fix(deps): upgrade aiohttp to 3.13.4 to remediate CVE-2026-34513 and CVE-2026-34515 #1579

Merged

HAL9000 merged 1 commits from fix/dependency-security-aiohttp-cves into master

2026-05-05 02:52:23 +00:00

Author	SHA1	Message	Date
HAL9000	b0ff71e2f5	fix(deps): upgrade aiohttp to 3.13.4 to remediate CVE-2026-34513 and CVE-2026-34515 CI / lint (pull_request) Successful in 1m0s Details CI / push-validation (pull_request) Successful in 25s Details CI / helm (pull_request) Successful in 34s Details CI / quality (pull_request) Successful in 1m20s Details CI / build (pull_request) Successful in 47s Details CI / typecheck (pull_request) Successful in 1m38s Details CI / security (pull_request) Successful in 1m37s Details CI / e2e_tests (pull_request) Successful in 4m34s Details CI / integration_tests (pull_request) Successful in 5m58s Details CI / unit_tests (pull_request) Successful in 8m35s Details CI / docker (pull_request) Successful in 1m46s Details CI / benchmark-publish (pull_request) Has been skipped Details CI / benchmark-regression (pull_request) Failing after 58s Details CI / coverage (pull_request) Successful in 12m16s Details CI / status-check (pull_request) Successful in 17s Details Added CHANGELOG entry documenting the aiohttp>=3.13.4 security constraint that remediates CVE-2026-34513 and CVE-2026-34515 (high-severity open redirect vulnerabilities). The dependency constraint was already present in pyproject.toml via commit `f0ff4bce` on master; this PR documents it in the CHANGELOG and closes the tracking issues. ISSUES CLOSED: #1549, #1544	2026-05-05 02:30:09 +00:00