Skip to content

Bump aiohttp from 3.11.9 to 3.11.10#376

Merged
iMicknl merged 1 commit intomainfrom
dependabot/pip/aiohttp-3.11.10
Dec 6, 2024
Merged

Bump aiohttp from 3.11.9 to 3.11.10#376
iMicknl merged 1 commit intomainfrom
dependabot/pip/aiohttp-3.11.10

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Dec 6, 2024

Bumps aiohttp from 3.11.9 to 3.11.10.

Release notes

Sourced from aiohttp's releases.

3.11.10

Bug fixes

  • Fixed race condition in :class:aiohttp.web.FileResponse that could have resulted in an incorrect response if the file was replaced on the file system during prepare -- by :user:bdraco.

    Related issues and pull requests on GitHub: #10101, #10113.

  • Replaced deprecated call to :func:mimetypes.guess_type with :func:mimetypes.guess_file_type when using Python 3.13+ -- by :user:bdraco.

    Related issues and pull requests on GitHub: #10102.

  • Disabled zero copy writes in the StreamWriter -- by :user:bdraco.

    Related issues and pull requests on GitHub: #10125.


Changelog

Sourced from aiohttp's changelog.

3.11.10 (2024-12-05)

Bug fixes

  • Fixed race condition in :class:aiohttp.web.FileResponse that could have resulted in an incorrect response if the file was replaced on the file system during prepare -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:10101, :issue:10113.

  • Replaced deprecated call to :func:mimetypes.guess_type with :func:mimetypes.guess_file_type when using Python 3.13+ -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:10102.

  • Disabled zero copy writes in the StreamWriter -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:10125.


Commits
  • 0d7352a Release 3.11.10 (#10128)
  • 5ddff95 [PR #10125/d58d2c3d backport][3.11] Disable zero copy writes in the ``StreamW...
  • db5e6bb [PR #10122/703ce61 backport][3.11] Typing improvements for file responses (#1...
  • bcae561 [PR #10113/01302134 backport][3.11] Restore 304 performance after fixing `Fil...
  • 78473b9 [PR #10114/94569554 backport][3.11] Add 304 benchmark for FileResponse (#10115)
  • ae153ab [PR #10107/84bb77d1 backport][3.11] Use internal self._headers var in `File...
  • 07d1759 [PR #10101/678993a4 backport][3.11] Fix race in FileResponse if file is rep...
  • 23a4b31 [PR #10102/7557b03d backport][3.11] Fix deprecated calls to guess_type for ...
  • c41ffc7 [PR #10095/fcce1bf6 backport][3.11] Add a benchmark for web.FileResponse (#10...
  • 86bb6ad [PR #10088/29c3ca93 backport][3.11] Avoid calling len on the same data in the...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [aiohttp](https://github.com/aio-libs/aiohttp) from 3.11.9 to 3.11.10.
- [Release notes](https://github.com/aio-libs/aiohttp/releases)
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](aio-libs/aiohttp@v3.11.9...v3.11.10)

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from iMicknl as a code owner December 6, 2024 08:33
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Dec 6, 2024
@iMicknl iMicknl merged commit ff8b31d into main Dec 6, 2024
@iMicknl iMicknl deleted the dependabot/pip/aiohttp-3.11.10 branch December 6, 2024 13:49
bakonyiferenc pushed a commit to bakonyiferenc/python-sagemcom-api that referenced this pull request Dec 16, 2025
Bumps [aiohttp](https://github.com/aio-libs/aiohttp) from 3.11.9 to
3.11.10.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/aio-libs/aiohttp/releases">aiohttp's
releases</a>.</em></p>
<blockquote>
<h2>3.11.10</h2>
<h2>Bug fixes</h2>
<ul>
<li>
<p>Fixed race condition in :class:<code>aiohttp.web.FileResponse</code>
that could have resulted in an incorrect response if the file was
replaced on the file system during <code>prepare</code> -- by
:user:<code>bdraco</code>.</p>
<p><em>Related issues and pull requests on GitHub:</em>
<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/10101">#10101</a>,
<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/10113">#10113</a>.</p>
</li>
<li>
<p>Replaced deprecated call to :func:<code>mimetypes.guess_type</code>
with :func:<code>mimetypes.guess_file_type</code> when using Python
3.13+ -- by :user:<code>bdraco</code>.</p>
<p><em>Related issues and pull requests on GitHub:</em>
<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/10102">#10102</a>.</p>
</li>
<li>
<p>Disabled zero copy writes in the <code>StreamWriter</code> -- by
:user:<code>bdraco</code>.</p>
<p><em>Related issues and pull requests on GitHub:</em>
<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/10125">#10125</a>.</p>
</li>
</ul>
<hr />
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst">aiohttp's
changelog</a>.</em></p>
<blockquote>
<h1>3.11.10 (2024-12-05)</h1>
<h2>Bug fixes</h2>
<ul>
<li>
<p>Fixed race condition in :class:<code>aiohttp.web.FileResponse</code>
that could have resulted in an incorrect response if the file was
replaced on the file system during <code>prepare</code> -- by
:user:<code>bdraco</code>.</p>
<p><em>Related issues and pull requests on GitHub:</em>
:issue:<code>10101</code>, :issue:<code>10113</code>.</p>
</li>
<li>
<p>Replaced deprecated call to :func:<code>mimetypes.guess_type</code>
with :func:<code>mimetypes.guess_file_type</code> when using Python
3.13+ -- by :user:<code>bdraco</code>.</p>
<p><em>Related issues and pull requests on GitHub:</em>
:issue:<code>10102</code>.</p>
</li>
<li>
<p>Disabled zero copy writes in the <code>StreamWriter</code> -- by
:user:<code>bdraco</code>.</p>
<p><em>Related issues and pull requests on GitHub:</em>
:issue:<code>10125</code>.</p>
</li>
</ul>
<hr />
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aio-libs/aiohttp/commit/0d7352aeca2ac52a4e18aa786bf2aefd47129bbe"><code>0d7352a</code></a>
Release 3.11.10 (<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/10128">#10128</a>)</li>
<li><a
href="https://github.com/aio-libs/aiohttp/commit/5ddff951a40d0e699b3037f8482b53bf1d9f3990"><code>5ddff95</code></a>
[PR <a
href="https://redirect.github.com/aio-libs/aiohttp/issues/10125">#10125</a>/d58d2c3d
backport][3.11] Disable zero copy writes in the ``StreamW...</li>
<li><a
href="https://github.com/aio-libs/aiohttp/commit/db5e6bb97f51f35bfc5b44c42106fb5c55756129"><code>db5e6bb</code></a>
[PR <a
href="https://redirect.github.com/aio-libs/aiohttp/issues/10122">#10122</a>/703ce61
backport][3.11] Typing improvements for file responses (<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/1">#1</a>...</li>
<li><a
href="https://github.com/aio-libs/aiohttp/commit/bcae5617932a779c79887a0bc6968bf738047892"><code>bcae561</code></a>
[PR <a
href="https://redirect.github.com/aio-libs/aiohttp/issues/10113">#10113</a>/01302134
backport][3.11] Restore 304 performance after fixing `Fil...</li>
<li><a
href="https://github.com/aio-libs/aiohttp/commit/78473b9c695903fe4021688b74cf7506b95e6463"><code>78473b9</code></a>
[PR <a
href="https://redirect.github.com/aio-libs/aiohttp/issues/10114">#10114</a>/94569554
backport][3.11] Add 304 benchmark for FileResponse (<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/10115">#10115</a>)</li>
<li><a
href="https://github.com/aio-libs/aiohttp/commit/ae153abfcc95d06a5a8c8189f47fea25b198f340"><code>ae153ab</code></a>
[PR <a
href="https://redirect.github.com/aio-libs/aiohttp/issues/10107">#10107</a>/84bb77d1
backport][3.11] Use internal <code>self._headers</code> var in
`File...</li>
<li><a
href="https://github.com/aio-libs/aiohttp/commit/07d17590833b9d3785e95f6ec991a4f996fdaf9e"><code>07d1759</code></a>
[PR <a
href="https://redirect.github.com/aio-libs/aiohttp/issues/10101">#10101</a>/678993a4
backport][3.11] Fix race in <code>FileResponse</code> if file is
rep...</li>
<li><a
href="https://github.com/aio-libs/aiohttp/commit/23a4b31ce98522b526a435bc339429f38f5a6295"><code>23a4b31</code></a>
[PR <a
href="https://redirect.github.com/aio-libs/aiohttp/issues/10102">#10102</a>/7557b03d
backport][3.11] Fix deprecated calls to <code>guess_type</code> for
...</li>
<li><a
href="https://github.com/aio-libs/aiohttp/commit/c41ffc7fea9d93378f933035e33240d278197b52"><code>c41ffc7</code></a>
[PR <a
href="https://redirect.github.com/aio-libs/aiohttp/issues/10095">#10095</a>/fcce1bf6
backport][3.11] Add a benchmark for web.FileResponse (<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/10">#10</a>...</li>
<li><a
href="https://github.com/aio-libs/aiohttp/commit/86bb6ad30c9411a3dc4320b356959a3dc0189eca"><code>86bb6ad</code></a>
[PR <a
href="https://redirect.github.com/aio-libs/aiohttp/issues/10088">#10088</a>/29c3ca93
backport][3.11] Avoid calling len on the same data in the...</li>
<li>Additional commits viewable in <a
href="https://github.com/aio-libs/aiohttp/compare/v3.11.9...v3.11.10">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=aiohttp&package-manager=pip&previous-version=3.11.9&new-version=3.11.10)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant