CVS commit: pkgsrc/www/py-aiohttp

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Mon Jan  5 01:36:08 UTC 2026

Modified Files:
        pkgsrc/www/py-aiohttp: Makefile distinfo

Log Message:
py-aiohttp: update to 3.13.3.

3.13.3 (2026-01-03)
===================

This release contains fixes for several vulnerabilities. It is advised to
upgrade as soon as possible.

Bug fixes
---------

- Fixed proxy authorization headers not being passed when reusing a connection, which caused 407 (Proxy authentication required) errors

- Fixed multipart reading failing when encountering an empty body part

- Fixed a case where the parser wasn't raising an exception for a websocket continuation frame when there was no initial frame in context.

Removals and backward incompatible breaking changes
---------------------------------------------------

- ``Brotli`` and ``brotlicffi`` minimum version is now 1.2.
  Decompression now has a default maximum output size of 32MiB per decompress call

Packaging updates and notes for downstreams
-------------------------------------------

- Moved dependency metadata from :file:`setup.cfg` to :file:`pyproject.toml` per :pep:`621`

Contributor-facing changes
--------------------------

- Removed unused ``update-pre-commit`` github action workflow

Miscellaneous internal changes
------------------------------

- Optimized web server performance when access logging is disabled by reducing time syscalls

- Added regression test for cached logging status


To generate a diff of this commit:
cvs rdiff -u -r1.102 -r1.103 pkgsrc/www/py-aiohttp/Makefile
cvs rdiff -u -r1.94 -r1.95 pkgsrc/www/py-aiohttp/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/py-aiohttp/Makefile
diff -u pkgsrc/www/py-aiohttp/Makefile:1.102 pkgsrc/www/py-aiohttp/Makefile:1.103
--- pkgsrc/www/py-aiohttp/Makefile:1.102        Wed Oct 29 09:18:30 2025
+++ pkgsrc/www/py-aiohttp/Makefile      Mon Jan  5 01:36:08 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.102 2025/10/29 09:18:30 adam Exp $
+# $NetBSD: Makefile,v 1.103 2026/01/05 01:36:08 wiz Exp $
 
-DISTNAME=      aiohttp-3.13.2
+DISTNAME=      aiohttp-3.13.3
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    www python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=a/aiohttp/}
@@ -35,8 +35,8 @@ PYTHON_VERSIONS_INCOMPATIBLE= 310
 
 .include "../../lang/python/wheel.mk"
 # need to package: proxy (!?)
-# leads to, as of 3.13.1
-# 7 failed, 3587 passed, 75 skipped, 10 xfailed, 42 errors
+# as of 3.13.3
+# 8 failed, 3632 passed, 77 skipped, 8 xfailed, 42 errors, 2 subtests passed
 pre-test:
        cd ${WRKSRC} && ${RM} -f tests/test_proxy_functional.py tests/autobahn/test_autobahn.py
 

Index: pkgsrc/www/py-aiohttp/distinfo
diff -u pkgsrc/www/py-aiohttp/distinfo:1.94 pkgsrc/www/py-aiohttp/distinfo:1.95
--- pkgsrc/www/py-aiohttp/distinfo:1.94 Wed Oct 29 09:18:30 2025
+++ pkgsrc/www/py-aiohttp/distinfo      Mon Jan  5 01:36:08 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.94 2025/10/29 09:18:30 adam Exp $
+$NetBSD: distinfo,v 1.95 2026/01/05 01:36:08 wiz Exp $
 
-BLAKE2s (aiohttp-3.13.2.tar.gz) = 884a47064e9311b46a4ed76965a516c6d7740ffd08bee13312be6d30301489b2
-SHA512 (aiohttp-3.13.2.tar.gz) = eb90bf5ea3e8b2e1dd600694247ee418bc932554d0517a7aa14641e9aa9abab90563fdeae5389e2fb8149b35b4f60449b5c8960c0d21e7ee738c52d0de782602
-Size (aiohttp-3.13.2.tar.gz) = 7837994 bytes
+BLAKE2s (aiohttp-3.13.3.tar.gz) = 8bbd967eef3ce75e95aca941804faf7e1a92ab4114a954ff5750065ab60dd6c5
+SHA512 (aiohttp-3.13.3.tar.gz) = a05ff320d63fc54f6b75fa4ecc9f1b97053f14724e580f703b0fe74e5b6f68d4534e6d0bc60cc12bb5a3771f239972fe4887afe3da8548cf7a92f724093f073e
+Size (aiohttp-3.13.3.tar.gz) = 7844556 bytes