v0.20.6
Ships the aiohttp security bump unblocked by the test-mock migration. No library code changes — the package surface is unchanged from 0.20.5.
Security
- The
externalextra now requires aiohttp>=3.14.1, picking up a batch of client-side fixes: CVE-2026-34993, -47265, and the -502xx / -542xx series (11 advisories).
Internal
- Test suite migrated from
aioresponses(unmaintained; broke on aiohttp 3.14's requiredClientResponse.stream_writerkwarg) toaiointercept, which is what made lifting the<3.14cap possible (#22).