chore(deps): update dependency aiohttp to v3.13.2

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
aiohttp	==3.12.15 -> ==3.13.2

---

Release Notes

aio-libs/aiohttp (aiohttp)

v3.13.2: 3.13.2

Compare Source

Bug fixes

• Fixed cookie parser to continue parsing subsequent cookies when encountering a malformed cookie that fails regex validation, such as Google's g_state cookie with unescaped quotes -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  #​11632.

• Fixed loading netrc credentials from the default :file:~/.netrc (:file:~/_netrc on Windows) location when the :envvar:NETRC environment variable is not set -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  #​11713, #​11714.

• Fixed WebSocket compressed sends to be cancellation safe. Tasks are now shielded during compression to prevent compressor state corruption. This ensures that the stateful compressor remains consistent even when send operations are cancelled -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  #​11725.

---

v3.13.1

Compare Source

===================

Features

• Make configuration options in AppRunner also available in run_app()
  -- by :user:Cycloctane.

  Related issues and pull requests on GitHub:
  :issue:11633.

Bug fixes

• Switched to backports.zstd for Python <3.14 and fixed zstd decompression for chunked zstd streams -- by :user:ZhaoMJ.

  Note: Users who installed zstandard for support on Python <3.14 will now need to install
  backports.zstd instead (installing aiohttp[speedups] will do this automatically).

  Related issues and pull requests on GitHub:
  :issue:11623.

• Updated Content-Type header parsing to return application/octet-stream when header contains invalid syntax.
  See :rfc:9110#section-8.3-5.

  -- by :user:sgaist.

  Related issues and pull requests on GitHub:
  :issue:10889.

• Fixed Python 3.14 support when built without zstd support -- by :user:JacobHenner.

  Related issues and pull requests on GitHub:
  :issue:11603.

• Fixed blocking I/O in the event loop when using netrc authentication by moving netrc file lookup to an executor -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:11634.

• Fixed routing to a sub-application added via .add_domain() not working
  if the same path exists on the parent app. -- by :user:Dreamsorcerer.

  Related issues and pull requests on GitHub:
  :issue:11673.

Packaging updates and notes for downstreams

• Moved core packaging metadata from :file:setup.cfg to :file:pyproject.toml per :pep:621
  -- by :user:cdce8p.

  Related issues and pull requests on GitHub:
  :issue:9951.

---

v3.13.0

Compare Source

===================

Features

• Added support for Python 3.14.

  Related issues and pull requests on GitHub:
  :issue:10851, :issue:10872.

• Added support for free-threading in Python 3.14+ -- by :user:kumaraditya303.

  Related issues and pull requests on GitHub:
  :issue:11466, :issue:11464.

• Added support for Zstandard (aka Zstd) compression
  -- by :user:KGuillaume-chaps.

  Related issues and pull requests on GitHub:
  :issue:11161.

• Added StreamReader.total_raw_bytes to check the number of bytes downloaded
  -- by :user:robpats.

  Related issues and pull requests on GitHub:
  :issue:11483.

Bug fixes

• Fixed pytest plugin to not use deprecated :py:mod:asyncio policy APIs.

  Related issues and pull requests on GitHub:
  :issue:10851.

• Updated Content-Disposition header parsing to handle trailing semicolons and empty parts
  -- by :user:PLPeeters.

  Related issues and pull requests on GitHub:
  :issue:11243.

• Fixed saved CookieJar failing to be loaded if cookies have partitioned flag when
  http.cookie does not have partitioned cookies supports. -- by :user:Cycloctane.

  Related issues and pull requests on GitHub:
  :issue:11523.

Improved documentation

• Added Wireup to third-party libraries -- by :user:maldoinc.

  Related issues and pull requests on GitHub:
  :issue:11233.

Packaging updates and notes for downstreams

• The blockbuster test dependency is now optional; the corresponding test fixture is disabled when it is unavailable
  -- by :user:musicinybrain.

  Related issues and pull requests on GitHub:
  :issue:11363.

• Added riscv64 build to releases -- by :user:eshattow.

  Related issues and pull requests on GitHub:
  :issue:11425.

Contributor-facing changes

• Fixed test_send_compress_text failing when alternative zlib implementation
  is used. (zlib-ng in python 3.14 windows build) -- by :user:Cycloctane.

  Related issues and pull requests on GitHub:
  :issue:11546.

---

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.