Starlette

This release introduces minor improvements to file handling and endpoint dispatching, along with a security fix in path resolution for StaticFiles.

This minor release fixes an issue where malformed Host headers could cause problems when constructing the request URL.

Starlette has officially reached its first stable release, version 1.0, concluding nearly eight years of development.

The first release candidate for Starlette 1.0 is available, removing all features previously marked for deprecation in preparation for the final 1.0 release.

This patch release refactors dependency usage, specifically limiting the use of typing_extensions to older Python versions.

This release introduces dictionary-style access for State, enhancing type safety when retrieving state variables. It also provides a link to the full changelog for version 0.52.0.

This release introduces the `allow_private_network` option for CORS middleware and adjusts the stacklevel for DeprecationWarnings related to the wsgi module.

Version 0.50.0 drops Python 3.9 support, requiring Python 3.10+.

Starlette 0.49.3 relaxes the strictness of the Middleware type, fixing issue #3059.

Starlette 0.49.2 fixes handling of conditional headers in StaticFiles by ignoring `if-modified-since` when `if-none-match` is present.

Starlette 0.49.1 patches a security issue in FileResponse's Range header parsing.

Starlette 0.49.0 adds an `encoding` option to Config, improves cookie handling, and tightens WebSocketEndpoint typing, while refining Middleware exception handling.

Version 0.48.0 adds official Python 3.14 support and updates HTTP status names to follow RFC9110.

Starlette 0.47.3 fixes coroutine detection on Python 3.12 and earlier.

Fixed an issue where UploadFile did not correctly check for future rollover.

Starlette 0.47.1 fixes type‑hinting issues by using Self in TestClient.__enter__ and adds proper type checking for async exception handlers.

Starlette 0.47.0 adds ASGI pathsend support and a `partitioned` flag for cookies, updates the `methods` parameter type, and makes `ExceptionMiddleware.http_exception` async.

Starlette 0.46.2 fixes TemplateResponse indexing and stops BaseHTTPMiddleware from reraising exceptions.

Starlette 0.46.1 fixes an issue allowing relative directory paths with follow_symlinks=True.

Starlette 0.46.0 adds a Vary header to GZipMiddleware, renames MultiPartParser’s `max_file_size` to `spool_max_size`, and deprecates `TestClient(timeout=…)`, while fixing background task exception handling and SSE compression.

Starlette 0.45.3 fixes a bug where the directory argument in `lookup_path` was not converted to a string before commonpath comparison.