chore(deps): bump starlette from 1.2.1 to 1.3.1

[SudipSinha]

Summary

Bump starlette from 1.2.1 to 1.3.1 via lockfile update.

Security fixes

• CVE-2026-54283 (HIGH): request.form() size limits silently ignored for application/x-www-form-urlencoded, enabling DoS
• CVE-2026-54282 (LOW): Unvalidated request path concatenated into authority poisons request.url.hostname

Note

The remaining Dependabot alert (CVE-2026-54293, nltk path traversal) has no fix available — all versions including 3.9.4 (latest) are affected.

🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (1)

• uv.lock is excluded by !**/*.lock

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 45607798-b69f-42fd-a712-83291d27934a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/bump-starlette-1.3.1

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

PR image build and manifest generation completed successfully!

📦 PR image: quay.io/trustyai/trustyai-service-python-ci:772884cf5bcdcbbb2c02f4c893b4f6e6c13af78a

🗂️ CI manifests

devFlags:
  manifests:
    - contextDir: config
      sourcePath: ''
      uri: https://api.github.com/repos/trustyai-explainability/trustyai-service-operator-ci/tarball/service-python-772884cf5bcdcbbb2c02f4c893b4f6e6c13af78a