chore(deps-dev): update solana requirement from <0.40,>=0.36.0 to >=0.36.0,<0.41

[dependabot]

Updates the requirements on solana to permit the latest version.

Changelog

Sourced from solana's changelog.

[0.40.3] - 2026-08-26

Changed

• Websocket *_unsubscribe() helpers now also accept the request ID returned by the matching *_subscribe() helper, translating it to the server-assigned subscription ID once the subscription confirmation has been received. Server-assigned IDs are still resolved first, so passing recv()[0].result keeps working unchanged [(#701)](michaelhly/solana-py#701).

[0.40.2] - 2026-08-16

Changed

• BREAKING: Rename the mainnet-beta cluster to mainnet. Cluster is now Literal["devnet", "testnet", "mainnet"] and cluster_api_url returns https://api.mainnet.solana.com/, so cluster_api_url("mainnet-beta") no longer type-checks — use cluster_api_url("mainnet") instead [(#699)](michaelhly/solana-py#699).

Docs

• Add a get_priority_fee_estimate cookbook page [(#697)](michaelhly/solana-py#697).
• Update cookbook examples for the new dependency versions [(#696)](michaelhly/solana-py#696).

Dependencies

• Bump minimum versions of solders (>=0.28,<0.30), websockets (>=16.0), httpx2 (>=2.10.0), construct-typing (>=0.8.1,<0.9.0), and aiolimiter (>=1.2.1) [(#696)](michaelhly/solana-py#696), [(#699)](michaelhly/solana-py#699).

[0.40.1] - 2026-07-16

Fixed

• Serialize JSON-RPC requests with by_alias=True by default, so field aliases are used on the wire even when model_dump_json is called without arguments [(#693)](michaelhly/solana-py#693).

Removed

• Remove dead GetStakeActivation handling from solana.rpc.core — the API was removed in solders 0.28.0 [(#688)](michaelhly/solana-py#688).

Docs

• Add a third-party packages section with django-solana-payments [(#689)](michaelhly/solana-py#689).
• Add compute budget and priority fee guides, and remove the misleading offline transactions page [(#691)](michaelhly/solana-py#691).
• Fix missing docstrings in solana.models and spl.token.models [(#690)](michaelhly/solana-py#690).
• Clean up cookbook examples for getting test SOL, delegating/revoking token accounts, wrapped SOL, and priority fees [(#692)](michaelhly/solana-py#692).

Dependencies

• Relax solders to >=0.23,<0.29 [(#688)](michaelhly/solana-py#688).
• Remove the typing-extensions dependency [(#686)](michaelhly/solana-py#686).
• Bump actions/checkout from 6 to 7 [(#687)](michaelhly/solana-py#687).

[0.40.0] - 2026-06-27

Added

• Add AsyncClient.send_rpc_request(...) for custom JSON-RPC methods backed by Pydantic request serializers, result models, and an optional custom JSON-RPC error parser hook.
• Add transaction_details, rewards, and commitment parameters to AsyncClient.get_block [(#684)](michaelhly/solana-py#684).

... (truncated)

Commits

• 342df2f Bump version: 0.40.2 → 0.40.3
• 03fbe30 websocket: Make unsubscribe helpers accept the request ID returned by subscri...
• 62df6f2 Bump version: 0.40.1 → 0.40.2
• e23c151 update solders (#699)
• 3cb94cb add priority fee api docs (#697)
• 5a83add Update Deps (#696)
• a482908 Bump version: 0.40.0 → 0.40.1
• 41fce59 default by_alias (#693)
• bca73ac Optimize docs (#692)
• 3a398ea Add Compute budget docs and remove misleading docs (#691)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)