build(deps): bump aiohttp from 3.8.6 to 3.9.0

[dependabot]

Bumps aiohttp from 3.8.6 to 3.9.0.

Release notes

Sourced from aiohttp's releases.

3.9.0

Features

• Introduced AppKey for static typing support of Application storage. See https://docs.aiohttp.org/en/stable/web_advanced.html#application-s-config

  (#5864)

• Added a graceful shutdown period which allows pending tasks to complete before the application's cleanup is called. The period can be adjusted with the shutdown_timeout parameter. -- by :user:Dreamsorcerer. See https://docs.aiohttp.org/en/latest/web_advanced.html#graceful-shutdown

  (#7188)

• Added handler_cancellation <https://docs.aiohttp.org/en/stable/web_advanced.html#web-handler-cancellation>_ parameter to cancel web handler on client disconnection. -- by :user:mosquito This (optionally) reintroduces a feature removed in a previous release. Recommended for those looking for an extra level of protection against denial-of-service attacks.

  (#7056)

• Added support for setting response header parameters max_line_size and max_field_size.

  (#2304)

• Added auto_decompress parameter to ClientSession.request to override ClientSession._auto_decompress. -- by :user:Daste745

  (#3751)

• Changed raise_for_status to allow a coroutine.

  (#3892)

• Added client brotli compression support (optional with runtime check).

  (#5219)

• Added client_max_size to BaseRequest.clone() to allow overriding the request body size. -- :user:anesabml.

  (#5704)

• Added a middleware type alias aiohttp.typedefs.Middleware.

  (#5898)

• Exported HTTPMove which can be used to catch any redirection request that has a location -- :user:dreamsorcerer.

  (#6594)

... (truncated)

Changelog

Sourced from aiohttp's changelog.

3.9.0 (2023-11-18)

Features

• Introduced AppKey for static typing support of Application storage. See https://docs.aiohttp.org/en/stable/web_advanced.html#application-s-config

  [#5864](https://github.com/aio-libs/aiohttp/issues/5864) <https://github.com/aio-libs/aiohttp/issues/5864>_

• Added a graceful shutdown period which allows pending tasks to complete before the application's cleanup is called. The period can be adjusted with the shutdown_timeout parameter. -- by :user:Dreamsorcerer. See https://docs.aiohttp.org/en/latest/web_advanced.html#graceful-shutdown

  [#7188](https://github.com/aio-libs/aiohttp/issues/7188) <https://github.com/aio-libs/aiohttp/issues/7188>_

• Added handler_cancellation <https://docs.aiohttp.org/en/stable/web_advanced.html#web-handler-cancellation>_ parameter to cancel web handler on client disconnection. -- by :user:mosquito This (optionally) reintroduces a feature removed in a previous release. Recommended for those looking for an extra level of protection against denial-of-service attacks.

  [#7056](https://github.com/aio-libs/aiohttp/issues/7056) <https://github.com/aio-libs/aiohttp/issues/7056>_

• Added support for setting response header parameters max_line_size and max_field_size.

  [#2304](https://github.com/aio-libs/aiohttp/issues/2304) <https://github.com/aio-libs/aiohttp/issues/2304>_

• Added auto_decompress parameter to ClientSession.request to override ClientSession._auto_decompress. -- by :user:Daste745

  [#3751](https://github.com/aio-libs/aiohttp/issues/3751) <https://github.com/aio-libs/aiohttp/issues/3751>_

• Changed raise_for_status to allow a coroutine.

  [#3892](https://github.com/aio-libs/aiohttp/issues/3892) <https://github.com/aio-libs/aiohttp/issues/3892>_

• Added client brotli compression support (optional with runtime check).

  [#5219](https://github.com/aio-libs/aiohttp/issues/5219) <https://github.com/aio-libs/aiohttp/issues/5219>_

• Added client_max_size to BaseRequest.clone() to allow overriding the request body size. -- :user:anesabml.

  [#5704](https://github.com/aio-libs/aiohttp/issues/5704) <https://github.com/aio-libs/aiohttp/issues/5704>_

• Added a middleware type alias aiohttp.typedefs.Middleware.

  [#5898](https://github.com/aio-libs/aiohttp/issues/5898) <https://github.com/aio-libs/aiohttp/issues/5898>_

• Exported HTTPMove which can be used to catch any redirection request that has a location -- :user:dreamsorcerer.

... (truncated)

Commits

• 45b2c2c Release v3.9.0 (#7843)
• 5d59d3d Release v3.9.0rc0 (#7840)
• c806814 Release v3.9.0rc0 (#7838)
• e07a1bd Use timestamp instead of datetime to achieve faster cookie expiration… (#7837)
• 53476df Disallow arbitrary sequence types in version (#7835) (#7836)
• 9d712f2 Bump mypy from 1.6.1 to 1.7.0 (#7833)
• 63a805e Bump python-on-whales from 0.66.0 to 0.67.0 (#7832)
• cb94533 Ensure writer is always reset on completion (#7815) (#7826)
• c0f9017 [PR #7821/366ba40f backport][3.9] Only check origin if insecure scheme and th...
• 9d498ca Bump sphinx from 7.1.1 to 7.2.6 (#7606)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)