Skip to content

fix(deps): remediate aiohttp vulnerabilities - #106

Draft
raunakdoesdev wants to merge 1 commit into
mainfrom
codex/vanta-aiohttp-remediation
Draft

fix(deps): remediate aiohttp vulnerabilities#106
raunakdoesdev wants to merge 1 commit into
mainfrom
codex/vanta-aiohttp-remediation

Conversation

@raunakdoesdev

@raunakdoesdev raunakdoesdev commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

Summary

  • require aiohttp 3.13.4+ on Python 3.9
  • require aiohttp 3.14.2+ on Python 3.10+
  • refresh Rye lockfiles to aiohttp 3.13.5
  • preserve the SDK's advertised Python 3.9 support

This supersedes #86: Vanta now flags aiohttp versions through 3.13.3, so a 3.13.3 floor is no longer sufficient.

Validation

  • ./scripts/test (455 passed / 370 skipped; Pydantic v1: 452 passed / 373 skipped)
  • ./scripts/lint
  • rye build

View with [code]smith Autofix with [code]smith
Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant