build(deps): bump python-multipart from 0.0.27 to 0.0.31 in /samples/server/petstore/python-fastapi

Closed
DE
4mo ago
+1-1

Bumps python-multipart from 0.0.27 to 0.0.31.

Release notes

Sourced from python-multipart's releases.

Version 0.0.31

What's Changed

Full Changelog: https://github.com/Kludex/python-multipart/compare/0.0.30...0.0.31

Version 0.0.30

What's Changed

Full Changelog: https://github.com/Kludex/python-multipart/compare/0.0.29...0.0.30

Version 0.0.29

What's Changed

Full Changelog: https://github.com/Kludex/python-multipart/compare/0.0.28...0.0.29

Version 0.0.28

What's Changed

Full Changelog: https://github.com/Kludex/python-multipart/compare/0.0.27...0.0.28

Changelog

Sourced from python-multipart's changelog.

0.0.31 (2026-06-04)

  • Speed up multipart header parsing and callback dispatch #295.
  • Bound header field name size before validating #296.
  • Validate Content-Length is non-negative in parse_form #297.

0.0.30 (2026-05-31)

  • Parse application/x-www-form-urlencoded bodies per the WHATWG URL standard, treating only & as a field separator #290.
  • Ignore RFC 2231/5987 extended parameters (name*, filename*) in parse_options_header, keeping the plain parameter authoritative per RFC 7578 §4.2 #291.

0.0.29 (2026-05-17)

  • Handle malformed RFC 2231 continuations in parse_options_header #270.

0.0.28 (2026-05-10)

  • Speed up partial-boundary tail scan via bytes.find #281.
  • Cap multipart boundary length at 256 bytes #282.
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Summary by cubic

Upgrade python-multipart from 0.0.27 to 0.0.31 in the Python FastAPI petstore sample to improve multipart/form parsing and tighten validation. This reduces parsing overhead and aligns urlencoded parsing with the WHATWG standard.

  • Dependencies
    • Updated samples/server/petstore/python-fastapi/requirements.txt.
    • Gains: faster header parsing and stricter checks (header name size, boundary cap, non‑negative Content-Length); urlencoded parsing uses only &, ignores RFC 2231 extended params.