Bump aiohttp to v3.8.5 a security release

Ref: GHSA-45c4-8wx5-qw6w
aio-libs · Jul 9, 2023 · 2e8ffdb · 2e8ffdb
1 parent 3577b1e
commit 2e8ffdb
Show file tree

Hide file tree

Showing 4 changed files with 32 additions and 7 deletions.
diff --git a/CHANGES.rst b/CHANGES.rst
@@ -10,6 +10,37 @@
 
 .. towncrier release notes start
 
+3.8.5 (2023-07-09)
+==================
+
+Security bugfixes
+-----------------
+
+- Upgraded the vendored copy of llhttp_ to v8.1.1 -- by :user:`webknjaz`.
+
+  Thanks to :user:`sethmlarson` for reporting this and providing us with
+  comprehensive reproducer, workarounds and fixing details! For more
+  information, see
+  https://github.com/aio-libs/aiohttp/security/advisories/GHSA-45c4-8wx5-qw6w.
+
+  .. _llhttp: https://llhttp.org
+
+  `#7346 <https://github.com/aio-libs/aiohttp/issues/7346>`_
+
+
+
+Bugfixes
+--------
+
+- Fixed a transport is :data:`None` error -- by :user:`Dreamsorcerer`.
+
+  `#3355 <https://github.com/aio-libs/aiohttp/issues/3355>`_
+
+
+
+----
+
+
 3.8.4 (2023-02-12)
 ==================
 

diff --git a/CHANGES/3355.bugfix b/CHANGES/3355.bugfix
diff --git a/CHANGES/7346.feature b/CHANGES/7346.feature
diff --git a/aiohttp/__init__.py b/aiohttp/__init__.py
@@ -1,4 +1,4 @@
-__version__ = "3.8.4.post0.dev0"
+__version__ = "3.8.5"
 
 from typing import Tuple