chore(deps-dev): bump starlette from 0.44.0 to 0.47.0

[dependabot]

Bumps starlette from 0.44.0 to 0.47.0.

Release notes

Sourced from starlette's releases.

Version 0.47.0

Added

• Add support for ASGI pathsend extension #2671.
• Add partitioned attribute to Response.set_cookie #2501.

Changed

• Change methods parameter type from list[str] to Collection[str] #2903.
• Replace import typing by from typing import ... in the whole codebase #2867.

Fixed

• Mark ExceptionMiddleware.http_exception as async to prevent thread creation #2922.

---

New Contributors

• @​danlapid made their first contribution in encode/starlette#2922
• @​Flecart made their first contribution in encode/starlette#2501
• @​AllenSH12 made their first contribution in encode/starlette#2936
• @​waketzheng made their first contribution in encode/starlette#2867
• @​jonathanberthias made their first contribution in encode/starlette#2903

Full Changelog: Kludex/starlette@0.46.2...0.47.0

Version 0.46.2

What's Changed

• Use correct index on backwards compatible logic in TemplateResponse by @​alex-oleshkevich in encode/starlette#2909
• Prevents reraising of exception from BaseHTTPMiddleware by @​ramannanda9 in encode/starlette#2911

New Contributors

• @​ahryniv made their first contribution in encode/starlette#2913
• @​ramannanda9 made their first contribution in encode/starlette#2911

Full Changelog: Kludex/starlette@0.46.1...0.46.2

Version 0.46.1

Fixed

• Allow relative directory path when follow_symlinks=True #2896.

---

Full Changelog: Kludex/starlette@0.46.0...0.46.1

Version 0.46.0

Added

... (truncated)

Changelog

Sourced from starlette's changelog.

0.47.0 (May 29, 2025)

Added

• Add support for ASGI pathsend extension #2671.
• Add partitioned attribute to Response.set_cookie #2501.

Changed

• Change methods parameter type from list[str] to Collection[str] #2903.
• Replace import typing by from typing import ... in the whole codebase #2867.

Fixed

• Mark ExceptionMiddleware.http_exception as async to prevent thread creation #2922.

0.46.2 (April 13, 2025)

Fixed

• Prevents reraising of exception from BaseHttpMiddleware #2911.
• Use correct index on backwards compatible logic in TemplateResponse #2909.

0.46.1 (March 8, 2025)

Fixed

• Allow relative directory path when follow_symlinks=True #2896.

0.46.0 (February 22, 2025)

Added

• GZipMiddleware: Make sure Vary header is always added if a response can be compressed #2865.

Fixed

• Raise exception from background task on BaseHTTPMiddleware #2812.
• GZipMiddleware: Don't compress on server sent events #2871.

Changed

• MultiPartParser: Rename max_file_size to spool_max_size #2780.

Deprecated

• Add deprecated warning to TestClient(timeout=...) #2840.

... (truncated)

Commits

• 739321d Version 0.47.0 (#2947)
• af1c709 Add support for ASGI pathsend extension (#2671)
• f099743 Make annotation for methods more permissive (#2903)
• 2ff7653 chore: improve type hints (#2867)
• bc4b937 CI: skips type check until mypy ready for 3.14 (#2936)
• 4acf1d1 feat: add partitioned attribute to cookie (#2501)
• 278e33e Bump the python-packages group with 7 updates (#2930)
• a766a58 Mark ExceptionMiddleware.http_exception as async to prevent thread creation. ...
• 4a81176 Version 0.46.2 (#2921)
• 48f7cd7 Prevents reraising of exception from BaseHttpMiddleware (#2911)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[qlty-cloud-legacy]

Code Climate has analyzed commit a73fe9a and detected 0 issues on this pull request.

View more on Code Climate.