python-aiohttp (3.13.3-3ubuntu1) resolute; urgency=medium

  * Cherry-pick upstream commit for compatibility with idna 3.11
  * Skip test_parse_set_cookie_headers_uses_unquote_with_octal,
    control characters are now rejected by Python, see gh-145599

 -- Graham Inggs <ginggs@ubuntu.com>  Mon, 06 Apr 2026 15:01:20 +0000

python-aiohttp (3.13.3-3build1) resolute; urgency=medium

  * No-change rebuild to drop Python 3.13 bits.

 -- Matthias Klose <doko@ubuntu.com>  Fri, 20 Mar 2026 11:18:37 +0100

python-aiohttp (3.13.3-3) unstable; urgency=medium

  * Skip two performance tests that are failing on riscv64.

 -- Edward Betts <edward@4angle.com>  Thu, 08 Jan 2026 12:28:49 +0000

python-aiohttp (3.13.3-2) unstable; urgency=medium

  * Skip two tests that are failing during autopkgtest, "Too many open files".

 -- Edward Betts <edward@4angle.com>  Tue, 06 Jan 2026 08:14:25 +0000

python-aiohttp (3.13.3-1) unstable; urgency=medium

  * New upstream release.
  * Skip new failing tests.
  * Remove 'Priority: optional', now the default.
  * Update Standards-Version.

 -- Edward Betts <edward@4angle.com>  Mon, 05 Jan 2026 22:25:10 +0000

python-aiohttp (3.13.1-1) unstable; urgency=medium

  * New upstream release.
  * Skip three failing tests related to netrc authentication.
  * Add Upstream-Contact to debian/copyright.

 -- Edward Betts <edward@4angle.com>  Tue, 21 Oct 2025 06:02:40 +0100

python-aiohttp (3.13.0-1) unstable; urgency=medium

  * New upstream release.
  * Add my name to Uploaders.
  * Enable test suite, but skip tests that fail.
  * Switch to Testsuite: autopkgtest-pkg-pybuild, so autopkgtest runs tests.
  * Add Build-Depends for python3-pytest-cov and python3-pytest-xdist, needed
    for tests.
  * Add <!nocheck> to test dependencies.
  * Add license information for vendor/llhttp to debian/copyright.
  * Update debian/watch to format version 5.

 -- Edward Betts <edward@4angle.com>  Thu, 09 Oct 2025 05:51:42 +0100

python-aiohttp (3.12.15-1) unstable; urgency=medium

  * Team upload.
  * New upstream release.
    - CVE-2025-53643: Fix request smuggling vulnerability (closes: #1109336).
  * Remove 'Rules-Requires-Root: no', now the default.
  * Refresh patches.

 -- Edward Betts <edward@4angle.com>  Fri, 26 Sep 2025 19:15:20 +0000

python-aiohttp (3.11.16-1) unstable; urgency=medium

  * New upstream release

 -- Piotr Ożarowski <piotr@debian.org>  Sat, 05 Apr 2025 14:44:31 +0200

python-aiohttp (3.11.15-1) unstable; urgency=medium

  * Team upload.
  * New upstream release.
  * Now requires a newer version of yarl.
  * Update patches.
  * Update Standards-Version.

 -- Edward Betts <edward@4angle.com>  Tue, 01 Apr 2025 11:18:04 +0100

python-aiohttp (3.10.11-1) unstable; urgency=medium

  * Team upload.
  * New upstream release:
    - CVE-2024-52303: Fix system routes polluting the middleware cache
      (closes: #1088108).
    - CVE-2024-52304: Fix incorrect parsing of chunk extensions with the
      pure Python parser (closes: #1088109).

 -- Colin Watson <cjwatson@debian.org>  Mon, 30 Dec 2024 00:23:32 +0000

python-aiohttp (3.10.10-2) unstable; urgency=medium

  * Team upload.
  * (Build-)depend on python3-yarl (>= 1.12.0) (closes: #1086658).

 -- Colin Watson <cjwatson@debian.org>  Wed, 13 Nov 2024 14:31:21 +0000

python-aiohttp (3.10.10-1) unstable; urgency=medium

  * New upstream release

 -- Piotr Ożarowski <piotr@debian.org>  Tue, 29 Oct 2024 12:17:05 +0100

python-aiohttp (3.10.8-1) unstable; urgency=medium

  * New upstream release

 -- Piotr Ożarowski <piotr@debian.org>  Tue, 01 Oct 2024 16:05:56 +0200

python-aiohttp (3.10.6-1) unstable; urgency=medium

  * New upstream release

 -- Piotr Ożarowski <piotr@debian.org>  Fri, 27 Sep 2024 16:27:09 +0200

python-aiohttp (3.10.5-1) unstable; urgency=medium

  * New upstream release

 -- Piotr Ożarowski <piotr@debian.org>  Sat, 24 Aug 2024 09:30:57 +0200

python-aiohttp (3.10.4-1) unstable; urgency=medium

  * Team upload.
  * New upstream release.

 -- Colin Watson <cjwatson@debian.org>  Mon, 19 Aug 2024 11:36:35 +0100

python-aiohttp (3.10.3-3) unstable; urgency=medium

  * Team upload.
  * Use local Sphinx inventories where available; ignore other missing
    references.

 -- Colin Watson <cjwatson@debian.org>  Sun, 18 Aug 2024 13:50:33 +0100

python-aiohttp (3.10.3-2) unstable; urgency=medium

  * Team upload.
  * Upload to unstable.

 -- Colin Watson <cjwatson@debian.org>  Thu, 15 Aug 2024 16:45:04 +0100

python-aiohttp (3.10.3-1) experimental; urgency=medium

  * Rework build to avoid needing to filter out *.egg-info from upstream.
  * Fix documentation build.
  * New upstream release.

 -- Colin Watson <cjwatson@debian.org>  Wed, 14 Aug 2024 18:19:39 +0100

python-aiohttp (3.10.1-1) experimental; urgency=medium

  * Team upload.
  * New upstream release.

 -- Colin Watson <cjwatson@debian.org>  Mon, 05 Aug 2024 15:14:44 +0100

python-aiohttp (3.10.0-1) experimental; urgency=medium

  * Team upload.
  * New upstream release.

 -- Colin Watson <cjwatson@debian.org>  Sun, 04 Aug 2024 19:05:16 +0100

python-aiohttp (3.9.5-1) unstable; urgency=medium

  * Team upload.
  * Use pybuild-plugin-pyproject.
  * New upstream release:
    - CVE-2024-23829: Python HTTP parser still overly lenient about
      separators (closes: #1062708).
    - CVE-2024-23334: aiohttp.web.static(follow_symlinks=True) is vulnerable
      to directory traversal (closes: #1062709).
    - CVE-2024-30251: DoS when trying to parse malformed POST requests
      (closes: #1070364).
    - CVE-2024-27306: XSS on index pages for static file handling (closes:
      #1070665).
  * Standards-Version: 3.7.0 (no changes required).

 -- Colin Watson <cjwatson@debian.org>  Sun, 16 Jun 2024 12:39:52 +0100

python-aiohttp (3.9.1-1) unstable; urgency=medium

  * Team upload
  * New upstream version 3.9.1
    - CVE-2023-49081 (aiohttp's ClientSession is vulnerable to CRLF
      injection via version) (Closes: #1057163)
    - CVE-2023-49082 (aiohttp's ClientSession is vulnerable to CRLF
      injection via method) (Closes: #1057164)
    - Fix ftbfs on python3.12 (Closes: #1056036)
  * Update debian/patches
  * Update debian/copyright
  * Clean built docs (Closes: #1047256)

 -- Bo YU <tsu.yubo@gmail.com>  Wed, 13 Dec 2023 10:32:49 +0800

python-aiohttp (3.8.6-1) unstable; urgency=medium

  * New upstream release

 -- Piotr Ożarowski <piotr@debian.org>  Sat, 14 Oct 2023 13:12:38 +0200

python-aiohttp (3.8.5-1) unstable; urgency=medium

  * New upstream release

 -- Piotr Ożarowski <piotr@debian.org>  Sun, 20 Aug 2023 14:19:30 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog python3-aiohttp`.
