Update dependency starlette to <0.41

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
starlette (changelog)	<0.40 -> <0.41

---

Release Notes

encode/starlette (starlette)

v0.40.0: Version 0.40.0

Compare Source

This release fixes a Denial of service (DoS) via multipart/form-data requests.

You can view the full security advisory:
GHSA-f96h-pmfr-66vw

Fixed

• Add max_part_size to MultiPartParser to limit the size of parts in multipart/form-data
  requests fd038f3.

v0.39.2: Version 0.39.2

Compare Source

Fixed

• Allow use of request.url_for when only "app" scope is available #​2672.
• Fix internal type hints to support python-multipart==0.0.12 #​2708.

---

Full Changelog: encode/starlette@0.39.1...0.39.2

v0.39.1: Version 0.39.1

Compare Source

Fixed

• Avoid regex re-compilation in responses.py and schemas.py #​2700.
• Improve performance of get_route_path by removing regular expression usage #​2701.
• Consider FileResponse.chunk_size when handling multiple ranges #​2703.
• Use token_hex for generating multipart boundary strings #​2702.

---

Full Changelog: encode/starlette@0.39.0...0.39.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.