aio-libs/aiohttp - CodSpeed

aiohttp

Blog Docs Changelog

Performance History

Latest Results

Handle multiple WWW-Authenticate challenges in digest auth middleware RFC 7616 4.1 allows servers to send multiple WWW-Authenticate header fields or combine challenges in a single field. The digest auth middleware only read the first header value and gave up if it wasn't Digest (e.g. Basic listed before Digest, common on IIS/nginx), causing Digest credentials to be silently ignored and users to receive a bare 401. Iterate over all WWW-Authenticate fields and use the first parseable Digest challenge that contains realm and nonce. Signed-off-by: Johnny Yao <73487872+yl120064227@users.noreply.github.com>

yl120064227:fix/digest-multi-challenge

48 minutes ago

Bump certifi from 2026.7.22 to 2026.10.18 Bumps [certifi](https://github.com/certifi/python-certifi) from 2026.7.22 to 2026.10.18. - [Commits](https://github.com/certifi/python-certifi/compare/2026.07.22...2026.10.18) --- updated-dependencies: - dependency-name: certifi dependency-version: 2026.10.18 dependency-type: indirect update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot/pip/3.15/certifi-2026.10.18

4 hours ago

Bump python-discovery from 1.6.3 to 1.6.4 Bumps [python-discovery](https://github.com/tox-dev/python-discovery) from 1.6.3 to 1.6.4. - [Release notes](https://github.com/tox-dev/python-discovery/releases) - [Changelog](https://github.com/tox-dev/python-discovery/blob/main/docs/changelog.rst) - [Commits](https://github.com/tox-dev/python-discovery/compare/1.6.3...1.6.4) --- updated-dependencies: - dependency-name: python-discovery dependency-version: 1.6.4 dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot/pip/3.15/python-discovery-1.6.4

4 hours ago

Bump python-discovery from 1.6.3 to 1.6.4 Bumps [python-discovery](https://github.com/tox-dev/python-discovery) from 1.6.3 to 1.6.4. - [Release notes](https://github.com/tox-dev/python-discovery/releases) - [Changelog](https://github.com/tox-dev/python-discovery/blob/main/docs/changelog.rst) - [Commits](https://github.com/tox-dev/python-discovery/compare/1.6.3...1.6.4) --- updated-dependencies: - dependency-name: python-discovery dependency-version: 1.6.4 dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot/pip/python-discovery-1.6.4

4 hours ago

Bump tomli from 2.4.1 to 2.5.0 (#14032) Bumps [tomli](https://github.com/hukkin/tomli) from 2.4.1 to 2.5.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/hukkin/tomli/blob/master/CHANGELOG.md">tomli's changelog</a>.</em></p> <blockquote> <h2>2.5.0</h2> <ul> <li>Added <ul> <li>Binary wheels for Python 3.15</li> </ul> </li> <li>Fixed <ul> <li>Set nested inline array/table limit to 400 to fix mypyc generated binaries crashing unrecoverably in constrained environments (e.g. worker thread in a <code>python:3.13-alpine</code> image)</li> </ul> </li> </ul> <h2>2.3.1</h2> <ul> <li>Fixed <ul> <li>Backport: Limit number of parts of a TOML key to address quadratic time complexity</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/hukkin/tomli/commit/a2a578949199336ebc3884eeba4aede87da41ef2"><code>a2a5789</code></a> Bump version: 2.4.1 → 2.5.0</li> <li><a href="https://github.com/hukkin/tomli/commit/94a60819c4f0b244829513f19f3caf64ef16b466"><code>94a6081</code></a> Add 2.5.0 changelog</li> <li><a href="https://github.com/hukkin/tomli/commit/85f8748d51e42f4bb1f4969e3911fa8e52eaa7b5"><code>85f8748</code></a> Update README.md</li> <li><a href="https://github.com/hukkin/tomli/commit/70fd4609dd97ea30ade101a4c8deb37ff2d694ed"><code>70fd460</code></a> Allow flit_core v4</li> <li><a href="https://github.com/hukkin/tomli/commit/00d06107cad00485e1d4eb0b51a2ec3980d52c1c"><code>00d0610</code></a> Update pre-commit</li> <li><a href="https://github.com/hukkin/tomli/commit/eb93c1225a5540e61a3a4054673e364fc6efe307"><code>eb93c12</code></a> Improve tomllib compatibility and sync docs (<a href="https://redirect.github.com/hukkin/tomli/issues/299">#299</a>)</li> <li><a href="https://github.com/hukkin/tomli/commit/18d8d59db6d632ebbcfe63f1f7636145d652da21"><code>18d8d59</code></a> Bump cibuildwheel for Python 3.15 wheels (<a href="https://redirect.github.com/hukkin/tomli/issues/317">#317</a>)</li> <li><a href="https://github.com/hukkin/tomli/commit/1e6e869aa9dbbddc492608944e82d9ad5397280f"><code>1e6e869</code></a> Set smaller MAX_INLINE_NESTING to avoid python:3.13-alpine worker thread crash</li> <li><a href="https://github.com/hukkin/tomli/commit/c3299981db699cacabbd6edd0e32934f5e3e600b"><code>c329998</code></a> Use Trusted Publishing</li> <li><a href="https://github.com/hukkin/tomli/commit/ba611c5a97da9226533e3c39d5c46c0b55b80acb"><code>ba611c5</code></a> Add zizmor security scanner to pre-commit (<a href="https://redirect.github.com/hukkin/tomli/issues/301">#301</a>)</li> <li>Additional commits viewable in <a href="https://github.com/hukkin/tomli/compare/2.4.1...2.5.0">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

master

8 hours ago

Name the news fragment for PR 14100

Ricardo-M-L:fix/empty-readexactly-20261022

9 hours ago

Add PR-numbered news fragment for the total_raw_bytes fix Link CHANGES/14099.bugfix.rst to the issue-numbered fragment, as other entries in CHANGES/ do, so the note is attached to both the issue and this pull request.

officialpm:fix-empty-stream-reader-total-raw-bytes

11 hours ago

Fix docs spelling check

astroknot-sheep:del-cookie-partitioned

14 hours ago

Latest Branches

0%

Handle multiple WWW-Authenticate challenges in digest auth middleware#14104

1 hour ago

86570d2

yl120064227:fix/digest-multi-challenge

0%

Bump certifi from 2026.7.22 to 2026.10.18#14103

4 hours ago

72b7546

dependabot/pip/3.15/certifi-2026.10.18

0%

Bump python-discovery from 1.6.3 to 1.6.4#14102

4 hours ago

3de5775

dependabot/pip/3.15/python-discovery-1.6.4

© 2026 CodSpeed Technology

Home Terms Privacy Docs