build(deps): bump starlette from 0.13.8 to 0.18.0

[dependabot]

Bumps starlette from 0.13.8 to 0.18.0.

Release notes

Sourced from starlette's releases.

Version 0.18.0

Added

• Change default chunk size from 4Kb to 64Kb on FileResponse #1345.
• Add support for functools.partial in WebSocketRoute #1356.
• Add StaticFiles packages with directory #1350.
• Allow environment options in Jinja2Templates #1401.
• Allow HEAD method on HttpEndpoint #1346.
• Accept additional headers on websocket.accept message #1361 and #1422.
• Add reason to WebSocket close ASGI event #1417.
• Add headers attribute to UploadFile #1382.
• Don't omit Content-Length header for Content-Length: 0 cases #1395.
• Don't set headers for responses with 1xx, 204 and 304 status code #1397.
• SessionMiddleware.max_age now accepts None, so cookie can last as long as the browser session #1387.

Fixed

• Tweak hashlib.md5() function on FileResponses ETag generation. The parameter usedforsecurity flag is set to False, if the flag is available on the system. This fixes an error raised on systems with FIPS enabled #1366 and #1410.
• Fix path_params type on url_path_for() method i.e. turn str into Any #1341.
• Host now ignores port on routing #1322.

Version 0.17.1

Fixed

• Fix IndexError in authentication requires when wrapped function arguments are distributed between *args and **kwargs #1335.

Version 0.17.0

Added

• Response.delete_cookie now accepts the same parameters as Response.set_cookie #1228.
• Update the Jinja2Templates constructor to allow PathLike #1292.

Fixed

• Fix BadSignature exception handling in SessionMiddleware #1264.
• Change HTTPConnection.__getitem__ return type from str to typing.Any #1118.
• Change ImmutableMultiDict.getlist return type from typing.List[str] to typing.List[typing.Any] #1235.
• Handle OSError exceptions on StaticFiles #1220.
• Fix StaticFiles 404.html in HTML mode #1314.
• Prevent anyio.ExceptionGroup in error views under a BaseHTTPMiddleware #1262.

Removed

• Remove GraphQL support #1198.

Version 0.16.0

Added

• Added Encode funding option #1219

Fixed

• starlette.websockets.WebSocket instances are now hashable and compare by identity #1039
• A number of fixes related to running task groups in lifespan #1213, #1227

... (truncated)

Changelog

Sourced from starlette's changelog.

0.18.0

January 23, 2022

Added

• Change default chunk size from 4Kb to 64Kb on FileResponse #1345.
• Add support for functools.partial in WebSocketRoute #1356.
• Add StaticFiles packages with directory #1350.
• Allow environment options in Jinja2Templates #1401.
• Allow HEAD method on HttpEndpoint #1346.
• Accept additional headers on websocket.accept message #1361 and #1422.
• Add reason to WebSocket close ASGI event #1417.
• Add headers attribute to UploadFile #1382.
• Don't omit Content-Length header for Content-Length: 0 cases #1395.
• Don't set headers for responses with 1xx, 204 and 304 status code #1397.
• SessionMiddleware.max_age now accepts None, so cookie can last as long as the browser session #1387.

Fixed

• Tweak hashlib.md5() function on FileResponses ETag generation. The parameter usedforsecurity flag is set to False, if the flag is available on the system. This fixes an error raised on systems with FIPS enabled #1366 and #1410.
• Fix path_params type on url_path_for() method i.e. turn str into Any #1341.
• Host now ignores port on routing #1322.

0.17.1

November 17, 2021

Fixed

• Fix IndexError in authentication requires when wrapped function arguments are distributed between *args and **kwargs #1335.

0.17.0

November 4, 2021

Added

• Response.delete_cookie now accepts the same parameters as Response.set_cookie #1228.
• Update the Jinja2Templates constructor to allow PathLike #1292.

Fixed

• Fix BadSignature exception handling in SessionMiddleware #1264.
• Change HTTPConnection.__getitem__ return type from str to typing.Any #1118.
• Change ImmutableMultiDict.getlist return type from typing.List[str] to typing.List[typing.Any] #1235.
• Handle OSError exceptions on StaticFiles #1220.
• Fix StaticFiles 404.html in HTML mode #1314.
• Prevent anyio.ExceptionGroup in error views under a BaseHTTPMiddleware #1262.

Removed

• Remove GraphQL support #1198.

0.16.0

... (truncated)

Commits

• 832bc85 Version 0.18.0 (#1380)
• 34d9f0f Add reason to WebSocket closure (#1417)
• 9d282a9 Default WebSocket accept message headers to an empty list (#1422)
• 1974937 Adjust type of exception_handlers to allow async callable (#1423)
• 3e6b26d Allow Environment options in Jinja2Templates (#1401)
• ad495c7 Add third-party CSRF middlewares (#1414)
• 3182495 Improvements on authentication documentation (#1420)
• e06425b Sort third-party packages and add starlette-wtf (#1415)
• fcc4c70 Use typing NoReturn (#1412)
• 7d79ad9 Fix md5_hexdigest wrapper on FIPS enabled systems (#1410)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #68.