Patch the Planet is our joint initiative with OpenAI to assist critical open-source software in the age of machine-speed vulnerability research.

You're invited to talk on Matrix. If you don't already have a client this link will help you pick one, and join the conversation. If you already have one, this link will help you join the conversation

PyCon US 2026

Bug fixes Fixed :class:~aiohttp.DigestAuthMiddleware to preserve the algorithm case from the server's challenge in the authorization response. This improves compatibility with servers that perfor...

Bug fixes Fixed auto-created :py:class:~aiohttp.TCPConnector not using the session's event loop when :py:class:~aiohttp.ClientSession is created without an explicit connector -- by :user:bdraco. ...

Bug fixes Fixed cookie unquoting to properly handle octal escape sequences in cookie values (e.g., \012 for newline) by vendoring the correct _unquote implementation from Python's http.cookies mo...

Features Added deepcopy support to FrozenList -- by :user:bdraco. Related issues and pull requests on GitHub: #659. Packaging updates and notes for downstreams Fixed an issue where frozenlist...

Improved documentation Fixed incorrect decorator usage in the :func:~propcache.api.under_cached_property example code -- by :user:meanmail. Related issues and pull requests on GitHub: #109. Pac...

Features Improved SSL connection handling by changing the default ssl_shutdown_timeout from 0.1 to 0 seconds. SSL connections now use Python's default graceful shutdown during normal operation bu...

Bug fixes Fixed leak of aiodns.DNSResolver when :py:class:~aiohttp.TCPConnector is closed and no resolver was passed when creating the connector -- by :user:Tasssadar. This was a regression intro...

Bug fixes Fixed IOBasePayload and TextIOPayload reading entire files into memory when streaming large files -- by :user:bdraco. When using file-like objects with the aiohttp client, the entire fi...

Features Added preemptive digest authentication to :class:~aiohttp.DigestAuthMiddleware -- by :user:bdraco. The middleware now reuses authentication credentials for subsequent requests to the sam...

Bug fixes Fixed cookie parsing to be more lenient when handling cookies with special characters in names or values. Cookies with characters like {, }, and / in names are now accepted instead of c...

Bug fixes Fixed spurious "Future exception was never retrieved" warnings for connection lost errors when the connector is not closed -- by :user:bdraco. When connections are lost, the exception i...

Features Added ssl_shutdown_timeout parameter to :py:class:~aiohttp.ClientSession and :py:class:~aiohttp.TCPConnector to control the grace period for SSL shutdown handshake on TLS connections. Th...

Bug fixes Fixed connector not waiting for connections to close before returning from :meth:~aiohttp.BaseConnector.close (partial backport of :pr:3733) -- by :user:atemate and :user:bdraco. Relate...

Bug fixes Fixed memory leak in :py:meth:~aiohttp.CookieJar.filter_cookies that caused unbounded memory growth when making requests to different URL paths -- by :user:bdraco and :user:Cycloctane. ...

Bug fixes Fixed Content-Length header not being set to 0 for non-GET requests with None body -- by :user:bdraco. Non-GET requests (POST, PUT, PATCH, DELETE) with None as the body now correctly se...

Bug fixes Fixed :py:attr:~aiohttp.web.WebSocketResponse.prepared property to correctly reflect the prepared state, especially during timeout scenarios -- by :user:bdraco Related issues and pull r...

Bug fixes Response is now always True, instead of using MutableMapping behaviour (False when map is empty) Related issues and pull requests on GitHub: #10119. Fixed connection reuse for file-li...

Bug fixes Response is now always True, instead of using MutableMapping behaviour (False when map is empty) Related issues and pull requests on GitHub: #10119. Fixed pytest plugin to not use dep...

PyCon US 2025

Bug fixes Disabled TLS in TLS warning (when using HTTPS proxies) for uvloop and newer Python versions -- by :user:lezgomatt. Related issues and pull requests on GitHub: #7686. Fixed reading fra...

Miscellaneous internal changes Optimized web server performance when access logging is disabled by reducing time syscalls -- by :user:bdraco. Related issues and pull requests on GitHub: #10713. ...

Bug fixes Stopped implicitly allowing the use of Cython pre-release versions when building the distribution package -- by :user:ajsanchezsanz and :user:markgreene74. Related commits on GitHub: :c...

Features Implemented support for the free-threaded build of CPython 3.13 -- by :user:lysnikolaou. Related issues and pull requests on GitHub: #1456. Packaging updates and notes for downstreams ...

Bug fixes Fixed building the library in debug mode. Related issues and pull requests on GitHub: #1144. Fixed custom PyType_GetModuleByDef() when non-heap type object was passed. Related issues ...

Bug fixes Fixed entire name being re-encoded when using :py:meth:yarl.URL.with_suffix -- by :user:NTFSvolume. Related issues and pull requests on GitHub: #1468. Features Started building armv...

Bug fixes Replaced deprecated asyncio.iscoroutinefunction with its counterpart from inspect -- by :user:layday. Related issues and pull requests on GitHub: #10634. Fixed :class:multidict.CIMult...

Bug fixes Reverted explicitly closing sockets if an exception is raised during create_connection -- by :user:bdraco. This change originally appeared in aiohttp 3.11.13 Related issues and pull req...

Bug fixes Fixed an issue where dns queries were delayed indefinitely when an exception occurred in a trace.send_dns_cache_miss -- by :user:logioniz. Related issues and pull requests on GitHub: #1...

Bug fixes Removed a break statement inside the finally block in :py:class:~aiohttp.web.RequestHandler -- by :user:Cycloctane. Related issues and pull requests on GitHub: #10434. Changed connect...