fix(deps): bump sse-starlette from 3.4.11 to 3.5.0

[dependabot]

Bumps sse-starlette from 3.4.11 to 3.5.0.

Release notes

Sourced from sse-starlette's releases.

v3.5.0

Fixed

• A stopped uvicorn server no longer cancels SSE streams of later servers in the same process (#211, regression since 3.1.1). Typical trigger: test suites starting a real server per test.

Behaviour change

• AppStatus.should_exit is no longer set when sse-starlette detects uvicorn's own Server.should_exit (fallback path, e.g. uvicorn "module:app"). Streams still close on shutdown. If you read AppStatus.should_exit to detect shutdown, use shutdown_event instead.
• A real SIGTERM/SIGINT still sets AppStatus.should_exit process-wide; see README "Testing" if your tests send real signals to an in-process server.

Upgrade note

• If you called AppStatus.disable_automatic_graceful_drain() only to work around #211, remove it to get automatic stream draining back.

What's Changed

• fix(shutdown): stop stopped uvicorn servers from cancelling later SSE streams (#211) by @​sysid in sysid/sse-starlette#212

Full Changelog: sysid/sse-starlette@v3.4.11...v3.5.0

Commits

• 1705b2d Bump version to 3.5.0
• 16179fd Merge pull request #212 from sysid/fix/issue211
• 3821353 fix(shutdown): re-resolve uvicorn server on every watcher poll
• 6925c68 fix(tests): import httpx2 instead of removed httpx dependency
• aa3b89e build(deps): bump starlette to 1.7.0 for anyio BlockingPortal deprecation
• 329a72c build(deps): bump anyio, autobahn, setuptools for security advisories
• d43a29f test(experimentation): assert consumer line counts in main thread
• 96afe01 fix(shutdown): stop latching AppStatus.should_exit from uvicorn state
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[Brad-Edwards]

Closing as superseded by the grouped dependency update in #436. The sse-starlette update is reasonable and its verification passes, but the same update is already included in the retained grouped PR.

Issue #439 (#439) tracks the needed dependency-lock and verification corrections in #436, together with the separate GitHub Actions corrections in #437. The required updates remain tracked; neither retained PR is being merged here.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.