diff --git a/pyproject.toml b/pyproject.toml
index 9ecb9ea..f03f0c4 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -27,12 +27,12 @@ dependencies = [
     # Explicit ceiling so the bot won't try again until databricks-sdk lifts
     # its <7.0 cap.
     "protobuf<7",
-    # Upper bound is forced by mlflow-skinny: 3.12.0 declares `starlette<1`.
+    # Upper bound is forced by mlflow-skinny: 3.12.0 declares `starlette<2`.
     # Dependabot tried to bump to starlette 1.0.0 (PR #59) — the pin worked
     # with `uv pip sync` but `uv pip compile pyproject.toml` rejected it via
     # mlflow-skinny's transitive cap. Explicit ceiling so the bot won't try
     # again until mlflow-skinny lifts its <1 cap.
-    "starlette<1",
+    "starlette<2",
 ]
 
 [dependency-groups]
diff --git a/requirements.txt b/requirements.txt
index e3f4107..b6044a3 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -181,7 +181,7 @@ sqlparse==0.5.5
     # via mlflow-skinny
 sse-starlette==3.3.4
     # via mcp
-starlette==0.52.1
+starlette==1.0.0
     # via
     #   coda (pyproject.toml)
     #   fastapi