Skip to content

chore(deps): bump aiohttp from 3.13.4 to 3.13.5#2

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/aiohttp-3.13.5
Closed

chore(deps): bump aiohttp from 3.13.4 to 3.13.5#2
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/aiohttp-3.13.5

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 28, 2026

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

  • Chores
    • Bumped aiohttp dependency to 3.13.5.
    • No other dependency pins, project metadata, tooling, or scripts were changed.
    • No runtime interface or exported/public API changes.
    • Estimated review effort: low; no visible behavior changes expected for end users.

Review Change Stack

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels May 28, 2026
@dependabot dependabot Bot force-pushed the dependabot/uv/aiohttp-3.13.5 branch 2 times, most recently from b3efea5 to 06ec2af Compare May 28, 2026 22:25
@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented May 28, 2026

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

  • @coderabbitai resume to resume automatic reviews.
  • @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

  • ▶️ Resume reviews
  • 🔍 Trigger review
📝 Walkthrough

Walkthrough

Runtime dependency aiohttp is updated from version 3.13.4 to 3.13.5 in pyproject.toml.

Changes

Dependency Version Update

Layer / File(s) Summary
aiohttp version update
pyproject.toml
The aiohttp version constraint is updated from 3.13.4 to 3.13.5 in the project dependencies list.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~1 minute

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Description check ⚠️ Warning The PR description is auto-generated by Dependabot and lacks required sections from the template including Related Issue, Description, and Checklist items. Dependabot PRs should include a Related Issue link, explicit description of changes, and confirmation of checklist items (CONTRIBUTING, tests, changelog, docs) even if auto-generated.
✅ Passed checks (4 passed)
Check name Status Explanation
Title check ✅ Passed Title follows conventional commits format with valid 'chore' type and descriptive scope/message accurately reflecting the aiohttp version bump.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/uv/aiohttp-3.13.5

Comment @coderabbitai help to get the list of available commands and usage tips.

@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented May 28, 2026

Actionable comments posted: 0

@dependabot dependabot Bot force-pushed the dependabot/uv/aiohttp-3.13.5 branch from 06ec2af to ff79b39 Compare May 28, 2026 22:39
@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented May 28, 2026

Actionable comments posted: 0

@dependabot dependabot Bot force-pushed the dependabot/uv/aiohttp-3.13.5 branch from ff79b39 to fc0a447 Compare May 28, 2026 22:56
Copy link
Copy Markdown

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@pyproject.toml`:
- Line 27: The project version was not incremented after pinning aiohttp to
"aiohttp==3.13.5"; update the [project].version value from "0.24.0" to "0.25.0"
to perform the required minor version bump reflecting the dependency change and
keep the metadata consistent with the minor-bump-only rule (update the
[project].version entry).
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 02b79f94-9e7f-43fd-95bb-8adf0821a30c

📥 Commits

Reviewing files that changed from the base of the PR and between ff79b39 and fc0a447.

⛔ Files ignored due to path filters (1)
  • uv.lock is excluded by !**/*.lock
📒 Files selected for processing (1)
  • pyproject.toml

Comment thread pyproject.toml
@dependabot dependabot Bot force-pushed the dependabot/uv/aiohttp-3.13.5 branch 4 times, most recently from 5902bdc to 3a63b02 Compare May 30, 2026 08:34
@elkaix elkaix added the dependabot-approved Human-reviewed and approved Dependabot bump label May 31, 2026
@elkaix
Copy link
Copy Markdown
Contributor

elkaix commented May 31, 2026

@dependabot rebase

@dependabot dependabot Bot force-pushed the dependabot/uv/aiohttp-3.13.5 branch from 3a63b02 to 7973e8f Compare May 31, 2026 04:51
@elkaix
Copy link
Copy Markdown
Contributor

elkaix commented May 31, 2026

@dependabot rebase

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-version: 3.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/uv/aiohttp-3.13.5 branch from 7973e8f to 9feaef1 Compare May 31, 2026 05:23
@elkaix
Copy link
Copy Markdown
Contributor

elkaix commented May 31, 2026

Superseded by #32, which consolidates this bump with the other two reviewed Dependabot updates into a single PR.

@elkaix elkaix closed this May 31, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 31, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/uv/aiohttp-3.13.5 branch May 31, 2026 05:28
elkaix added a commit that referenced this pull request May 31, 2026
Consolidates three reviewed Dependabot bumps into one PR:
- aiohttp 3.13.4 -> 3.13.5 (bugfix patch)
- lxml 6.1.0 -> 6.1.1 (patch; transitive binary-wheel dep)
- tomlkit 0.14.0 -> 0.15.0 (minor; we use only loads/dumps/TOMLKitError)

uv.lock regenerated with no transitive changes. Replaces #2, #19, #5.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependabot-approved Human-reviewed and approved Dependabot bump dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant