Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 28, 2025

Bumps aiohttp from 3.11.13 to 3.11.18.

Release notes

Sourced from aiohttp's releases.

3.11.18

Bug fixes

  • Disabled TLS in TLS warning (when using HTTPS proxies) for uvloop and newer Python versions -- by :user:lezgomatt.

    Related issues and pull requests on GitHub: #7686.

  • Fixed reading fragmented WebSocket messages when the payload was masked -- by :user:bdraco.

    The problem first appeared in 3.11.17

    Related issues and pull requests on GitHub: #10764.


3.11.17

Miscellaneous internal changes

  • Optimized web server performance when access logging is disabled by reducing time syscalls -- by :user:bdraco.

    Related issues and pull requests on GitHub: #10713.

  • Improved web server performance when connection can be reused -- by :user:bdraco.

    Related issues and pull requests on GitHub: #10714.

  • Improved performance of the WebSocket reader -- by :user:bdraco.

    Related issues and pull requests on GitHub: #10740.

... (truncated)

Changelog

Sourced from aiohttp's changelog.

3.11.18 (2025-04-20)

Bug fixes

  • Disabled TLS in TLS warning (when using HTTPS proxies) for uvloop and newer Python versions -- by :user:lezgomatt.

    Related issues and pull requests on GitHub: :issue:7686.

  • Fixed reading fragmented WebSocket messages when the payload was masked -- by :user:bdraco.

    The problem first appeared in 3.11.17

    Related issues and pull requests on GitHub: :issue:10764.


3.11.17 (2025-04-19)

Miscellaneous internal changes

  • Optimized web server performance when access logging is disabled by reducing time syscalls -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:10713.

  • Improved web server performance when connection can be reused -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:10714.

... (truncated)

Commits
  • 2be611a Release 3.11.18 (#10773)
  • 58b512c [PR #10770/a88a2436 backport][3.11] Increase benchmark timeout to 9 minutes i...
  • a003df3 [PR #10726/feff48d backport][3.11] Disable TLS in TLS warning for uvloop (#10...
  • f69333d [PR #10764/e0cc020 backport][3.11] Fix WebSocket reader with fragmented maske...
  • 83690e5 Increment version to 3.11.18.dev0 (#10758)
  • 11be7e2 Release 3.11.17 (#10756)
  • 0615314 [PR #10752/07590cd2 backport][3.11] Add a test to the WebSocket parser for se...
  • 8b9888d [PR #10749/d702fb30 backport][3.11] Add compressed binary WebSocket roundtrip...
  • 1d00bd2 [PR #10744/23d3ee06 backport][3.11] Refactor WebSocket reader to avoid freque...
  • 099cc0c [PR #10740/0d21d8d backport][3.11] Refactor WebSocket reader to avoid creatin...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [aiohttp](https://github.com/aio-libs/aiohttp) from 3.11.13 to 3.11.18.
- [Release notes](https://github.com/aio-libs/aiohttp/releases)
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](aio-libs/aiohttp@v3.11.13...v3.11.18)

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-version: 3.11.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Apr 28, 2025
Copy link
Contributor Author

dependabot bot commented on behalf of github Jun 2, 2025

Superseded by #320.

@dependabot dependabot bot closed this Jun 2, 2025
@dependabot dependabot bot deleted the dependabot/pip/aiohttp-3.11.18 branch June 2, 2025 02:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants