chore: bump starlette version (#4158)

# What does this PR do?

Require at least 0.49.1 which fixes a security vulnerability in the
parsing logic of the Range header in FileResponse. Release note:
https://github.com/Kludex/starlette/releases/tag/0.49.1

Signed-off-by: Sébastien Han <seb@redhat.com>
(cherry picked from commit dc49ad3f89)

# Conflicts:
#	uv.lock
This commit is contained in:
Sébastien Han 2025-11-14 17:47:37 +01:00 committed by Mergify
parent 1d251b489a
commit a4fefcffac
2 changed files with 21 additions and 6 deletions

View file

@ -49,6 +49,7 @@ dependencies = [
"aiosqlite>=0.21.0", # server - for metadata store
"asyncpg", # for metadata store
"sqlalchemy[asyncio]>=2.0.41", # server - for conversations
"starlette>=0.49.1",
]
[project.optional-dependencies]