security(deps): aiohttp 3.14.1 CVE floor across lazy messaging paths + pin-drift guard (salvage #42334) - #56237

Merged

teknium1 merged 5 commits into

mainfrom

hermes/hermes-2f15551b

Jul 1, 2026

Commits on Jul 1, 2026

security(deps): bump aiohttp to 3.14.0, anthropic to 0.87.0; pin cryptography floor

huangsen365
authored and
teknium1
committed
a70022c
test(deps): guard pyproject<->lazy_deps pin consistency

huangsen365
authored and
teknium1
committed
de8e3ae
fix(ci): map contributor email for attribution check

huangsen365
authored and
teknium1
committed
f8345b2
security(deps): enforce aiohttp CVE floor on all lazy messaging paths + coverage guard

huangsen365
authored and
teknium1
committed
f85cd80
chore(deps): bump aiohttp to patched 3.14.1 (from 3.14.0)
teknium1
committed
88473e9