Relax hard-pinning of starlette

[dhirschfeld]

starlette is up to 0.13.4 now.

Unless a specific patch release is actually a hard requirement it's more user-friendly to pin to a compatible release so as to automatically benefit from bug/security fixes.

[codecov]

Codecov Report

Merging #1555 into master will not change coverage.
The diff coverage is n/a.

@@            Coverage Diff            @@
##            master     #1555   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files          230       230           
  Lines         6862      6862           
=========================================
  Hits          6862      6862           

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 072c2bc...d1459de. Read the comment docs.

[tiangolo]

Thanks! Yep, the problem is that as FastAPI is very tightly integrated with Starlette, there could be (and have been) breaking changes very easily, even for patch releases 😔

For Pydantic it's possible to have more relaxed pinning mainly because Pydantic runs all of FastAPI's tests as part of its own CI tests.

On the other hand, I'm thinking of migrating from Flit to Poetry, that way I could set up Dependabot to make it send PRs for each new version.

But for the time being, I have to keep the strict pinning...

Anyway, thanks for your contribution! And for all the management in Conda Forge! 🙇 🚀