From 54ed665444fc5c6358203ff45f4e67cf58bbb1be Mon Sep 17 00:00:00 2001 From: raunakdoesdev Date: Mon, 27 Jul 2026 13:28:16 -0700 Subject: [PATCH] fix(deps): remediate aiohttp vulnerabilities --- pyproject.toml | 6 +++++- requirements-dev.lock | 2 +- requirements.lock | 2 +- 3 files changed, 7 insertions(+), 3 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index e50cc10c..e2eec3b5 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -41,7 +41,11 @@ Homepage = "https://github.com/reductoai/reducto-python-sdk" Repository = "https://github.com/reductoai/reducto-python-sdk" [project.optional-dependencies] -aiohttp = ["aiohttp", "httpx_aiohttp>=0.1.9"] +aiohttp = [ + "aiohttp>=3.13.4,<3.14; python_version < '3.10'", + "aiohttp>=3.14.2; python_version >= '3.10'", + "httpx_aiohttp>=0.1.9", +] [tool.rye] managed = true diff --git a/requirements-dev.lock b/requirements-dev.lock index d5543d7b..64e8fd56 100644 --- a/requirements-dev.lock +++ b/requirements-dev.lock @@ -12,7 +12,7 @@ -e file:. aiohappyeyeballs==2.6.1 # via aiohttp -aiohttp==3.13.3 +aiohttp==3.13.5 # via httpx-aiohttp # via reductoai aiosignal==1.4.0 diff --git a/requirements.lock b/requirements.lock index 3605230b..6f7d13c1 100644 --- a/requirements.lock +++ b/requirements.lock @@ -12,7 +12,7 @@ -e file:. aiohappyeyeballs==2.6.1 # via aiohttp -aiohttp==3.13.3 +aiohttp==3.13.5 # via httpx-aiohttp # via reductoai aiosignal==1.4.0