Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Dec 19, 2024

Bumps aiohttp from 3.8.6 to 3.11.11.

Release notes

Sourced from aiohttp's releases.

3.11.11

Bug fixes

  • Updated :py:meth:~aiohttp.ClientSession.request to reuse the quote_cookie setting from ClientSession._cookie_jar when processing cookies parameter. -- by :user:Cycloctane.

    Related issues and pull requests on GitHub: #10093.

  • Fixed type of SSLContext for some static type checkers (e.g. pyright).

    Related issues and pull requests on GitHub: #10099.

  • Updated :meth:aiohttp.web.StreamResponse.write annotation to also allow :class:bytearray and :class:memoryview as inputs -- by :user:cdce8p.

    Related issues and pull requests on GitHub: #10154.

  • Fixed a hang where a connection previously used for a streaming download could be returned to the pool in a paused state. -- by :user:javitonino.

    Related issues and pull requests on GitHub: #10169.

Features

  • Enabled ALPN on default SSL contexts. This improves compatibility with some proxies which don't work without this extension. -- by :user:Cycloctane.

    Related issues and pull requests on GitHub: #10156.

... (truncated)

Changelog

Sourced from aiohttp's changelog.

3.11.11 (2024-12-18)

Bug fixes

  • Updated :py:meth:~aiohttp.ClientSession.request to reuse the quote_cookie setting from ClientSession._cookie_jar when processing cookies parameter. -- by :user:Cycloctane.

    Related issues and pull requests on GitHub: :issue:10093.

  • Fixed type of SSLContext for some static type checkers (e.g. pyright).

    Related issues and pull requests on GitHub: :issue:10099.

  • Updated :meth:aiohttp.web.StreamResponse.write annotation to also allow :class:bytearray and :class:memoryview as inputs -- by :user:cdce8p.

    Related issues and pull requests on GitHub: :issue:10154.

  • Fixed a hang where a connection previously used for a streaming download could be returned to the pool in a paused state. -- by :user:javitonino.

    Related issues and pull requests on GitHub: :issue:10169.

Features

  • Enabled ALPN on default SSL contexts. This improves compatibility with some proxies which don't work without this extension. -- by :user:Cycloctane.

... (truncated)

Commits
  • 8aaaba3 Release 3.11.11 (#10181)
  • db56d74 [PR #10171/5185f93 backport][3.11] Stream unpauses protocol before releasing ...
  • 8c96a62 [PR #10093/7b5d54a backport][3.11] Use quote_cookie setting from ClientSess...
  • c80be67 [PR #10151/7c12b1a9 backport][3.11] Fix infinite callback loop when time is n...
  • 3680479 [PR #10156/00700458 backport][3.11] Add ALPN extension to client SSL Context ...
  • 7f38913 [PR #10154/3f07b1a3 backport][3.11] Update StreamResponse.write annotation fo...
  • b770b1a Fix type of SSLContext for some static type checkers (#10099) (#10145)
  • 489b664 [PR #10138/dbd77ad6 backport][3.11] Bump sphinx to 8.1.3 along with required ...
  • 87f0f48 Bump actions/cache from 4.1.2 to 4.2.0 (#10136)
  • 7b86843 [PR #10131/7f92bebb backport][3.11] Bump Python version for benchmarks to 3.1...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [aiohttp](https://github.com/aio-libs/aiohttp) from 3.8.6 to 3.11.11.
- [Release notes](https://github.com/aio-libs/aiohttp/releases)
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](aio-libs/aiohttp@v3.8.6...v3.11.11)

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Dec 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants