Updates the requirements on
[openfga-sdk](https://github.com/openfga/python-sdk) and
[starlette](https://github.com/Kludex/starlette) to permit the latest
version.
Updates `openfga-sdk` from 0.9.9 to 0.10.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/openfga/python-sdk/releases">openfga-sdk's
releases</a>.</em></p>
<blockquote>
<h2>v0.10.0</h2>
<h3><a
href="https://github.com/openfga/python-sdk/compare/v0.9.9...v0.10.0">0.10.0</a>
(2026-03-24)</h3>
<ul>
<li>feat: add <code>execute_api_request</code> and
<code>execute_streamed_api_request</code> methods to
<code>OpenFgaClient</code> and <code>OpenFgaApi</code> for making
arbitrary HTTP requests to any OpenFGA API endpoint with full auth,
retry, and telemetry support (<a
href="https://redirect.github.com/openfga/python-sdk/issues/252">#252</a>)
- thanks <a
href="https://github.com/kcbiradar"><code>@​kcbiradar</code></a></li>
<li>Add py.typed marker for better mypy support <a
href="https://redirect.github.com/openfga/python-sdk/issues/251">#251</a>
- thanks <a
href="https://github.com/manuel-lang"><code>@​manuel-lang</code></a></li>
</ul>
<h4>Breaking Changes</h4>
<ul>
<li>The <code>_return_http_data_only</code>,
<code>_preload_content</code>, <code>_request_auth</code>,
<code>async_req</code>, and <code>_request_timeout</code> kwargs have
been removed from all <code>OpenFgaApi</code> and
<code>SyncOpenFgaApi</code> endpoint methods. These were internal
implementation details not intended for external use.
<code>_return_http_data_only</code> is now hardcoded to
<code>True</code>; all endpoint methods return the deserialized response
object directly. Users relying on <code>_with_http_info</code> methods
returning a <code>(data, status, headers)</code> tuple should use
<code>execute_api_request</code> instead.</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>chore: mark integration tests by <a
href="https://github.com/SoulPancake"><code>@​SoulPancake</code></a> in
<a
href="https://redirect.github.com/openfga/python-sdk/pull/248">openfga/python-sdk#248</a></li>
<li>chore: fix readme section for error handling and contributing guide
by <a
href="https://github.com/SoulPancake"><code>@​SoulPancake</code></a> in
<a
href="https://redirect.github.com/openfga/python-sdk/pull/249">openfga/python-sdk#249</a></li>
<li>chore(deps): bump the dependencies group with 5 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/openfga/python-sdk/pull/250">openfga/python-sdk#250</a></li>
<li>Add py.typed marker for better mypy support by <a
href="https://github.com/manuel-lang"><code>@​manuel-lang</code></a> in
<a
href="https://redirect.github.com/openfga/python-sdk/pull/251">openfga/python-sdk#251</a></li>
<li>chore(deps): bump the uv group across 1 directory with 2 updates by
<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/openfga/python-sdk/pull/254">openfga/python-sdk#254</a></li>
<li>chore(deps): bump the dependencies group with 3 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/openfga/python-sdk/pull/255">openfga/python-sdk#255</a></li>
<li>fix: Socket Badge link in README.md by <a
href="https://github.com/manuel-lang"><code>@​manuel-lang</code></a> in
<a
href="https://redirect.github.com/openfga/python-sdk/pull/257">openfga/python-sdk#257</a></li>
<li>chore(deps): bump the dependencies group with 4 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/openfga/python-sdk/pull/259">openfga/python-sdk#259</a></li>
<li>ci: pr conventional commits validator by <a
href="https://github.com/SoulPancake"><code>@​SoulPancake</code></a> in
<a
href="https://redirect.github.com/openfga/python-sdk/pull/260">openfga/python-sdk#260</a></li>
<li>feat: add execute_api_request method for calling arbitrary endpoints
by <a href="https://github.com/kcbiradar"><code>@​kcbiradar</code></a>
in <a
href="https://redirect.github.com/openfga/python-sdk/pull/252">openfga/python-sdk#252</a></li>
<li>chore(release): v0.10.0 by <a
href="https://github.com/SoulPancake"><code>@​SoulPancake</code></a> in
<a
href="https://redirect.github.com/openfga/python-sdk/pull/261">openfga/python-sdk#261</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/kcbiradar"><code>@​kcbiradar</code></a>
made their first contribution in <a
href="https://redirect.github.com/openfga/python-sdk/pull/252">openfga/python-sdk#252</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/openfga/python-sdk/compare/v0.9.9...v0.10.0">https://github.com/openfga/python-sdk/compare/v0.9.9...v0.10.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/openfga/python-sdk/blob/main/CHANGELOG.md">openfga-sdk's
changelog</a>.</em></p>
<blockquote>
<h3><a
href="https://github.com/openfga/python-sdk/compare/v0.9.9...v0.10.0">0.10.0</a>
(2026-03-24)</h3>
<ul>
<li>feat: add <code>execute_api_request</code> and
<code>execute_streamed_api_request</code> methods to
<code>OpenFgaClient</code> and <code>OpenFgaApi</code> for making
arbitrary HTTP requests to any OpenFGA API endpoint with full auth,
retry, and telemetry support (<a
href="https://redirect.github.com/openfga/python-sdk/issues/252">#252</a>)
- thanks <a
href="https://github.com/kcbiradar"><code>@​kcbiradar</code></a></li>
</ul>
<h4>Breaking Changes</h4>
<ul>
<li>The <code>_return_http_data_only</code>,
<code>_preload_content</code>, <code>_request_auth</code>,
<code>async_req</code>, and <code>_request_timeout</code> kwargs have
been removed from all <code>OpenFgaApi</code> and
<code>SyncOpenFgaApi</code> endpoint methods. These were internal
implementation details not intended for external use.
<code>_return_http_data_only</code> is now hardcoded to
<code>True</code>; all endpoint methods return the deserialized response
object directly. Users relying on <code>_with_http_info</code> methods
returning a <code>(data, status, headers)</code> tuple should use
<code>execute_api_request</code> instead.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/openfga/python-sdk/commit/5a8cef42ae8f6ed87c4a5fe05a1ab0178364d6f6"><code>5a8cef4</code></a>
chore(release): v0.10.0 (<a
href="https://redirect.github.com/openfga/python-sdk/issues/261">#261</a>)</li>
<li><a
href="https://github.com/openfga/python-sdk/commit/33a3168cda9e541c1622da16ca21e678216b2c16"><code>33a3168</code></a>
feat: add execute_api_request method for calling arbitrary endpoints (<a
href="https://redirect.github.com/openfga/python-sdk/issues/252">#252</a>)</li>
<li><a
href="https://github.com/openfga/python-sdk/commit/ba2fda284c0ccf5823f9fb476e9467ed52a4c65d"><code>ba2fda2</code></a>
ci: pr conventional commits validator (<a
href="https://redirect.github.com/openfga/python-sdk/issues/260">#260</a>)</li>
<li><a
href="https://github.com/openfga/python-sdk/commit/4f89e717f1d92ad484c52a28404b3b84f78b73d1"><code>4f89e71</code></a>
chore(deps): bump the dependencies group with 4 updates (<a
href="https://redirect.github.com/openfga/python-sdk/issues/259">#259</a>)</li>
<li><a
href="https://github.com/openfga/python-sdk/commit/fc2de180e834c135ada9880ab71cbe3b94096808"><code>fc2de18</code></a>
fix: Socket Badge link in README.md (<a
href="https://redirect.github.com/openfga/python-sdk/issues/257">#257</a>)</li>
<li><a
href="https://github.com/openfga/python-sdk/commit/0b56a83ac28b45d14a0409b4bec02290ef8c89ab"><code>0b56a83</code></a>
chore(deps): bump the dependencies group with 3 updates (<a
href="https://redirect.github.com/openfga/python-sdk/issues/255">#255</a>)</li>
<li><a
href="https://github.com/openfga/python-sdk/commit/03c6bd82f00835176ae0e44f5055b3198e03e8ce"><code>03c6bd8</code></a>
chore(deps): bump the uv group across 1 directory with 2 updates (<a
href="https://redirect.github.com/openfga/python-sdk/issues/254">#254</a>)</li>
<li><a
href="https://github.com/openfga/python-sdk/commit/8cc5f26a98c47d401181fbed138172ec4f7d4abd"><code>8cc5f26</code></a>
Add py.typed marker for better mypy support (<a
href="https://redirect.github.com/openfga/python-sdk/issues/251">#251</a>)</li>
<li><a
href="https://github.com/openfga/python-sdk/commit/9a6755941610d49ae5f4e0821ad83348eeb28244"><code>9a67559</code></a>
chore(deps): bump the dependencies group with 5 updates (<a
href="https://redirect.github.com/openfga/python-sdk/issues/250">#250</a>)</li>
<li><a
href="https://github.com/openfga/python-sdk/commit/9cafaa5d96df5d3ad568dd075c7eb81d876b4f0d"><code>9cafaa5</code></a>
chore: fix readme section for error handling and contributing guide (<a
href="https://redirect.github.com/openfga/python-sdk/issues/249">#249</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/openfga/python-sdk/compare/v0.9.9...v0.10.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `starlette` to 1.0.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/Kludex/starlette/releases">starlette's
releases</a>.</em></p>
<blockquote>
<h2>Version 1.0.0</h2>
<p>Starlette 1.0 is here! 🎉</p>
<p>After nearly eight years since its creation, Starlette has reached
its first stable release.</p>
<p>A special thank you to <a
href="https://github.com/lovelydinosaur"><code>@​lovelydinosaur</code></a>,
the creator of Starlette, Uvicorn, HTTPX and MkDocs, whose work helped
to lay the foundation for the modern async Python ecosystem. 🙏</p>
<p>Thank you to <a
href="https://github.com/adriangb"><code>@​adriangb</code></a>, <a
href="https://github.com/graingert"><code>@​graingert</code></a>, <a
href="https://github.com/agronholm"><code>@​agronholm</code></a>, <a
href="https://github.com/florimondmanca"><code>@​florimondmanca</code></a>,
<a href="https://github.com/aminalaee"><code>@​aminalaee</code></a>, <a
href="https://github.com/tiangolo"><code>@​tiangolo</code></a>, <a
href="https://github.com/alex-oleshkevich"><code>@​alex-oleshkevich</code></a>,
<a href="https://github.com/abersheeran"><code>@​abersheeran</code></a>,
and <a href="https://github.com/uSpike"><code>@​uSpike</code></a> for
helping make Starlette what it is today. And to all my sponsors -
especially <a
href="https://github.com/tiangolo"><code>@​tiangolo</code></a>, <a
href="https://github.com/huggingface"><code>@​huggingface</code></a>,
and <a
href="https://github.com/elevenlabs"><code>@​elevenlabs</code></a> -
thank you for your support!</p>
<p>Thank you to all <a
href="https://github.com/encode/starlette/graphs/contributors">290+
contributors</a> who have shaped Starlette over the years! ❤️</p>
<p>Read more on the <a
href="https://marcelotryle.com/blog/2026/03/22/starlette-10-is-here/">blog
post</a>.</p>
<p>Check out the full release notes at <a
href="https://www.starlette.io/release-notes/#100-march-22-2026">https://www.starlette.io/release-notes/#100-march-22-2026</a></p>
<hr />
<p><strong>Full Changelog</strong>: <a
href="https://github.com/encode/starlette/compare/1.0.0rc1...1.0.0">https://github.com/encode/starlette/compare/1.0.0rc1...1.0.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/Kludex/starlette/blob/main/docs/release-notes.md">starlette's
changelog</a>.</em></p>
<blockquote>
<h2>1.0.0 (March 22, 2026)</h2>
<p>Starlette 1.0 is here!</p>
<p>After nearly eight years since its creation, Starlette has reached
its first stable release.
Thank you to everyone who tested the release candidate and reported
issues.</p>
<p>You can read more on the <a
href="https://marcelotryle.com/blog/2026/03/22/starlette-10-is-here/">blog
post</a>.</p>
<h4>Added</h4>
<ul>
<li>Track session access and modification in
<code>SessionMiddleware</code> <a
href="https://redirect.github.com/encode/starlette/pull/3166">#3166</a>.</li>
</ul>
<h4>Fixed</h4>
<ul>
<li>Handle websocket denial responses in <code>StreamingResponse</code>
and <code>FileResponse</code> <a
href="https://redirect.github.com/encode/starlette/pull/3189">#3189</a>.</li>
<li>Use <code>bytearray</code> for field accumulation in
<code>FormParser</code> <a
href="https://redirect.github.com/encode/starlette/pull/3179">#3179</a>.</li>
<li>Move <code>parser.finalize()</code> inside try/except in
<code>MultiPartParser.parse()</code> <a
href="https://redirect.github.com/encode/starlette/pull/3153">#3153</a>.</li>
</ul>
<h2>1.0.0rc1 (February 23, 2026)</h2>
<p>We're ready! I'm thrilled to announce the first release candidate for
Starlette 1.0.</p>
<p>Starlette was created in June 2018 by Tom Christie, and has been on
ZeroVer for years. Today, it's downloaded
almost <a href="https://pypistats.org/packages/starlette">10 million
times a day</a>, serves as the foundation for FastAPI,
and has inspired many other frameworks. In the age of AI, Starlette
continues to play an important role as a
dependency of the Python MCP SDK.</p>
<p>This release focuses on removing deprecated features that were marked
for removal in 1.0.0, along with some
last minute bug fixes. It's a release candidate, so we can gather
feedback from the community before the final
1.0.0 release soon.</p>
<p>A huge thank you to all the contributors who have helped make
Starlette what it is today.
In particular, I'd like to recognize:</p>
<ul>
<li><a href="https://github.com/lovelydinosaur">Kim Christie</a> - The
original creator of Starlette, Uvicorn, and MkDocs, and the
current maintainer of HTTPX. Kim's work helped lay the foundation for
the modern async Python ecosystem.</li>
<li><a href="https://github.com/adriangb">Adrian Garcia Badaracco</a> -
One of the smartest people I know, whom I have the pleasure of working
with at Pydantic.</li>
<li><a href="https://github.com/graingert">Thomas Grainger</a> - My
async teacher, always ready to help with questions.</li>
<li><a href="https://github.com/agronholm">Alex Grönholm</a> - Another
async mentor, always prompt to help with questions.</li>
<li><a href="https://github.com/florimondmanca">Florimond Manca</a> -
Always present in the early days of both Starlette and Uvicorn, and
helped a lot in the ecosystem.</li>
<li><a href="https://github.com/aminalaee">Amin Alaee</a> - Contributed
a lot with file-related PRs.</li>
<li><a href="https://github.com/tiangolo">Sebastián Ramírez</a> -
Maintains FastAPI upstream, and always in contact to help with upstream
issues.</li>
<li><a href="https://github.com/alex-oleshkevich">Alex Oleshkevich</a> -
Helped a lot on templates and many discussions.</li>
<li><a href="https://github.com/abersheeran">abersheeran</a> - My go-to
person when I need help on many subjects.</li>
</ul>
<p>I'd also like to thank my sponsors for their support. A special
thanks to
<a href="https://github.com/tiangolo"><code>@​tiangolo</code></a>, <a
href="https://github.com/huggingface"><code>@​huggingface</code></a>,
and <a
href="https://github.com/elevenlabs"><code>@​elevenlabs</code></a> for
their generous sponsorship, and to all my other sponsors:</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/Kludex/starlette/commit/0e88e92b592bfa11fd92e331869a8d49ba34b541"><code>0e88e92</code></a>
Version 1.0.0 (<a
href="https://redirect.github.com/Kludex/starlette/issues/3178">#3178</a>)</li>
<li><a
href="https://github.com/Kludex/starlette/commit/9ee951980bae776103715b66305f807d9e8245da"><code>9ee9519</code></a>
Handle websocket denial responses in streaming and file responses (<a
href="https://redirect.github.com/Kludex/starlette/issues/3189">#3189</a>)</li>
<li><a
href="https://github.com/Kludex/starlette/commit/a0bcc26612c9c344737cd59fb4ef847326adf37a"><code>a0bcc26</code></a>
chore(deps-dev): bump black from 26.1.0 to 26.3.1 (<a
href="https://redirect.github.com/Kludex/starlette/issues/3183">#3183</a>)</li>
<li><a
href="https://github.com/Kludex/starlette/commit/79b3f26a9a38791af14d15c058c0e8c54cd9b11e"><code>79b3f26</code></a>
chore(deps-dev): bump the python-packages group with 7 updates (<a
href="https://redirect.github.com/Kludex/starlette/issues/3168">#3168</a>)</li>
<li><a
href="https://github.com/Kludex/starlette/commit/789b9269fd3f3d6ab28781624f151e44432463cd"><code>789b926</code></a>
Use <code>bytearray</code> for field accumulation in
<code>FormParser</code> (<a
href="https://redirect.github.com/Kludex/starlette/issues/3179">#3179</a>)</li>
<li><a
href="https://github.com/Kludex/starlette/commit/a1fd9d822dc49857e9f39ea5b0970aeed6c8f669"><code>a1fd9d8</code></a>
docs: fix typo in routing.md (<a
href="https://redirect.github.com/Kludex/starlette/issues/3176">#3176</a>)</li>
<li><a
href="https://github.com/Kludex/starlette/commit/c14d0f778010940ac40f97dbc23d8dbf99e87e23"><code>c14d0f7</code></a>
Document session cookie security flags (<a
href="https://redirect.github.com/Kludex/starlette/issues/3169">#3169</a>)</li>
<li><a
href="https://github.com/Kludex/starlette/commit/c2e28786d1e73da045fa84e622f65c314a7171c1"><code>c2e2878</code></a>
Move parser.finalize() inside try/except in MultiPartParser.parse() (<a
href="https://redirect.github.com/Kludex/starlette/issues/3153">#3153</a>)</li>
<li><a
href="https://github.com/Kludex/starlette/commit/89630a8658ab8aac7cca8a0d6ec4b78dcc2fcb46"><code>89630a8</code></a>
chore(deps): bump the github-actions group with 3 updates (<a
href="https://redirect.github.com/Kludex/starlette/issues/3167">#3167</a>)</li>
<li><a
href="https://github.com/Kludex/starlette/commit/4647e532bbed7a5f60c9972ddba3f5fb4a79e1f9"><code>4647e53</code></a>
Track session access and modification in <code>SessionMiddleware</code>
(<a
href="https://redirect.github.com/Kludex/starlette/issues/3166">#3166</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/Kludex/starlette/compare/0.52.1...1.0.0">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Evangelos Kassos <github@evangeloskassos.com>