fix: require aiohttp 3.14 or newer

[mikasenghaas]

Summary

• Require aiohttp>=3.14.0, the first release that provides web.RequestKey.
• Prevent Verifiers v1 imports from failing when a resolver selects an older aiohttp release.

Verification

Before this change, aiohttp 3.13.5 does not provide web.RequestKey. Importing verifiers.v1 fails in interception/server.py.

After this change, package resolution requires aiohttp 3.14.0 or newer. The Verifiers test suite passes with its locked aiohttp 3.14.3 release.

• uv lock --check
• uv run ruff check --fix .
• uv run pytest tests/ (864 passed, 76 skipped)
• uv run pre-commit run --files pyproject.toml
• uv run pre-commit run --all-files reports the existing MD033 inline-HTML errors in verifiers/legacy/envs/experimental/composable/tasksets/swe/README.md.

Note

Require aiohttp>=3.14.0 in project dependencies

Updates the dependency constraint in pyproject.toml from >=3.9.0 to >=3.14.0. This raises the minimum supported version of aiohttp for all installations.

Risk: environments pinned to aiohttp versions between 3.9.0 and 3.13.x will fail to install or upgrade until aiohttp is updated.

^{Macroscope summarized 7e41311.}

---

Note

Low Risk
Single dependency floor change with no runtime logic edits; only affects environments still pinned below aiohttp 3.14.

Overview
Raises the minimum aiohttp version in pyproject.toml from >=3.9.0 to >=3.14.0, matching the first release that exposes web.RequestKey.

That API is used in v1 interception (e.g. verifiers/v1/interception/server.py); with older aiohttp, importing verifiers.v1 could fail at import time. Installers and lockfiles will no longer resolve aiohttp 3.9–3.13.x for this package.

^{Reviewed by Cursor Bugbot for commit 7e41311. Bugbot is set up for automated code reviews on this repo. Configure here.}