Log message:
py-aiohttp: updated to 3.10.10

3.10.10 (2024-10-10)

Bug fixes

- Fixed error messages from :py:class:`~aiohttp.resolver.AsyncResolver` being \ 
swallowed

Features

- Added :exc:`aiohttp.ClientConnectorDNSError` for differentiating DNS \ 
resolution errors from other connector errors

Miscellaneous internal changes

- Simplified DNS resolution throttling code to reduce chance of race conditions

Log message:
py-aiohttp: update to 3.10.9.

3.10.9 (2024-10-04)
===================

Bug fixes
---------

- Fixed proxy headers being used in the ``ConnectionKey`` hash when a proxy was \ 
not being used -- by :user:`bdraco`.

  If default headers are used, they are also used for proxy headers. This could \ 
have led to creating connections that were not needed when one was already \ 
available.

  *Related issues and pull requests on GitHub:*
  :issue:`9368`.

- Widened the type of the ``trace_request_ctx`` parameter of
  :meth:`ClientSession.request() <aiohttp.ClientSession.request>` and friends
  -- by :user:`layday`.

  *Related issues and pull requests on GitHub:*
  :issue:`9397`.

Removals and backward incompatible breaking changes
---------------------------------------------------

- Fixed failure to try next host after single-host connection timeout -- by \ 
:user:`brettdh`.

  The default client :class:`aiohttp.ClientTimeout` params has changed to \ 
include a ``sock_connect`` timeout of 30 seconds so that this correct behavior \ 
happens by default.

  *Related issues and pull requests on GitHub:*
  :issue:`7342`.

Miscellaneous internal changes
------------------------------

- Improved performance of resolving hosts with Python 3.12+ -- by :user:`bdraco`.

  *Related issues and pull requests on GitHub:*
  :issue:`9342`.

- Reduced memory required for timer objects created during the client request \ 
lifecycle -- by :user:`bdraco`.

  *Related issues and pull requests on GitHub:*
  :issue:`9406`.

Log message:
py-aiohttp: updated to 3.10.8

3.10.8 (2024-09-28)

Bug fixes

- Fixed cancellation leaking upwards on timeout

3.10.7 (2024-09-27)

Bug fixes

- Fixed assembling the :class:`~yarl.URL` for web requests when the host \ 
contains a non-default port or IPv6 address

Miscellaneous internal changes

- Improved performance of determining if a URL is absolute
- Replaced code that can now be handled by ``yarl``

3.10.6 (2024-09-24)

Bug fixes

- Added :exc:`aiohttp.ClientConnectionResetError`. Client code that previously \ 
threw :exc:`ConnectionResetError`
  will now throw this
- Fixed an unclosed transport ``ResourceWarning`` on web handlers
- Fixed resolve_host() 'Task was destroyed but is pending' errors
- Fixed handling of some file-like objects (e.g. ``tarfile.extractfile()``) \ 
which raise ``AttributeError`` instead of ``OSError`` when ``fileno`` fails for \ 
streaming payload data
- Fixed web router not matching pre-encoded URLs (requires yarl 1.9.6+)
- Fixed an error when trying to add a route for multiple methods with a path \ 
containing a regex pattern
- Fixed ``Response.text`` when body is a ``Payload``
- Fixed compressed requests failing when no body was provided
- Fixed client incorrectly reusing a connection when the previous message had \ 
not been fully sent
- Fixed race condition that could cause server to close connection incorrectly \ 
at keepalive timeout
- Fixed Python parser chunked handling with multiple Transfer-Encoding values
- Fixed error handling after 100-continue so server sends 500 response instead \ 
of disconnecting
- Stopped adding a default Content-Type header when response has no content
- Added support for URL credentials with empty (zero-length) username, e.g. \ 
``https://:password@host``
- Stopped logging exceptions from ``web.run_app()`` that would be raised regardless
- Implemented binding to IPv6 addresses in the pytest server fixture.
- Fixed the incorrect use of flags for ``getnameinfo()`` in the Resolver
- Fixed StreamResponse.prepared to return True after EOF is sent
- Changed ``make_mocked_request()`` to use empty payload by default
- Used more precise type for ``ClientResponseError.headers``, fixing some type \ 
errors when using them
- Changed behavior when returning an invalid response to send a 500 response
- Fixed response reading from closed session to throw an error immediately \ 
instead of timing out
- Fixed ``CancelledError`` from one cleanup context stopping other contexts from \ 
completing
- Fixed changing scheme/host in ``Response.clone()`` for absolute URLs
- Fixed ``Site.name`` when host is an empty string
- Updated Python parser to reject messages after a close message, matching C \ 
parser behaviour
- Fixed creation of ``SSLContext`` inside of :py:class:`aiohttp.TCPConnector` \ 
with multiple event loops in different threads
- Fixed (on Python 3.11+) some edge cases where a task cancellation may get \ 
incorrectly suppressed
- Fixed exception information getting lost on ``HttpProcessingError``
- Fixed ``If-None-Match`` not using weak comparison
- Fixed badly encoded charset crashing when getting response text instead of \ 
falling back to charset detector.
- Rejected `\n` in `reason` values to avoid sending broken HTTP messages
- Changed :py:meth:`ClientResponse.raise_for_status() \ 
<aiohttp.ClientResponse.raise_for_status>` to only release the connection \ 
when invoked outside an ``async with`` context

Features

- Improved type on ``params`` to match the underlying type allowed by ``yarl``
- Declared Python 3.13 supported

Removals and backward incompatible breaking changes

- Improved middleware performance
- Increased minimum yarl version to 1.12.0

Improved documentation

- Clarified that ``GracefulExit`` needs to be handled in ``AppRunner`` and \ 
``ServerRunner`` when using ``handle_signals=True``.
- Clarified that auth parameter in ClientSession will persist and be included \ 
with any request to any origin, even during redirects to different origins.
- Clarified which timeout exceptions happen on which timeouts
- Updated ``ClientSession`` parameters to match current code

Packaging updates and notes for downstreams

- Fixed ``test_client_session_timeout_zero`` to not require internet access

Miscellaneous internal changes

- Improved performance of making requests when there are no auto headers to skip
- Exported ``aiohttp.TraceRequestHeadersSentParams``
- Avoided tracing overhead in the http writer when there are no active traces -- \ 
by user:`bdraco`.
- Improved performance of reify Cython implementation
- Use :meth:`URL.extend_query() <yarl.URL.extend_query>` to extend query \ 
params (requires yarl 1.11.0+)
- Improved performance of checking if a host is an IP Address
- Significantly improved performance of middlewares
- Improved performance of web requests
- Improved performance of starting web requests when there is no response \ 
prepare hook
- Significantly improved performance of expiring cookies
- Significantly sped up filtering cookies

Log message:
py-aiohttp: updated to 3.10.5

3.10.5 (2024-08-19)

Bug fixes

- Fixed :meth:`aiohttp.ClientResponse.json()` not setting ``status`` when \ 
:exc:`aiohttp.ContentTypeError` is raised

Miscellaneous internal changes

- Improved performance of the WebSocket reader

Log message:
py-aiohttp: updated to 3.10.4

3.10.4 (2024-08-17)
===================

Bug fixes
---------

- Fixed decoding base64 chunk in BodyPartReader

- Fixed a race closing the server-side WebSocket where the close code would not \ 
reach the client

- Fixed unconsumed exceptions raised by the WebSocket heartbeat

  If the heartbeat ping raised an exception, it would not be consumed and would \ 
be logged as an warning.

- Fixed an edge case in the Python parser when chunk separators happen to align \ 
with network chunks

Improved documentation
----------------------

- Added ``aiohttp-apischema`` to supported libraries

Miscellaneous internal changes
------------------------------

- Improved performance of starting request handlers with Python 3.12+

  This change is a followup to :issue:`8661` to make the same optimization for \ 
Python 3.12+ where the request is connected.

Log message:
py-aiohttp: updated to 3.10.3

3.10.3 (2024-08-10)

Bug fixes

- Fixed multipart reading when stream buffer splits the boundary over several \ 
read() calls
- Fixed :py:class:`aiohttp.TCPConnector` doing blocking I/O in the event loop to \ 
create the ``SSLContext``

  The blocking I/O would only happen once per verify mode. However, it could \ 
cause the event loop to block for a long time if the ``SSLContext`` creation is \ 
slow, which is more likely during startup when the disk cache is not yet \ 
present.

Miscellaneous internal changes

- Improved performance of :py:meth:`~aiohttp.ClientWebSocketResponse.receive` \ 
and :py:meth:`~aiohttp.web.WebSocketResponse.receive` when there is no timeout.

  The timeout context manager is now avoided when there is no timeout as it \ 
accounted for up to 50% of the time spent in the \ 
:py:meth:`~aiohttp.ClientWebSocketResponse.receive` and \ 
:py:meth:`~aiohttp.web.WebSocketResponse.receive` methods.

- Improved performance of starting request handlers with Python 3.12+
- Improved performance of HTTP keep-alive checks

  Previously, when processing a request for a keep-alive connection, the \ 
keep-alive check would happen every second; the check is now rescheduled if it \ 
fires too early instead.

- Improved performance of generating random WebSocket mask

3.10.2 (2024-08-08)

Bug fixes

- Fixed server checks for circular symbolic links to be compatible with Python 3.13
- Fixed request body not being read when ignoring an Upgrade request
- Fixed an edge case where shutdown would wait for timeout when the handler was \ 
already completed
- Fixed connecting to ``npipe://``, ``tcp://``, and ``unix://`` urls
- Fixed WebSocket ping tasks being prematurely garbage collected

  There was a small risk that WebSocket ping tasks would be prematurely garbage \ 
collected because the event loop only holds a weak reference to the task. The \ 
garbage collection risk has been fixed by holding a strong reference to the \ 
task. Additionally, the task is now scheduled eagerly with Python 3.12+ to \ 
increase the chance it can be completed immediately and avoid having to hold any \ 
references to the task.

- Fixed incorrectly following symlinks for compressed file variants

Removals and backward incompatible breaking changes

- Removed ``Request.wait_for_disconnection()``, which was mistakenly added \ 
briefly in 3.10.0

Contributor-facing changes

- Fixed monkey patches for ``Path.stat()`` and ``Path.is_dir()`` for Python 3.13 \ 
compatibility

Miscellaneous internal changes

- Improved WebSocket performance when messages are sent or received frequently

  The WebSocket heartbeat scheduling algorithm was improved to reduce the \ 
``asyncio`` scheduling overhead by decreasing the number of \ 
``asyncio.TimerHandle`` creations and cancellations.

- Minor improvements to various type annotations

Log message:
py-aiohttp: updated to 3.10.1

3.10.1 (2024-08-03)

Bug fixes

- Fixed WebSocket server heartbeat timeout logic to terminate \ 
:py:meth:`~aiohttp.ClientWebSocketResponse.receive` and return \ 
:py:class:`~aiohttp.ServerTimeoutError` -- by :user:`arcivanov`.

  When a WebSocket pong message was not received, the \ 
:py:meth:`~aiohttp.ClientWebSocketResponse.receive` operation did not terminate. \ 
This change causes ``_pong_not_received`` to feed the ``reader`` an error \ 
message, causing pending :py:meth:`~aiohttp.ClientWebSocketResponse.receive` to \ 
terminate and return the error message. The error message contains the exception \ 
:py:class:`~aiohttp.ServerTimeoutError`.

- Fixed url dispatcher index not matching when a variable is preceded by a fixed \ 
string after a slash -- by :user:`bdraco`.

Removals and backward incompatible breaking changes

- Creating :py:class:`aiohttp.TCPConnector`, :py:class:`aiohttp.ClientSession`, \ 
:py:class:`~aiohttp.resolver.ThreadedResolver` :py:class:`aiohttp.web.Server`, \ 
or :py:class:`aiohttp.CookieJar` instances without a running event loop now \ 
raises a :exc:`RuntimeError` -- by :user:`asvetlov`.

  Creating these objects without a running event loop was deprecated in \ 
:issue:`3372` which was released in version 3.5.0.

  This change first appeared in version 3.10.0 as :issue:`6378`.

Log message:
py-aiohttp: updated to 3.10.0

3.10.0 (2024-07-30)

Bug fixes

- Fixed server response headers for ``Content-Type`` and ``Content-Encoding`` for
  static compressed files

  Server will now respond with a ``Content-Type`` appropriate for the compressed
  file (e.g. ``"application/gzip"``), and omit the \ 
``Content-Encoding`` header.
  Users should expect that most clients will no longer decompress such responses
  by default.

- Fixed duplicate cookie expiration calls in the CookieJar implementation
- Adjusted ``FileResponse`` to check file existence and access when preparing \ 
the response

  The :py:class:`~aiohttp.web.FileResponse` class was modified to respond with
   403 Forbidden or 404 Not Found as appropriate.  Previously, it would cause a
   server error if the path did not exist or could not be accessed.  Checks for
   existence, non-regular files, and permissions were expected to be done in the
   route handler.  For static routes, this now permits a compressed file to exist
   without its uncompressed variant and still be served.  In addition, this
   changes the response status for files without read permission to 403, and for
   non-regular files from 404 to 403 for consistency.

- Fixed ``AsyncResolver`` to match ``ThreadedResolver`` behavior

  On system with IPv6 support, the :py:class:`~aiohttp.resolver.AsyncResolver` \ 
would not fallback
  to providing A records when AAAA records were not available.
  Additionally, unlike the :py:class:`~aiohttp.resolver.ThreadedResolver`, the \ 
:py:class:`~aiohttp.resolver.AsyncResolver`
  did not handle link-local addresses correctly.

  This change makes the behavior consistent with the \ 
:py:class:`~aiohttp.resolver.ThreadedResolver`.

- Fixed ``ws_connect`` not respecting `receive_timeout`` on WS(S) connection.
- Removed blocking I/O in the event loop for static resources and refactored
  exception handling

  File system calls when handling requests for static routes were moved to a
  separate thread to potentially improve performance. Exception handling
  was tightened in order to only return 403 Forbidden or 404 Not Found responses
  for expected scenarios; 500 Internal Server Error would be returned for any
  unknown errors.

Features

- Added a Request.wait_for_disconnection() method, as means of allowing request \ 
handlers to be notified of premature client disconnections.
- Added 5 new exceptions: :py:exc:`~aiohttp.InvalidUrlClientError`, \ 
:py:exc:`~aiohttp.RedirectClientError`,
  :py:exc:`~aiohttp.NonHttpUrlClientError`, \ 
:py:exc:`~aiohttp.InvalidUrlRedirectClientError`,
  :py:exc:`~aiohttp.NonHttpUrlRedirectClientError`

  :py:exc:`~aiohttp.InvalidUrlRedirectClientError`, \ 
:py:exc:`~aiohttp.NonHttpUrlRedirectClientError`
  are raised instead of :py:exc:`ValueError` or :py:exc:`~aiohttp.InvalidURL` \ 
when the redirect URL is invalid. Classes
  :py:exc:`~aiohttp.InvalidUrlClientError`, :py:exc:`~aiohttp.RedirectClientError`,
  :py:exc:`~aiohttp.NonHttpUrlClientError` are base for them.

  The :py:exc:`~aiohttp.InvalidURL` now exposes a ``description`` property with \ 
the text explanation of the error details.

- Added a feature to retry closed connections automatically for idempotent methods.
- Implemented filter_cookies() with domain-matching and path-matching on the \ 
keys, instead of testing every single cookie.
  This may break existing cookies that have been saved with `CookieJar.save()`. \ 
Cookies can be migrated with this script::

      import pickle
      with file_path.open("rb") as f:
          cookies = pickle.load(f)

      morsels = [(name, m) for c in cookies.values() for name, m in c.items()]
      cookies.clear()
      for name, m in morsels:
          cookies[(m["domain"], \ 
m["path"].rstrip("/"))][name] = m

      with file_path.open("wb") as f:
          pickle.dump(cookies, f, pickle.HIGHEST_PROTOCOL)

- Separated connection and socket timeout errors, from ServerTimeoutError.
- Implemented happy eyeballs
- Added server capability to check for static files with Brotli compression via \ 
a ``.br`` extension

Removals and backward incompatible breaking changes

- The shutdown logic in 3.9 waited on all tasks, which caused issues with some \ 
libraries.
  In 3.10 we've changed this logic to only wait on request handlers. This means \ 
that it's
  important for developers to correctly handle the lifecycle of background tasks \ 
using a
  library such as ``aiojobs``. If an application is using \ 
``handler_cancellation=True`` then
  it is also a good idea to ensure that any :func:`asyncio.shield` calls are \ 
replaced with
  :func:`aiojobs.aiohttp.shield`.

Improved documentation

- Added documentation for ``aiohttp.web.FileResponse``.
- Improved the docs for the `ssl` params.

Contributor-facing changes

- Enabled HTTP parser tests originally intended for 3.9.2 release

Miscellaneous internal changes

- Improved URL handler resolution time by indexing resources in the UrlDispatcher.
  For applications with a large number of handlers, this should increase \ 
performance significantly.
- Added `nacl_middleware <https://github.com/CosmicDNA/nacl_middleware>`_ \ 
to the list of middlewares in the third party section of the documentation.
- Minor improvements to static typing
- Added a 3.11-specific overloads to ``ClientSession``
- Simplified path checks for ``UrlDispatcher.add_static()`` method
- Avoided creating a future on every websocket receive
- Updated identity checks for all ``WSMsgType`` type compares
- When using Python 3.12 or later, the writer is no longer scheduled on the \ 
event loop if it can finish synchronously. Avoiding event loop scheduling \ 
reduces latency and improves performance.
- Restored :py:class:`~aiohttp.resolver.AsyncResolver` to be the default resolver.

Log message:
py-aiohttp: updated to 3.9.5

3.9.5 (2024-04-16)

Bug fixes

- Fixed "Unclosed client session" when initialization of
  :py:class:`~aiohttp.ClientSession` fails
- Fixed regression (from :pr:`8280`) with adding ``Content-Disposition`` to the \ 
``form-data``
  part after appending to writer
- Added default ``Content-Disposition`` in ``multipart/form-data`` responses to \ 
avoid broken
  form-data responses

Log message:
py-aiohttp: updated to 3.9.4

3.9.4 (2024-04-11)

Bug fixes

- The asynchronous internals now set the underlying causes
  when assigning exceptions to the future objects
- Treated values of ``Accept-Encoding`` header as case-insensitive when checking
  for gzip files
- Improved the DNS resolution performance on cache hit
  This is achieved by avoiding an :mod:`asyncio` task creation in this case.
- Changed the type annotations to allow ``dict`` on \ 
:meth:`aiohttp.MultipartWriter.append`,
  :meth:`aiohttp.MultipartWriter.append_json` and
  :meth:`aiohttp.MultipartWriter.append_form`
- Ensure websocket transport is closed when client does not close it
  The transport could remain open if the client did not close it. This
  change ensures the transport is closed when the client does not close
  it.
- Leave websocket transport open if receive times out or is cancelled
  This restores the behavior prior to the change in 7978.
- Fixed content not being read when an upgrade request was not supported with \ 
the pure Python implementation.
- Fixed a race condition with incoming connections during server shutdown
- Fixed ``multipart/form-data`` compliance with :rfc:`7578`
- Fixed blocking I/O in the event loop while processing files in a POST request
- Escaped filenames in static view
- Fixed the pure python parser to mark a connection as closing when a
  response has no length

Features

- Upgraded *llhttp* to 9.2.1, and started rejecting obsolete line folding
  in Python parser to match

Deprecations (removal in next major release)

- Deprecated ``content_transfer_encoding`` parameter in \ 
:py:meth:`FormData.add_field()
  <aiohttp.FormData.add_field>`

Improved documentation

- Added a note about canceling tasks to avoid delaying server shutdown