Greyson LaLonde 4990041ef7 chore(deps): force starlette>=1.0.1 for PYSEC-2026-161 ...

starlette <1.0.1 has PYSEC-2026-161 (missing Host header validation
poisons request.url.path, bypassing path-based auth). Pulled in as a
transitive of fastapi. Override-dependencies forces the patched
version; lock regenerated against starlette 1.0.1.

2026-05-22 23:33:08 +08:00

8.7 KiB

Raw Blame History

View Raw