Skip to content

chore(deps): update aiofiles requirement from >=23.2.1 to >=25.1.0 in /backend - #6

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/aiofiles-gte-25.1.0
Open

chore(deps): update aiofiles requirement from >=23.2.1 to >=25.1.0 in /backend#6
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/aiofiles-gte-25.1.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 21, 2026

Copy link
Copy Markdown

Updates the requirements on aiofiles to permit the latest version.

Release notes

Sourced from aiofiles's releases.

v25.1.0

  • Switch to uv + add Python v3.14 support. (#219)
  • Add ruff formatter and linter. #216
  • Drop Python 3.8 support. If you require it, use version 24.1.0. #204

New Contributors

Full Changelog: Tinche/aiofiles@v24.1.0...v25.1.0

Changelog

Sourced from aiofiles's changelog.

25.1.0 (2025-10-09)

  • Switch to uv + add Python v3.14 support. (#219)
  • Add ruff formatter and linter. #216
  • Drop Python 3.8 support. If you require it, use version 24.1.0. #204

24.1.0 (2024-06-24)

  • Import os.link conditionally to fix importing on android. #175
  • Remove spurious items from aiofiles.os.__all__ when running on Windows.
  • Switch to more modern async idioms: Remove types.coroutine and make AiofilesContextManager an awaitable instead a coroutine.
  • Add aiofiles.os.path.abspath and aiofiles.os.getcwd. #174
  • aiofiles is now tested on Python 3.13 too. #184
  • Drop Python 3.7 support. If you require it, use version 23.2.1.

23.2.1 (2023-08-09)

  • Import os.statvfs conditionally to fix importing on non-UNIX systems. #171 #172
  • aiofiles is now also tested on Windows.

23.2.0 (2023-08-09)

  • aiofiles is now tested on Python 3.12 too. #166 #168
  • On Python 3.12, aiofiles.tempfile.NamedTemporaryFile now accepts a delete_on_close argument, just like the stdlib version.
  • On Python 3.12, aiofiles.tempfile.NamedTemporaryFile no longer exposes a delete attribute, just like the stdlib version.
  • Added aiofiles.os.statvfs and aiofiles.os.path.ismount. #162
  • Use PDM instead of Poetry. #169

23.1.0 (2023-02-09)

  • Added aiofiles.os.access. #146
  • Removed aiofiles.tempfile.temptypes.AsyncSpooledTemporaryFile.softspace. #151
  • Added aiofiles.stdin, aiofiles.stdin_bytes, and other stdio streams. #154
  • Transition to asyncio.get_running_loop (vs asyncio.get_event_loop) internally.

22.1.0 (2022-09-04)

... (truncated)

Commits

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Updates the requirements on [aiofiles](https://github.com/Tinche/aiofiles) to permit the latest version.
- [Release notes](https://github.com/Tinche/aiofiles/releases)
- [Changelog](https://github.com/Tinche/aiofiles/blob/main/CHANGELOG.md)
- [Commits](Tinche/aiofiles@v23.2.1...v25.1.0)

---
updated-dependencies:
- dependency-name: aiofiles
  dependency-version: 25.1.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 21, 2026
yeahhe365 added a commit that referenced this pull request Aug 10, 2026
Bug #1 (llm_client.py): _drain_stream was missing nonlocal status, so
status = "insufficient" only mutated a local copy and the
maybe_stream_answer gate never fired — multi-round searches could push a
partial answer and concatenate two rounds in the UI buffer. Added status to
nonlocal; regression test asserts an insufficient stream pushes nothing.

Bug #2 (database.py): _cleanup_old_sessions used local naive now() against
UTC-stored updated_at, shifting the cutoff by the local TZ offset (UTC+8
could delete sessions updated hours ago). Cutoff now uses _utc_now().

Bug #3 (legacy_migration.py): a single failed JSON migration logged an error
but still rmtree'd the whole chats/ dir, destroying the only copy of that
chat. Now keeps the directory when any file failed.

Bug #4 (providers.py): (a) ensure_default_provider_id's no-request fallback
silently picked providers[0] even when disabled — now raises when everything
is disabled; (b) an omitted api_key field was normalized to "" wiping a
stored key — now carried over from current_providers (None sentinel).

Bug #5 (chat.js): a truncate-edit stream detached mid-flight re-attached on
loadChat over the DB's pre-truncate history, briefly showing the to-be-cut
tail. rec now records truncateFromIndex and loadChat trims the DOM before
re-attaching the live bubbles.

Bug #6 (llm_client.py/workflow.py): generate_answer's outer fallback and
no-response paths returned status:"sufficient" with exception text as a
normal answer (workflow appended references to it). Now status:"error" and
workflow raises so the UI shows an error + retry affordance instead.

Bug #7 (chat.py): replace_messages_from returning False because the session
was concurrently deleted fell back to save_chat_history, which re-creates the
deleted session. Now re-checks existence before the fallback.

Minor: extension_bridge fire-and-forget task exceptions are consumed;
evidence-panel LRU delete-then-set refreshes recency; removed dead
engine_name/sessionId assignments and the never-reachable CJK punctuation
split; composer-extras imports search-intensity with the ?v=3 version tag;
dropped the unread evidenceSnippet dataset write.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants