Skip to content
This repository was archived by the owner on Dec 22, 2024. It is now read-only.

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 25, 2024

Bumps aiohttp from 3.10.8 to 3.11.7.

Release notes

Sourced from aiohttp's releases.

3.11.7

Bug fixes

  • Fixed the HTTP client not considering the connector's force_close value when setting the Connection header -- by :user:bdraco.

    Related issues and pull requests on GitHub: #10003.

Miscellaneous internal changes

  • Improved performance of serializing HTTP headers -- by :user:bdraco.

    Related issues and pull requests on GitHub: #10014.


3.11.6

Bug fixes

  • Restored the force_close method to the ResponseHandler -- by :user:bdraco.

    Related issues and pull requests on GitHub: #9997.


3.11.5

Bug fixes

  • Fixed the ANY method not appearing in :meth:~aiohttp.web.UrlDispatcher.routes -- by :user:bdraco.

    Related issues and pull requests on GitHub:

... (truncated)

Changelog

Sourced from aiohttp's changelog.

3.11.7 (2024-11-21)

Bug fixes

  • Fixed the HTTP client not considering the connector's force_close value when setting the Connection header -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:10003.

Miscellaneous internal changes

  • Improved performance of serializing HTTP headers -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:10014.


3.11.6 (2024-11-19)

Bug fixes

  • Restored the force_close method to the ResponseHandler -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:9997.


3.11.5 (2024-11-19)

... (truncated)

Commits
  • bf04a1b Release 3.11.7 (#10019)
  • ed15e88 [PR #10014/50d23aee backport][3.11] Improve performance of serializing header...
  • 5bcf07d [PR #9961/c984a44b backport][3.11] Disable Python 3.14 builds (#10012)
  • c82c58a [PR #10003/78d1be5 backport][3.11] Fix client connection header not reflectin...
  • 496f649 [PR #10004/a334eef7 backport][3.11] Avoid building skip_headers in `ClientS...
  • d030c05 Increment version to 3.11.7.dev0 (#10002)
  • ff9602d Release 3.11.6 (#10000)
  • b7e3b30 [PR #9997/8c36b51 backport][3.11] Restore the force_close method to the `...
  • 81c33ec [PR #9991/7bbbd126 backport][3.11] Increase allowed benchmark run time to 7 m...
  • 25b49dc Increment version to 3.11.6.dev0 (#9993)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [aiohttp](https://github.com/aio-libs/aiohttp) from 3.10.8 to 3.11.7.
- [Release notes](https://github.com/aio-libs/aiohttp/releases)
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](aio-libs/aiohttp@v3.10.8...v3.11.7)

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Nov 25, 2024
@vercel
Copy link

vercel bot commented Nov 25, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
capy-life ✅ Ready (Inspect) Visit Preview 💬 Add feedback Nov 25, 2024 5:34pm

@socket-security
Copy link

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
pypi/picologging@0.9.2 filesystem, network, unsafe 0 548 kB anthonypjshaw, microsoft
pypi/pillow@10.3.0 environment, eval, filesystem, shell, unsafe 0 73 MB aclark, hugovk, radarhere, ...1 more

🚮 Removed packages: pypi/aiohttp@3.10.8

View full report↗︎

@socket-security
Copy link

Report is too large to display inline.
View full report↗︎

Next steps

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore pypi/pillow@10.3.0
  • @SocketSecurity ignore pypi/picologging@0.9.2

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 2, 2024

Superseded by #286.

@dependabot dependabot bot closed this Dec 2, 2024
@dependabot dependabot bot deleted the dependabot/pip/backend/aiohttp-3.11.7 branch December 2, 2024 17:24
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant