[Superseded] chore(deps): bump aiohttp from 3.14.1 to 3.14.3

[dependabot]

Bumps the uv group with 1 update in the / directory: aiohttp.

Updates aiohttp from 3.14.1 to 3.14.3

Changelog

Sourced from aiohttp's changelog.

3.14.3 (2026-07-22)

Bug fixes

• Fixed the client dropping only the first Authorization, Cookie and Proxy-Authorization header when a redirect crossed an origin -- by :user:arshsmith1.

  Related issues and pull requests on GitHub: :issue:13180.

• Fixed error message construction in the C HTTP parser -- by :user:bdraco.

  Related issues and pull requests on GitHub: :issue:13222.

---

3.14.2 (2026-07-20)

Bug fixes

• Fixed :py:attr:~aiohttp.web.StreamResponse.last_modified rounding a :class:datetime.datetime with a fractional second down.

  Related issues and pull requests on GitHub: :issue:5303.

• Fixed resolving localhost on Windows to fall back without AI_ADDRCONFIG when the first lookup fails, so localhost still works without an active network.

  Related issues and pull requests on GitHub: :issue:5357.

... (truncated)

Commits

• 5e392ce Release v3.14.3 (#13225)
• 49f65d5 [PR #13222/f4866933 backport][3.14] Build C parser error message from bounded...
• 240099e [PR #13180/ee53d655 backport][3.14] drop every copy of credential headers on ...
• d93f30a Bump version (#13202)
• c1b9212 Release v3.14.2 (#13201)
• 380d4b5 [PR #13054/ed8b040c backport][3.14] escape backslashes in digest auth quoted-...
• e1e1bee Make llhttp method array size dynamic (#13174) (#13196)
• aa4cf29 [PR #13170/2b906869 backport][3.14] Fix StreamResponse.last_modified rounding...
• 71b57b4 [PR #13172/a57747ed backport][3.14] Fix C parser folding fragment into query_...
• 64a03fb [PR #13169/1adc0cd7 backport][3.14] Upgrade http:// to https:// in README.rst...
• Additional commits viewable in compare view

Summary by CodeRabbit

• Chores
  • Updated the locked aiohttp dependency to version 3.14.3.
  • Refreshed package integrity hashes for the updated dependency.

[coderabbitai]

📝 Walkthrough

Walkthrough

The generated dependency lock entry updates aiohttp from version 3.14.1 to 3.14.3 and replaces all associated SHA-256 distribution hashes.

Changes

Dependency lock update

Layer / File(s)	Summary
Regenerate aiohttp lock entry requirements-strix-ci-hashes.txt	Updates the pinned aiohttp version to 3.14.3 and replaces its complete distribution hash set.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Suggested reviewers: seonghobae

🚥 Pre-merge checks | ✅ 4

✅ Passed checks (4 passed)

Check name	Status	Explanation
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies the aiohttp dependency update from version 3.14.1 to 3.14.3.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/uv/uv-cb16c77914

---

_{Comment @coderabbitai help to get the list of available commands.}

[seonghobae]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[seonghobae]

@dependabot rebase

[seonghobae]

@opencode-agent Please review exact head cdf4ceaaa9136629b098c675e749c116b2c7258a. The only changed file is the regenerated uv.lock for aiohttp 3.14.3; all six repository-local workflows and CodeRabbit approval are green. Verify the lock closure, transitive compatibility, and absence of unrelated dependency drift. Submit APPROVE only if no blocker remains.

[seonghobae]

@cwl-noema-review Please independently review exact head cdf4ceaaa9136629b098c675e749c116b2c7258a. Confirm the one-file uv lock update resolves aiohttp 3.14.3 consistently without unrelated drift. All repository-local checks and CodeRabbit approval are green; submit APPROVE only if no blocker remains.

[seonghobae]

Reviewed exact head cdf4ceaaa9136629b098c675e749c116b2c7258a. The diff is confined to the regenerated uv.lock for aiohttp 3.14.3, all six repository-local workflows succeed, CodeRabbit independently approves, and no unresolved review thread remains. Approved subject to the mandatory central OpenCode/Noema and remaining protected checks.

[seonghobae]

@opencode-agent @cwl-noema-review Please complete the pending exact-head protected reviews for cdf4ceaaa9136629b098c675e749c116b2c7258a. The one-file diff is restricted to the regenerated uv.lock for aiohttp 3.14.3; all six repository-local workflows succeed, CodeRabbit approves, and there are no review threads. Verify lock integrity, the absence of unrelated dependency drift, and the credential-header redirect fix boundary. Submit APPROVE only if no blocker remains.

[seonghobae]

@opencode-agent @cwl-noema-review Please independently review exact current head cdf4ceaaa9136629b098c675e749c116b2c7258a. Repository-local Application CI, Docker image build, Dependency Review, Bandit, SAST Semgrep, Security Scan, and CodeRabbit all succeed; there are no review threads and CodeRabbit submitted APPROVE. Verify the single-file hash-locked aiohttp 3.14.3 refresh, dependency integrity, redirect credential-header security fix, absence of unrelated drift, and submit the two remaining protected current-head review checks/APPROVE only if no blocker remains. This repository permits merge commits rather than squash.

[seonghobae]

@opencode-agent Please review exact current head cdf4ceaaa9136629b098c675e749c116b2c7258a after current-head central checks complete. The change is confined to the regenerated uv lock for aiohttp 3.14.3; validate the lock closure, security-advisory remediation, transitive compatibility, and absence of unrelated drift. Approve only if no blocker remains.

@cwl-noema-review Independently review the same exact head after required checks complete.

[seonghobae]

Superseded by maintainer-owned PR #1244, which points to the identical exact source commit cdf4ceaaa9136629b098c675e749c116b2c7258a. This replacement is necessary because the Dependabot-owned branch passed all repository-local checks and independent CodeRabbit review but could not produce two organization-required review status contexts; a protected merge remained blocked with those contexts expected. PR #1244 must earn its own exact-head checks and independent review before merge. Closing this duplicate avoids parallel dependency branches without bypassing any gate.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

[seonghobae]

Superseded by maintainer-owned replacement #1244, which preserves the identical validated aiohttp 3.14.3 dependency tree while allowing the required central exact-head workflows to materialize. Keep this Dependabot branch closed as historical evidence; do not merge both.