Skip to content

chore(deps): bump aiohttp >=3.13.4, <4.0.0#56

Merged
ekassos merged 1 commit intomainfrom
ekassos/chore/bump-aiohttp
Apr 6, 2026
Merged

chore(deps): bump aiohttp >=3.13.4, <4.0.0#56
ekassos merged 1 commit intomainfrom
ekassos/chore/bump-aiohttp

Conversation

@ekassos
Copy link
Copy Markdown
Member

@ekassos ekassos commented Apr 6, 2026

No description provided.

@ekassos ekassos self-assigned this Apr 6, 2026
@ekassos ekassos added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code chore labels Apr 6, 2026
@socket-security
Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedpypi/​aiohttp@​3.13.3 ⏵ 3.13.597 +1100 +10100100100

View full report

@greptile-apps
Copy link
Copy Markdown

greptile-apps bot commented Apr 6, 2026

Greptile Summary

This PR bumps the aiohttp minimum version constraint from >=3.13.3 to >=3.13.4 in pyproject.toml, and the uv.lock resolves to 3.13.5 — the latest available patch release. This is a routine patch-level dependency update with no application code changes.

  • pyproject.toml: tightens the lower bound on aiohttp from 3.13.33.13.4
  • uv.lock: re-resolves aiohttp from 3.13.33.13.5, updating all platform-specific wheel hashes accordingly
  • No other dependencies or application code are affected

Confidence Score: 5/5

Safe to merge — routine patch dependency bump with no application code changes

The change is limited to tightening the aiohttp lower-bound by one patch version and letting uv resolve to the latest patch (3.13.5). No application logic is touched, no breaking changes exist between aiohttp 3.13.x patch releases, and all wheel hashes are correctly updated in the lock file.

No files require special attention

Important Files Changed

Filename Overview
pyproject.toml Minimum aiohttp version constraint bumped from >=3.13.3 to >=3.13.4; no other changes
uv.lock Lock file updated to resolve aiohttp to 3.13.5 with refreshed wheel hashes for all platforms

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A["pyproject.toml\naiohttp >=3.13.3,<4.0.0"] -->|bump lower bound| B["pyproject.toml\naiohttp >=3.13.4,<4.0.0"]
    B -->|uv lock resolves| C["uv.lock\naiohttp 3.13.5"]
    C --> D["All platform wheels\nupdated with new hashes"]
Loading

Reviews (1): Last reviewed commit: "chore(deps): bump aiohttp >=3.13.4, <4.0..." | Re-trigger Greptile

@ekassos ekassos merged commit 2d253d4 into main Apr 6, 2026
12 of 13 checks passed
@ekassos ekassos deleted the ekassos/chore/bump-aiohttp branch April 6, 2026 18:01
@coderabbitai
Copy link
Copy Markdown

coderabbitai bot commented Apr 6, 2026

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: a5af4625-a73f-4667-bc8d-f473cda2bab5

📥 Commits

Reviewing files that changed from the base of the PR and between 36edc81 and c269e5f.

⛔ Files ignored due to path filters (1)
  • uv.lock is excluded by !**/*.lock
📒 Files selected for processing (1)
  • pyproject.toml

📝 Walkthrough

Summary by CodeRabbit

  • Chores
    • Updated aiohttp dependency to version 3.13.4 or later.

Walkthrough

The project's aiohttp dependency constraint was updated from version 3.13.3 to 3.13.4 as the minimum required version, maintaining the upper bound at version 4.0.0.

Changes

Cohort / File(s) Summary
Dependency Version Update
pyproject.toml
Updated aiohttp minimum version constraint from 3.13.3 to 3.13.4 in project dependencies.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch ekassos/chore/bump-aiohttp

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

chore dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant