

Issue #648 documented that starlette 1.0.0 removed the @app.middleware() decorator, causing an AttributeError startup crash. The incompatible usage still exists in nextcloud_mcp_server/app.py:2356. PR #649 was merged to pin starlette below 1.0 as a short-term fix, but that left the actual starlette 1.0 migration undone. Issue #648 was closed only because of the pin, not a real fix.

Before merging, the @app.middleware decorator usage at app.py:2356 needs to be migrated to the starlette 1.0 compatible BaseHTTPMiddleware class-based approach. Also worth checking whether browser_app (line 2329) or any other app instances use the removed decorator pattern.

Verdict: Do not merge until app.py is migrated for starlette 1.0 compatibility. Merging as-is will re-introduce the startup crash from #648.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants