Skip to content

Bump aiohttp to 3.14.3 - #334

Merged
spalen0 merged 1 commit into
mainfrom
fix/aiohttp-audit
Aug 4, 2026
Merged

Bump aiohttp to 3.14.3#334
spalen0 merged 1 commit into
mainfrom
fix/aiohttp-audit

Conversation

@spalen0

@spalen0 spalen0 commented Aug 4, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • update the direct aiohttp pin from 3.14.1 to 3.14.3
  • refresh aiohttp artifacts and hashes in uv.lock
  • resolve the vulnerabilities reported by the dependency audit job

Failed job: https://github.com/yearn/monitoring/actions/runs/30907796136/job/91986892600

Verification

  • uv lock --check
  • uv audit --preview-features audit-command
  • uv run ruff check .
  • uv run pytest -q (709 passed, 4 skipped, 5 subtests passed)
  • uvx prek run --all-files

@spalen0
spalen0 merged commit 39c8b58 into main Aug 4, 2026
3 checks passed
@spalen0
spalen0 deleted the fix/aiohttp-audit branch August 4, 2026 12:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant