chore(deps): bump the pip group across 4 directories with 6 updates by dependabot[bot] · Pull Request #1820 · MobilityData/mobility-feed-api

dependabot · 2026-08-28T14:51:42Z

Bumps the pip group with 6 updates in the /api directory:

Package	From	To
certifi	`2023.7.22`	`2024.7.4`
h11	`0.12.0`	`0.16.0`
jinja2	`3.1.4`	`3.1.6`
python-multipart	`0.0.26`	`0.0.31`
starlette	`0.37.2`	`1.3.1`
ujson	`5.12.0`	`5.13.0`

Bumps the pip group with 4 updates in the /functions-python directory: jinja2, python-multipart, starlette and ujson.
Bumps the pip group with 3 updates in the /functions-python/operations_api directory: python-multipart, starlette and ujson.
Bumps the pip group with 1 update in the /functions-python/tasks_executor directory: jinja2.

Updates certifi from 2023.7.22 to 2024.7.4

Commits

bd81538 2024.07.04 (#295)
06a2cbf Bump peter-evans/create-pull-request from 6.0.5 to 6.1.0 (#294)
13bba02 Bump actions/checkout from 4.1.6 to 4.1.7 (#293)
e8abcd0 Bump pypa/gh-action-pypi-publish from 1.8.14 to 1.9.0 (#292)
124f4ad 2024.06.02 (#291)
c2196ce --- (#290)
fefdeec Bump actions/checkout from 4.1.4 to 4.1.5 (#289)
3c5fb15 Bump actions/download-artifact from 4.1.6 to 4.1.7 (#286)
4a9569a Bump actions/checkout from 4.1.2 to 4.1.4 (#287)
1fc8086 Bump peter-evans/create-pull-request from 6.0.4 to 6.0.5 (#288)
Additional commits viewable in compare view

Updates h11 from 0.12.0 to 0.16.0

Commits

1c5b075 this time for surer
d9c3699 this time for sure...
d91b9dd blacken
5a4683c Soothe mypy
9c9567f Bump version to 0.16.0
114803a Merge commit from fork
9462006 Bump version to 0.15.0
70a96be Merge pull request #181 from Julien00859/Julien00859/get_int_max_str_digits
60782ad Reject Content-Length longer 1 billion TB
dff7cc3 Validate Chunked-Encoding chunk footer
Additional commits viewable in compare view

Updates jinja2 from 3.1.4 to 3.1.6

Release notes

Sourced from jinja2's releases.

3.1.6

This is the Jinja 3.1.6 security release, which fixes security issues but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Jinja2/3.1.6/ Changes: https://jinja.palletsprojects.com/en/stable/changes/#version-3-1-6

The |attr filter does not bypass the environment's attribute lookup, allowing the sandbox to apply its checks. GHSA-cpwx-vrp4-4pq7

3.1.5

This is the Jinja 3.1.5 security fix release, which fixes security issues and bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Jinja2/3.1.5/ Changes: https://jinja.palletsprojects.com/changes/#version-3-1-5 Milestone: https://github.com/pallets/jinja/milestone/16?closed=1

The sandboxed environment handles indirect calls to str.format, such as by passing a stored reference to a filter that calls its argument. GHSA-q2x7-8rv6-6q7h

Escape template name before formatting it into error messages, to avoid issues with names that contain f-string syntax. #1792, GHSA-gmj6-6f8f-6699

Sandbox does not allow clear and pop on known mutable sequence types. #2032

Calling sync render for an async template uses asyncio.run. #1952

Avoid unclosed auto_aiter warnings. #1960

Return an aclose-able AsyncGenerator from Template.generate_async. #1960

Avoid leaving root_render_func() unclosed in Template.generate_async. #1960

Avoid leaving async generators unclosed in blocks, includes and extends. #1960

The runtime uses the correct concat function for the current environment when calling block references. #1701

Make |unique async-aware, allowing it to be used after another async-aware filter. #1781

|int filter handles OverflowError from scientific notation. #1921

Make compiling deterministic for tuple unpacking in a {% set ... %} call. #2021

Fix dunder protocol (copy/pickle/etc) interaction with Undefined objects. #2025

Fix copy/pickle support for the internal missing object. #2027

Environment.overlay(enable_async) is applied correctly. #2061

The error message from FileSystemLoader includes the paths that were searched. #1661

PackageLoader shows a clearer error message when the package does not contain the templates directory. #1705

Improve annotations for methods returning copies. #1880

urlize does not add mailto: to values like @a@b. #1870

Tests decorated with @pass_context can be used with the |select filter. #1624

Using set for multiple assignment (a, b = 1, 2) does not fail when the target is a namespace attribute. #1413

Using set in all branches of {% if %}{% elif %}{% else %} blocks does not cause the variable to be considered initially undefined. #1253

Changelog

Sourced from jinja2's changelog.

Version 3.1.6

Released 2025-03-05

The |attr filter does not bypass the environment's attribute lookup, allowing the sandbox to apply its checks. :ghsa:cpwx-vrp4-4pq7

Version 3.1.5

Released 2024-12-21

The sandboxed environment handles indirect calls to str.format, such as by passing a stored reference to a filter that calls its argument. :ghsa:q2x7-8rv6-6q7h

Escape template name before formatting it into error messages, to avoid issues with names that contain f-string syntax. :issue:1792, :ghsa:gmj6-6f8f-6699

Sandbox does not allow clear and pop on known mutable sequence types. :issue:2032

Calling sync render for an async template uses asyncio.run. :pr:1952

Avoid unclosed auto_aiter warnings. :pr:1960

Return an aclose-able AsyncGenerator from Template.generate_async. :pr:1960

Avoid leaving root_render_func() unclosed in Template.generate_async. :pr:1960

Avoid leaving async generators unclosed in blocks, includes and extends. :pr:1960

The runtime uses the correct concat function for the current environment when calling block references. :issue:1701

Make |unique async-aware, allowing it to be used after another async-aware filter. :issue:1781

|int filter handles OverflowError from scientific notation. :issue:1921

Make compiling deterministic for tuple unpacking in a {% set ... %} call. :issue:2021

Fix dunder protocol (copy/pickle/etc) interaction with Undefined objects. :issue:2025

Fix copy/pickle support for the internal missing object. :issue:2027

Environment.overlay(enable_async) is applied correctly. :pr:2061

The error message from FileSystemLoader includes the paths that were searched. :issue:1661

PackageLoader shows a clearer error message when the package does not contain the templates directory. :issue:1705

Improve annotations for methods returning copies. :pr:1880

urlize does not add mailto: to values like @a@b. :pr:1870

... (truncated)

Commits

1520688 release version 3.1.6
90457bb Merge commit from fork
065334d attr filter uses env.getattr
033c200 start version 3.1.6
bc68d4e use global contributing guide (#2070)
247de5e use global contributing guide
ab8218c use project advisory link instead of global
b4ffc8f release version 3.1.5 (#2066)
877f6e5 release version 3.1.5
8d58859 remove test pypi
Additional commits viewable in compare view

Updates python-multipart from 0.0.26 to 0.0.31

Release notes

Sourced from python-multipart's releases.

Version 0.0.31

What's Changed

Speed up multipart header parsing and callback dispatch by @Kludex in Kludex/python-multipart#295

Bound header field name size before validating by @Kludex in Kludex/python-multipart#296

Validate Content-Length is non-negative in parse_form by @Kludex in Kludex/python-multipart#297

Full Changelog: Kludex/python-multipart@0.0.30...0.0.31

Version 0.0.30

What's Changed

Treat only & as the urlencoded field separator by @Kludex in Kludex/python-multipart#290

Ignore RFC 2231 extended parameters in parse_options_header by @Kludex in Kludex/python-multipart#291

Full Changelog: Kludex/python-multipart@0.0.29...0.0.30

Version 0.0.29

What's Changed

Handle malformed RFC 2231 continuations in parse_options_header by @manunio in Kludex/python-multipart#270

Full Changelog: Kludex/python-multipart@0.0.28...0.0.29

Version 0.0.28

What's Changed

Speed up partial-boundary tail scan via bytes.find by @Kludex in Kludex/python-multipart#281

Cap multipart boundary length at 256 bytes by @Kludex in Kludex/python-multipart#282

Full Changelog: Kludex/python-multipart@0.0.27...0.0.28

Version 0.0.27

What's Changed

Pass parse offsets via constructors by @Kludex in Kludex/python-multipart#268

Add multipart header limits by @Kludex in Kludex/python-multipart#267

Full Changelog: Kludex/python-multipart@0.0.26...0.0.27

Changelog

Sourced from python-multipart's changelog.

0.0.31 (2026-06-04)

Speed up multipart header parsing and callback dispatch #295.

Bound header field name size before validating #296.

Validate Content-Length is non-negative in parse_form #297.

0.0.30 (2026-05-31)

Parse application/x-www-form-urlencoded bodies per the WHATWG URL standard, treating only & as a field separator #290.

Ignore RFC 2231/5987 extended parameters (name*, filename*) in parse_options_header, keeping the plain parameter authoritative per RFC 7578 §4.2 #291.

0.0.29 (2026-05-17)

Handle malformed RFC 2231 continuations in parse_options_header #270.

0.0.28 (2026-05-10)

Speed up partial-boundary tail scan via bytes.find #281.

Cap multipart boundary length at 256 bytes #282.

0.0.27 (2026-04-27)

Add multipart header limits #267.

Pass parse offsets via constructors #268.

Commits

4cffc68 Version 0.0.31 (#298)
c814948 Reject negative Content-Length in parse_form (#297)
6b837d4 Bound header field name size before validating (#296)
e0c4f9d Bump the github-actions group with 3 updates (#294)
b8a01bb Bump the python-packages group with 3 updates (#293)
6732164 Speed up multipart header parsing and callback dispatch (#295)
9d3ead5 Version 0.0.30 (#292)
3506c15 Ignore RFC 2231 extended parameters in parse_options_header (#291)
d69df35 Treat only & as the urlencoded field separator (#290)
1e6ff97 Bump idna from 3.11 to 3.15 (#289)
Additional commits viewable in compare view

Updates starlette from 0.37.2 to 1.3.1

Release notes

Sourced from starlette's releases.

Version 1.3.1

What's Changed

Use StarletteDeprecationWarning instead of DeprecationWarning by @Kludex in Kludex/starlette#3119

Enforce max_fields and max_part_size in FormParser by @Kludex in Kludex/starlette#3329

Enforce FormParser limits in parser callbacks by @Kludex in Kludex/starlette#3331

Full Changelog: Kludex/starlette@1.3.0...1.3.1

Version 1.3.0

What's Changed

Clamp oversized suffix ranges in FileResponse by @jiyujie2006 in Kludex/starlette#3307

Catch OSError alongside MultiPartException when closing temp files by @N3XT3R1337 in Kludex/starlette#3191

Add httpx2 to the full extra by @Kludex in Kludex/starlette#3323

Adjust testclient typing and warnings by @waketzheng in Kludex/starlette#3322

Fix IndexError in URL.replace() on a URL with no authority by @LeSingh1 in Kludex/starlette#3317

Annotate URLPath protocol parameter with Literal by @Chang-LeHung in Kludex/starlette#3285

avoid collapsing exception groups from user code by @graingert in Kludex/starlette#2830

Use removeprefix to strip weak ETag indicator in is_not_modified by @gnosyslambda in Kludex/starlette#3193

Build request.url from structured components by @Kludex in Kludex/starlette#3326

New Contributors

@jiyujie2006 made their first contribution in Kludex/starlette#3307

@N3XT3R1337 made their first contribution in Kludex/starlette#3191

@leestana01 made their first contribution in Kludex/starlette#3319

@LeSingh1 made their first contribution in Kludex/starlette#3317

@EmmanuelNiyonshuti made their first contribution in Kludex/starlette#3204

@Chang-LeHung made their first contribution in Kludex/starlette#3285

@gnosyslambda made their first contribution in Kludex/starlette#3193

Full Changelog: Kludex/starlette@1.2.1...1.3.0

Version 1.2.1

What's Changed

Use httpx2 for type checking in the testclient module by @leifwar in Kludex/starlette#3304

Add assert error for requires() when request param is not Request type by @KeeganOP in Kludex/starlette#3298

New Contributors

@leifwar made their first contribution in Kludex/starlette#3304

@diskeu made their first contribution in Kludex/starlette#3243

@KeeganOP made their first contribution in Kludex/starlette#3298

Full Changelog: Kludex/starlette@1.2.0...1.2.1

Version 1.2.0

What's Changed

Support httpx2 in the test client by @Kludex in Kludex/starlette#3291

Full Changelog: Kludex/starlette@1.1.0...1.2.0

Version 1.1.0

... (truncated)

Changelog

Sourced from starlette's changelog.

1.3.1 (June 12, 2026)

Fixed

Enforce max_fields and max_part_size in FormParser #3329.

Enforce FormParser limits in parser callbacks #3331.

1.3.0 (June 11, 2026)

Added

Add httpx2 to the full extra #3323.

Annotate the URLPath protocol parameter with Literal #3285.

Fixed

Build request.url from structured components #3326.

Clamp oversized suffix ranges in FileResponse #3307.

Catch OSError alongside MultiPartException when closing temp files #3191.

Avoid collapsing exception groups raised from user code #2830.

Use removeprefix to strip the weak ETag indicator in is_not_modified #3193.

Fix IndexError in URL.replace() on a URL with no authority #3317.

Adjust testclient typing and warnings #3322.

1.2.1 (May 31, 2026)

Fixed

Use httpx2 for type checking in the testclient module #3304.

Add assert error for requires() when the request parameter is not a Request type #3298.

1.2.0 (May 28, 2026)

Added

Support httpx2 in the test client #3291.

1.1.0 (May 23, 2026)

Added

Use "application/octet-stream" as the FileResponse media type fallback #3283.

Fixed

Only dispatch standard HTTP verbs in HTTPEndpoint #3286.

Reject absolute paths in StaticFiles.lookup_path #3287.

1.0.1 (May 21, 2026)

... (truncated)

Commits

8ebffd0 Version 1.3.1 (#3330)
25b8e17 Enforce FormParser limits in parser callbacks (#3331)
dba1c4b Enforce max_fields and max_part_size in FormParser (#3329)
45e51dc Use StarletteDeprecationWarning instead of DeprecationWarning (#3119)
5f8610c Version 1.3.0 (#3327)
167b585 Build request.url from structured components (#3326)
3730925 Use removeprefix to strip weak ETag indicator in is_not_modified (#3193)
e6f7ad1 avoid collapsing exception groups from user code (#2830)
115228f Annotate URLPath protocol parameter with Literal (#3285)
113f193 docs: replace inline ASGI server list with link to canonical implemen… (#3204)
Additional commits viewable in compare view

Updates ujson from 5.12.0 to 5.13.0

Release notes

Sourced from ujson's releases.

5.13.0

Added

Create manylinux2014 wheels (#745) @hugovk

Add support for Python 3.15 (#742) @hugovk

Disable global interpreter lock for freethreading (#737) @bwoodsend

Re-enable building GraalPy wheels on macOS arm64 (#733) @timfel

Changed

Move metadata from setup.cfg to pyproject.toml (#736) @hugovk

Fixed

Tighten UTF-8 validation for ujson.dumps(b"...", reject_bytes=False) (169eaf36b1116fece5034ee79a7a0ef3f6deedcf) @bwoodsend

Replace generated version.h with macro (#735) @hugovk

5.12.1

Fixed

Fix encoding ref leak with non-English character (#714) @nhancdt2602

Fix memory leak when ujson.dump() is unable to write to its file (0bf630aaef59c0aafd0c8a4fc8bbe2a7bcefa853) @bwoodsend

Note that pre-built wheels for graalpy on macOS have been omitted from this release due to infrastructural issues building them (#731).

Commits

1a23a68 Create manylinux2014 wheels (#745)
bd943e8 Build separate manylinux2014 + modern wheels
87ae2df Create manylinux2014 wheels
209371e Verify expected number of dists (#743)
6392258 Also check SHA of wheels in case manylinux version changes
a00edea Verify expected number of dists
e24aeb7 Fix utf-8 test for graalpy
9122ebe Replace pre-commit with prek to fix deprecation warning (#744)
0bbf9a3 Add support for Python 3.15 (#742)
90ddea2 Replace pre-commit with prek to fix deprecation warning
Additional commits viewable in compare view

Updates certifi from 2023.7.22 to 2024.7.4

Commits

bd81538 2024.07.04 (#295)
06a2cbf Bump peter-evans/create-pull-request from 6.0.5 to 6.1.0 (#294)
13bba02 Bump actions/checkout from 4.1.6 to 4.1.7 (#293)
e8abcd0 Bump pypa/gh-action-pypi-publish from 1.8.14 to 1.9.0 (#292)
124f4ad 2024.06.02 (#291)
c2196ce --- (#290)
fefdeec Bump actions/checkout from 4.1.4 to 4.1.5 (#289)
3c5fb15 Bump actions/download-artifact from 4.1.6 to 4.1.7 (#286)
4a9569a Bump actions/checkout from 4.1.2 to 4.1.4 (#287)
1fc8086 Bump peter-evans/create-pull-request from 6.0.4 to 6.0.5 (#288)
Additional commits viewable in compare view

Updates jinja2 from 3.1.4 to 3.1.6

Release notes

Sourced from jinja2's releases.

3.1.6

This is the Jinja 3.1.6 security release, which fixes security issues but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Jinja2/3.1.6/ Changes: https://jinja.palletsprojects.com/en/stable/changes/#version-3-1-6

The |attr filter does not bypass the environment's attribute lookup, allowing the sandbox to apply its checks. GHSA-cpwx-vrp4-4pq7

3.1.5

This is the Jinja 3.1.5 security fix release, which fixes security issues and bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Jinja2/3.1.5/ Changes: https://jinja.palletsprojects.com/changes/#version-3-1-5 Milestone: https://github.com/pallets/jinja/milestone/16?closed=1

The sandboxed environment handles indirect calls to str.format, such as by passing a stored reference to a filter that calls its argument. GHSA-q2x7-8rv6-6q7h

Escape template name before formatting it into error messages, to avoid issues with names that contain f-string syntax. #1792, GHSA-gmj6-6f8f-6699

Sandbox does not allow clear and pop on known mutable sequence types. #2032

Calling sync render for an async template uses asyncio.run. #1952

Avoid unclosed auto_aiter warnings. #1960

Return an aclose-able AsyncGenerator from Template.generate_async. #1960

Avoid leaving root_render_func() unclosed in Template.generate_async. #1960

Avoid leaving async generators unclosed in blocks, includes and extends. #1960

The runtime uses the correct concat function for the current environment when calling block references. #1701

Make |unique async-aware, allowing it to be used after another async-aware filter. #1781

|int filter handles OverflowError from scientific notation. #1921

Make compiling deterministic for tuple unpacking in a {% set ... %} call. #2021

Fix dunder protocol (copy/pickle/etc) interaction with Undefined objects. #2025

Fix copy/pickle support for the internal missing object. #2027

Environment.overlay(enable_async) is applied correctly. #2061

The error message from FileSystemLoader includes the paths that were searched. #1661

PackageLoader shows a clearer error message when the package does not contain the templates directory. #1705

Improve annotations for methods returning copies. #1880

urlize does not add mailto: to values like @a@b. #1870

Tests decorated with @pass_context can be used with the |select filter. #1624

Using set for multiple assignment (a, b = 1, 2) does not fail when the target is a namespace attribute. #1413

Using set in all branches of {% if %}{% elif %}{% else %} blocks does not cause the variable to be considered initially undefined. #1253

Changelog

Sourced from jinja2's changelog.

Version 3.1.6

Released 2025-03-05

The |attr filter does not bypass the environment's attribute lookup, allowing the sandbox to apply its checks. :ghsa:cpwx-vrp4-4pq7

Version 3.1.5

Released 2024-12-21

The sandboxed environment handles indirect calls to str.format, such as by passing a stored reference to a filter that calls its argument. :ghsa:q2x7-8rv6-6q7h

Escape template name before formatting it into error messages, to avoid issues with names that contain f-string syntax. :issue:1792, :ghsa:gmj6-6f8f-6699

Sandbox does not allow clear and pop on known mutable sequence types. :issue:2032

Calling sync render for an async template uses asyncio.run. :pr:1952

Avoid unclosed auto_aiter warnings. :pr:1960

Return an aclose-able AsyncGenerator from Template.generate_async. :pr:1960

Avoid leaving root_render_func() unclosed in Template.generate_async. :pr:1960

Avoid leaving async generators unclosed in blocks, includes and extends. :pr:1960

The runtime uses the correct concat function for the current environment when calling block references. :issue:1701

Make |unique async-aware, allowing it to be used after another async-aware filter. :issue:1781

|int filter handles OverflowError from scientific notation. :issue:1921

Make compiling deterministic for tuple unpacking in a {% set ... %} call. :issue:2021

Fix dunder protocol (copy/pickle/etc) interaction with Undefined objects. :issue:2025

Fix copy/pickle support for the internal missing object. :issue:2027

Environment.overlay(enable_async) is applied correctly. :pr:2061

The error message from FileSystemLoader includes the paths that were searched. :issue:1661

PackageLoader shows a clearer error message when the package does not contain the templates directory. :issue:1705

Improve annotations for methods returning copies. :pr:1880

urlize does not add mailto: to values like @a@b. :pr:1870

... (truncated)

Commits

1520688 release version 3.1.6
90457bb Merge commit from fork
065334d attr filter uses env.getattr
033c200 start version 3.1.6
bc68d4e use global contributing guide (#2070)
247de5e use global contributing guide
ab8218c use project advisory link instead of global
b4ffc8f release version 3.1.5 (#2066)
877f6e5 release version 3.1.5
8d58859 remove test pypi
Additional commits viewable in compare view

Updates python-multipart from 0.0.26 to 0.0.31

Release notes

Sourced from python-multipart's releases.

Version 0.0.31

What's Changed

Speed up multipart header parsing and callback dispatch by @Kludex in Kludex/python-multipart#295

Bound header field name size before validating by @Kludex in Kludex/python-multipart#296

Validate Content-Length is non-negative in parse_form by @Kludex in Kludex/python-multipart#297

Full Changelog: Kludex/python-multipart@0.0.30...0.0.31

Version 0.0.30

What's Changed

Treat only & as the urlencoded field separator by @Kludex in Kludex/python-multipart#290

Ignore RFC 2231 extended parameters in parse_options_header by @Kludex in Kludex/python-multipart#291

Full Changelog: Kludex/python-multipart@0.0.29...0.0.30

Version 0.0.29

What's Changed

Handle malformed RFC 2231 continuations in parse_options_header by @manunio in Kludex/python-multipart#270

Full Changelog: Kludex/python-multipart@0.0.28...0.0.29

Version 0.0.28

What's Changed

Speed up partial-boundary tail scan via bytes.find by @Kludex in Kludex/python-multipart#281

Cap multipart boundary length at 256 bytes by @Kludex in Kludex/python-multipart#282

Full Changelog: Kludex/python-multipart@0.0.27...0.0.28

Version 0.0.27

What's Changed

Pass parse offsets via constructors by @Kludex in Kludex/python-multipart#268

Add multipart header limits by @Kludex in Kludex/python-multipart#267

Full Changelog: Kludex/python-multipart@0.0.26...0.0.27

Changelog

Sourced from python-multipart's changelog.

0.0.31 (2026-06-04)

Speed up multipart header parsing and callback dispatch #295.

Bound header field name size before validating #296.

Validate Content-Length is non-negative in parse_form #297.

0.0.30 (2026-05-31)

Parse application/x-www-form-urlencoded bodies per the WHATWG URL standard, treating only & as a field separator #290.

Ignore RFC 2231/5987 extended parameters (name*, filename*) in parse_options_header, keeping the plain parameter authoritative per RFC 7578 §4.2 #291.

0.0.29 (2026-05-17)

Handle malformed RFC 2231 continuations in parse_options_header #270.

0.0.28 (2026-05-10)

Speed up partial-boundary tail scan via bytes.find #281.

Cap multipart boundary length at 256 bytes #282.

0.0.27 (2026-04-27)

Add multipart header limits #267.

Pass parse offsets via constructors #268.

Commits

4cffc68 Version 0.0.31 (#298)
c814948 Reject negative Content-Length in parse_form (#297)
6b837d4 Bound header field name size before validating (#296)
e0c4f9d Bump the github-actions group with 3 updates (#294)
b8a01bb Bump the python-packages group with 3 updates (#293)
6732164 Speed up multipart header parsing and callback dispatch (#295)
9d3ead5 Version 0.0.30 (#292)
3506c15 Ignore RFC 2231 extended parameters in parse_options_header (#291)
d69df35 Treat only & as the urlencoded field separator (#290)
1e6ff97 Bump idna from 3.11 to 3.15 (#289)
Additional commits viewable in compare view

Updates starlette from 0.37.2 to 1.3.1

Release notes

Sourced from starlette's releases.

Version 1.3.1

What's Changed

Use StarletteDeprecationWarningDescription has been truncated

Bumps the pip group with 6 updates in the /api directory: | Package | From | To | | --- | --- | --- | | [certifi](https://github.com/certifi/python-certifi) | `2023.7.22` | `2024.7.4` | | [h11](https://github.com/python-hyper/h11) | `0.12.0` | `0.16.0` | | [jinja2](https://github.com/pallets/jinja) | `3.1.4` | `3.1.6` | | [python-multipart](https://github.com/Kludex/python-multipart) | `0.0.26` | `0.0.31` | | [starlette](https://github.com/Kludex/starlette) | `0.37.2` | `1.3.1` | | [ujson](https://github.com/ultrajson/ultrajson) | `5.12.0` | `5.13.0` | Bumps the pip group with 4 updates in the /functions-python directory: [jinja2](https://github.com/pallets/jinja), [python-multipart](https://github.com/Kludex/python-multipart), [starlette](https://github.com/Kludex/starlette) and [ujson](https://github.com/ultrajson/ultrajson). Bumps the pip group with 3 updates in the /functions-python/operations_api directory: [python-multipart](https://github.com/Kludex/python-multipart), [starlette](https://github.com/Kludex/starlette) and [ujson](https://github.com/ultrajson/ultrajson). Bumps the pip group with 1 update in the /functions-python/tasks_executor directory: [jinja2](https://github.com/pallets/jinja). Updates `certifi` from 2023.7.22 to 2024.7.4 - [Commits](certifi/python-certifi@2023.07.22...2024.07.04) Updates `h11` from 0.12.0 to 0.16.0 - [Commits](python-hyper/h11@v0.12.0...v0.16.0) Updates `jinja2` from 3.1.4 to 3.1.6 - [Release notes](https://github.com/pallets/jinja/releases) - [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst) - [Commits](pallets/jinja@3.1.4...3.1.6) Updates `python-multipart` from 0.0.26 to 0.0.31 - [Release notes](https://github.com/Kludex/python-multipart/releases) - [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md) - [Commits](Kludex/python-multipart@0.0.26...0.0.31) Updates `starlette` from 0.37.2 to 1.3.1 - [Release notes](https://github.com/Kludex/starlette/releases) - [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md) - [Commits](Kludex/starlette@0.37.2...1.3.1) Updates `ujson` from 5.12.0 to 5.13.0 - [Release notes](https://github.com/ultrajson/ultrajson/releases) - [Commits](ultrajson/ultrajson@5.12.0...5.13.0) Updates `certifi` from 2023.7.22 to 2024.7.4 - [Commits](certifi/python-certifi@2023.07.22...2024.07.04) Updates `jinja2` from 3.1.4 to 3.1.6 - [Release notes](https://github.com/pallets/jinja/releases) - [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst) - [Commits](pallets/jinja@3.1.4...3.1.6) Updates `python-multipart` from 0.0.26 to 0.0.31 - [Release notes](https://github.com/Kludex/python-multipart/releases) - [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md) - [Commits](Kludex/python-multipart@0.0.26...0.0.31) Updates `starlette` from 0.37.2 to 1.3.1 - [Release notes](https://github.com/Kludex/starlette/releases) - [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md) - [Commits](Kludex/starlette@0.37.2...1.3.1) Updates `ujson` from 5.12.0 to 5.13.0 - [Release notes](https://github.com/ultrajson/ultrajson/releases) - [Commits](ultrajson/ultrajson@5.12.0...5.13.0) Updates `certifi` from 2023.7.22 to 2024.7.4 - [Commits](certifi/python-certifi@2023.07.22...2024.07.04) Updates `certifi` from 2023.7.22 to 2024.7.4 - [Commits](certifi/python-certifi@2023.07.22...2024.07.04) Updates `certifi` from 2023.7.22 to 2024.7.4 - [Commits](certifi/python-certifi@2023.07.22...2024.07.04) Updates `certifi` from 2023.7.22 to 2024.7.4 - [Commits](certifi/python-certifi@2023.07.22...2024.07.04) Updates `certifi` from 2023.7.22 to 2024.7.4 - [Commits](certifi/python-certifi@2023.07.22...2024.07.04) Updates `certifi` from 2023.7.22 to 2024.7.4 - [Commits](certifi/python-certifi@2023.07.22...2024.07.04) Updates `certifi` from 2023.7.22 to 2024.7.4 - [Commits](certifi/python-certifi@2023.07.22...2024.07.04) Updates `certifi` from 2023.7.22 to 2024.7.4 - [Commits](certifi/python-certifi@2023.07.22...2024.07.04) Updates `python-multipart` from 0.0.26 to 0.0.31 - [Release notes](https://github.com/Kludex/python-multipart/releases) - [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md) - [Commits](Kludex/python-multipart@0.0.26...0.0.31) Updates `starlette` from 0.37.2 to 1.3.1 - [Release notes](https://github.com/Kludex/starlette/releases) - [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md) - [Commits](Kludex/starlette@0.37.2...1.3.1) Updates `ujson` from 5.12.0 to 5.13.0 - [Release notes](https://github.com/ultrajson/ultrajson/releases) - [Commits](ultrajson/ultrajson@5.12.0...5.13.0) Updates `certifi` from 2023.7.22 to 2024.7.4 - [Commits](certifi/python-certifi@2023.07.22...2024.07.04) Updates `certifi` from 2023.7.22 to 2024.7.4 - [Commits](certifi/python-certifi@2023.07.22...2024.07.04) Updates `certifi` from 2023.7.22 to 2024.7.4 - [Commits](certifi/python-certifi@2023.07.22...2024.07.04) Updates `certifi` from 2023.7.22 to 2024.7.4 - [Commits](certifi/python-certifi@2023.07.22...2024.07.04) Updates `certifi` from 2023.7.22 to 2024.7.4 - [Commits](certifi/python-certifi@2023.07.22...2024.07.04) Updates `certifi` from 2023.7.22 to 2024.7.4 - [Commits](certifi/python-certifi@2023.07.22...2024.07.04) Updates `jinja2` from 3.1.4 to 3.1.6 - [Release notes](https://github.com/pallets/jinja/releases) - [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst) - [Commits](pallets/jinja@3.1.4...3.1.6) Updates `certifi` from 2023.7.22 to 2024.7.4 - [Commits](certifi/python-certifi@2023.07.22...2024.07.04) Updates `certifi` from 2023.7.22 to 2024.7.4 - [Commits](certifi/python-certifi@2023.07.22...2024.07.04) Updates `certifi` from 2023.7.22 to 2024.7.4 - [Commits](certifi/python-certifi@2023.07.22...2024.07.04) Updates `jinja2` from 3.1.4 to 3.1.6 - [Release notes](https://github.com/pallets/jinja/releases) - [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst) - [Commits](pallets/jinja@3.1.4...3.1.6) Updates `python-multipart` from 0.0.26 to 0.0.31 - [Release notes](https://github.com/Kludex/python-multipart/releases) - [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md) - [Commits](Kludex/python-multipart@0.0.26...0.0.31) Updates `starlette` from 0.40.0 to 1.3.1 - [Release notes](https://github.com/Kludex/starlette/releases) - [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md) - [Commits](Kludex/starlette@0.37.2...1.3.1) Updates `ujson` from 5.12.0 to 5.13.0 - [Release notes](https://github.com/ultrajson/ultrajson/releases) - [Commits](ultrajson/ultrajson@5.12.0...5.13.0) Updates `jinja2` from 3.1.4 to 3.1.6 - [Release notes](https://github.com/pallets/jinja/releases) - [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst) - [Commits](pallets/jinja@3.1.4...3.1.6) Updates `python-multipart` from 0.0.26 to 0.0.31 - [Release notes](https://github.com/Kludex/python-multipart/releases) - [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md) - [Commits](Kludex/python-multipart@0.0.26...0.0.31) Updates `starlette` from 0.40.0 to 1.3.1 - [Release notes](https://github.com/Kludex/starlette/releases) - [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md) - [Commits](Kludex/starlette@0.37.2...1.3.1) Updates `ujson` from 5.12.0 to 5.13.0 - [Release notes](https://github.com/ultrajson/ultrajson/releases) - [Commits](ultrajson/ultrajson@5.12.0...5.13.0) Updates `python-multipart` from 0.0.26 to 0.0.31 - [Release notes](https://github.com/Kludex/python-multipart/releases) - [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md) - [Commits](Kludex/python-multipart@0.0.26...0.0.31) Updates `starlette` from 0.40.0 to 1.3.1 - [Release notes](https://github.com/Kludex/starlette/releases) - [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md) - [Commits](Kludex/starlette@0.37.2...1.3.1) Updates `ujson` from 5.12.0 to 5.13.0 - [Release notes](https://github.com/ultrajson/ultrajson/releases) - [Commits](ultrajson/ultrajson@5.12.0...5.13.0) Updates `jinja2` from 3.1.4 to 3.1.6 - [Release notes](https://github.com/pallets/jinja/releases) - [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst) - [Commits](pallets/jinja@3.1.4...3.1.6) Updates `python-multipart` from 0.0.26 to 0.0.31 - [Release notes](https://github.com/Kludex/python-multipart/releases) - [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md) - [Commits](Kludex/python-multipart@0.0.26...0.0.31) Updates `starlette` from 0.40.0 to 1.3.1 - [Release notes](https://github.com/Kludex/starlette/releases) - [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md) - [Commits](Kludex/starlette@0.37.2...1.3.1) Updates `ujson` from 5.12.0 to 5.13.0 - [Release notes](https://github.com/ultrajson/ultrajson/releases) - [Commits](ultrajson/ultrajson@5.12.0...5.13.0) Updates `python-multipart` from 0.0.26 to 0.0.31 - [Release notes](https://github.com/Kludex/python-multipart/releases) - [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md) - [Commits](Kludex/python-multipart@0.0.26...0.0.31) Updates `starlette` from 0.40.0 to 1.3.1 - [Release notes](https://github.com/Kludex/starlette/releases) - [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md) - [Commits](Kludex/starlette@0.37.2...1.3.1) Updates `ujson` from 5.12.0 to 5.13.0 - [Release notes](https://github.com/ultrajson/ultrajson/releases) - [Commits](ultrajson/ultrajson@5.12.0...5.13.0) Updates `python-multipart` from 0.0.26 to 0.0.31 - [Release notes](https://github.com/Kludex/python-multipart/releases) - [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md) - [Commits](Kludex/python-multipart@0.0.26...0.0.31) Updates `starlette` from 0.40.0 to 1.3.1 - [Release notes](https://github.com/Kludex/starlette/releases) - [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md) - [Commits](Kludex/starlette@0.37.2...1.3.1) Updates `ujson` from 5.12.0 to 5.13.0 - [Release notes](https://github.com/ultrajson/ultrajson/releases) - [Commits](ultrajson/ultrajson@5.12.0...5.13.0) Updates `jinja2` from 3.1.4 to 3.1.6 - [Release notes](https://github.com/pallets/jinja/releases) - [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst) - [Commits](pallets/jinja@3.1.4...3.1.6) Updates `jinja2` from 3.1.4 to 3.1.6 - [Release notes](https://github.com/pallets/jinja/releases) - [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst) - [Commits](pallets/jinja@3.1.4...3.1.6) Updates `jinja2` from 3.1.4 to 3.1.6 - [Release notes](https://github.com/pallets/jinja/releases) - [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst) - [Commits](pallets/jinja@3.1.4...3.1.6) --- updated-dependencies: - dependency-name: certifi dependency-version: 2024.7.4 dependency-type: direct:production dependency-group: pip - dependency-name: h11 dependency-version: 0.16.0 dependency-type: direct:production dependency-group: pip - dependency-name: jinja2 dependency-version: 3.1.6 dependency-type: direct:production dependency-group: pip - dependency-name: python-multipart dependency-version: 0.0.31 dependency-type: direct:production dependency-group: pip - dependency-name: starlette dependency-version: 1.3.1 dependency-type: direct:production dependency-group: pip - dependency-name: ujson dependency-version: 5.13.0 dependency-type: direct:production dependency-group: pip - dependency-name: certifi dependency-version: 2024.7.4 dependency-type: direct:production dependency-group: pip - dependency-name: jinja2 dependency-version: 3.1.6 dependency-type: direct:production dependency-group: pip - dependency-name: python-multipart dependency-version: 0.0.31 dependency-type: direct:production dependency-group: pip - dependency-name: starlette dependency-version: 1.3.1 dependency-type: direct:production dependency-group: pip - dependency-name: ujson dependency-version: 5.13.0 dependency-type: direct:production dependency-group: pip - dependency-name: certifi dependency-version: 2024.7.4 dependency-type: direct:production dependency-group: pip - dependency-name: certifi dependency-version: 2024.7.4 dependency-type: direct:production dependency-group: pip - dependency-name: certifi dependency-version: 2024.7.4 dependency-type: direct:production dependency-group: pip - dependency-name: certifi dependency-version: 2024.7.4 dependency-type: direct:production dependency-group: pip - dependency-name: certifi dependency-version: 2024.7.4 dependency-type: direct:production dependency-group: pip - dependency-name: certifi dependency-version: 2024.7.4 dependency-type: direct:production dependency-group: pip - dependency-name: certifi dependency-version: 2024.7.4 dependency-type: direct:production dependency-group: pip - dependency-name: certifi dependency-version: 2024.7.4 dependency-type: direct:production dependency-group: pip - dependency-name: python-multipart dependency-version: 0.0.31 dependency-type: direct:production dependency-group: pip - dependency-name: starlette dependency-version: 1.3.1 dependency-type: direct:production dependency-group: pip - dependency-name: ujson dependency-version: 5.13.0 dependency-type: direct:production dependency-group: pip - dependency-name: certifi dependency-version: 2024.7.4 dependency-type: direct:production dependency-group: pip - dependency-name: certifi dependency-version: 2024.7.4 dependency-type: direct:production dependency-group: pip - dependency-name: certifi dependency-version: 2024.7.4 dependency-type: direct:production dependency-group: pip - dependency-name: certifi dependency-version: 2024.7.4 dependency-type: direct:production dependency-group: pip - dependency-name: certifi dependency-version: 2024.7.4 dependency-type: direct:production dependency-group: pip - dependency-name: certifi dependency-version: 2024.7.4 dependency-type: direct:production dependency-group: pip - dependency-name: jinja2 dependency-version: 3.1.6 dependency-type: direct:production dependency-group: pip - dependency-name: certifi dependency-version: 2024.7.4 dependency-type: direct:production dependency-group: pip - dependency-name: certifi dependency-version: 2024.7.4 dependency-type: direct:production dependency-group: pip - dependency-name: certifi dependency-version: 2024.7.4 dependency-type: direct:production dependency-group: pip - dependency-name: jinja2 dependency-version: 3.1.6 dependency-type: direct:production dependency-group: pip - dependency-name: python-multipart dependency-version: 0.0.31 dependency-type: direct:production dependency-group: pip - dependency-name: starlette dependency-version: 1.3.1 dependency-type: direct:production dependency-group: pip - dependency-name: ujson dependency-version: 5.13.0 dependency-type: direct:production dependency-group: pip - dependency-name: jinja2 dependency-version: 3.1.6 dependency-type: direct:production dependency-group: pip - dependency-name: python-multipart dependency-version: 0.0.31 dependency-type: direct:production dependency-group: pip - dependency-name: starlette dependency-version: 1.3.1 dependency-type: direct:production dependency-group: pip - dependency-name: ujson dependency-version: 5.13.0 dependency-type: direct:production dependency-group: pip - dependency-name: python-multipart dependency-version: 0.0.31 dependency-type: direct:production dependency-group: pip - dependency-name: starlette dependency-version: 1.3.1 dependency-type: direct:production dependency-group: pip - dependency-name: ujson dependency-version: 5.13.0 dependency-type: direct:production dependency-group: pip - dependency-name: jinja2 dependency-version: 3.1.6 dependency-type: direct:production dependency-group: pip - dependency-name: python-multipart dependency-version: 0.0.31 dependency-type: direct:production dependency-group: pip - dependency-name: starlette dependency-version: 1.3.1 dependency-type: direct:production dependency-group: pip - dependency-name: ujson dependency-version: 5.13.0 dependency-type: direct:production dependency-group: pip - dependency-name: python-multipart dependency-version: 0.0.31 dependency-type: direct:production dependency-group: pip - dependency-name: starlette dependency-version: 1.3.1 dependency-type: direct:production dependency-group: pip - dependency-name: ujson dependency-version: 5.13.0 dependency-type: direct:production dependency-group: pip - dependency-name: python-multipart dependency-version: 0.0.31 dependency-type: direct:production dependency-group: pip - dependency-name: starlette dependency-version: 1.3.1 dependency-type: direct:production dependency-group: pip - dependency-name: ujson dependency-version: 5.13.0 dependency-type: direct:production dependency-group: pip - dependency-name: jinja2 dependency-version: 3.1.6 dependency-type: direct:production dependency-group: pip - dependency-name: jinja2 dependency-version: 3.1.6 dependency-type: direct:production dependency-group: pip - dependency-name: jinja2 dependency-version: 3.1.6 dependency-type: direct:production dependency-group: pip ... Signed-off-by: dependabot[bot] <support@github.com>

davidgamez · 2026-08-28T14:53:18Z

@dependabot rebase

dependabot · 2026-08-28T14:53:24Z

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 28, 2026

Merge branch 'main' into dependabot/pip/api/pip-4bc870338e

efb193b

Navigation Menu

Uh oh!

chore(deps): bump the pip group across 4 directories with 6 updates - #1820

chore(deps): bump the pip group across 4 directories with 6 updates#1820
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/pip/api/pip-4bc870338e

dependabot Bot commented on behalf of github Aug 28, 2026

Uh oh!

davidgamez commented Aug 28, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 28, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 28, 2026

3.1.6

3.1.5

Version 3.1.6

Version 3.1.5

Version 0.0.31

What's Changed

Version 0.0.30

What's Changed

Version 0.0.29

What's Changed

Version 0.0.28

What's Changed

Version 0.0.27

What's Changed

0.0.31 (2026-06-04)

0.0.30 (2026-05-31)

0.0.29 (2026-05-17)

0.0.28 (2026-05-10)

0.0.27 (2026-04-27)

Version 1.3.1

What's Changed

Version 1.3.0

What's Changed

New Contributors

Version 1.2.1

What's Changed

New Contributors

Version 1.2.0

What's Changed

Version 1.1.0

1.3.1 (June 12, 2026)

Fixed

1.3.0 (June 11, 2026)

Added

Fixed

1.2.1 (May 31, 2026)

Fixed

1.2.0 (May 28, 2026)

Added

1.1.0 (May 23, 2026)

Added

Fixed

1.0.1 (May 21, 2026)

5.13.0

Added

Changed

Fixed

5.12.1

Fixed

3.1.6

3.1.5

Version 3.1.6

Version 3.1.5

Version 0.0.31

What's Changed

Version 0.0.30

What's Changed

Version 0.0.29

What's Changed

Version 0.0.28

What's Changed

Version 0.0.27

What's Changed

0.0.31 (2026-06-04)

0.0.30 (2026-05-31)

0.0.29 (2026-05-17)

0.0.28 (2026-05-10)

0.0.27 (2026-04-27)

Version 1.3.1

What's Changed

Uh oh!

davidgamez commented Aug 28, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 28, 2026

Uh oh!

Reviewers

Assignees