aio-libs/aiohttp - CodSpeed

aiohttp

Blog Docs Changelog

Performance History

Latest Results

Validate WebSocket control frames before writing them The writer accepted control payloads and close arguments that the reader rejects, so both the client and the server could emit frames that force the peer to drop the connection with 1002 or 1007 instead of closing it cleanly. Closing also marked the response as closed before the frame was written, which turned the failure into an abnormal closure (1006) and hid the error from the caller. Reject an oversized control payload, a close status code that may not appear on the wire, a close reason that is not valid UTF-8, and a one-byte close payload with ValueError before anything is sent, mirroring the checks in reader_py.py, and validate the arguments in close() before the response changes state.

Omarinho12345:fix/ws-writer-control-frames

26 minutes ago

Encode / in plain {var} values in DynamicResource.url_for

insaf021:url-for-quote-slash

3 hours ago

Name the changelog fragment after the issue, link the PR number AGENTS.md wants both numbers: the issue-numbered file is the real fragment, with a PR-numbered symlink pointing at it.

perfectmodelslab:fix/ws-heartbeat-after-close

3 hours ago

Add the contributor attribution to the changelog fragment

perfectmodelslab:fix/ws-heartbeat-after-close

6 hours ago

Bump myst-parser from 4.0.1 to 5.1.0 Bumps [myst-parser](https://github.com/executablebooks/MyST-Parser) from 4.0.1 to 5.1.0. - [Release notes](https://github.com/executablebooks/MyST-Parser/releases) - [Changelog](https://github.com/executablebooks/MyST-Parser/blob/master/CHANGELOG.md) - [Commits](https://github.com/executablebooks/MyST-Parser/compare/v4.0.1...v5.1.0) --- updated-dependencies: - dependency-name: myst-parser dependency-version: 5.1.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot/pip/myst-parser-5.1.0

9 hours ago

Bump sphinx from 8.1.3 to 9.0.4 Bumps [sphinx](https://github.com/sphinx-doc/sphinx) from 8.1.3 to 9.0.4. - [Release notes](https://github.com/sphinx-doc/sphinx/releases) - [Changelog](https://github.com/sphinx-doc/sphinx/blob/v9.0.4/CHANGES.rst) - [Commits](https://github.com/sphinx-doc/sphinx/compare/v8.1.3...v9.0.4) --- updated-dependencies: - dependency-name: sphinx dependency-version: 8.2.3 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot/pip/3.15/sphinx-8.2.3

9 hours ago

Bump platformdirs from 4.12.4 to 4.13.5 Bumps [platformdirs](https://github.com/tox-dev/platformdirs) from 4.12.4 to 4.13.5. - [Release notes](https://github.com/tox-dev/platformdirs/releases) - [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst) - [Commits](https://github.com/tox-dev/platformdirs/compare/4.12.4...4.13.5) --- updated-dependencies: - dependency-name: platformdirs dependency-version: 4.13.5 dependency-type: indirect update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot/pip/platformdirs-4.13.5

9 hours ago

Bump sphinx from 8.1.3 to 9.0.4 Bumps [sphinx](https://github.com/sphinx-doc/sphinx) from 8.1.3 to 9.0.4. - [Release notes](https://github.com/sphinx-doc/sphinx/releases) - [Changelog](https://github.com/sphinx-doc/sphinx/blob/v9.0.4/CHANGES.rst) - [Commits](https://github.com/sphinx-doc/sphinx/compare/v8.1.3...v9.0.4) --- updated-dependencies: - dependency-name: sphinx dependency-version: 8.2.3 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot/pip/3.15/sphinx-8.2.3

10 hours ago

Latest Branches

0%

Validate WebSocket control frames before writing them#14168

1 day ago

c19dc51

Omarinho12345:fix/ws-writer-control-frames

0%

Encode / in plain {var} values in DynamicResource.url_for#14201

1 day ago

f9981db

insaf021:url-for-quote-slash

0%

Guard the WebSocket heartbeat against rearming after close#14128

3 hours ago

797d670

perfectmodelslab:fix/ws-heartbeat-after-close

© 2026 CodSpeed Technology

Home Terms Privacy Docs