Bump the pip group across 1 directory with 3 updates

[dependabot[bot]]

Bumps the pip group with 3 updates in the /benchmark directory: aiohttp, starlette and tornado.

Updates aiohttp from 3.8.2 to 3.9.4

Release notes

Sourced from aiohttp's releases.

3.9.4

Bug fixes

• The asynchronous internals now set the underlying causes when assigning exceptions to the future objects -- by :user:webknjaz.

  Related issues and pull requests on GitHub: #8089.

• Treated values of Accept-Encoding header as case-insensitive when checking for gzip files -- by :user:steverep.

  Related issues and pull requests on GitHub: #8104.

• Improved the DNS resolution performance on cache hit -- by :user:bdraco.

  This is achieved by avoiding an :mod:asyncio task creation in this case.

  Related issues and pull requests on GitHub: #8163.

• Changed the type annotations to allow dict on :meth:aiohttp.MultipartWriter.append, :meth:aiohttp.MultipartWriter.append_json and :meth:aiohttp.MultipartWriter.append_form -- by :user:cakemanny

  Related issues and pull requests on GitHub: #7741.

• Ensure websocket transport is closed when client does not close it -- by :user:bdraco.

  The transport could remain open if the client did not close it. This change ensures the transport is closed when the client does not close it.

... (truncated)

Changelog

Sourced from aiohttp's changelog.

3.9.4 (2024-04-11)

Bug fixes

• The asynchronous internals now set the underlying causes when assigning exceptions to the future objects -- by :user:webknjaz.

  Related issues and pull requests on GitHub: :issue:8089.

• Treated values of Accept-Encoding header as case-insensitive when checking for gzip files -- by :user:steverep.

  Related issues and pull requests on GitHub: :issue:8104.

• Improved the DNS resolution performance on cache hit -- by :user:bdraco.

  This is achieved by avoiding an :mod:asyncio task creation in this case.

  Related issues and pull requests on GitHub: :issue:8163.

• Changed the type annotations to allow dict on :meth:aiohttp.MultipartWriter.append, :meth:aiohttp.MultipartWriter.append_json and :meth:aiohttp.MultipartWriter.append_form -- by :user:cakemanny

  Related issues and pull requests on GitHub: :issue:7741.

• Ensure websocket transport is closed when client does not close it -- by :user:bdraco.

  The transport could remain open if the client did not close it. This change ensures the transport is closed when the client does not close it.

... (truncated)

Commits

• b3397c7 Release v3.9.4 (#8201)
• a7e240a [PR #8320/9ba9a4e5 backport][3.9] Fix Python parser to mark responses without...
• 2833552 Escape filenames and paths in HTML when generating index pages (#8317) (#8319)
• ed43040 [PR #8309/c29945a1 backport][3.9] Improve reliability of run_app test (#8315)
• ec2be05 [PR #8299/28d026eb backport][3.9] Create marker for internal tests (#8307)
• 292d961 [PR #8304/88c80c14 backport][3.9] Check for backports in CI (#8305)
• cebe526 Fix handling of multipart/form-data (#8280) (#8302)
• 270ae9c [PR #8297/d15f07cf backport][3.9] Upgrade to llhttp 9.2.1 (#8292) (#8298)
• bb23105 [PR #8283/54e13b0a backport][3.9] Fix blocking I/O in the event loop while pr...
• 3f79241 [PR #8286/28f1fd88 backport][3.9] docs: remove repetitive word in comment (#8...
• Additional commits viewable in compare view

Updates starlette from 0.19.1 to 0.36.2

Release notes

Sourced from starlette's releases.

Version 0.36.2

Fixed

• Upgrade python-multipart to 0.0.7 13e5c26.
• Avoid duplicate charset on Content-Type #2443.

---

Full Changelog: https://github.com/encode/starlette/compare/0.36.1...0.36.2

Version 0.36.1

Fixed

• Check if "extensions" in scope before checking the extension #2438.

---

Full Changelog: https://github.com/encode/starlette/compare/0.36.0...0.36.1

Version 0.36.0

Added

• Add support for ASGI pathsend extension #2435.
• Cancel WebSocketTestSession on close #2427.
• Raise WebSocketDisconnect when WebSocket.send() excepts IOError #2425.
• Raise FileNotFoundError when the env_file parameter on Config is not valid #2422.

---

Full Changelog: https://github.com/encode/starlette/compare/0.35.1...0.36.0

Version 0.35.1

Fixed

• Stop using the deprecated "method" parameter in FileResponse inside of StaticFiles #2406.
• Make typing-extensions optional again #2409.

---

Full Changelog: https://github.com/encode/starlette/compare/0.35.0...0.35.1

Version 0.35.0

Added

• Add *args to Middleware and improve its type hints #2381.

Fixed

• Use Iterable instead Iterator on iterate_in_threadpool #2362.

... (truncated)

Changelog

Sourced from starlette's changelog.

0.36.2

February 3, 2024

Fixed

• Upgrade python-multipart to 0.0.7 13e5c26.
• Avoid duplicate charset on Content-Type #2443.

0.36.1

January 23, 2024

Fixed

• Check if "extensions" in scope before checking the extension #2438.

0.36.0

January 22, 2024

Added

• Add support for ASGI pathsend extension #2435.
• Cancel WebSocketTestSession on close #2427.
• Raise WebSocketDisconnect when WebSocket.send() excepts IOError #2425.
• Raise FileNotFoundError when the env_file parameter on Config is not valid #2422.

0.35.1

January 11, 2024

Fixed

• Stop using the deprecated "method" parameter in FileResponse inside of StaticFiles #2406.
• Make typing-extensions optional again #2409.

0.35.0

January 11, 2024

Added

• Add *args to Middleware and improve its type hints #2381.

Fixed

• Use Iterable instead Iterator on iterate_in_threadpool #2362.

Changes

... (truncated)

Commits

• 04a7d9d Version 0.36.2 (#2456)
• 13e5c26 Merge pull request from GHSA-93gm-qmq6-w238
• b8eebef Avoid duplicate charset on Content-Type (#2443)
• 8da52c2 Bump the python-packages group with 4 updates (#2455)
• 4355e6b Fix nav override for newer version of Mkdocs Material (#2444)
• 433da65 Version 0.36.1 (#2440)
• 4ca0a87 Downgrade mkdocs-material (#2439)
• e54be85 Check if "extensions" in scope before checking the extension (#2438)
• 8d09cf4 Version 0.36.0 (#2432)
• 7936e86 Add support for ASGI pathsend extension (#2435)
• Additional commits viewable in compare view

Updates tornado from 6.1 to 6.3.3

Changelog

Sourced from tornado's changelog.

Release notes

.. toctree:: :maxdepth: 2

releases/v6.4.0 releases/v6.3.3 releases/v6.3.2 releases/v6.3.1 releases/v6.3.0 releases/v6.2.0 releases/v6.1.0 releases/v6.0.4 releases/v6.0.3 releases/v6.0.2 releases/v6.0.1 releases/v6.0.0 releases/v5.1.1 releases/v5.1.0 releases/v5.0.2 releases/v5.0.1 releases/v5.0.0 releases/v4.5.3 releases/v4.5.2 releases/v4.5.1 releases/v4.5.0 releases/v4.4.3 releases/v4.4.2 releases/v4.4.1 releases/v4.4.0 releases/v4.3.0 releases/v4.2.1 releases/v4.2.0 releases/v4.1.0 releases/v4.0.2 releases/v4.0.1 releases/v4.0.0 releases/v3.2.2 releases/v3.2.1 releases/v3.2.0 releases/v3.1.1 releases/v3.1.0 releases/v3.0.2 releases/v3.0.1 releases/v3.0.0 releases/v2.4.1 releases/v2.4.0 releases/v2.3.0 releases/v2.2.1

... (truncated)

Commits

• e4d6984 Merge pull request #3307 from bdarnell/branch6.3
• 6a9e6fb ci: Don't test py312 in branch6.3
• 5c8a9a4 Set version to 6.3.3
• 7dfe8b5 httpserver_test: Add ExpectLog to fix CI
• 217295b http1connection: Make content-length parsing more strict
• e3aa6c5 Merge pull request #3267 from bdarnell/branch6.3
• 34f5c1c Version 6.3.2
• 32ad07c web: Fix an open redirect in StaticFileHandler
• e0fa53e Merge pull request #3257 from bdarnell/build-workflow-wstest-warning
• f5a1d5c ci: Only run pypi actions from the main repo
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/abhinavsingh/proxy.py/network/alerts).

[dependabot[bot]]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml