From 1e213809e4c788b9f888b65bc206fecfb8a445b5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 25 May 2026 22:29:27 +0000
Subject: [PATCH] chore(deps): bump starlette from 0.52.1 to 1.0.0

Bumps [starlette](https://github.com/Kludex/starlette) from 0.52.1 to 1.0.0.
- [Release notes](https://github.com/Kludex/starlette/releases)
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)
- [Commits](https://github.com/Kludex/starlette/compare/0.52.1...1.0.0)

---
updated-dependencies:
- dependency-name: starlette
  dependency-version: 1.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 pyproject.toml   | 4 ++--
 requirements.txt | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index 9ecb9ea..f03f0c4 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -27,12 +27,12 @@ dependencies = [
     # Explicit ceiling so the bot won't try again until databricks-sdk lifts
     # its <7.0 cap.
     "protobuf<7",
-    # Upper bound is forced by mlflow-skinny: 3.12.0 declares `starlette<1`.
+    # Upper bound is forced by mlflow-skinny: 3.12.0 declares `starlette<2`.
     # Dependabot tried to bump to starlette 1.0.0 (PR #59) — the pin worked
     # with `uv pip sync` but `uv pip compile pyproject.toml` rejected it via
     # mlflow-skinny's transitive cap. Explicit ceiling so the bot won't try
     # again until mlflow-skinny lifts its <1 cap.
-    "starlette<1",
+    "starlette<2",
 ]
 
 [dependency-groups]
diff --git a/requirements.txt b/requirements.txt
index e3f4107..b6044a3 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -181,7 +181,7 @@ sqlparse==0.5.5
     # via mlflow-skinny
 sse-starlette==3.3.4
     # via mcp
-starlette==0.52.1
+starlette==1.0.0
     # via
     #   coda (pyproject.toml)
     #   fastapi