security - update starlette and python-multipart for security alerts

[seapagan]

• update starlette and python-multipart for security alerts

Summary by CodeRabbit

• Chores
  • Restricted Python version compatibility to versions 3.10 and above, whilst capping support at versions below 3.15.
  • Upgraded core dependencies across development and production environments: python-multipart now at version 0.0.32 and Starlette at version 1.3.1 for improved stability and performance.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 59980bfa-0966-4cec-8ac1-c0de449bb80f

📥 Commits

Reviewing files that changed from the base of the PR and between 943b1ff and 9d2078e.

⛔ Files ignored due to path filters (1)

• uv.lock is excluded by !**/*.lock

📒 Files selected for processing (3)

• pyproject.toml
• requirements-dev.txt
• requirements.txt

---

📝 Walkthrough

Walkthrough

pyproject.toml gains an upper Python bound (<3.15). requirements.txt and requirements-dev.txt both bump python-multipart from 0.0.28 to 0.0.32 and starlette from 1.2.1 to 1.3.1.

Changes

Dependency and Python Version Updates

Layer / File(s)	Summary
Python version upper bound pyproject.toml	requires-python is narrowed from >=3.10 to >=3.10,<3.15, adding an explicit upper bound.
python-multipart and starlette bumps requirements.txt, requirements-dev.txt	python-multipart is updated from 0.0.28 to 0.0.32 and starlette from 1.2.1 to 1.3.1 in both the production and development requirement files.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related PRs

• seapagan/fastapi-template#821: Also bumps python-multipart in requirements.txt and requirements-dev.txt to a newer patched version.
• seapagan/fastapi-template#853: Updates starlette across the same requirements files.

Suggested labels

security

🐰 A version bump here, a bound up there,
Starlette shines bright with a fresh 1.3.1 flair,
Multipart patched, no exploit shall pass,
Python stays tidy — <3.15 at last!
Hop hop hooray, the deps are in line! 🎉

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the main purpose of the changeset: updating dependencies (starlette and python-multipart) to address security concerns, which aligns with the actual changes in pyproject.toml and requirements files.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch security/update-deps

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric	Results
Complexity	0
Duplication	0

View in Codacy

🟢 Coverage ∅ diff coverage · +0.00% coverage variation

Metric	Results
Coverage variation	✅ +0.00% coverage variation (-1.00%)
Diff coverage	✅ ∅ diff coverage

View coverage diff in Codacy

Coverage variation details

	Coverable lines	Covered lines	Coverage
Common ancestor commit (943b1ff)	Report Missing	Report Missing	Report Missing
Head commit (9d2078e)	2524 (+0)	2524 (+0)	100.00% (+0.00%)

Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: <coverage of head commit> - <coverage of common ancestor commit>

Diff coverage details

	Coverable lines	Covered lines	Diff coverage
Pull request (#857)	0	0	∅ (not applicable)

Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: <covered lines added or modified>/<coverable lines added or modified> * 100%

¹ Codacy didn't receive coverage data for the commit, or there was an error processing the received data. Check your integration for errors and validate that your coverage setup is correct.

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}