📝 Leaner URL-encoded form parsing Starlette 1.10.0 parses URL-encoded forms with less memory and CPU, no longer drops the last field when a stream ends early, and lets you compare FormData that holds several uploads under one key. uv pip install starlette==1.10.0 Forms with many fields parse faster and use less memory (#3724). FormParser builds each field in the parser callbacks instead of queuein…
This release streams TestClient response bodies, so client.stream() returns before the application finishes. It also escapes path delimiters when building URLs, matches host names case-insensitively, and keeps every existing Vary header. Changed Stream TestClient response bodies, so client.stream() returns before the application finishes. Closing an unfinished streamed response now cancels the app…
This release adds HTTP 103 Early Hints, preserves response trailers through GZipMiddleware, and stops FileResponse transfers when clients disconnect. Starlette now requires Python 3.11. Added Add Request.send_early_hints() for HTTP 103 Early Hints through the ASGI http.response.early_hint extension #3435. Changed Require Python 3.11 or later, dropping support for Python 3.10 #3592. Exclude native…
This release adds experimental OpenTelemetry tracing, HTTP QUERY support, and response trailers in TestClient. Starlette now requires AnyIO 4. WarningOpenTelemetryMiddleware is experimental. Its API and emitted telemetry may change in minor releases without a deprecation period. Added Add experimental OpenTelemetryMiddleware for HTTP server spans, with URL exclusions and custom tracer providers #3…
What's Changed Add max_body_size to Starlette and route classes by @Kludex in #3431 Expose http.response.debug info via response extensions by @y2kbugger in #3130 New Contributors @y2kbugger made their first contribution in #3130 Full Changelog: 1.5.1...1.6.0
What's Changed Reject inverted single-byte Range like bytes=5-4 by @nikolauspschuetz in #3389 Limit FileResponse to 100 ranges by @Kludex in #3430 Full Changelog: 1.5.0...1.5.1
This release is all about giving GZipMiddleware some love. 🗜️ What's Changed Add exclude_content_types parameter to GZipMiddleware by @Kludex in #3418 Flush GZip output for each streamed chunk by @Kludex in #3419 Skip compression of partial responses in GZipMiddleware by @Kludex in #3420 Expand default excluded content types in GZipMiddleware by @Kludex in #3421 Full Changelog: 1.4.1...1.5.0
What's Changed Default thread_minimum_size in GZipResponder by @Kludex in #3415 Full Changelog: 1.4.0...1.4.1
What's Changed Lazily allocate GZipMiddleware compression resources by @Kludex in #3407 Use zlib.compressobj instead of GzipFile in GZipMiddleware by @Kludex in #3411 Offload large GZip compression by @Kludex in #3410 New Contributors @benberryallwood made their first contribution in #3334 @lkk7 made their first contribution in #3359 Full Changelog: 1.3.1...1.4.0
What's Changed Use StarletteDeprecationWarning instead of DeprecationWarning by @Kludex in #3119 Enforce max_fields and max_part_size in FormParser by @Kludex in #3329 Enforce FormParser limits in parser callbacks by @Kludex in #3331 Full Changelog: 1.3.0...1.3.1
What's Changed Clamp oversized suffix ranges in FileResponse by @jiyujie2006 in #3307 Catch OSError alongside MultiPartException when closing temp files by @N3XT3R1337 in #3191 Add httpx2 to the full extra by @Kludex in #3323 Adjust testclient typing and warnings by @waketzheng in #3322 Fix IndexError in URL.replace() on a URL with no authority by @LeSingh1 in #3317 Annotate URLPath protocol param…
What's Changed Use httpx2 for type checking in the testclient module by @leifwar in #3304 Add assert error for requires() when request param is not Request type by @KeeganOP in #3298 New Contributors @leifwar made their first contribution in #3304 @diskeu made their first contribution in #3243 @KeeganOP made their first contribution in #3298 Full Changelog: 1.2.0...1.2.1
What's Changed Support httpx2 in the test client by @Kludex in #3291 Full Changelog: 1.1.0...1.2.0
What's Changed Use "application/octet-stream" as the FileResponse media type fallback by @ATOM00blue in #3283 Only dispatch standard HTTP verbs in HTTPEndpoint by @Kludex in #3286 Reject absolute paths in StaticFiles.lookup_path by @Kludex in #3287 New Contributors @ATOM00blue made their first contribution in #3283 Full Changelog: 1.0.1...1.1.0
What's Changed Ignore malformed Host header when constructing request.url by @Kludex in #3279 Full Changelog: 1.0.0...1.0.1
Starlette 1.0 is here! 🎉 After nearly eight years since its creation, Starlette has reached its first stable release. A special thank you to @lovelydinosaur, the creator of Starlette, Uvicorn, HTTPX and MkDocs, whose work helped to lay the foundation for the modern async Python ecosystem. 🙏 Thank you to @adriangb, @graingert, @agronholm, @florimondmanca, @aminalaee, @tiangolo, @alex-oleshkevich, @…
We're ready! 🚀 The first release candidate for Starlette 1.0 is here! After years on ZeroVer, we're finally making the jump. This release removes all deprecated features marked for 1.0.0, along with some last-minute bug fixes. A special thank you to @lovelydinosaur, the creator of Starlette, Uvicorn, HTTPX and MkDocs, whose work helped to lay the foundation for the modern async Python ecosystem. 🙏…
What's Changed Only use typing_extensions in older Python versions by @Kludex in #3109 Full Changelog: 0.52.0...0.52.1
In this release, State can be accessed using dictionary-style syntax for improved type safety (#3036). from collections.abc import AsyncIterator from contextlib import asynccontextmanager from typing import TypedDict import httpx from starlette.applications import Starlette from starlette.requests import Request class State(TypedDict): http_client: httpx.AsyncClient @asynccontextmanager async def…