Skip to content

v0.20.6

Choose a tag to compare

@rustyconover rustyconover released this 22 Jun 18:23
· 302 commits to main since this release

Ships the aiohttp security bump unblocked by the test-mock migration. No library code changes — the package surface is unchanged from 0.20.5.

Security

  • The external extra now requires aiohttp>=3.14.1, picking up a batch of client-side fixes: CVE-2026-34993, -47265, and the -502xx / -542xx series (11 advisories).

Internal

  • Test suite migrated from aioresponses (unmaintained; broke on aiohttp 3.14's required ClientResponse.stream_writer kwarg) to aiointercept, which is what made lifting the <3.14 cap possible (#22).