Update aiohttp to 3.10.6 #105

pyup-bot · 2024-09-25T08:25:34Z

This PR updates aiohttp from 3.7.4 to 3.10.6.

Changelog

3.10.6

===================

Bug fixes
---------

- Added :exc:`aiohttp.ClientConnectionResetError`. Client code that previously threw :exc:`ConnectionResetError`
will now throw this -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`9137`.



- Fixed an unclosed transport ``ResourceWarning`` on web handlers -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8875`.



- Fixed resolve_host() &#x27;Task was destroyed but is pending&#x27; errors -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8967`.



- Fixed handling of some file-like objects (e.g. ``tarfile.extractfile()``) which raise ``AttributeError`` instead of ``OSError`` when ``fileno`` fails for streaming payload data -- by :user:`ReallyReivax`.


*Related issues and pull requests on GitHub:*
:issue:`6732`.



- Fixed web router not matching pre-encoded URLs (requires yarl 1.9.6+) -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8898`, :issue:`9267`.



- Fixed an error when trying to add a route for multiple methods with a path containing a regex pattern -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8998`.



- Fixed ``Response.text`` when body is a ``Payload`` -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`6485`.



- Fixed compressed requests failing when no body was provided -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`9108`.



- Fixed client incorrectly reusing a connection when the previous message had not been fully sent -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8992`.



- Fixed race condition that could cause server to close connection incorrectly at keepalive timeout -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`9140`.



- Fixed Python parser chunked handling with multiple Transfer-Encoding values -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8823`.



- Fixed error handling after 100-continue so server sends 500 response instead of disconnecting -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8876`.



- Stopped adding a default Content-Type header when response has no content -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8858`.



- Added support for URL credentials with empty (zero-length) username, e.g. ``https://:passwordhost`` -- by :user:`shuckc`


*Related issues and pull requests on GitHub:*
:issue:`6494`.



- Stopped logging exceptions from ``web.run_app()`` that would be raised regardless -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`6807`.



- Implemented binding to IPv6 addresses in the pytest server fixture.


*Related issues and pull requests on GitHub:*
:issue:`4650`.



- Fixed the incorrect use of flags for ``getnameinfo()`` in the Resolver --by :user:`GitNMLee`

Link-Local IPv6 addresses can now be handled by the Resolver correctly.


*Related issues and pull requests on GitHub:*
:issue:`9032`.



- Fixed StreamResponse.prepared to return True after EOF is sent -- by :user:`arthurdarcet`.


*Related issues and pull requests on GitHub:*
:issue:`5343`.



- Changed ``make_mocked_request()`` to use empty payload by default -- by :user:`rahulnht`.


*Related issues and pull requests on GitHub:*
:issue:`7167`.



- Used more precise type for ``ClientResponseError.headers``, fixing some type errors when using them -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8768`.



- Changed behavior when returning an invalid response to send a 500 response -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8845`.



- Fixed response reading from closed session to throw an error immediately instead of timing out -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8878`.



- Fixed ``CancelledError`` from one cleanup context stopping other contexts from completing -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8908`.



- Fixed changing scheme/host in ``Response.clone()`` for absolute URLs -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8990`.



- Fixed ``Site.name`` when host is an empty string -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8929`.



- Updated Python parser to reject messages after a close message, matching C parser behaviour -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`9018`.



- Fixed creation of ``SSLContext`` inside of :py:class:`aiohttp.TCPConnector` with multiple event loops in different threads -- by :user:`bdraco`.


*Related issues and pull requests on GitHub:*
:issue:`9029`.



- Fixed (on Python 3.11+) some edge cases where a task cancellation may get incorrectly suppressed -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`9030`.



- Fixed exception information getting lost on ``HttpProcessingError`` -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`9052`.



- Fixed ``If-None-Match`` not using weak comparison -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`9063`.



- Fixed badly encoded charset crashing when getting response text instead of falling back to charset detector.


*Related issues and pull requests on GitHub:*
:issue:`9160`.



- Rejected `\n` in `reason` values to avoid sending broken HTTP messages -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`9167`.



- Changed :py:meth:`ClientResponse.raise_for_status() &lt;aiohttp.ClientResponse.raise_for_status&gt;` to only release the connection when invoked outside an ``async with`` context -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`9239`.




Features
--------

- Improved type on ``params`` to match the underlying type allowed by ``yarl`` -- by :user:`lpetre`.


*Related issues and pull requests on GitHub:*
:issue:`8564`.



- Declared Python 3.13 supported -- by :user:`bdraco`.


*Related issues and pull requests on GitHub:*
:issue:`8748`.




Removals and backward incompatible breaking changes
---------------------------------------------------

- Improved middleware performance -- by :user:`bdraco`.

The ``set_current_app`` method was removed from ``UrlMappingMatchInfo`` because it is no longer used, and it was unlikely external caller would ever use it.


*Related issues and pull requests on GitHub:*
:issue:`9200`.



- Increased minimum yarl version to 1.12.0 -- by :user:`bdraco`.


*Related issues and pull requests on GitHub:*
:issue:`9267`.




Improved documentation
----------------------

- Clarified that ``GracefulExit`` needs to be handled in ``AppRunner`` and ``ServerRunner`` when using ``handle_signals=True``. -- by :user:`Daste745`


*Related issues and pull requests on GitHub:*
:issue:`4414`.



- Clarified that auth parameter in ClientSession will persist and be included with any request to any origin, even during redirects to different origins.  -- by :user:`MaximZemskov`.


*Related issues and pull requests on GitHub:*
:issue:`6764`.



- Clarified which timeout exceptions happen on which timeouts -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8968`.



- Updated ``ClientSession`` parameters to match current code -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8991`.




Packaging updates and notes for downstreams
-------------------------------------------

- Fixed ``test_client_session_timeout_zero`` to not require internet access -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`9004`.




Miscellaneous internal changes
------------------------------

- Improved performance of making requests when there are no auto headers to skip -- by :user:`bdraco`.


*Related issues and pull requests on GitHub:*
:issue:`8847`.



- Exported ``aiohttp.TraceRequestHeadersSentParams`` -- by :user:`Hadock-is-ok`.


*Related issues and pull requests on GitHub:*
:issue:`8947`.



- Avoided tracing overhead in the http writer when there are no active traces -- by user:`bdraco`.


*Related issues and pull requests on GitHub:*
:issue:`9031`.



- Improved performance of reify Cython implementation -- by :user:`bdraco`.


*Related issues and pull requests on GitHub:*
:issue:`9054`.



- Use :meth:`URL.extend_query() &lt;yarl.URL.extend_query&gt;` to extend query params (requires yarl 1.11.0+) -- by :user:`bdraco`.

If yarl is older than 1.11.0, the previous slower hand rolled version will be used.


*Related issues and pull requests on GitHub:*
:issue:`9068`.



- Improved performance of checking if a host is an IP Address -- by :user:`bdraco`.


*Related issues and pull requests on GitHub:*
:issue:`9095`.



- Significantly improved performance of middlewares -- by :user:`bdraco`.

The construction of the middleware wrappers is now cached and is built once per handler instead of on every request.


*Related issues and pull requests on GitHub:*
:issue:`9158`, :issue:`9170`.



- Improved performance of web requests -- by :user:`bdraco`.


*Related issues and pull requests on GitHub:*
:issue:`9168`, :issue:`9169`, :issue:`9172`, :issue:`9174`, :issue:`9175`, :issue:`9241`.



- Improved performance of starting web requests when there is no response prepare hook -- by :user:`bdraco`.


*Related issues and pull requests on GitHub:*
:issue:`9173`.



- Significantly improved performance of expiring cookies -- by :user:`bdraco`.

Expiring cookies has been redesigned to use :mod:`heapq` instead of a linear search, to better scale.


*Related issues and pull requests on GitHub:*
:issue:`9203`.



- Significantly sped up filtering cookies -- by :user:`bdraco`.


*Related issues and pull requests on GitHub:*
:issue:`9204`.




----

3.10.5

=========================

Bug fixes
---------

- Fixed :meth:`aiohttp.ClientResponse.json()` not setting ``status`` when :exc:`aiohttp.ContentTypeError` is raised -- by :user:`bdraco`.


*Related issues and pull requests on GitHub:*
:issue:`8742`.




Miscellaneous internal changes
------------------------------

- Improved performance of the WebSocket reader -- by :user:`bdraco`.


*Related issues and pull requests on GitHub:*
:issue:`8736`, :issue:`8747`.




----

3.10.4

===================

Bug fixes
---------

- Fixed decoding base64 chunk in BodyPartReader -- by :user:`hyzyla`.


*Related issues and pull requests on GitHub:*
:issue:`3867`.



- Fixed a race closing the server-side WebSocket where the close code would not reach the client -- by :user:`bdraco`.


*Related issues and pull requests on GitHub:*
:issue:`8680`.



- Fixed unconsumed exceptions raised by the WebSocket heartbeat -- by :user:`bdraco`.

If the heartbeat ping raised an exception, it would not be consumed and would be logged as an warning.


*Related issues and pull requests on GitHub:*
:issue:`8685`.



- Fixed an edge case in the Python parser when chunk separators happen to align with network chunks -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8720`.




Improved documentation
----------------------

- Added ``aiohttp-apischema`` to supported libraries -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8700`.




Miscellaneous internal changes
------------------------------

- Improved performance of starting request handlers with Python 3.12+ -- by :user:`bdraco`.

This change is a followup to :issue:`8661` to make the same optimization for Python 3.12+ where the request is connected.


*Related issues and pull requests on GitHub:*
:issue:`8681`.




----

3.10.3

========================

Bug fixes
---------

- Fixed multipart reading when stream buffer splits the boundary over several read() calls -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8653`.



- Fixed :py:class:`aiohttp.TCPConnector` doing blocking I/O in the event loop to create the ``SSLContext`` -- by :user:`bdraco`.

The blocking I/O would only happen once per verify mode. However, it could cause the event loop to block for a long time if the ``SSLContext`` creation is slow, which is more likely during startup when the disk cache is not yet present.


*Related issues and pull requests on GitHub:*
:issue:`8672`.




Miscellaneous internal changes
------------------------------

- Improved performance of :py:meth:`~aiohttp.ClientWebSocketResponse.receive` and :py:meth:`~aiohttp.web.WebSocketResponse.receive` when there is no timeout. -- by :user:`bdraco`.

The timeout context manager is now avoided when there is no timeout as it accounted for up to 50% of the time spent in the :py:meth:`~aiohttp.ClientWebSocketResponse.receive` and :py:meth:`~aiohttp.web.WebSocketResponse.receive` methods.


*Related issues and pull requests on GitHub:*
:issue:`8660`.



- Improved performance of starting request handlers with Python 3.12+ -- by :user:`bdraco`.


*Related issues and pull requests on GitHub:*
:issue:`8661`.



- Improved performance of HTTP keep-alive checks -- by :user:`bdraco`.

Previously, when processing a request for a keep-alive connection, the keep-alive check would happen every second; the check is now rescheduled if it fires too early instead.


*Related issues and pull requests on GitHub:*
:issue:`8662`.



- Improved performance of generating random WebSocket mask -- by :user:`bdraco`.


*Related issues and pull requests on GitHub:*
:issue:`8667`.




----

3.10.2

===================

Bug fixes
---------

- Fixed server checks for circular symbolic links to be compatible with Python 3.13 -- by :user:`steverep`.


*Related issues and pull requests on GitHub:*
:issue:`8565`.



- Fixed request body not being read when ignoring an Upgrade request -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8597`.



- Fixed an edge case where shutdown would wait for timeout when the handler was already completed -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8611`.



- Fixed connecting to ``npipe://``, ``tcp://``, and ``unix://`` urls -- by :user:`bdraco`.


*Related issues and pull requests on GitHub:*
:issue:`8632`.



- Fixed WebSocket ping tasks being prematurely garbage collected -- by :user:`bdraco`.

There was a small risk that WebSocket ping tasks would be prematurely garbage collected because the event loop only holds a weak reference to the task. The garbage collection risk has been fixed by holding a strong reference to the task. Additionally, the task is now scheduled eagerly with Python 3.12+ to increase the chance it can be completed immediately and avoid having to hold any references to the task.


*Related issues and pull requests on GitHub:*
:issue:`8641`.



- Fixed incorrectly following symlinks for compressed file variants -- by :user:`steverep`.


*Related issues and pull requests on GitHub:*
:issue:`8652`.




Removals and backward incompatible breaking changes
---------------------------------------------------

- Removed ``Request.wait_for_disconnection()``, which was mistakenly added briefly in 3.10.0 -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8636`.




Contributor-facing changes
--------------------------

- Fixed monkey patches for ``Path.stat()`` and ``Path.is_dir()`` for Python 3.13 compatibility -- by :user:`steverep`.


*Related issues and pull requests on GitHub:*
:issue:`8551`.




Miscellaneous internal changes
------------------------------

- Improved WebSocket performance when messages are sent or received frequently -- by :user:`bdraco`.

The WebSocket heartbeat scheduling algorithm was improved to reduce the ``asyncio`` scheduling overhead by decreasing the number of ``asyncio.TimerHandle`` creations and cancellations.


*Related issues and pull requests on GitHub:*
:issue:`8608`.



- Minor improvements to various type annotations -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8634`.




----

3.10.1

========================

Bug fixes
---------

- Fixed WebSocket server heartbeat timeout logic to terminate :py:meth:`~aiohttp.ClientWebSocketResponse.receive` and return :py:class:`~aiohttp.ServerTimeoutError` -- by :user:`arcivanov`.

When a WebSocket pong message was not received, the :py:meth:`~aiohttp.ClientWebSocketResponse.receive` operation did not terminate. This change causes ``_pong_not_received`` to feed the ``reader`` an error message, causing pending :py:meth:`~aiohttp.ClientWebSocketResponse.receive` to terminate and return the error message. The error message contains the exception :py:class:`~aiohttp.ServerTimeoutError`.


*Related issues and pull requests on GitHub:*
:issue:`8540`.



- Fixed url dispatcher index not matching when a variable is preceded by a fixed string after a slash -- by :user:`bdraco`.


*Related issues and pull requests on GitHub:*
:issue:`8566`.




Removals and backward incompatible breaking changes
---------------------------------------------------

- Creating :py:class:`aiohttp.TCPConnector`, :py:class:`aiohttp.ClientSession`, :py:class:`~aiohttp.resolver.ThreadedResolver` :py:class:`aiohttp.web.Server`, or :py:class:`aiohttp.CookieJar` instances without a running event loop now raises a :exc:`RuntimeError` -- by :user:`asvetlov`.

Creating these objects without a running event loop was deprecated in :issue:`3372` which was released in version 3.5.0.

This change first appeared in version 3.10.0 as :issue:`6378`.


*Related issues and pull requests on GitHub:*
:issue:`8555`, :issue:`8583`.




----

3.10.0

========================

Bug fixes
---------

- Fixed server response headers for ``Content-Type`` and ``Content-Encoding`` for
static compressed files -- by :user:`steverep`.

Server will now respond with a ``Content-Type`` appropriate for the compressed
file (e.g. ``&quot;application/gzip&quot;``), and omit the ``Content-Encoding`` header.
Users should expect that most clients will no longer decompress such responses
by default.


*Related issues and pull requests on GitHub:*
:issue:`4462`.



- Fixed duplicate cookie expiration calls in the CookieJar implementation


*Related issues and pull requests on GitHub:*
:issue:`7784`.



- Adjusted ``FileResponse`` to check file existence and access when preparing the response -- by :user:`steverep`.

The :py:class:`~aiohttp.web.FileResponse` class was modified to respond with
403 Forbidden or 404 Not Found as appropriate.  Previously, it would cause a
server error if the path did not exist or could not be accessed.  Checks for
existence, non-regular files, and permissions were expected to be done in the
route handler.  For static routes, this now permits a compressed file to exist
without its uncompressed variant and still be served.  In addition, this
changes the response status for files without read permission to 403, and for
non-regular files from 404 to 403 for consistency.


*Related issues and pull requests on GitHub:*
:issue:`8182`.



- Fixed ``AsyncResolver`` to match ``ThreadedResolver`` behavior
-- by :user:`bdraco`.

On system with IPv6 support, the :py:class:`~aiohttp.resolver.AsyncResolver` would not fallback
to providing A records when AAAA records were not available.
Additionally, unlike the :py:class:`~aiohttp.resolver.ThreadedResolver`, the :py:class:`~aiohttp.resolver.AsyncResolver`
did not handle link-local addresses correctly.

This change makes the behavior consistent with the :py:class:`~aiohttp.resolver.ThreadedResolver`.


*Related issues and pull requests on GitHub:*
:issue:`8270`.



- Fixed ``ws_connect`` not respecting `receive_timeout`` on WS(S) connection.
-- by :user:`arcivanov`.


*Related issues and pull requests on GitHub:*
:issue:`8444`.



- Removed blocking I/O in the event loop for static resources and refactored
exception handling -- by :user:`steverep`.

File system calls when handling requests for static routes were moved to a
separate thread to potentially improve performance. Exception handling
was tightened in order to only return 403 Forbidden or 404 Not Found responses
for expected scenarios; 500 Internal Server Error would be returned for any
unknown errors.


*Related issues and pull requests on GitHub:*
:issue:`8507`.




Features
--------

- Added a Request.wait_for_disconnection() method, as means of allowing request handlers to be notified of premature client disconnections.


*Related issues and pull requests on GitHub:*
:issue:`2492`.



- Added 5 new exceptions: :py:exc:`~aiohttp.InvalidUrlClientError`, :py:exc:`~aiohttp.RedirectClientError`,
:py:exc:`~aiohttp.NonHttpUrlClientError`, :py:exc:`~aiohttp.InvalidUrlRedirectClientError`,
:py:exc:`~aiohttp.NonHttpUrlRedirectClientError`

:py:exc:`~aiohttp.InvalidUrlRedirectClientError`, :py:exc:`~aiohttp.NonHttpUrlRedirectClientError`
are raised instead of :py:exc:`ValueError` or :py:exc:`~aiohttp.InvalidURL` when the redirect URL is invalid. Classes
:py:exc:`~aiohttp.InvalidUrlClientError`, :py:exc:`~aiohttp.RedirectClientError`,
:py:exc:`~aiohttp.NonHttpUrlClientError` are base for them.

The :py:exc:`~aiohttp.InvalidURL` now exposes a ``description`` property with the text explanation of the error details.

-- by :user:`setla`, :user:`AraHaan`, and :user:`bdraco`


*Related issues and pull requests on GitHub:*
:issue:`2507`, :issue:`3315`, :issue:`6722`, :issue:`8481`, :issue:`8482`.



- Added a feature to retry closed connections automatically for idempotent methods. -- by :user:`Dreamsorcerer`


*Related issues and pull requests on GitHub:*
:issue:`7297`.



- Implemented filter_cookies() with domain-matching and path-matching on the keys, instead of testing every single cookie.
This may break existing cookies that have been saved with `CookieJar.save()`. Cookies can be migrated with this script::

   import pickle
   with file_path.open(&quot;rb&quot;) as f:
       cookies = pickle.load(f)

   morsels = [(name, m) for c in cookies.values() for name, m in c.items()]
   cookies.clear()
   for name, m in morsels:
       cookies[(m[&quot;domain&quot;], m[&quot;path&quot;].rstrip(&quot;/&quot;))][name] = m

   with file_path.open(&quot;wb&quot;) as f:
       pickle.dump(cookies, f, pickle.HIGHEST_PROTOCOL)


*Related issues and pull requests on GitHub:*
:issue:`7583`, :issue:`8535`.



- Separated connection and socket timeout errors, from ServerTimeoutError.


*Related issues and pull requests on GitHub:*
:issue:`7801`.



- Implemented happy eyeballs


*Related issues and pull requests on GitHub:*
:issue:`7954`.



- Added server capability to check for static files with Brotli compression via a ``.br`` extension -- by :user:`steverep`.


*Related issues and pull requests on GitHub:*
:issue:`8062`.




Removals and backward incompatible breaking changes
---------------------------------------------------

- The shutdown logic in 3.9 waited on all tasks, which caused issues with some libraries.
In 3.10 we&#x27;ve changed this logic to only wait on request handlers. This means that it&#x27;s
important for developers to correctly handle the lifecycle of background tasks using a
library such as ``aiojobs``. If an application is using ``handler_cancellation=True`` then
it is also a good idea to ensure that any :func:`asyncio.shield` calls are replaced with
:func:`aiojobs.aiohttp.shield`.

Please read the updated documentation on these points: \
https://docs.aiohttp.org/en/stable/web_advanced.html#graceful-shutdown \
https://docs.aiohttp.org/en/stable/web_advanced.html#web-handler-cancellation

-- by :user:`Dreamsorcerer`


*Related issues and pull requests on GitHub:*
:issue:`8495`.




Improved documentation
----------------------

- Added documentation for ``aiohttp.web.FileResponse``.


*Related issues and pull requests on GitHub:*
:issue:`3958`.



- Improved the docs for the `ssl` params.


*Related issues and pull requests on GitHub:*
:issue:`8403`.




Contributor-facing changes
--------------------------

- Enabled HTTP parser tests originally intended for 3.9.2 release -- by :user:`pajod`.


*Related issues and pull requests on GitHub:*
:issue:`8088`.




Miscellaneous internal changes
------------------------------

- Improved URL handler resolution time by indexing resources in the UrlDispatcher.
For applications with a large number of handlers, this should increase performance significantly.
-- by :user:`bdraco`


*Related issues and pull requests on GitHub:*
:issue:`7829`.



- Added `nacl_middleware &lt;https://github.com/CosmicDNA/nacl_middleware&gt;`_ to the list of middlewares in the third party section of the documentation.


*Related issues and pull requests on GitHub:*
:issue:`8346`.



- Minor improvements to static typing -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8364`.



- Added a 3.11-specific overloads to ``ClientSession``  -- by :user:`max-muoto`.


*Related issues and pull requests on GitHub:*
:issue:`8463`.



- Simplified path checks for ``UrlDispatcher.add_static()`` method -- by :user:`steverep`.


*Related issues and pull requests on GitHub:*
:issue:`8491`.



- Avoided creating a future on every websocket receive -- by :user:`bdraco`.


*Related issues and pull requests on GitHub:*
:issue:`8498`.



- Updated identity checks for all ``WSMsgType`` type compares -- by :user:`bdraco`.


*Related issues and pull requests on GitHub:*
:issue:`8501`.



- When using Python 3.12 or later, the writer is no longer scheduled on the event loop if it can finish synchronously. Avoiding event loop scheduling reduces latency and improves performance. -- by :user:`bdraco`.


*Related issues and pull requests on GitHub:*
:issue:`8510`.



- Restored :py:class:`~aiohttp.resolver.AsyncResolver` to be the default resolver. -- by :user:`bdraco`.

:py:class:`~aiohttp.resolver.AsyncResolver` was disabled by default because
of IPv6 compatibility issues. These issues have been resolved and
:py:class:`~aiohttp.resolver.AsyncResolver` is again now the default resolver.


*Related issues and pull requests on GitHub:*
:issue:`8522`.




----

3.9.5

==================

Bug fixes
---------

- Fixed &quot;Unclosed client session&quot; when initialization of
:py:class:`~aiohttp.ClientSession` fails -- by :user:`NewGlad`.


*Related issues and pull requests on GitHub:*
:issue:`8253`.



- Fixed regression (from :pr:`8280`) with adding ``Content-Disposition`` to the ``form-data``
part after appending to writer -- by :user:`Dreamsorcerer`/:user:`Olegt0rr`.


*Related issues and pull requests on GitHub:*
:issue:`8332`.



- Added default ``Content-Disposition`` in ``multipart/form-data`` responses to avoid broken
form-data responses -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8335`.




----

3.9.4

==================

Bug fixes
---------

- The asynchronous internals now set the underlying causes
when assigning exceptions to the future objects
-- by :user:`webknjaz`.


*Related issues and pull requests on GitHub:*
:issue:`8089`.



- Treated values of ``Accept-Encoding`` header as case-insensitive when checking
for gzip files -- by :user:`steverep`.


*Related issues and pull requests on GitHub:*
:issue:`8104`.



- Improved the DNS resolution performance on cache hit -- by :user:`bdraco`.

This is achieved by avoiding an :mod:`asyncio` task creation in this case.


*Related issues and pull requests on GitHub:*
:issue:`8163`.


- Changed the type annotations to allow ``dict`` on :meth:`aiohttp.MultipartWriter.append`,
:meth:`aiohttp.MultipartWriter.append_json` and
:meth:`aiohttp.MultipartWriter.append_form` -- by :user:`cakemanny`


*Related issues and pull requests on GitHub:*
:issue:`7741`.



- Ensure websocket transport is closed when client does not close it
-- by :user:`bdraco`.

The transport could remain open if the client did not close it. This
change ensures the transport is closed when the client does not close
it.


*Related issues and pull requests on GitHub:*
:issue:`8200`.



- Leave websocket transport open if receive times out or is cancelled
-- by :user:`bdraco`.

This restores the behavior prior to the change in 7978.


*Related issues and pull requests on GitHub:*
:issue:`8251`.



- Fixed content not being read when an upgrade request was not supported with the pure Python implementation.
-- by :user:`bdraco`.


*Related issues and pull requests on GitHub:*
:issue:`8252`.



- Fixed a race condition with incoming connections during server shutdown -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8271`.



- Fixed ``multipart/form-data`` compliance with :rfc:`7578` -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8280`.



- Fixed blocking I/O in the event loop while processing files in a POST request
-- by :user:`bdraco`.


*Related issues and pull requests on GitHub:*
:issue:`8283`.



- Escaped filenames in static view -- by :user:`bdraco`.


*Related issues and pull requests on GitHub:*
:issue:`8317`.



- Fixed the pure python parser to mark a connection as closing when a
response has no length -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8320`.




Features
--------

- Upgraded *llhttp* to 9.2.1, and started rejecting obsolete line folding
in Python parser to match -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8146`, :issue:`8292`.




Deprecations (removal in next major release)
--------------------------------------------

- Deprecated ``content_transfer_encoding`` parameter in :py:meth:`FormData.add_field()
&lt;aiohttp.FormData.add_field&gt;` -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8280`.




Improved documentation
----------------------

- Added a note about canceling tasks to avoid delaying server shutdown -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8267`.




Contributor-facing changes
--------------------------

- The pull request template is now asking the contributors to
answer a question about the long-term maintenance challenges
they envision as a result of merging their patches
-- by :user:`webknjaz`.


*Related issues and pull requests on GitHub:*
:issue:`8099`.



- Updated CI and documentation to use NPM clean install and upgrade
node to version 18 -- by :user:`steverep`.


*Related issues and pull requests on GitHub:*
:issue:`8116`.



- A pytest fixture ``hello_txt`` was introduced to aid
static file serving tests in
:file:`test_web_sendfile_functional.py`. It dynamically
provisions ``hello.txt`` file variants shared across the
tests in the module.

-- by :user:`steverep`


*Related issues and pull requests on GitHub:*
:issue:`8136`.




Packaging updates and notes for downstreams
-------------------------------------------

- Added an ``internal`` pytest marker for tests which should be skipped
by packagers (use ``-m &#x27;not internal&#x27;`` to disable them) -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8299`.




----

3.9.3

==================

Bug fixes
---------

- Fixed backwards compatibility breakage (in 3.9.2) of ``ssl`` parameter when set outside
of ``ClientSession`` (e.g. directly in ``TCPConnector``) -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`8097`, :issue:`8098`.




Miscellaneous internal changes
------------------------------

- Improved test suite handling of paths and temp files to consistently use pathlib and pytest fixtures.


*Related issues and pull requests on GitHub:*
:issue:`3957`.




----

3.9.2

==================

Bug fixes
---------

- Fixed server-side websocket connection leak.


*Related issues and pull requests on GitHub:*
:issue:`7978`.



- Fixed ``web.FileResponse`` doing blocking I/O in the event loop.


*Related issues and pull requests on GitHub:*
:issue:`8012`.



- Fixed double compress when compression enabled and compressed file exists in server file responses.


*Related issues and pull requests on GitHub:*
:issue:`8014`.



- Added runtime type check for ``ClientSession`` ``timeout`` parameter.


*Related issues and pull requests on GitHub:*
:issue:`8021`.



- Fixed an unhandled exception in the Python HTTP parser on header lines starting with a colon -- by :user:`pajod`.

Invalid request lines with anything but a dot between the HTTP major and minor version are now rejected.
Invalid header field names containing question mark or slash are now rejected.
Such requests are incompatible with :rfc:`9110section-5.6.2` and are not known to be of any legitimate use.


*Related issues and pull requests on GitHub:*
:issue:`8074`.



- Improved validation of paths for static resources requests to the server -- by :user:`bdraco`.


*Related issues and pull requests on GitHub:*
:issue:`8079`.




Features
--------

- Added support for passing :py:data:`True` to ``ssl`` parameter in ``ClientSession`` while
deprecating :py:data:`None` -- by :user:`xiangyan99`.


*Related issues and pull requests on GitHub:*
:issue:`7698`.



Breaking changes
----------------

- Fixed an unhandled exception in the Python HTTP parser on header lines starting with a colon -- by :user:`pajod`.

Invalid request lines with anything but a dot between the HTTP major and minor version are now rejected.
Invalid header field names containing question mark or slash are now rejected.
Such requests are incompatible with :rfc:`9110section-5.6.2` and are not known to be of any legitimate use.


*Related issues and pull requests on GitHub:*
:issue:`8074`.




Improved documentation
----------------------

- Fixed examples of ``fallback_charset_resolver`` function in the :doc:`client_advanced` document. -- by :user:`henry0312`.


*Related issues and pull requests on GitHub:*
:issue:`7995`.



- The Sphinx setup was updated to avoid showing the empty
changelog draft section in the tagged release documentation
builds on Read The Docs -- by :user:`webknjaz`.


*Related issues and pull requests on GitHub:*
:issue:`8067`.




Packaging updates and notes for downstreams
-------------------------------------------

- The changelog categorization was made clearer. The
contributors can now mark their fragment files more
accurately -- by :user:`webknjaz`.

The new category tags are:

   * ``bugfix``

   * ``feature``

   * ``deprecation``

   * ``breaking`` (previously, ``removal``)

   * ``doc``

   * ``packaging``

   * ``contrib``

   * ``misc``


*Related issues and pull requests on GitHub:*
:issue:`8066`.




Contributor-facing changes
--------------------------

- Updated :ref:`contributing/Tests coverage &lt;aiohttp-contributing&gt;` section to show how we use ``codecov`` -- by :user:`Dreamsorcerer`.


*Related issues and pull requests on GitHub:*
:issue:`7916`.



- The changelog categorization was made clearer. The
contributors can now mark their fragment files more
accurately -- by :user:`webknjaz`.

The new category tags are:

   * ``bugfix``

   * ``feature``

   * ``deprecation``

   * ``breaking`` (previously, ``removal``)

   * ``doc``

   * ``packaging``

   * ``contrib``

   * ``misc``


*Related issues and pull requests on GitHub:*
:issue:`8066`.




Miscellaneous internal changes
------------------------------

- Replaced all ``tmpdir`` fixtures with ``tmp_path`` in test suite.


*Related issues and pull requests on GitHub:*
:issue:`3551`.




----

3.9.1

==================

Bugfixes
--------

- Fixed importing aiohttp under PyPy on Windows.

`7848 &lt;https://github.com/aio-libs/aiohttp/issues/7848&gt;`_

- Fixed async concurrency safety in websocket compressor.

`7865 &lt;https://github.com/aio-libs/aiohttp/issues/7865&gt;`_

- Fixed ``ClientResponse.close()`` releasing the connection instead of closing.

`7869 &lt;https://github.com/aio-libs/aiohttp/issues/7869&gt;`_

- Fixed a regression where connection may get closed during upgrade. -- by :user:`Dreamsorcerer`

`7879 &lt;https://github.com/aio-libs/aiohttp/issues/7879&gt;`_

- Fixed messages being reported as upgraded without an Upgrade header in Python parser. -- by :user:`Dreamsorcerer`

`7895 &lt;https://github.com/aio-libs/aiohttp/issues/7895&gt;`_



----

3.9.0

==================

Features
--------

- Introduced ``AppKey`` for static typing support of ``Application`` storage.
See https://docs.aiohttp.org/en/stable/web_advanced.html#application-s-config

`5864 &lt;https://github.com/aio-libs/aiohttp/issues/5864&gt;`_

- Added a graceful shutdown period which allows pending tasks to complete before the application&#x27;s cleanup is called.
The period can be adjusted with the ``shutdown_timeout`` parameter. -- by :user:`Dreamsorcerer`.
See https://docs.aiohttp.org/en/latest/web_advanced.html#graceful-shutdown

`7188 &lt;https://github.com/aio-libs/aiohttp/issues/7188&gt;`_

- Added `handler_cancellation &lt;https://docs.aiohttp.org/en/stable/web_advanced.html#web-handler-cancellation&gt;`_ parameter to cancel web handler on client disconnection. -- by :user:`mosquito`
This (optionally) reintroduces a feature removed in a previous release.
Recommended for those looking for an extra level of protection against denial-of-service attacks.

`7056 &lt;https://github.com/aio-libs/aiohttp/issues/7056&gt;`_

- Added support for setting response header parameters ``max_line_size`` and ``max_field_size``.

`2304 &lt;https://github.com/aio-libs/aiohttp/issues/2304&gt;`_

- Added ``auto_decompress`` parameter to ``ClientSession.request`` to override ``ClientSession._auto_decompress``. -- by :user:`Daste745`

`3751 &lt;https://github.com/aio-libs/aiohttp/issues/3751&gt;`_

- Changed ``raise_for_status`` to allow a coroutine.

`3892 &lt;https://github.com/aio-libs/aiohttp/issues/3892&gt;`_

- Added client brotli compression support (optional with runtime check).

`5219 &lt;https://github.com/aio-libs/aiohttp/issues/5219&gt;`_

- Added ``client_max_size`` to ``BaseRequest.clone()`` to allow overriding the request body size. -- :user:`anesabml`.

`5704 &lt;https://github.com/aio-libs/aiohttp/issues/5704&gt;`_

- Added a middleware type alias ``aiohttp.typedefs.Middleware``.

`5898 &lt;https://github.com/aio-libs/aiohttp/issues/5898&gt;`_

- Exported ``HTTPMove`` which can be used to catch any redirection request
that has a location -- :user:`dreamsorcerer`.

`6594 &lt;https://github.com/aio-libs/aiohttp/issues/6594&gt;`_

- Changed the ``path`` parameter in ``web.run_app()`` to accept a ``pathlib.Path`` object.

`6839 &lt;https://github.com/aio-libs/aiohttp/issues/6839&gt;`_

- Performance: Skipped filtering ``CookieJar`` when the jar is empty or all cookies have expired.

`7819 &lt;https://github.com/aio-libs/aiohttp/issues/7819&gt;`_

- Performance: Only check origin if insecure scheme and there are origins to treat as secure, in ``CookieJar.filter_cookies()``.

`7821 &lt;https://github.com/aio-libs/aiohttp/issues/7821&gt;`_

- Performance: Used timestamp instead of ``datetime`` to achieve faster cookie expiration in ``CookieJar``.

`7824 &lt;https://github.com/aio-libs/aiohttp/issues/7824&gt;`_

- Added support for passing a custom server name parameter to HTTPS connection.

`7114 &lt;https://github.com/aio-libs/aiohttp/issues/7114&gt;`_

- Added support for using Basic Auth credentials from :file:`.netrc` file when making HTTP requests with the
:py:class:`~aiohttp.ClientSession` ``trust_env`` argument is set to ``True``. -- by :user:`yuvipanda`.

`7131 &lt;https://github.com/aio-libs/aiohttp/issues/7131&gt;`_

- Turned access log into no-op when the logger is disabled.

`7240 &lt;https://github.com/aio-libs/aiohttp/issues/7240&gt;`_

- Added typing information to ``RawResponseMessage``. -- by :user:`Gobot1234`

`7365 &lt;https://github.com/aio-libs/aiohttp/issues/7365&gt;`_

- Removed ``async-timeout`` for Python 3.11+ (replaced with ``asyncio.timeout()`` on newer releases).

`7502 &lt;https://github.com/aio-libs/aiohttp/issues/7502&gt;`_

- Added support for ``brotlicffi`` as an alternative to ``brotli`` (fixing Brotli support on PyPy).

`7611 &lt;https://github.com/aio-libs/aiohttp/issues/7611&gt;`_

- Added ``WebSocketResponse.get_extra_info()`` to access a protocol transport&#x27;s extra info.

`7078 &lt;https://github.com/aio-libs/aiohttp/issues/7078&gt;`_

- Allow ``link`` argument to be set to None/empty in HTTP 451 exception.

`7689 &lt;https://github.com/aio-libs/aiohttp/issues/7689&gt;`_



Bugfixes
--------

- Implemented stripping the trailing dots from fully-qualified domain names in ``Host`` headers and TLS context when acting as an HTTP client.
This allows the client to connect to URLs with FQDN host name like ``https://example.com./``.
-- by :user:`martin-sucha`.

`3636 &lt;https://github.com/aio-libs/aiohttp/issues/3636&gt;`_

- Fixed client timeout not working when incoming data is always available without waiting. -- by :user:`Dreamsorcerer`.

`5854 &lt;https://github.com/aio-libs/aiohttp/issues/5854&gt;`_

- Fixed ``readuntil`` to work with a delimiter of more than one character.

`6701 &lt;https://github.com/aio-libs/aiohttp/issues/6701&gt;`_

- Added ``__repr__`` to ``EmptyStreamReader`` to avoid ``AttributeError``.

`6916 &lt;https://github.com/aio-libs/aiohttp/issues/6916&gt;`_

- Fixed bug when using ``TCPConnector`` with ``ttl_dns_cache=0``.

`7014 &lt;https://github.com/aio-libs/aiohttp/issues/7014&gt;`_

- Fixed response returned from expect handler being thrown away. -- by :user:`Dreamsorcerer`

`7025 &lt;https://github.com/aio-libs/aiohttp/issues/7025&gt;`_

- Avoided raising ``UnicodeDecodeError`` in multipart and in HTTP headers parsing.

`7044 &lt;https://github.com/aio-libs/aiohttp/issues/7044&gt;`_

- Changed ``sock_read`` timeout to start after writing has finished, avoiding read timeouts caused by an unfinished write. -- by :user:`dtrifiro`

`7149 &lt;https://github.com/aio-libs/aiohttp/issues/7149&gt;`_

- Fixed missing query in tracing method URLs when using ``yarl`` 1.9+.

`7259 &lt;https://github.com/aio-libs/aiohttp/issues/7259&gt;`_

- Changed max 32-bit timestamp to an aware datetime object, for consistency with the non-32-bit one, and to avoid a ``DeprecationWarning`` on Python 3.12.

`7302 &lt;https://github.com/aio-libs/aiohttp/issues/7302&gt;`_

- Fixed ``EmptyStreamReader.iter_chunks()`` never ending. -- by :user:`mind1m`

`7616 &lt;https://github.com/aio-libs/aiohttp/issues/7616&gt;`_

- Fixed a rare ``RuntimeError: await wasn&#x27;t used with future`` exception. -- by :user:`stalkerg`

`7785 &lt;https://github.com/aio-libs/aiohttp/issues/7785&gt;`_

- Fixed issue with insufficient HTTP method and version validation.

`7700 &lt;https://github.com/aio-libs/aiohttp/issues/7700&gt;`_

- Added check to validate that absolute URIs have schemes.

`7712 &lt;https://github.com/aio-libs/aiohttp/issues/7712&gt;`_

- Fixed unhandled exception when Python HTTP parser encounters unpaired Unicode surrogates.

`7715 &lt;https://github.com/aio-libs/aiohttp/issues/7715&gt;`_

- Updated parser to disallow invalid characters in header field names and stop accepting LF as a request line separator.

`7719 &lt;https://github.com/aio-libs/aiohttp/issues/7719&gt;`_

- Fixed Python HTTP parser not treating 204/304/1xx as an empty body.

`7755 &lt;https://github.com/aio-libs/aiohttp/issues/7755&gt;`_

- Ensure empty body response for 1xx/204/304 per RFC 9112 sec 6.3.

`7756 &lt;https://github.com/aio-libs/aiohttp/issues/7756&gt;`_

- Fixed an issue when a client request is closed before completing a chunked payload. -- by :user:`Dreamsorcerer`

`7764 &lt;https://github.com/aio-libs/aiohttp/issues/7764&gt;`_

- Edge Case Handling for ResponseParser for missing reason value.

`7776 &lt;https://github.com/aio-libs/aiohttp/issues/7776&gt;`_

- Fixed ``ClientWebSocketResponse.close_code`` being erroneously set to ``None`` when there are concurrent async tasks receiving data and closing the connection.

`7306 &lt;https://github.com/aio-libs/aiohttp/issues/7306&gt;`_

- Added HTTP method validation.

`6533 &lt;https://github.com/aio-libs/aiohttp/issues/6533&gt;`_

- Fixed arbitrary sequence types being allowed to inject values via version parameter. -- by :user:`Dreamsorcerer`

`7835 &lt;https://github.com/aio-libs/aiohttp/issues/7835&gt;`_

- Performance: Fixed increase in latency with small messages from websocket compression changes.

`7797 &lt;https://github.com/aio-libs/aiohttp/issues/7797&gt;`_



Improved Documentation
----------------------

- Fixed the `ClientResponse.release`&#x27;s type in the doc. Changed from `comethod` to `method`.

`5836 &lt;https://github.com/aio-libs/aiohttp/issues/5836&gt;`_

- Added information on behavior of base_url parameter in `ClientSession`.

`6647 &lt;https://github.com/aio-libs/aiohttp/issues/6647&gt;`_

- Fixed `ClientResponseError` docs.

`6700 &lt;https://github.com/aio-libs/aiohttp/issues/6700&gt;`_

- Updated Redis code examples to follow the latest API.

`6907 &lt;https://github.com/aio-libs/aiohttp/issues/6907&gt;`_

- Added a note about possibly needing to update headers when using ``on_response_prepare``. -- by :user:`Dreamsorcerer`

`7283 &lt;https://github.com/aio-libs/aiohttp/issues/7283&gt;`_

- Completed ``trust_env`` parameter description to honor ``wss_proxy``, ``ws_proxy`` or ``no_proxy`` env.

`7325 &lt;https://github.com/aio-libs/aiohttp/issues/7325&gt;`_

- Expanded SSL documentation with more examples (e.g. how to use certifi). -- by :user:`Dreamsorcerer`

`7334 &lt;https://github.com/aio-libs/aiohttp/issues/7334&gt;`_

- Fix, update, and improve client exceptions documentation.

`7733 &lt;https://github.com/aio-libs/aiohttp/issues/7733&gt;`_



Deprecations and Removals
-------------------------

- Added ``shutdown_timeout`` parameter to ``BaseRunner``, while
deprecating ``shutdown_timeout`` parameter from ``BaseSite``. -- by :user:`Dreamsorcerer`

`7718 &lt;https://github.com/aio-libs/aiohttp/issues/7718&gt;`_

- Dropped Python 3.6 support.

`6378 &lt;https://github.com/aio-libs/aiohttp/issues/6378&gt;`_

- Dropped Python 3.7 support. -- by :user:`Dreamsorcerer`

`7336 &lt;https://github.com/aio-libs/aiohttp/issues/7336&gt;`_

- Removed support for abandoned ``tokio`` event loop. -- by :user:`Dreamsorcerer`

`7281 &lt;https://github.com/aio-libs/aiohttp/issues/7281&gt;`_



Misc
----

- Made ``print`` argument in ``run_app()`` optional.

`3690 &lt;https://github.com/aio-libs/aiohttp/issues/3690&gt;`_

- Improved performance of ``ceil_timeout`` in some cases.

`6316 &lt;https://github.com/aio-libs/aiohttp/issues/6316&gt;`_

- Changed importing Gunicorn to happen on-demand, decreasing import time by ~53%. -- :user:`Dreamsorcerer`

`6591 &lt;https://github.com/aio-libs/aiohttp/issues/6591&gt;`_

- Improved import time by replacing ``http.server`` with ``http.HTTPStatus``.

`6903 &lt;https://github.com/aio-libs/aiohttp/issues/6903&gt;`_

- Fixed annotation of ``ssl`` parameter to disallow ``True``. -- by :user:`Dreamsorcerer`.

`7335 &lt;https://github.com/aio-libs/aiohttp/issues/7335&gt;`_


----

3.8.6

==================

Security bugfixes
-----------------

- Upgraded the vendored copy of llhttp_ to v9.1.3 -- by :user:`Dreamsorcerer`

Thanks to :user:`kenballus` for reporting this, see
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-pjjw-qhg8-p2p9.

.. _llhttp: https://llhttp.org

`7647 &lt;https://github.com/aio-libs/aiohttp/issues/7647&gt;`_

- Updated Python parser to comply with RFCs 9110/9112 -- by :user:`Dreamorcerer`

Thanks to :user:`kenballus` for reporting this, see
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-gfw2-4jvh-wgfg.

`7663 &lt;https://github.com/aio-libs/aiohttp/issues/7663&gt;`_


Deprecation
-----------

- Added ``fallback_charset_resolver`` parameter in ``ClientSession`` to allow a user-supplied
character set detection function.

Character set detection will no longer be included in 3.9 as a default. If this feature is needed,
please use `fallback_charset_resolver &lt;https://docs.aiohttp.org/en/stable/client_advanced.html#character-set-detection&gt;`_.

`7561 &lt;https://github.com/aio-libs/aiohttp/issues/7561&gt;`_


Features
--------

- Enabled lenient response parsing for more flexible parsing in the client
(this should resolve some regressions when dealing with badly formatted HTTP responses). -- by :user:`Dreamsorcerer`

`7490 &lt;https://github.com/aio-libs/aiohttp/issues/7490&gt;`_



Bugfixes
--------

- Fixed ``PermissionError`` when ``.netrc`` is unreadable due to permissions.

`7237 &lt;https://github.com/aio-libs/aiohttp/issues/7237&gt;`_

- Fixed output of parsing errors pointing to a ``\n``. -- by :user:`Dreamsorcerer`

`7468 &lt;https://github.com/aio-libs/aiohttp/issues/7468&gt;`_

- Fixed ``GunicornWebWorker`` max_requests_jitter not working.

`7518 &lt;https://github.com/aio-libs/aiohttp/issues/7518&gt;`_

- Fixed sorting in ``filter_cookies`` to use cookie with longest path. -- by :user:`marq24`.

`7577 &lt;https://github.com/aio-libs/aiohttp/issues/7577&gt;`_

- Fixed display of ``BadStatusLine`` messages from llhttp_. -- by :user:`Dreamsorcerer`

`7651 &lt;https://github.com/aio-libs/aiohttp/issues/7651&gt;`_


----

3.8.5

==================

Security bugfixes
-----------------

- Upgraded the vendored copy of llhttp_ to v8.1.1 -- by :user:`webknjaz`
and :user:`Dreamsorcerer`.

Thanks to :user:`sethmlarson` for reporting this and providing us with
comprehensive reproducer, workarounds and fixing details! For more
information, see
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-45c4-8wx5-qw6w.

.. _llhttp: https://llhttp.org

`7346 &lt;https://github.com/aio-libs/aiohttp/issues/7346&gt;`_


Features
--------

- Added information to C parser exceptions to show which character caused the error. -- by :user:`Dreamsorcerer`

`7366 &lt;https://github.com/aio-libs/aiohttp/issues/7366&gt;`_


Bugfixes
--------

- Fixed a transport is :data:`None` error -- by :user:`Dreamsorcerer`.

`3355 &lt;https://github.com/aio-libs/aiohttp/issues/3355&gt;`_


----

3.8.4

==================

Bugfixes
--------

- Fixed incorrectly overwriting cookies with the same name and domain, but different path.
`6638 &lt;https://github.com/aio-libs/aiohttp/issues/6638&gt;`_
- Fixed ``ConnectionResetError`` not being raised after client disconnection in SSL environments.
`7180 &lt;https://github.com/aio-libs/aiohttp/issues/7180&gt;`_


----

3.8.3

==================

.. attention::

This is the last :doc:`aiohttp &lt;index&gt;` release tested under
Python 3.6. The 3.9 stream is dropping it from the CI and the
distribution package metadata.

Bugfixes
--------

- Increased the upper boundary of the :doc:`multidict:index` dependency
to allow for the version 6 -- by :user:`hugovk`.

It used to be limited below version 7 in :doc:`aiohttp &lt;index&gt;` v3.8.1 but
was lowered in v3.8.2 via :pr:`6550` and never brought back, causing
problems with dependency pins when upgrading. :doc:`aiohttp &lt;index&gt;` v3.8.3
fixes that by recovering the original boundary of ``&lt; 7``.
`6950 &lt;https://github.com/aio-libs/aiohttp/issues/6950&gt;`_


----

3.8.2

=====================================================

Bugfixes
--------

- Support registering OPTIONS HTTP method handlers via RouteTableDef.
`4663 &lt;https://github.com/aio-libs/aiohttp/issues/4663&gt;`_
- Started supporting ``authority-form`` and ``absolute-form`` URLs on the server-side.
`6227 &lt;https://github.com/aio-libs/aiohttp/issues/6227&gt;`_
- Fix Python 3.11 alpha incompatibilities by using Cython 0.29.25
`6396 &lt;https://github.com/aio-libs/aiohttp/issues/6396&gt;`_
- Remove a deprecated usage of pytest.warns(None)
`6663 &lt;https://github.com/aio-libs/aiohttp/issues/6663&gt;`_
- Fix regression where ``asyncio.CancelledError`` occurs on client disconnection.
`6719 &lt;https://github.com/aio-libs/aiohttp/issues/6719&gt;`_
- Export :py:class:`~aiohttp.web.PrefixedSubAppResource` under
:py:mod:`aiohttp.web` -- by :user:`Dreamsorcerer`.

This fixes a regression introduced by :pr:`3469`.
`6889 &lt;https://github.com/aio-libs/aiohttp/issues/6889&gt;`_
- Dropped the :class:`object` type possibility from
the :py:attr:`aiohttp.ClientSession.timeout`
property return type declaration.
`6917 &lt;https://github.com/aio-libs/aiohttp/issues/6917&gt;`_,
`6923 &lt;https://github.com/aio-libs/aiohttp/issues/6923&gt;`_


Improved Documentation
----------------------

- Added clarification on configuring the app object with settings such as a db connection.
`4137 &lt;https://github.com/aio-libs/aiohttp/issues/4137&gt;`_
- Edited the web.run_app declaration.
`6401 &lt;https://github.com/aio-libs/aiohttp/issues/6401&gt;`_
- Dropped the :class:`object` type possibility from
the :py:attr:`aiohttp.ClientSession.timeout`
property return type declaration.
`6917 &lt;https://github.com/aio-libs/aiohttp/issues/6917&gt;`_,
`6923 &lt;https://github.com/aio-libs/aiohttp/issues/6923&gt;`_


Deprecations and Removals
-------------------------

- Drop Python 3.5 support, aiohttp works on 3.6+ now.
`4046 &lt;https://github.com/aio-libs/aiohttp/issues/4046&gt;`_


Misc
----

- `6369 &lt;https://github.com/aio-libs/aiohttp/issues/6369&gt;`_, `#6399 &lt;https://github.com/aio-libs/aiohttp/issues/6399&gt;`_, `#6550 &lt;https://github.com/aio-libs/aiohttp/issues/6550&gt;`_, `#6708 &lt;https://github.com/aio-libs/aiohttp/issues/6708&gt;`_, `#6757 &lt;https://github.com/aio-libs/aiohttp/issues/6757&gt;`_, `#6857 &lt;https://github.com/aio-libs/aiohttp/issues/6857&gt;`_, `#6872 &lt;https://github.com/aio-libs/aiohttp/issues/6872&gt;`_


----

3.8.1

==================

Bugfixes
--------

- Fix the error in handling the return value of `getaddrinfo`.
`getaddrinfo` will return an `(int, bytes)` tuple, if CPython could not handle the address family.
It will cause an index out of range error in aiohttp. For example, if user compile CPython with
`--disable-ipv6` option, but his system enable the ipv6.
`5901 &lt;https://github.com/aio-libs/aiohttp/issues/5901&gt;`_
- Do not install &quot;examples&quot; as a top-level package.
`6189 &lt;https://github.com/aio-libs/aiohttp/issues/6189&gt;`_
- Restored ability to connect IPv6-only host.
`6195 &lt;https://github.com/aio-libs/aiohttp/issues/6195&gt;`_
- Remove ``Signal`` from ``__all__``, replace ``aiohttp.Signal`` with ``aiosignal.Signal`` in docs
`6201 &lt;https://github.com/aio-libs/aiohttp/issues/6201&gt;`_
- Made chunked encoding HTTP header check stricter.
`6305 &lt;https://github.com/aio-libs/aiohttp/issues/6305&gt;`_


Improved Documentation
----------------------

- update quick starter demo codes.
`6240 &lt;https://github.com/aio-libs/aiohttp/issues/6240&gt;`_
- Added an explanation of how tiny timeouts affect performance to the client reference document.
`6274 &lt;https://github.com/aio-libs/aiohttp/issues/6274&gt;`_
- Add flake8-docstrings to flake8 configuration, enable subset of checks.
`6276 &lt;https://github.com/aio-libs/aiohttp/issues/6276&gt;`_
- Added information on running complex applications with additional tasks/processes -- :user:`Dreamsorcerer`.
`6278 &lt;https://github.com/aio-libs/aiohttp/issues/6278&gt;`_


Misc
----

- `6205 &lt;https://github.com/aio-libs/aiohttp/issues/6205&gt;`_


----

3.8.0

==================

Features
--------

- Added a ``GunicornWebWorker`` feature for extending the aiohttp server configuration by allowing the &#x27;wsgi&#x27; coroutine to return ``web.AppRunner`` object.
`2988 &lt;https://github.com/aio-libs/aiohttp/issues/2988&gt;`_
- Switch from ``http-parser`` to ``llhttp``
`3561 &lt;https://github.com/aio-libs/aiohttp/issues/3561&gt;`_
- Use Brotli instead of brotlipy
`3803 &lt;https://github.com/aio-libs/aiohttp/issues/3803&gt;`_
- Disable implicit switch-back to pure python mode. The build fails loudly if aiohttp
cannot be compiled with C Accelerators.  Use AIOHTTP_NO_EXTENSIONS=1 to explicitly
disable C Extensions complication and switch to Pure-Python mode.  Note that Pure-Python
mode is significantly slower than compiled one.
`3828 &lt;https://github.com/aio-libs/aiohttp/issues/3828&gt;`_
- Make access log use local time with timezone
`3853 &lt;https://github.com/aio-libs/aiohttp/issues/3853&gt;`_
- Implemented ``readuntil`` in ``StreamResponse``
`4054 &lt;https://github.com/aio-libs/aiohttp/issues/4054&gt;`_
- FileResponse now supports ETag.
`4594 &lt;https://github.com/aio-libs/aiohttp/issues/4594&gt;`_
- Add a request handler type alias ``aiohttp.typedefs.Handler``.
`4686 &lt;https://github.com/aio-libs/aiohttp/issues/4686&gt;`_
- ``AioHTTPTestCase`` is more async friendly now.

For people who use unittest and are used to use :py:exc:`~unittest.TestCase`
it will be easier to write new test cases like the sync version of the :py:exc:`~unittest.TestCase` class,
without using the decorator `unittest_run_loop`, just `async def test_*`.
The only difference is that for the people using python3.7 and below a new dependency is needed, it is ``asynctestcase``.
`4700 &lt;https://github.com/aio-libs/aiohttp/issues/4700&gt;`_
- Add validation of HTTP header keys and values to prevent header injection.
`4818 &lt;https://github.com/aio-libs/aiohttp/issues/4818&gt;`_
- Add predicate to ``AbstractCookieJar.clear``.
Add ``AbstractCookieJar.clear_domain`` to clean all domain and subdomains cookies only.
`4942 &lt;https://github.com/aio-libs/aiohttp/issues/4942&gt;`_
- Add keepalive_timeout parameter to web.run_app.
`5094 &lt;https://github.com/aio-libs/aiohttp/issues/5094&gt;`_
- Tracing for client sent headers
`5105 &lt;https://github.com/aio-libs/aiohttp/issues/5105&gt;`_
- Make type hints for http parser stricter
`5267 &lt;https://github.com/aio-libs/aiohttp/issues/5267&gt;`_
- Add final declarations for constants.
`5275 &lt;https://github.com/aio-libs/aiohttp/issues/5275&gt;`_
- Switch to external frozenlist and aiosignal libraries.
`5293 &lt;https://github.com/aio-libs/aiohttp/issues/5293&gt;`_
- Don&#x27;t send secure cookies by insecure transports.

By default, the transport is secure if https or wss scheme is used.
Use `CookieJar(treat_as_secure_origin=&quot;http://127.0.0.1&quot;)` to override the default security checker.
`5571 &lt;https://github.com/aio-libs/aiohttp/issues/5571&gt;`_
- Always create a new event loop in ``aiohttp.web.run_app()``.
This adds better compatibility with ``asyncio.run()`` or if trying to run multiple apps in sequence.
`5572 &lt;https://github.com/aio-libs/aiohttp/issues/5572&gt;`_
- Add ``aiohttp.pytest_plugin.AiohttpClient`` for static typing of pytest plugin.
`5585 &lt;https://github.com/aio-libs/aiohttp/issues/5585&gt;`_
- Added a ``socket_factory`` argument to ``BaseTestServer``.
`5844 &lt;https://github.com/aio-libs/aiohttp/issues/5844&gt;`_
- Add compression strategy parameter to enable_compression method.
`5909 &lt;https://github.com/aio-libs/aiohttp/issues/5909&gt;`_
- Added support for Python 3.10 to Github Actions CI/CD workflows and fix the related deprecation warnings -- :user:`Hanaasagi`.
`5927 &lt;https://github.com/aio-libs/aiohttp/issues/5927&gt;`_
- Switched ``chardet`` to ``charset-normalizer`` for guessing the HTTP payload body encoding -- :user:`Ousret`.
`5930 &lt;https://github.com/aio-libs/aiohttp/issues/5930&gt;`_
- Added optional auto_decompress argument for HttpRequestParser
`5957 &lt;https://github.com/aio-libs/aiohttp/issues/5957&gt;`_
- Added support for HTTPS proxies to the extent CPython&#x27;s
:py:mod:`asyncio` supports it -- by :user:`bmbouter`,
:user:`jborean93` and :user:`webknjaz`.
`5992 &lt;https://github.com/aio-libs/aiohttp/issues/5992&gt;`_
- Added ``base_url`` parameter to the initializer of :class:`~aiohttp.ClientSession`.
`6013 &lt;https://github.com/aio-libs/aiohttp/issues/6013&gt;`_
- Add Trove classifier and create binary wheels for 3.10. -- :user:`hugovk`.
`6079 &lt;https://github.com/aio-libs/aiohttp/issues/6079&gt;`_
- Started shipping platform-specific wheels with the ``musl`` tag targeting typical Alpine Linux runtimes — :user:`asvetlov`.
`6139 &lt;https://github.com/aio-libs/aiohttp/issues/6139&gt;`_
- Started shipping platform-specific arm64 wheels for Apple Silicon — :user:`asvetlov`.
`6139 &lt;https://github.com/aio-libs/aiohttp/issues/6139&gt;`_


Bugfixes
--------

- Modify _drain_helper() to handle concurrent `await resp.write(...)` or `ws.send_json(...)` calls without race-condition.
`2934 &lt;https://github.com/aio-libs/aiohttp/issues/2934&gt;`_
- Started using `MultiLoopChildWatcher` when it&#x27;s available under POSIX while setting up the test I/O loop.
`3450 &lt;https://github.com/aio-libs/aiohttp/issues/3450&gt;`_
- Only encode content-disposition filename parameter using percent-encoding.
Other parameters are encoded to quoted-string or RFC2231 extended parameter
value.
`4012 &lt;https://github.com/aio-libs/aiohttp/issues/4012&gt;`_
- Fixed HTTP client requests to honor ``no_proxy`` environment variables.
`4431 &lt;https://github.com/aio-libs/aiohttp/issues/4431&gt;`_
- Fix supporting WebSockets proxies configured via environment variables.
`4648 &lt;https://github.com/aio-libs/aiohttp/issues/4648&gt;`_
- Change return type on URLDispatcher to UrlMappingMatchInfo to improve type annotations.
`4748 &lt;https://github.com/aio-libs/aiohttp/issues/4748&gt;`_
- Ensure a cleanup context is cleaned up even when an exception occurs during startup.
`4799 &lt;https://github.com/aio-libs/aiohttp/issues/4799&gt;`_
- Added a new exception type for Unix socket client errors which provides a more useful error message.
`4984 &lt;https://github.com/aio-libs/aiohttp/issues/4984&gt;`_
- Remove Transfer-Encoding and Content-Type headers for 204 in StreamResponse
`5106 &lt;https://github.com/aio-libs/aiohttp/issues/5106&gt;`_
- Only depend on typing_extensions for Python &lt;3.8
`5107 &lt;https://github.com/aio-libs/aiohttp/issues/5107&gt;`_
- Add ABNORMAL_CLOSURE and BAD_GATEWAY to WSCloseCode
`5192 &lt;https://github.com/aio-libs/aiohttp/issues/5192&gt;`_
- Fix cookies disappearing from HTTPExceptions.
`5233 &lt;https://github.com/aio-libs/aiohttp/issues/5233&gt;`_
- StaticResource prefixes no longer match URLs with a non-folder prefix. For example ``routes.static(&#x27;/foo&#x27;, &#x27;/foo&#x27;)`` no longer matches the URL ``/foobar``. Previously, this would attempt to load the file ``/foo/ar``.
`5250 &lt;https://github.com/aio-libs/aiohttp/issues/5250&gt;`_
- Acquire the connection before running traces to prevent race condition.
`5259 &lt;https://github.com/aio-libs/aiohttp/issues/5259&gt;`_
- Add missing slots to _RequestContextManager`` and ``_WSRequestContextManager``
`5329 &lt;https://github.com/aio-libs/aiohttp/issues/5329&gt;`_
- Ensure sending a zero byte file does not throw an exception (round 2)
`5380 &lt;https://github.com/aio-libs/aiohttp/issues/5380&gt;`_
- Set &quot;text/plain&quot; when data is an empty string in client requests.
`5392 &lt;https://github.com/aio-libs/aiohttp/issues/5392&gt;`_
- Stop automatically releasing the ``ClientResponse`` object

pyup-bot · 2024-09-28T10:26:35Z

Closing this in favor of #106

Update aiohttp from 3.7.4 to 3.10.6

60170ea

pyup-bot mentioned this pull request Sep 25, 2024

Update aiohttp to 3.10.5 #104

Closed

pyup-bot closed this Sep 28, 2024

NandaScott deleted the pyup-update-aiohttp-3.7.4-to-3.10.6 branch September 28, 2024 10:26

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update aiohttp to 3.10.6 #105

Update aiohttp to 3.10.6 #105

pyup-bot commented Sep 25, 2024

pyup-bot commented Sep 28, 2024

Update aiohttp to 3.10.6 #105

Update aiohttp to 3.10.6 #105

Conversation

pyup-bot commented Sep 25, 2024

3.10.6

3.10.5

3.10.4

3.10.3

3.10.2

3.10.1

3.10.0

3.9.5

3.9.4

3.9.3

3.9.2

3.9.1

3.9.0

3.8.6

3.8.5

3.8.4

3.8.3

3.8.2

3.8.1

3.8.0

pyup-bot commented Sep 28, 2024