Skip to content

fix(security): bump aiohttp 3.13.3 -> 3.14.1 - #1817

Merged
kajalj22 merged 3 commits into
mainfrom
kajalj/bump-aiohttp-cve
Jun 29, 2026
Merged

kajalj22 merged 3 commits into
mainfrom
kajalj/bump-aiohttp-cve

Conversation

@kajalj22

@kajalj22 kajalj22 commented Jun 29, 2026 •

Copy link
Copy Markdown
Contributor

Summary

  • Bumps aiohttp minimum from >=3.13.3 to >=3.14.1 to mitigate a reported CVE
  • Regenerates uv.lock (aiohttp 3.13.3 β†’ 3.14.1)

πŸ€– Generated with Claude Code

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: Kajal Jain <kajalj@nvidia.com>
@kajalj22
kajalj22 requested a review from a team as a code owner June 29, 2026 16:27
@kajalj22
kajalj22 enabled auto-merge (squash) June 29, 2026 17:00
@kajalj22
kajalj22 merged commit 1f383ee into main Jun 29, 2026
23 of 24 checks passed

This branch was previously deployed

1 inactive deployment
public β€” e6a45657 Deployed Jun 29, 2026 by copy-pr-bot[bot] via release / finalize / notify #525
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants