Fixed server response headers for Content-Type and Content-Encoding for
static compressed files -- by :user:steverep.
Server will now respond with a Content-Type appropriate for the compressed
file (e.g. "application/gzip"), and omit the Content-Encoding header.
Users should expect that most clients will no longer decompress such responses
by default.
Adjusted FileResponse to check file existence and access when preparing the response -- by :user:steverep.
The :py:class:~aiohttp.web.FileResponse class was modified to respond with
403 Forbidden or 404 Not Found as appropriate. Previously, it would cause a
server error if the path did not exist or could not be accessed. Checks for
existence, non-regular files, and permissions were expected to be done in the
route handler. For static routes, this now permits a compressed file to exist
without its uncompressed variant and still be served. In addition, this
changes the response status for files without read permission to 403, and for
non-regular files from 404 to 403 for consistency.
Fixed AsyncResolver to match ThreadedResolver behavior
-- by :user:bdraco.
On system with IPv6 support, the :py:class:~aiohttp.resolver.AsyncResolver would not fallback
to providing A records when AAAA records were not available.
Additionally, unlike the :py:class:~aiohttp.resolver.ThreadedResolver, the :py:class:~aiohttp.resolver.AsyncResolver
did not handle link-local addresses correctly.
Fixed server response headers for Content-Type and Content-Encoding for
static compressed files -- by :user:steverep.
Server will now respond with a Content-Type appropriate for the compressed
file (e.g. "application/gzip"), and omit the Content-Encoding header.
Users should expect that most clients will no longer decompress such responses
by default.
Related issues and pull requests on GitHub:
:issue:4462.
Fixed duplicate cookie expiration calls in the CookieJar implementation
Related issues and pull requests on GitHub:
:issue:7784.
Adjusted FileResponse to check file existence and access when preparing the response -- by :user:steverep.
The :py:class:~aiohttp.web.FileResponse class was modified to respond with
403 Forbidden or 404 Not Found as appropriate. Previously, it would cause a
server error if the path did not exist or could not be accessed. Checks for
existence, non-regular files, and permissions were expected to be done in the
route handler. For static routes, this now permits a compressed file to exist
without its uncompressed variant and still be served. In addition, this
changes the response status for files without read permission to 403, and for
non-regular files from 404 to 403 for consistency.
Related issues and pull requests on GitHub:
:issue:8182.
Fixed AsyncResolver to match ThreadedResolver behavior
-- by :user:bdraco.
On system with IPv6 support, the :py:class:~aiohttp.resolver.AsyncResolver would not fallback
to providing A records when AAAA records were not available.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
Bumps the python-packages group with 3 updates: aiohttp, mypy and pre-commit.
Updates
aiohttpfrom 3.9.5 to 3.10.0Release notes
Sourced from aiohttp's releases.
... (truncated)
Changelog
Sourced from aiohttp's changelog.
... (truncated)
Commits
7f29851Release 3.10.0 (attempt 2) (#8552)fc201e8Release 3.10.0 (#8550)305f67aRelease 3.10.0rc0 (#8545)ed8de3a[PR #8541/a561fa99 backport][3.10] Cleanup for #8495 (#8544)df57b9f[3.10] Handle 403 and 404 issues in FileResponse class (#8538) (#8539)3baa6de[PR #8535/7108d646 backport][3.10] Small speed up to cookiejar filter_cookies...5621ecfBump pytest from 8.3.1 to 8.3.2 (#8536)9b9cec2Release 3.10.0b1 (#8533)088f734[3.10] Downgrade upload/download artifact to v3 to fix CI (#8532)948a4c5Release 3.10.0b0 (#8531)Updates
mypyfrom 1.11.0 to 1.11.1Commits
570b90aBump version to 1.11b3a102eFixRawExpressionType.acceptcrash with--cache-fine-grained(#17588)aec04c7Fix PEP 604 isinstance caching (#17563)cb44e4dFixtyping.TypeAliasTypebeing undefined on python < 3.12 (#17558)6cf9180Fix types.GenericAlias lookup crash (#17543)64c1ebfBump version to 1.11.1+devUpdates
pre-commitfrom 3.7.1 to 3.8.0Release notes
Sourced from pre-commit's releases.
Changelog
Sourced from pre-commit's changelog.
Commits
d46423fv3.8.08133abdMerge pull request #3265 from lorenzwalthert/issue-3206da0c1d0implement health check for language:rf641f6aMerge pull request #3264 from pre-commit/pre-commit-ci-update-configa68a19dfixes for mypy 1.1188317dd[pre-commit.ci] pre-commit autoupdatefaa6f8cMerge pull request #3244 from pre-commit/pre-commit-ci-update-configf632459[pre-commit.ci] pre-commit autoupdate0252908Merge pull request #3240 from pre-commit/pre-commit-ci-update-config69b5dce[pre-commit.ci] pre-commit autoupdateDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show