From 2f41c9ddf785baee12e211eb8dffc6f417e5b3db Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 23 Jul 2026 11:19:26 +0000 Subject: [PATCH 1/2] Bump yarl from 1.24.2 to 1.24.5 (#13235) Bumps [yarl](https://github.com/aio-libs/yarl) from 1.24.2 to 1.24.5.
Changelog

Sourced from yarl's changelog.

v1.24.5

(2026-07-19)

Contributor-facing changes

v1.24.4

(2026-07-19)

Packaging updates and notes for downstreams

v1.24.3

(2026-07-19)

... (truncated)

Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=yarl&package-manager=pip&previous-version=1.24.2&new-version=1.24.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements/base-ft.txt | 2 +- requirements/base.txt | 2 +- requirements/constraints.txt | 2 +- requirements/dev.txt | 2 +- requirements/lint.txt | 2 +- requirements/runtime-deps.txt | 2 +- requirements/test-common-base.txt | 2 +- requirements/test-common.txt | 2 +- requirements/test-ft.txt | 2 +- requirements/test-mobile.txt | 2 +- requirements/test.txt | 2 +- 11 files changed, 11 insertions(+), 11 deletions(-) diff --git a/requirements/base-ft.txt b/requirements/base-ft.txt index 7dd69e41073..af1c20f0c33 100644 --- a/requirements/base-ft.txt +++ b/requirements/base-ft.txt @@ -50,5 +50,5 @@ typing-extensions==4.16.0 ; python_version < "3.13" # aiosignal # exceptiongroup # multidict -yarl==1.24.2 +yarl==1.24.5 # via -r requirements/runtime-deps.in diff --git a/requirements/base.txt b/requirements/base.txt index 6e896fbb3bc..90482d2161e 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -52,5 +52,5 @@ typing-extensions==4.16.0 ; python_version < "3.13" # multidict uvloop==0.22.1 ; platform_system != "Windows" and implementation_name == "cpython" # via -r requirements/base.in -yarl==1.24.2 +yarl==1.24.5 # via -r requirements/runtime-deps.in diff --git a/requirements/constraints.txt b/requirements/constraints.txt index 18adaf74166..085dad9a7d4 100644 --- a/requirements/constraints.txt +++ b/requirements/constraints.txt @@ -337,7 +337,7 @@ virtualenv==21.6.1 # via pre-commit wheel==0.47.0 # via pip-tools -yarl==1.24.2 +yarl==1.24.5 # via # -r requirements/runtime-deps.in # aiohttp diff --git a/requirements/dev.txt b/requirements/dev.txt index 9acdbfa6c45..3324e218db8 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -327,7 +327,7 @@ virtualenv==21.6.1 # via pre-commit wheel==0.47.0 # via pip-tools -yarl==1.24.2 +yarl==1.24.5 # via # -r requirements/runtime-deps.in # aiohttp diff --git a/requirements/lint.txt b/requirements/lint.txt index 5360caee322..9da5c0ed39c 100644 --- a/requirements/lint.txt +++ b/requirements/lint.txt @@ -168,7 +168,7 @@ valkey==6.1.1 # via -r requirements/lint.in virtualenv==21.6.1 # via pre-commit -yarl==1.24.2 +yarl==1.24.5 # via aiohttp zlib-ng==1.0.0 # via -r requirements/lint.in diff --git a/requirements/runtime-deps.txt b/requirements/runtime-deps.txt index e361c00ded5..f56645faf71 100644 --- a/requirements/runtime-deps.txt +++ b/requirements/runtime-deps.txt @@ -46,5 +46,5 @@ typing-extensions==4.16.0 ; python_version < "3.13" # aiosignal # exceptiongroup # multidict -yarl==1.24.2 +yarl==1.24.5 # via -r requirements/runtime-deps.in diff --git a/requirements/test-common-base.txt b/requirements/test-common-base.txt index 3b4d891f50c..a7f149ad8c3 100644 --- a/requirements/test-common-base.txt +++ b/requirements/test-common-base.txt @@ -83,7 +83,7 @@ typing-extensions==4.16.0 # exceptiongroup # multidict # pytest-asyncio -yarl==1.24.2 +yarl==1.24.5 # via aiohttp # The following packages are considered to be unsafe in a requirements file: diff --git a/requirements/test-common.txt b/requirements/test-common.txt index 8a9ec2f2900..86007680ab1 100644 --- a/requirements/test-common.txt +++ b/requirements/test-common.txt @@ -144,7 +144,7 @@ typing-extensions==4.16.0 # typing-inspection typing-inspection==0.4.2 # via pydantic -yarl==1.24.2 +yarl==1.24.5 # via aiohttp zlib-ng==1.0.0 # via -r requirements/test-common.in diff --git a/requirements/test-ft.txt b/requirements/test-ft.txt index ee8bdad86f9..703819035b0 100644 --- a/requirements/test-ft.txt +++ b/requirements/test-ft.txt @@ -172,7 +172,7 @@ typing-extensions==4.16.0 ; python_version < "3.13" # typing-inspection typing-inspection==0.4.2 # via pydantic -yarl==1.24.2 +yarl==1.24.5 # via # -r requirements/runtime-deps.in # aiohttp diff --git a/requirements/test-mobile.txt b/requirements/test-mobile.txt index ad8817265fe..bd7f938eee2 100644 --- a/requirements/test-mobile.txt +++ b/requirements/test-mobile.txt @@ -119,7 +119,7 @@ typing-extensions==4.16.0 ; python_version < "3.13" # exceptiongroup # multidict # pytest-asyncio -yarl==1.24.2 +yarl==1.24.5 # via # -r requirements/runtime-deps.in # aiohttp diff --git a/requirements/test.txt b/requirements/test.txt index 84b05d7bba9..bb0c59a37ee 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -174,7 +174,7 @@ typing-inspection==0.4.2 # via pydantic uvloop==0.22.1 ; platform_system != "Windows" and implementation_name == "cpython" # via -r requirements/base.in -yarl==1.24.2 +yarl==1.24.5 # via # -r requirements/runtime-deps.in # aiohttp From 7ffc8aeb6cd644fb3b2b41ae3b4d787d4b8217d4 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 23 Jul 2026 11:28:12 +0000 Subject: [PATCH 2/2] Bump aiofastnet from 0.19.0 to 0.20.0 (#13234) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps [aiofastnet](https://github.com/tarasko/aiofastnet) from 0.19.0 to 0.20.0.
Release notes

Sourced from aiofastnet's releases.

0.20.0

  • Performance improvements from @​river-walras in SSL fallback engine.
  • Fix potential hangups in SSLEngineFallback for some specific ssl MemoryBIO sizes.
  • Simplify logic by always using SSLTransport_Transport when ssl fallback engine is used.
Changelog

Sourced from aiofastnet's changelog.

0.20.0

  • Performance improvements from @​river-walras in SSL fallback engine.
  • Fix potential hangups in SSLEngineFallback for some specific ssl MemoryBIO sizes.
  • Simplify logic by always using SSLTransport_Transport when ssl fallback engine is used.
Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=aiofastnet&package-manager=pip&previous-version=0.19.0&new-version=0.20.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements/base-ft.txt | 2 +- requirements/base.txt | 2 +- requirements/constraints.txt | 2 +- requirements/dev.txt | 2 +- requirements/lint.txt | 2 +- requirements/runtime-deps.txt | 2 +- requirements/test-ft.txt | 2 +- requirements/test-mobile.txt | 2 +- requirements/test.txt | 2 +- 9 files changed, 9 insertions(+), 9 deletions(-) diff --git a/requirements/base-ft.txt b/requirements/base-ft.txt index af1c20f0c33..f215e632a10 100644 --- a/requirements/base-ft.txt +++ b/requirements/base-ft.txt @@ -6,7 +6,7 @@ # aiodns==4.0.4 ; sys_platform != "android" and sys_platform != "ios" # via -r requirements/runtime-deps.in -aiofastnet==0.19.0 ; platform_python_implementation == "CPython" and sys_platform != "android" and sys_platform != "ios" +aiofastnet==0.20.0 ; platform_python_implementation == "CPython" and sys_platform != "android" and sys_platform != "ios" # via -r requirements/runtime-deps.in aiohappyeyeballs==2.7.1 # via -r requirements/runtime-deps.in diff --git a/requirements/base.txt b/requirements/base.txt index 90482d2161e..0bd1765318a 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -6,7 +6,7 @@ # aiodns==4.0.4 ; sys_platform != "android" and sys_platform != "ios" # via -r requirements/runtime-deps.in -aiofastnet==0.19.0 ; platform_python_implementation == "CPython" and sys_platform != "android" and sys_platform != "ios" +aiofastnet==0.20.0 ; platform_python_implementation == "CPython" and sys_platform != "android" and sys_platform != "ios" # via -r requirements/runtime-deps.in aiohappyeyeballs==2.7.1 # via -r requirements/runtime-deps.in diff --git a/requirements/constraints.txt b/requirements/constraints.txt index 085dad9a7d4..153f86d7216 100644 --- a/requirements/constraints.txt +++ b/requirements/constraints.txt @@ -8,7 +8,7 @@ aiodns==4.0.4 ; sys_platform != "android" and sys_platform != "ios" # via # -r requirements/lint.in # -r requirements/runtime-deps.in -aiofastnet==0.19.0 ; platform_python_implementation == "CPython" and sys_platform != "android" and sys_platform != "ios" +aiofastnet==0.20.0 ; platform_python_implementation == "CPython" and sys_platform != "android" and sys_platform != "ios" # via # -r requirements/lint.in # -r requirements/runtime-deps.in diff --git a/requirements/dev.txt b/requirements/dev.txt index 3324e218db8..1a1d8793cb2 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -8,7 +8,7 @@ aiodns==4.0.4 ; sys_platform != "android" and sys_platform != "ios" # via # -r requirements/lint.in # -r requirements/runtime-deps.in -aiofastnet==0.19.0 ; platform_python_implementation == "CPython" and sys_platform != "android" and sys_platform != "ios" +aiofastnet==0.20.0 ; platform_python_implementation == "CPython" and sys_platform != "android" and sys_platform != "ios" # via # -r requirements/lint.in # -r requirements/runtime-deps.in diff --git a/requirements/lint.txt b/requirements/lint.txt index 9da5c0ed39c..2f3af56949f 100644 --- a/requirements/lint.txt +++ b/requirements/lint.txt @@ -6,7 +6,7 @@ # aiodns==4.0.4 # via -r requirements/lint.in -aiofastnet==0.19.0 +aiofastnet==0.20.0 # via -r requirements/lint.in aiohappyeyeballs==2.7.1 # via aiohttp diff --git a/requirements/runtime-deps.txt b/requirements/runtime-deps.txt index f56645faf71..fc06dfda07c 100644 --- a/requirements/runtime-deps.txt +++ b/requirements/runtime-deps.txt @@ -6,7 +6,7 @@ # aiodns==4.0.4 ; sys_platform != "android" and sys_platform != "ios" # via -r requirements/runtime-deps.in -aiofastnet==0.19.0 ; platform_python_implementation == "CPython" and sys_platform != "android" and sys_platform != "ios" +aiofastnet==0.20.0 ; platform_python_implementation == "CPython" and sys_platform != "android" and sys_platform != "ios" # via -r requirements/runtime-deps.in aiohappyeyeballs==2.7.1 # via -r requirements/runtime-deps.in diff --git a/requirements/test-ft.txt b/requirements/test-ft.txt index 703819035b0..188cc0d7d2e 100644 --- a/requirements/test-ft.txt +++ b/requirements/test-ft.txt @@ -6,7 +6,7 @@ # aiodns==4.0.4 ; sys_platform != "android" and sys_platform != "ios" # via -r requirements/runtime-deps.in -aiofastnet==0.19.0 ; platform_python_implementation == "CPython" and sys_platform != "android" and sys_platform != "ios" +aiofastnet==0.20.0 ; platform_python_implementation == "CPython" and sys_platform != "android" and sys_platform != "ios" # via -r requirements/runtime-deps.in aiohappyeyeballs==2.7.1 # via diff --git a/requirements/test-mobile.txt b/requirements/test-mobile.txt index bd7f938eee2..3e77197fbba 100644 --- a/requirements/test-mobile.txt +++ b/requirements/test-mobile.txt @@ -6,7 +6,7 @@ # aiodns==4.0.4 ; sys_platform != "android" and sys_platform != "ios" # via -r requirements/runtime-deps.in -aiofastnet==0.19.0 ; platform_python_implementation == "CPython" and sys_platform != "android" and sys_platform != "ios" +aiofastnet==0.20.0 ; platform_python_implementation == "CPython" and sys_platform != "android" and sys_platform != "ios" # via -r requirements/runtime-deps.in aiohappyeyeballs==2.7.1 # via diff --git a/requirements/test.txt b/requirements/test.txt index bb0c59a37ee..d107597563d 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -6,7 +6,7 @@ # aiodns==4.0.4 ; sys_platform != "android" and sys_platform != "ios" # via -r requirements/runtime-deps.in -aiofastnet==0.19.0 ; platform_python_implementation == "CPython" and sys_platform != "android" and sys_platform != "ios" +aiofastnet==0.20.0 ; platform_python_implementation == "CPython" and sys_platform != "android" and sys_platform != "ios" # via -r requirements/runtime-deps.in aiohappyeyeballs==2.7.1 # via