Unclaimed project
Are you a maintainer of aiohttp? Claim this project to take control of your public changelog and roadmap.
This release contains fixes for several vulnerabilities. It is advised to upgrade as soon as possible.
Fixed proxy authorization headers not being passed when reusing a connection, which caused 407 (Proxy authentication required) errors
-- by :user:GLeurquin.
Related issues and pull requests on GitHub: #2596.
Fixed multipart reading failing when encounterin...
Fixed cookie parser to continue parsing subsequent cookies when encountering a malformed cookie that fails regex validation, such as Google's g_state cookie with unescaped quotes -- by :user:bdraco.
Related issues and pull requests on GitHub: #11632.
Fixed loading netrc credentials from the default :file:~/.netrc (:file:~/_netrc on Windows) location wh...
Make configuration options in AppRunner also available in run_app()
-- by :user:Cycloctane.
Related issues and pull requests on GitHub: #11633.
Switched to backports.zstd for Python <3.14 and fixed zstd decompression for chunked zstd streams -- by :user:ZhaoMJ.
Note: Users who installed zstandard for support on Python <3...
Added support for Python 3.14.
Related issues and pull requests on GitHub: #10851, #10872.
Added support for free-threading in Python 3.14+ -- by :user:kumaraditya303.
Related issues and pull requests on GitHub: #11466, #11464.
Added support for Zstandard (aka Zstd) compression
-- by :user:KGuillaume-chaps.
*Related issues and pull requests...
Fixed :class:~aiohttp.DigestAuthMiddleware to preserve the algorithm case from the server's challenge in the authorization response. This improves compatibility with servers that perform case-sensitive algorithm matching (e.g., servers expecting algorithm=MD5-sess instead of algorithm=MD5-SESS)
-- by :user:bdraco.
*Related issues and pull requests on GitHub...