Update aiohttp (#4197)

* update aiohttp

* update chnagelog

* update versions

* revert

* message update

* update

* update

---------

Co-authored-by: Tim Allen <tallenp@me.com>

CHANGELOG.md

@@ -26,15 +26,15 @@ ENHANCEMENTS:
 * Update Windows VM Images ([#4198](https://github.com/microsoft/AzureTRE/pull/4198))
 
 BUG FIXES:
-- Update KeyVault references in API to use the version so Terraform cascades the update ([#4112](https://github.com/microsoft/AzureTRE/pull/4112))
-- Template images are showing CVEs ([#4153](https://github.com/microsoft/AzureTRE/issues/4153)
-- Fix Dockerfile 'as' casting ([#4170](https://github.com/microsoft/AzureTRE/pull/4170))
-- Create policy to allow all user to configure color profiles to remove auth dialog. ([#4184](https://github.com/microsoft/AzureTRE/pull/4184))
-- Pre configure VS code option to prevent script failure ([#4185](https://github.com/microsoft/AzureTRE/pull/4185))
-- Enable symlinks to work on Linux VM shared storage ([#4180](https://github.com/microsoft/AzureTRE/issues/4180))
-- Fix failing tests, .env missing and storage logs ([#4207](https://github.com/microsoft/AzureTRE/issues/4207))
-- Unable to delete virtual machines, add skip_shutdown_and_force_delete = true ([#4135](https://github.com/microsoft/AzureTRE/issues/4135))
-
+* Update KeyVault references in API to use the version so Terraform cascades the update ([#4112](https://github.com/microsoft/AzureTRE/pull/4112))
+* Template images are showing CVEs ([#4153](https://github.com/microsoft/AzureTRE/issues/4153))
+* Fix Dockerfile 'as' casting ([#4170](https://github.com/microsoft/AzureTRE/pull/4170))
+* Create policy to allow all user to configure color profiles to remove auth dialog. ([#4184](https://github.com/microsoft/AzureTRE/pull/4184))
+* Pre configure VS code option to prevent script failure ([#4185](https://github.com/microsoft/AzureTRE/pull/4185))
+* Enable symlinks to work on Linux VM shared storage ([#4180](https://github.com/microsoft/AzureTRE/issues/4180))
+* Upgrade aiohttp version for security fixes ([#4197](https://github.com/microsoft/AzureTRE/pull/4197))
+* Fix failing tests, .env missing and storage logs ([#4207](https://github.com/microsoft/AzureTRE/issues/4207))
+* Unable to delete virtual machines, add skip_shutdown_and_force_delete = true ([#4135](https://github.com/microsoft/AzureTRE/issues/4135))
 
 COMPONENTS:
 

api_app/_version.py

@@ -1 +1 @@
-__version__ = "0.20.1"
+__version__ = "0.20.2"

api_app/requirements.txt

@@ -1,4 +1,4 @@
-aiohttp==3.10.10
+aiohttp==3.11.10
 azure-core==1.31.0
 azure-cosmos==4.7.0
 azure-eventgrid==4.20.0

cli/requirements.txt

@@ -8,4 +8,4 @@ pygments==2.16.1
 PyJWT==2.9.0
 azure-cli-core==2.65.0
 azure-identity==1.19.0
-aiohttp==3.10.10
+aiohttp==3.11.10

cli/setup.py

@@ -4,7 +4,7 @@ from setuptools import find_packages
 from setuptools import setup
 
 PROJECT = 'azure-tre-cli'
-VERSION = '0.2.4'
+VERSION = '0.2.5'
 
 try:
     long_description = open('README.md', 'rt').read()
@@ -49,7 +49,7 @@ setup(
         "PyJWT==2.9.0",
         "azure-cli-core==2.65.0",
         "azure-identity==1.19.0",
-        "aiohttp==3.10.10"
+        "aiohttp==3.11.10"
     ],
 
     namespace_packages=[],

resource_processor/_version.py

@@ -1 +1 @@
-__version__ = "0.10.1"
+__version__ = "0.10.2"

resource_processor/vmss_porter/requirements.txt

@@ -1,4 +1,4 @@
-aiohttp==3.10.10
+aiohttp==3.11.10
 azure-cli-core==2.65.0
 azure-identity==1.19.0
 azure-monitor-opentelemetry==1.6.4