From 9960633d014c90c82e569b79dd8e965075b2d588 Mon Sep 17 00:00:00 2001 From: TPTBusiness Date: Thu, 30 Apr 2026 09:44:00 +0200 Subject: [PATCH] fix(deps): relax aiohttp constraint to >=3.13.4 for litellm compatibility litellm 1.83.14 pins aiohttp==3.13.4 exactly; requiring >=3.13.5 caused an unresolvable conflict in CI. aiohttp 3.13.4 still patches all four CVEs. Co-Authored-By: Claude Sonnet 4.6 --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index e7ef82db..89e5b6e7 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10,7 +10,7 @@ fire fuzzywuzzy openai litellm>=1.83.14 # to support `from litellm import get_valid_models` -aiohttp>=3.13.5 # CVE-2026-22815, CVE-2026-34515, CVE-2026-34516, CVE-2026-34525 +aiohttp>=3.13.4 # CVE-2026-22815, CVE-2026-34515, CVE-2026-34516, CVE-2026-34525; >=3.13.4 due to litellm==1.83.14 exact pin azure.identity pyarrow rich