fix(deps): upgrade aiohttp to 3.13.4 to remediate CVE-2026-34515 open redirect #1999

Merged
freemo merged 1 commits from fix/dependency-security-aiohttp-cve-2026-34515 into master 2026-04-03 01:08:35 +00:00
+1
View File
@@ -47,6 +47,7 @@ dependencies = [
"jsonschema>=4.20.0", # JSON Schema validation for tool inputs/outputs
"tomlkit>=0.13.0", # TOML writing with comment preservation for config CLI
"tenacity>=8.2.0", # Retry framework for service layer resilience
"aiohttp>=3.13.4", # CVE-2026-34515 mitigation: open redirect vulnerability
]
[project.optional-dependencies]