Python 3.7 is a decomissioned runtime. Tests are failing because of
language features not supported by this python version. Disable these
tests rather than backfixing.

Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>

…orm#405)

Python 3.7 is no longer supported so don't allow versions prior to
1.11.0 but allow 1.11.0 as Python 3.8 is still supported by the
framework.

…latform#413)

…dencies (GoogleCloudPlatform#411)

Today, release-please doesn't trigger a release for commits with chore: commit type.

We'd like to cut a release when updating dependencies that impacts the packaged artifact, so we'll instruct dependabot to use fix commit type instead of chore(deps) it uses today.

…m#410)

Co-authored-by: Daniel Lee <danielylee@google.com>

…m#408)

Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>

…atform#414)

…orm#427)

…6-161 (GoogleCloudPlatform#423)

Starlette <=1.0.0 is vulnerable to a missing Host header validation that poisons request.url.path and bypasses path-based security checks (GHSA-86qp-5c8j-p5mr / PYSEC-2026-161). The fix only landed in 1.0.1,
which requires Python >=3.10.

Constraint is split by interpreter version so Python 3.8/3.9 users keep the existing 0.x line (no upstream fix available) while Python 3.10+ pulls the patched 1.x line.

Co-authored-by: Daniel Lee <danielylee@google.com>

Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>