Skip to content

chore(deps): Bump aiohttp from 3.13.2 to 3.13.4 in /nl_server#6163

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/nl_server/aiohttp-3.13.4
Open

chore(deps): Bump aiohttp from 3.13.2 to 3.13.4 in /nl_server#6163
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/nl_server/aiohttp-3.13.4

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 1, 2026

Bumps aiohttp from 3.13.2 to 3.13.4.

Changelog

Sourced from aiohttp's changelog.

3.13.4 (2026-03-28)

Features

  • Added max_headers parameter to limit the number of headers that should be read from a response -- by :user:Dreamsorcerer.

    Related issues and pull requests on GitHub: :issue:11955.

  • Added a dns_cache_max_size parameter to TCPConnector to limit the size of the cache -- by :user:Dreamsorcerer.

    Related issues and pull requests on GitHub: :issue:12106.

Bug fixes

  • Fixed server hanging indefinitely when chunked transfer encoding chunk-size does not match actual data length. The server now raises TransferEncodingError instead of waiting forever for data that will never arrive -- by :user:Fridayai700.

    Related issues and pull requests on GitHub: :issue:10596.

  • Fixed access log timestamps ignoring daylight saving time (DST) changes. The previous implementation used :py:data:time.timezone which is a constant and does not reflect DST transitions -- by :user:nightcityblade.

    Related issues and pull requests on GitHub: :issue:11283.

  • Fixed RuntimeError: An event loop is running error when using aiohttp.GunicornWebWorker or aiohttp.GunicornUVLoopWebWorker on Python >=3.14. -- by :user:Tasssadar.

... (truncated)

Commits
  • 9f7c7ab Release v3.13.4 (#12291)
  • 625f29e [PR #12265/b5a51707 backport][3.13] Avoid accessing Py_buffer after release i...
  • 5279fbd [Backport 3.13] Tokenize Connection header values in Python HTTP parser (#122...
  • e00ca3c [PR #12240/345d2537 backport][3.13] Reject duplicate singleton headers in C e...
  • 9370b97 [PR #12231/7043bc56 backport][3.13] Adjust header value character checks to R...
  • cbb774f [PR #12216/9cc4b917 backport][3.13] Check multipart max_size during iteration...
  • 8a74257 Restrict multipart header sizes (#12208) (#12228)
  • 53b35a2 Restrict reason (#12209) (#12212)
  • db560cf Reject null bytes in headers (#12210) (#12214)
  • d5cd872 [3.13 backport] Fix test_data_file race condition on Python 3.14 free-threade...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Apr 1, 2026
@datacommons-robot-author
Copy link
Copy Markdown
Collaborator

/gcbrun

@dependabot dependabot Bot force-pushed the dependabot/uv/nl_server/aiohttp-3.13.4 branch from 00838f6 to 0590395 Compare April 4, 2026 01:28
@datacommons-robot-author
Copy link
Copy Markdown
Collaborator

/gcbrun

@datacommons-robot-author datacommons-robot-author added the failing for dependabot auto approval workflow label Apr 4, 2026
@dependabot dependabot Bot force-pushed the dependabot/uv/nl_server/aiohttp-3.13.4 branch from 0590395 to 60fc074 Compare April 16, 2026 00:26
@datacommons-robot-author
Copy link
Copy Markdown
Collaborator

/gcbrun

@dependabot dependabot Bot force-pushed the dependabot/uv/nl_server/aiohttp-3.13.4 branch from 60fc074 to 8bd92d2 Compare April 22, 2026 22:56
@datacommons-robot-author
Copy link
Copy Markdown
Collaborator

/gcbrun

@dependabot dependabot Bot force-pushed the dependabot/uv/nl_server/aiohttp-3.13.4 branch from 8bd92d2 to d60ba9e Compare April 22, 2026 23:17
@datacommons-robot-author
Copy link
Copy Markdown
Collaborator

/gcbrun

@dependabot dependabot Bot changed the title Bump aiohttp from 3.13.2 to 3.13.4 in /nl_server chore(deps): Bump aiohttp from 3.13.2 to 3.13.4 in /nl_server Apr 23, 2026
@dependabot dependabot Bot force-pushed the dependabot/uv/nl_server/aiohttp-3.13.4 branch from d60ba9e to 2028b39 Compare April 23, 2026 02:29
@datacommons-robot-author
Copy link
Copy Markdown
Collaborator

/gcbrun

@dependabot dependabot Bot force-pushed the dependabot/uv/nl_server/aiohttp-3.13.4 branch from 2028b39 to 14bc533 Compare April 27, 2026 18:07
@datacommons-robot-author
Copy link
Copy Markdown
Collaborator

/gcbrun

@dependabot dependabot Bot force-pushed the dependabot/uv/nl_server/aiohttp-3.13.4 branch from 14bc533 to 868ba33 Compare April 27, 2026 19:31
@datacommons-robot-author
Copy link
Copy Markdown
Collaborator

/gcbrun

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-version: 3.13.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/uv/nl_server/aiohttp-3.13.4 branch from 868ba33 to 151c5ff Compare April 28, 2026 19:15
@datacommons-robot-author
Copy link
Copy Markdown
Collaborator

/gcbrun

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file failing for dependabot auto approval workflow python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant