fix(deps): update dependency aiohttp to v3.11.12

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
aiohttp	3.11.9 -> 3.11.12

---

Release Notes

aio-libs/aiohttp (aiohttp)

v3.11.12: 3.11.12

Compare Source

Bug fixes

• MultipartForm.decode() now follows RFC1341 7.2.1 with a CRLF after the boundary
  -- by :user:imnotjames.

  Related issues and pull requests on GitHub:
  #​10270.

• Restored the missing total_bytes attribute to EmptyStreamReader -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  #​10387.

Features

• Updated :py:func:~aiohttp.request to make it accept _RequestOptions kwargs.
  -- by :user:Cycloctane.

  Related issues and pull requests on GitHub:
  #​10300.

• Improved logging of HTTP protocol errors to include the remote address -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  #​10332.

Improved documentation

• Added aiohttp-openmetrics to list of third-party libraries -- by :user:jelmer.

  Related issues and pull requests on GitHub:
  #​10304.

Packaging updates and notes for downstreams

• Added missing files to the source distribution to fix Makefile targets.
  Added a cythonize-nodeps target to run Cython without invoking pip to install dependencies.

  Related issues and pull requests on GitHub:
  #​10366.

• Started building armv7l musllinux wheels -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  #​10404.

Contributor-facing changes

• The CI/CD workflow has been updated to use upload-artifact v4 and download-artifact v4 GitHub Actions -- by :user:silamon.

  Related issues and pull requests on GitHub:
  #​10281.

Miscellaneous internal changes

• Restored support for zero copy writes when using Python 3.12 versions 3.12.9 and later or Python 3.13.2+ -- by :user:bdraco.

  Zero copy writes were previously disabled due to :cve:2024-12254 which is resolved in these Python versions.

  Related issues and pull requests on GitHub:
  #​10137.

---

v3.11.11

Compare Source

====================

Bug fixes

• Updated :py:meth:~aiohttp.ClientSession.request to reuse the quote_cookie setting from ClientSession._cookie_jar when processing cookies parameter.
  -- by :user:Cycloctane.

  Related issues and pull requests on GitHub:
  :issue:10093.

• Fixed type of SSLContext for some static type checkers (e.g. pyright).

  Related issues and pull requests on GitHub:
  :issue:10099.

• Updated :meth:aiohttp.web.StreamResponse.write annotation to also allow :class:bytearray and :class:memoryview as inputs -- by :user:cdce8p.

  Related issues and pull requests on GitHub:
  :issue:10154.

• Fixed a hang where a connection previously used for a streaming
  download could be returned to the pool in a paused state.
  -- by :user:javitonino.

  Related issues and pull requests on GitHub:
  :issue:10169.

Features

• Enabled ALPN on default SSL contexts. This improves compatibility with some
  proxies which don't work without this extension.
  -- by :user:Cycloctane.

  Related issues and pull requests on GitHub:
  :issue:10156.

Miscellaneous internal changes

• Fixed an infinite loop that can occur when using aiohttp in combination
  with async-solipsism_ -- by :user:bmerry.

  .. _async-solipsism: https://github.com/bmerry/async-solipsism

  Related issues and pull requests on GitHub:
  :issue:10149.

---

v3.11.10

Compare Source

====================

Bug fixes

• Fixed race condition in :class:aiohttp.web.FileResponse that could have resulted in an incorrect response if the file was replaced on the file system during prepare -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:10101, :issue:10113.

• Replaced deprecated call to :func:mimetypes.guess_type with :func:mimetypes.guess_file_type when using Python 3.13+ -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:10102.

• Disabled zero copy writes in the StreamWriter -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:10125.

---

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.