Version 0.44.0

Added

• Add max_part_size parameter to Request.form() by @iudeen in #2815
• Add client parameter to TestClient by @iudeen in #2810

New Contributors

• @iudeen made their first contribution in #2815

Full Changelog: 0.43.0...0.44.0

Version 0.43.0

Removed

• Remove deprecated allow_redirects argument from TestClient #2808.

Added

• Make UUID path parameter conversion more flexible #2806.

---

New Contributors

• @AbduazizZiyodov made their first contribution in #2799
• @edthrn made their first contribution in #2806

Full Changelog: 0.42.0...0.43.0

Version 0.42.0

Added

• Raise ClientDisconnect on StreamingResponse #2732.

Fixed

• Use ETag from headers when parsing If-Range in FileResponse #2761.
• Follow directory symlinks in StaticFiles when follow_symlinks=True #2711.
• Bump minimum python-multipart version to 0.0.18 0ba8395.
• Bump minimum httpx version to 0.27.0 #2773.

---

New Contributors

• @logan-connolly made their first contribution in #2763
• @eltoder made their first contribution in #2768
• @hanxi made their first contribution in #2711
• @viccie30 made their first contribution in #2761
• @dbowring made their first contribution in #2782
• @lealre made their first contribution in #2793

Full Changelog: 0.41.3...0.42.0

Version 0.41.3

Fixed

• Exclude the query parameters from the scope[raw_path] on the TestClient #2716.
• Replace dict by Mapping on HTTPException.headers #2749.
• Correct middleware argument passing and improve factory pattern #2752.

---

Full Changelog: 0.41.2...0.41.3

Version 0.41.2

What's Changed

• Revert bump on python-multipart by @Kludex in #2737

---

Full Changelog: 0.41.1...0.41.2

Version 0.41.1

What's Changed

• Change python-multipart import to python_multipart by @Kludex in #2733
• Bump minimum python-multipart version to 0.0.13 by @Kludex in #2734

---

Full Changelog: 0.41.0...0.41.1

Version 0.41.0

Added

• Allow to raise HTTPException before websocket.accept() #2725

Version 0.40.0

This release fixes a Denial of service (DoS) via multipart/form-data requests.

You can view the full security advisory:
GHSA-f96h-pmfr-66vw

Fixed

• Add max_part_size to MultiPartParser to limit the size of parts in multipart/form-data
  requests fd038f3.

Version 0.39.2

Fixed

• Allow use of request.url_for when only "app" scope is available #2672.
• Fix internal type hints to support python-multipart==0.0.12 #2708.

---

Full Changelog: 0.39.1...0.39.2

Version 0.39.1

Fixed

• Avoid regex re-compilation in responses.py and schemas.py #2700.
• Improve performance of get_route_path by removing regular expression usage #2701.
• Consider FileResponse.chunk_size when handling multiple ranges #2703.
• Use token_hex for generating multipart boundary strings #2702.

---

Full Changelog: 0.39.0...0.39.1