fix(deps): relax aiohttp constraint to >=3.13.4 for litellm compatibility

litellm 1.83.14 pins aiohttp==3.13.4 exactly; requiring >=3.13.5 caused
an unresolvable conflict in CI. aiohttp 3.13.4 still patches all four CVEs.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
TPTBusiness
2026-04-30 09:44:00 +02:00
parent 9870586005
commit 1a565162cc
+1 -1
View File
@@ -10,7 +10,7 @@ fire
fuzzywuzzy
openai
litellm>=1.83.14 # to support `from litellm import get_valid_models`
aiohttp>=3.13.5 # CVE-2026-22815, CVE-2026-34515, CVE-2026-34516, CVE-2026-34525
aiohttp>=3.13.4 # CVE-2026-22815, CVE-2026-34515, CVE-2026-34516, CVE-2026-34525; >=3.13.4 due to litellm==1.83.14 exact pin
azure.identity
pyarrow
rich