Skip to content

chore: bump fastapi to 0.133.1 and starlette to 1.0.1#6378

Open
lucasoshiro wants to merge 1 commit into
google:v1from
lucasoshiro:starlette
Open

chore: bump fastapi to 0.133.1 and starlette to 1.0.1#6378
lucasoshiro wants to merge 1 commit into
google:v1from
lucasoshiro:starlette

Conversation

@lucasoshiro

Copy link
Copy Markdown

Bump the starlette version, fixing these CVEs:

Link to Issue or Description of Change

1. Link to an existing issue (if applicable):

Apply the same version bump from 81add39 to v1, fixing these CVEs:
- CVE-2026-48710
- CVE-2026-48818
- CVE-2026-54283
@google-cla

google-cla Bot commented Jul 11, 2026

Copy link
Copy Markdown

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

@adk-bot adk-bot added the web [Component] This issue will be transferred to adk-web label Jul 11, 2026
@adk-bot

adk-bot commented Jul 11, 2026

Copy link
Copy Markdown
Collaborator

Response from ADK Triaging Agent

Hello @lucasoshiro, thank you for creating this PR to fix the security CVEs!

Before we can merge your changes, there are a couple of things that need to be addressed to align with our contribution guidelines:

  1. Contributor License Agreement (CLA): It looks like the CLA check has failed. Please visit Google's Contributor License Agreement to sign it.
  2. Testing Plan: Please include a testing plan section in your PR description outlining how you verified this change (e.g., ran unit tests or local builds).

These steps will help our reviewers process your PR much faster. Thank you!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

web [Component] This issue will be transferred to adk-web

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants