Skip to content

Update starlette dependency to avoid CVE-2026-48710#1757

Merged
rtuck99 merged 2 commits into
mainfrom
update_starlette_dependency
May 28, 2026
Merged

Update starlette dependency to avoid CVE-2026-48710#1757
rtuck99 merged 2 commits into
mainfrom
update_starlette_dependency

Conversation

@rtuck99
Copy link
Copy Markdown
Contributor

@rtuck99 rtuck99 commented May 28, 2026

Constrains starlette to >= 1.1.0 which is a transitive dependency via fastapi to address CVE-2026-48710

(remember to update pyproject.toml with the dodal commit tag if you need it for tests to pass!)

Instructions to reviewer on how to test:

  1. Do thing x
  2. Confirm thing y happens

Checks for reviewer

  • Would the PR title make sense to a user on a set of release notes

@github-actions
Copy link
Copy Markdown

Please add a label to this PR. This helps with generating helpful release notes.

@rtuck99 rtuck99 force-pushed the update_starlette_dependency branch from 0d26f1f to d80e067 Compare May 28, 2026 09:53
@rtuck99 rtuck99 added the dev experience Changes relating to developer experience label May 28, 2026
@codecov
Copy link
Copy Markdown

codecov Bot commented May 28, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.01%. Comparing base (912ef5e) to head (d80e067).

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #1757   +/-   ##
=======================================
  Coverage   93.01%   93.01%           
=======================================
  Files         164      164           
  Lines        8909     8909           
=======================================
  Hits         8287     8287           
  Misses        622      622           
Components Coverage Δ
i24 SSX 77.15% <ø> (ø)
hyperion 98.73% <ø> (ø)
other 98.16% <ø> (ø)
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@rtuck99 rtuck99 marked this pull request as ready for review May 28, 2026 09:59
@rtuck99 rtuck99 requested a review from a team as a code owner May 28, 2026 09:59
@rtuck99 rtuck99 merged commit 95012b3 into main May 28, 2026
16 of 17 checks passed
@rtuck99 rtuck99 deleted the update_starlette_dependency branch May 28, 2026 12:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dev experience Changes relating to developer experience

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants