Skip to content

fix: pin starlette dependency to >=1.1.0#184

Merged
jmesnil merged 1 commit into
a2aproject:mainfrom
jmesnil:pin-starlette-version
May 27, 2026
Merged

fix: pin starlette dependency to >=1.1.0#184
jmesnil merged 1 commit into
a2aproject:mainfrom
jmesnil:pin-starlette-version

Conversation

@jmesnil

@jmesnil jmesnil commented May 27, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Pin the starlette dependency to >=1.1.0 in both the codegen template and the generated Python SUT pyproject.toml
  • Previously the dependency was unpinned, accepting any version

Test plan

  • Python SUT uv sync resolves successfully with starlette 1.1.0
  • Java SUT TCK tests pass (242 passed, 99% compatibility)
  • Pre-commit hooks pass (ruff lint + unit tests)

🤖 Generated with Claude Code

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the dependency constraint for Starlette to >=1.1.0 in both the template and generated pyproject.toml files. However, as pointed out in the review, Starlette's current versioning is in the 0.x.y range, meaning a 1.1.0 release does not exist on PyPI and will cause dependency resolution to fail. It is recommended to adjust the constraint to a valid version, such as >=0.40.0.

"a2a-sdk[http-server,grpc,sqlite]>={{ a2a_python_sdk_version }}",
"packaging",
"starlette",
"starlette>=1.1.0",

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

Starlette does not have a 1.1.0 release on PyPI; its versioning is currently in the 0.x.y range (e.g., 0.45.x). Pinning to >=1.1.0 will cause dependency resolution to fail. If the intention was to pin to a recent version, use a valid 0.x.y version such as >=0.40.0.

    "starlette>=0.40.0",

@jmesnil jmesnil May 27, 2026

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@gemini-code-assist. You're wrong: https://pypi.org/project/starlette/1.1.0.

Next time you review dependencies, please check pypi.org to ensure you have the latest information available.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You are absolutely right, and I apologize for the error. My information regarding Starlette's versioning was outdated. Thank you for the correction and for pointing me to the current PyPI release.

@jmesnil jmesnil merged commit 29063fe into a2aproject:main May 27, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant