Skip to content

Update dependency aiohttp to v3.14.5 [SECURITY] - #9888

Merged
sanderegg merged 1 commit into
masterfrom
renovate/pypi-aiohttp-vulnerability
Oct 24, 2026
Merged

Update dependency aiohttp to v3.14.5 [SECURITY]#9888
sanderegg merged 1 commit into
masterfrom
renovate/pypi-aiohttp-vulnerability

Conversation

@osparc-simcore-renovate

@osparc-simcore-renovate osparc-simcore-renovate Bot commented Oct 22, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
aiohttp 3.14.4 → 3.14.5 age confidence
aiohttp 3.14.3 → 3.14.5 age confidence

aiohttp: Multiple instances of excessive or unbounded memory/CPU use

GHSA-2g87-pp6c-29x5

More information

Details

Summary

Multiple cases were found where aiohttp could use excessive or unbounded memory, or excessive CPU consumption on attacker controlled requests.

Impact

An attacker could cause resource exhaustion through specially crafted requests.

Severity

  • CVSS Score: 8.7 / 10 (High)
  • Vector String: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

AIOHTTP: Secure attribute not enforced for shared cookie

CVE-2026-111063 / GHSA-494j-54xm-rwp3

More information

Details

Summary

The Secure attribute was not being enforced for the shared cookie.

Impact

It may be possible to send a shared cookie marked Secure through an unencrypted request.

Severity

Low

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

aiohttp server lacks an initial request/header timeout

CVE-2026-111064 / GHSA-5wr8-gcqf-gqf3

More information

Details

Summary

The keepalive timeout was not used during the initial portion of a request.

Impact

An attacker could keep an idle connection open indefinitely before sending any data.

Workaround

Use a reverse proxy (as recommended for all production deployments) with sensible keepalive limits.

Severity

  • CVSS Score: 8.2 / 10 (High)
  • Vector String: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

AIOHTTP: Connector pool exhaustion via Max-Age overflow

CVE-2026-111065 / GHSA-6cjc-53gc-5rqm

More information

Details

Summary

An overflow in Max-Age processing can skip closing a connection.

Impact

An attacker may be able to exhaust the connection pool temporarily, until garbage collection resolves the connections.

Severity

  • CVSS Score: 6.9 / 10 (Medium)
  • Vector String: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

AIOHTTP: File descriptor exhaustion in multipart requests

CVE-2026-111066 / GHSA-9xw5-w5jj-pvcg

More information

Details

Summary

An attacker can exhaust file descriptors with specially crafted multipart requests.

Impact

If a handler uses Request.post(), it may be possible for an attacker to use an unlimited number of file descriptors, potentially resulting in resource exhaustion.

Severity

  • CVSS Score: 8.2 / 10 (High)
  • Vector String: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

AIOHTTP: Absolute-form request targets can spoof Request.scheme

CVE-2026-111748 / GHSA-f9xw-jh8m-3mwq

More information

Details

Summary

An attacker sending an absolute-form request can spoof the scheme used.

Impact

If user code depends on the Request.scheme attribute for anything security related, an attacker may be able to circumvent this logic, tricking the application into thinking a connection is encrypted when it is not, or vice versa.

Workaround

A WAF rule to reject absolute-form requests (legitimate requests should only use this form for proxies).

Severity

  • CVSS Score: 6.3 / 10 (Medium)
  • Vector String: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies

CVE-2026-111749 / GHSA-gx76-c99x-2c96

More information

Details

Summary

A subdomain can remove the Host-Only flag from an existing cookie to a parent domain.

Impact

A user accessing untrusted subdomains could see their Host-Only protections stripped from cookies. Given most usecases won't reflect these cookies to a browser, the impact is limited.

Severity

  • CVSS Score: 2.3 / 10 (Low)
  • Vector String: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

AIOHTTP: Pure-Python parser request smuggling

CVE-2026-111750 / GHSA-pqxq-w44r-73xw

More information

Details

Summary

The pure Python parser is vulnerable to an HTTP request smuggling attack.

Impact

If users are using the Python parser (AIOHTTP_NO_EXTENSIONS, or not a standard wheel installed), then an application may be vulnerable to a request smuggling attack.

Workaround

Switch to the default C parser.

Severity

  • CVSS Score: 6.3 / 10 (Medium)
  • Vector String: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

AIOHTTP: Secure attribute not enforced for shared cookie

CVE-2026-111063 / GHSA-494j-54xm-rwp3

More information

Details

Summary

The Secure attribute was not being enforced for the shared cookie.

Impact

It may be possible to send a shared cookie marked Secure through an unencrypted request.

Severity

Low

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

aiohttp server lacks an initial request/header timeout

CVE-2026-111064 / GHSA-5wr8-gcqf-gqf3

More information

Details

Summary

The keepalive timeout was not used during the initial portion of a request.

Impact

An attacker could keep an idle connection open indefinitely before sending any data.

Workaround

Use a reverse proxy (as recommended for all production deployments) with sensible keepalive limits.

Severity

  • CVSS Score: 8.2 / 10 (High)
  • Vector String: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

aiohttp: Multiple instances of excessive or unbounded memory/CPU use

GHSA-2g87-pp6c-29x5

More information

Details

Summary

Multiple cases were found where aiohttp could use excessive or unbounded memory, or excessive CPU consumption on attacker controlled requests.

Impact

An attacker could cause resource exhaustion through specially crafted requests.

Severity

  • CVSS Score: 8.7 / 10 (High)
  • Vector String: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

AIOHTTP: File descriptor exhaustion in multipart requests

CVE-2026-111066 / GHSA-9xw5-w5jj-pvcg

More information

Details

Summary

An attacker can exhaust file descriptors with specially crafted multipart requests.

Impact

If a handler uses Request.post(), it may be possible for an attacker to use an unlimited number of file descriptors, potentially resulting in resource exhaustion.

Severity

  • CVSS Score: 8.2 / 10 (High)
  • Vector String: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

AIOHTTP: Pure-Python parser request smuggling

CVE-2026-111750 / GHSA-pqxq-w44r-73xw

More information

Details

Summary

The pure Python parser is vulnerable to an HTTP request smuggling attack.

Impact

If users are using the Python parser (AIOHTTP_NO_EXTENSIONS, or not a standard wheel installed), then an application may be vulnerable to a request smuggling attack.

Workaround

Switch to the default C parser.

Severity

  • CVSS Score: 6.3 / 10 (Medium)
  • Vector String: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

AIOHTTP: Connector pool exhaustion via Max-Age overflow

CVE-2026-111065 / GHSA-6cjc-53gc-5rqm

More information

Details

Summary

An overflow in Max-Age processing can skip closing a connection.

Impact

An attacker may be able to exhaust the connection pool temporarily, until garbage collection resolves the connections.

Severity

  • CVSS Score: 6.9 / 10 (Medium)
  • Vector String: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies

CVE-2026-111749 / GHSA-gx76-c99x-2c96

More information

Details

Summary

A subdomain can remove the Host-Only flag from an existing cookie to a parent domain.

Impact

A user accessing untrusted subdomains could see their Host-Only protections stripped from cookies. Given most usecases won't reflect these cookies to a browser, the impact is limited.

Severity

  • CVSS Score: 2.3 / 10 (Low)
  • Vector String: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

AIOHTTP: Absolute-form request targets can spoof Request.scheme

CVE-2026-111748 / GHSA-f9xw-jh8m-3mwq

More information

Details

Summary

An attacker sending an absolute-form request can spoof the scheme used.

Impact

If user code depends on the Request.scheme attribute for anything security related, an attacker may be able to circumvent this logic, tricking the application into thinking a connection is encrypted when it is not, or vice versa.

Workaround

A WAF rule to reject absolute-form requests (legitimate requests should only use this form for proxies).

Severity

  • CVSS Score: 6.3 / 10 (Medium)
  • Vector String: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

Release Notes

aio-libs/aiohttp (aiohttp)

v3.14.5

Compare Source

===================

Bug fixes

  • Stopped failing the WebSocket connection when a control frame has RSV1 set after permessage-deflate was negotiated; some clients set the bit on every frame and control frames are never decompressed -- by :user:bdraco.

    Related issues and pull requests on GitHub:
    :issue:14007.

Contributor-facing changes

  • Changed two client tests to pass with a yarl that rejects an http URL
    with an empty host, such as http://, and writes http:/ without the
    // it used to add
    -- by :user:asvetlov.

    Related issues and pull requests on GitHub:
    :issue:13964.

Configuration

📅 Schedule: (in timezone Europe/Zurich)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@osparc-simcore-renovate osparc-simcore-renovate Bot added t:maintenance Maintenance work; used to filter tasks for end-of-sprint reporting in Review (Agreed July 3, Retro) 🤖-automerge marks PR as ready to be merged for Mergify labels Oct 22, 2026
@osparc-simcore-renovate osparc-simcore-renovate Bot added the t:maintenance Maintenance work; used to filter tasks for end-of-sprint reporting in Review (Agreed July 3, Retro) label Oct 22, 2026
@osparc-simcore-renovate osparc-simcore-renovate Bot added the 🤖-automerge marks PR as ready to be merged for Mergify label Oct 22, 2026
@osparc-simcore-renovate

osparc-simcore-renovate Bot commented Oct 22, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Note

This PR body was truncated due to platform limits.

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: services/web/server/requirements/_test.txt
Command failed: uv pip compile --output-file=requirements/_test.txt requirements/_test.in --upgrade-package=aiohttp==3.14.5
error: No solution found when resolving dependencies
  cause: Because all versions of aioresponses depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all versions of aioresponses cannot be used.
         And because you require aioresponses, we can conclude that your requirements are unsatisfiable.
File name: services/storage/requirements/_test.txt
Command failed: uv pip compile --output-file=requirements/_test.txt requirements/_test.in --upgrade-package=aiohttp==3.14.5
   Updating https://github.com/ITISFoundation/osparc-simcore.git (cfdf4f86d844ebb362f4f39e9c6571d561b72897)
    Updated https://github.com/ITISFoundation/osparc-simcore.git (cfdf4f86d844ebb362f4f39e9c6571d561b72897)
error: No solution found when resolving dependencies
  cause: Because simcore-service-storage-sdk==0.1.0 depends on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that simcore-service-storage-sdk==0.1.0 cannot be used.
         And because only simcore-service-storage-sdk==0.1.0 is available and you require simcore-service-storage-sdk, we can conclude that your requirements are unsatisfiable.
File name: services/payments/requirements/_test.txt
Command failed: uv pip compile --output-file=requirements/_test.txt requirements/_test.in --upgrade-package=aiohttp==3.14.5
error: No solution found when resolving dependencies
  cause: Because python-socketio[asyncio-client]==5.16.4 depends on aiohttp==3.14.3 and aiohttp==3.14.5, we can conclude that python-socketio[asyncio-client]==5.16.4 cannot be used.
         And because you require python-socketio[asyncio-client] and python-socketio==5.16.4, we can conclude that your requirements are unsatisfiable.
File name: services/payments/requirements/_base.txt
Command failed: uv pip compile --output-file=requirements/_base.txt requirements/_base.in --upgrade-package=aiohttp==3.14.5
error: Failed to build `aiodocker==0.6`
  cause: The build backend returned an error
  cause: Call to `setuptools.build_meta:__legacy__.get_requires_for_build_wheel` failed (exit status: 1)

         [stderr]
         Traceback (most recent call last):
           File "<string>", line 14, in <module>
             requires = get_requires_for_build({})
           File "/home/ubuntu/.cache/uv/builds-v0/.tmpFD8a3u/lib/python3.14/site-packages/setuptools/build_meta.py", line 333, in get_requires_for_build_wheel
             return self._get_build_requires(config_settings, requirements=[])
                    ~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
           File "/home/ubuntu/.cache/uv/builds-v0/.tmpFD8a3u/lib/python3.14/site-packages/setuptools/build_meta.py", line 301, in _get_build_requires
             self.run_setup()
             ~~~~~~~~~~~~~~^^
           File "/home/ubuntu/.cache/uv/builds-v0/.tmpFD8a3u/lib/python3.14/site-packages/setuptools/build_meta.py", line 520, in run_setup
             super().run_setup(setup_script=setup_script)
             ~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^
           File "/home/ubuntu/.cache/uv/builds-v0/.tmpFD8a3u/lib/python3.14/site-packages/setuptools/build_meta.py", line 317, in run_setup
             exec(code, locals())  # noqa: S102 # exec is intentional here
             ~~~~^^^^^^^^^^^^^^^^
           File "<string>", line 4, in <module>
             sys.path.pop(0)
             ~~~~~~~~~~~~^^^
           File "/tmp/containerbase/cache/.cache/uv/sdists-v10/pypi/aiodocker/0.6/ma48Nr7o-u5sDUkl/src/aiodocker/__init__.py", line 3, in <module>
             from .docker import Docker
           File "/tmp/containerbase/cache/.cache/uv/sdists-v10/pypi/aiodocker/0.6/ma48Nr7o-u5sDUkl/src/aiodocker/docker.py", line 256
             asyncio.async(self.run())
                     ^^^^^
         SyntaxError: invalid syntax

hint: Build failures usually indicate a problem with the package or the build environment
File name: services/dynamic-sidecar/requirements/_test.txt
Command failed: uv pip compile --output-file=requirements/_test.txt requirements/_test.in --upgrade-package=aiohttp==3.14.5
error: No solution found when resolving dependencies
  cause: Because all versions of aiobotocore depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all versions of aiobotocore cannot be used.
         And because aioboto3>=9.1.0,<=9.2.0 depends on aiobotocore[boto3]==1.3.3, we can conclude that aioboto3>=9.1.0,<=9.2.0 cannot be used. (1)

         Because all versions of aiobotocore depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all versions of aiobotocore cannot be used.
         And because aioboto3>=10.0.0,<=10.0.1a0 depends on aiobotocore[boto3]==2.3.4, we can conclude that aioboto3>=10.0.0,<=10.0.1a0 cannot be used.
         And because we know from (1) that aioboto3>=9.1.0,<=9.2.0 cannot be used, we can conclude that all of:
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used. (2)

         Because all versions of aiobotocore depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all versions of aiobotocore cannot be used.
         And because aioboto3<=1.0.0 depends on aiobotocore, we can conclude that aioboto3<=1.0.0 cannot be used.
         And because we know from (2) that all of:
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used, we can conclude that all of:
             aioboto3<=1.0.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=1.0.0
             aioboto3>=1.1.0
         we can conclude that all of:
             aioboto3<1.1.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used. (3)

         Because all versions of aiobotocore depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all versions of aiobotocore cannot be used.
         And because aioboto3>=1.1.0,<=2.1.0 depends on aiobotocore==0.4.5, we can conclude that aioboto3>=1.1.0,<=2.1.0 cannot be used.
         And because we know from (3) that all of:
             aioboto3<1.1.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used, we can conclude that all of:
             aioboto3<=2.1.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=2.1.0
             aioboto3>=2.2.0
         we can conclude that all of:
             aioboto3<2.2.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used. (4)

         Because all versions of aiobotocore depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all versions of aiobotocore cannot be used.
         And because aioboto3==2.2.0 depends on aiobotocore==0.5.2, we can conclude that aioboto3==2.2.0 cannot be used.
         And because we know from (4) that all of:
             aioboto3<2.2.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used, we can conclude that all of:
             aioboto3<=2.2.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=2.2.0
             aioboto3>=3.0.0
         we can conclude that all of:
             aioboto3<3.0.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used. (5)

         Because all versions of aiobotocore depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all versions of aiobotocore cannot be used.
         And because aioboto3==3.0.0 depends on aiobotocore==0.6.0, we can conclude that aioboto3==3.0.0 cannot be used.
         And because we know from (5) that all of:
             aioboto3<3.0.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used, we can conclude that all of:
             aioboto3<=3.0.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=3.0.0
             aioboto3>=4.0.0
         we can conclude that all of:
             aioboto3<4.0.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used. (6)

         Because all versions of aiobotocore depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all versions of aiobotocore cannot be used.
         And because aioboto3>=4.0.0,<=4.0.1 depends on aiobotocore==0.8.0, we can conclude that aioboto3>=4.0.0,<=4.0.1 cannot be used.
         And because we know from (6) that all of:
             aioboto3<4.0.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used, we can conclude that all of:
             aioboto3<=4.0.1
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=4.0.1
             aioboto3>=4.0.2
         we can conclude that all of:
             aioboto3<4.0.2
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used. (7)

         Because all versions of aiobotocore depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all versions of aiobotocore cannot be used.
         And because aioboto3==4.0.2 depends on aiobotocore==0.9.3, we can conclude that aioboto3==4.0.2 cannot be used.
         And because we know from (7) that all of:
             aioboto3<4.0.2
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used, we can conclude that all of:
             aioboto3<=4.0.2
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=4.0.2
             aioboto3>=4.1.2
         we can conclude that all of:
             aioboto3<4.1.2
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used. (8)

         Because all versions of aiobotocore depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all versions of aiobotocore cannot be used.
         And because aioboto3>=4.1.2,<=5.0.0 depends on aiobotocore>=0.9.4,<0.10.dev0, we can conclude that aioboto3>=4.1.2,<=5.0.0 cannot be used.
         And because we know from (8) that all of:
             aioboto3<4.1.2
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used, we can conclude that all of:
             aioboto3<=5.0.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=5.0.0
             aioboto3>=6.0.0
         we can conclude that all of:
             aioboto3<6.0.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used. (9)

         Because aioboto3>=6.0.0,<=6.0.1 depends on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that aioboto3>=6.0.0,<=6.0.1 cannot be used.
         And because we know from (9) that all of:
             aioboto3<6.0.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used, we can conclude that all of:
             aioboto3<=6.0.1
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=6.0.1
             aioboto3>=6.1.0
         we can conclude that all of:
             aioboto3<6.1.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used. (10)

         Because all versions of aiobotocore depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all versions of aiobotocore cannot be used.
         And because aioboto3>=6.1.0,<=6.4.1 depends on aiobotocore[boto3]>=0.10.2,<0.11.dev0, we can conclude that aioboto3>=6.1.0,<=6.4.1 cannot be used.
         And because we know from (10) that all of:
             aioboto3<6.1.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used, we can conclude that all of:
             aioboto3<=6.4.1
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=6.4.1
             aioboto3>=6.5.0
         we can conclude that all of:
             aioboto3<6.5.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used. (11)

         Because all versions of aiobotocore depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all versions of aiobotocore cannot be used.
         And because aioboto3==6.5.0 depends on aiobotocore[boto3]>=0.11.1,<0.12.dev0, we can conclude that aioboto3==6.5.0 cannot be used.
         And because we know from (11) that all of:
             aioboto3<6.5.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used, we can conclude that all of:
             aioboto3<=6.5.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=6.5.0
             aioboto3>=7.0.0
         we can conclude that all of:
             aioboto3<7.0.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used. (12)

         Because all versions of aiobotocore depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all versions of aiobotocore cannot be used.
         And because aioboto3==7.0.0 depends on aiobotocore[boto3]>=0.12, we can conclude that aioboto3==7.0.0 cannot be used.
         And because we know from (12) that all of:
             aioboto3<7.0.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used, we can conclude that all of:
             aioboto3<=7.0.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=7.0.0
             aioboto3>=7.1.0
         we can conclude that all of:
             aioboto3<7.1.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used. (13)

         Because all of:
             aiobotocore<=0.12.0
             aiobotocore>=1.0.1,<=1.0.4
             aiobotocore==1.1.2
             aiobotocore>=1.2.1,<=1.2.2
             aiobotocore==1.3.1
             aiobotocore==1.3.3
             aiobotocore==1.4.2
             aiobotocore>=2.0.1,<=2.1.0
             aiobotocore>=2.1.2,<=2.3.0
             aiobotocore>=2.3.4,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
         depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all of:
             aiobotocore<=0.12.0
             aiobotocore>=1.0.1,<=1.0.4
             aiobotocore==1.1.2
             aiobotocore>=1.2.1,<=1.2.2
             aiobotocore==1.3.1
             aiobotocore==1.3.3
             aiobotocore==1.4.2
             aiobotocore>=2.0.1,<=2.1.0
             aiobotocore>=2.1.2,<=2.3.0
             aiobotocore>=2.3.4,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
          cannot be used.
         And because aioboto3==7.1.0 depends on aiobotocore[boto3]<1.0.0, we can conclude that aioboto3==7.1.0 cannot be used.
         And because we know from (13) that all of:
             aioboto3<7.1.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used, we can conclude that all of:
             aioboto3<=7.1.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=7.1.0
             aioboto3>=8.0.0
         we can conclude that all of:
             aioboto3<8.0.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used. (14)

         Because all of:
             aiobotocore>=1.0.1,<=1.0.4
             aiobotocore==1.1.2
             aiobotocore>=1.2.1,<=1.2.2
             aiobotocore==1.3.1
             aiobotocore==1.3.3
             aiobotocore==1.4.2
             aiobotocore>=2.0.1,<=2.1.0
             aiobotocore>=2.1.2,<=2.3.0
             aiobotocore>=2.3.4,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
         depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all of:
             aiobotocore>=1.0.1,<=1.0.4
             aiobotocore==1.1.2
             aiobotocore>=1.2.1,<=1.2.2
             aiobotocore==1.3.1
             aiobotocore==1.3.3
             aiobotocore==1.4.2
             aiobotocore>=2.0.1,<=2.1.0
             aiobotocore>=2.1.2,<=2.3.0
             aiobotocore>=2.3.4,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
          cannot be used.
         And because aioboto3==8.0.0 depends on aiobotocore[boto3]==1.0.1, we can conclude that aioboto3==8.0.0 cannot be used.
         And because we know from (14) that all of:
             aioboto3<8.0.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used, we can conclude that all of:
             aioboto3<=8.0.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=8.0.0
             aioboto3>=8.0.1
         we can conclude that all of:
             aioboto3<8.0.1
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used. (15)

         Because all of:
             aiobotocore>=1.0.2,<=1.0.4
             aiobotocore==1.1.2
             aiobotocore>=1.2.1,<=1.2.2
             aiobotocore==1.3.1
             aiobotocore==1.3.3
             aiobotocore==1.4.2
             aiobotocore>=2.0.1,<=2.1.0
             aiobotocore>=2.1.2,<=2.3.0
             aiobotocore>=2.3.4,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
         depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all of:
             aiobotocore>=1.0.2,<=1.0.4
             aiobotocore==1.1.2
             aiobotocore>=1.2.1,<=1.2.2
             aiobotocore==1.3.1
             aiobotocore==1.3.3
             aiobotocore==1.4.2
             aiobotocore>=2.0.1,<=2.1.0
             aiobotocore>=2.1.2,<=2.3.0
             aiobotocore>=2.3.4,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
          cannot be used.
         And because aioboto3==8.0.1 depends on aiobotocore[boto3]==1.0.2, we can conclude that aioboto3==8.0.1 cannot be used.
         And because we know from (15) that all of:
             aioboto3<8.0.1
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used, we can conclude that all of:
             aioboto3<=8.0.1
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=8.0.1
             aioboto3>=8.0.2
         we can conclude that all of:
             aioboto3<8.0.2
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used. (16)

         Because all of:
             aiobotocore>=1.0.3,<=1.0.4
             aiobotocore==1.1.2
             aiobotocore>=1.2.1,<=1.2.2
             aiobotocore==1.3.1
             aiobotocore==1.3.3
             aiobotocore==1.4.2
             aiobotocore>=2.0.1,<=2.1.0
             aiobotocore>=2.1.2,<=2.3.0
             aiobotocore>=2.3.4,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
         depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all of:
             aiobotocore>=1.0.3,<=1.0.4
             aiobotocore==1.1.2
             aiobotocore>=1.2.1,<=1.2.2
             aiobotocore==1.3.1
             aiobotocore==1.3.3
             aiobotocore==1.4.2
             aiobotocore>=2.0.1,<=2.1.0
             aiobotocore>=2.1.2,<=2.3.0
             aiobotocore>=2.3.4,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
          cannot be used.
         And because aioboto3==8.0.2 depends on aiobotocore[boto3]==1.0.3, we can conclude that aioboto3==8.0.2 cannot be used.
         And because we know from (16) that all of:
             aioboto3<8.0.2
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used, we can conclude that all of:
             aioboto3<=8.0.2
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=8.0.2
             aioboto3>=8.0.3
         we can conclude that all of:
             aioboto3<8.0.3
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used. (17)

         Because all of:
             aiobotocore==1.0.4
             aiobotocore==1.1.2
             aiobotocore>=1.2.1,<=1.2.2
             aiobotocore==1.3.1
             aiobotocore==1.3.3
             aiobotocore==1.4.2
             aiobotocore>=2.0.1,<=2.1.0
             aiobotocore>=2.1.2,<=2.3.0
             aiobotocore>=2.3.4,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
         depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all of:
             aiobotocore==1.0.4
             aiobotocore==1.1.2
             aiobotocore>=1.2.1,<=1.2.2
             aiobotocore==1.3.1
             aiobotocore==1.3.3
             aiobotocore==1.4.2
             aiobotocore>=2.0.1,<=2.1.0
             aiobotocore>=2.1.2,<=2.3.0
             aiobotocore>=2.3.4,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
          cannot be used.
         And because aioboto3>=8.0.3,<=8.0.5 depends on aiobotocore[boto3]==1.0.4, we can conclude that aioboto3>=8.0.3,<=8.0.5 cannot be used.
         And because we know from (17) that all of:
             aioboto3<8.0.3
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used, we can conclude that all of:
             aioboto3<=8.0.5
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=8.0.5
             aioboto3>=8.1.0
         we can conclude that all of:
             aioboto3<8.1.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used. (18)

         Because all of:
             aiobotocore==1.1.2
             aiobotocore>=1.2.1,<=1.2.2
             aiobotocore==1.3.1
             aiobotocore==1.3.3
             aiobotocore==1.4.2
             aiobotocore>=2.0.1,<=2.1.0
             aiobotocore>=2.1.2,<=2.3.0
             aiobotocore>=2.3.4,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
         depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all of:
             aiobotocore==1.1.2
             aiobotocore>=1.2.1,<=1.2.2
             aiobotocore==1.3.1
             aiobotocore==1.3.3
             aiobotocore==1.4.2
             aiobotocore>=2.0.1,<=2.1.0
             aiobotocore>=2.1.2,<=2.3.0
             aiobotocore>=2.3.4,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
          cannot be used.
         And because aioboto3>=8.1.0,<=8.2.0 depends on aiobotocore[boto3]==1.1.2, we can conclude that aioboto3>=8.1.0,<=8.2.0 cannot be used.
         And because we know from (18) that all of:
             aioboto3<8.1.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used, we can conclude that all of:
             aioboto3<=8.2.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=8.2.0
             aioboto3>=8.2.1
         we can conclude that all of:
             aioboto3<8.2.1
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used. (19)

         Because all of:
             aiobotocore>=1.2.1,<=1.2.2
             aiobotocore==1.3.1
             aiobotocore==1.3.3
             aiobotocore==1.4.2
             aiobotocore>=2.0.1,<=2.1.0
             aiobotocore>=2.1.2,<=2.3.0
             aiobotocore>=2.3.4,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
         depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all of:
             aiobotocore>=1.2.1,<=1.2.2
             aiobotocore==1.3.1
             aiobotocore==1.3.3
             aiobotocore==1.4.2
             aiobotocore>=2.0.1,<=2.1.0
             aiobotocore>=2.1.2,<=2.3.0
             aiobotocore>=2.3.4,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
          cannot be used.
         And because aioboto3==8.2.1 depends on aiobotocore[boto3]==1.2.1, we can conclude that aioboto3==8.2.1 cannot be used.
         And because we know from (19) that all of:
             aioboto3<8.2.1
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used, we can conclude that all of:
             aioboto3<=8.2.1
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=8.2.1
             aioboto3>=8.3.0
         we can conclude that all of:
             aioboto3<8.3.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used. (20)

         Because all of:
             aiobotocore==1.2.2
             aiobotocore==1.3.1
             aiobotocore==1.3.3
             aiobotocore==1.4.2
             aiobotocore>=2.0.1,<=2.1.0
             aiobotocore>=2.1.2,<=2.3.0
             aiobotocore>=2.3.4,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
         depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all of:
             aiobotocore==1.2.2
             aiobotocore==1.3.1
             aiobotocore==1.3.3
             aiobotocore==1.4.2
             aiobotocore>=2.0.1,<=2.1.0
             aiobotocore>=2.1.2,<=2.3.0
             aiobotocore>=2.3.4,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
          cannot be used.
         And because aioboto3==8.3.0 depends on aiobotocore[boto3]==1.2.2, we can conclude that aioboto3==8.3.0 cannot be used.
         And because we know from (20) that all of:
             aioboto3<8.3.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used, we can conclude that all of:
             aioboto3<=8.3.0
             aioboto3>=9.1.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=8.3.0
             aioboto3==9.0.0
             aioboto3>=9.1.0
         we can conclude that all of:
             aioboto3<9.0.0
             aioboto3>9.0.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used. (21)

         Because all of:
             aiobotocore==1.3.1
             aiobotocore==1.3.3
             aiobotocore==1.4.2
             aiobotocore>=2.0.1,<=2.1.0
             aiobotocore>=2.1.2,<=2.3.0
             aiobotocore>=2.3.4,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
         depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all of:
             aiobotocore==1.3.1
             aiobotocore==1.3.3
             aiobotocore==1.4.2
             aiobotocore>=2.0.1,<=2.1.0
             aiobotocore>=2.1.2,<=2.3.0
             aiobotocore>=2.3.4,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
          cannot be used.
         And because aioboto3==9.0.0 depends on aiobotocore[boto3]==1.3.1, we can conclude that aioboto3==9.0.0 cannot be used.
         And because we know from (21) that all of:
             aioboto3<9.0.0
             aioboto3>9.0.0,<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used, we can conclude that all of:
             aioboto3<=9.2.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=9.2.0
             aioboto3>=9.2.2
         we can conclude that all of:
             aioboto3<9.2.2
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used. (22)

         Because all of:
             aiobotocore==1.4.2
             aiobotocore>=2.0.1,<=2.1.0
             aiobotocore>=2.1.2,<=2.3.0
             aiobotocore>=2.3.4,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
         depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all of:
             aiobotocore==1.4.2
             aiobotocore>=2.0.1,<=2.1.0
             aiobotocore>=2.1.2,<=2.3.0
             aiobotocore>=2.3.4,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
          cannot be used.
         And because aioboto3==9.2.2 depends on aiobotocore[boto3]==1.4.2, we can conclude that aioboto3==9.2.2 cannot be used.
         And because we know from (22) that all of:
             aioboto3<9.2.2
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used, we can conclude that all of:
             aioboto3<=9.2.2
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=9.2.2
             aioboto3>=9.3.0
         we can conclude that all of:
             aioboto3<9.3.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used. (23)

         Because all of:
             aiobotocore>=2.0.1,<=2.1.0
             aiobotocore>=2.1.2,<=2.3.0
             aiobotocore>=2.3.4,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
         depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all of:
             aiobotocore>=2.0.1,<=2.1.0
             aiobotocore>=2.1.2,<=2.3.0
             aiobotocore>=2.3.4,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
          cannot be used.
         And because aioboto3==9.3.0 depends on aiobotocore[boto3]==2.0.1, we can conclude that aioboto3==9.3.0 cannot be used.
         And because we know from (23) that all of:
             aioboto3<9.3.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used, we can conclude that all of:
             aioboto3<=9.3.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=9.3.0
             aioboto3>=9.3.1
         we can conclude that all of:
             aioboto3<9.3.1
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used. (24)

         Because all of:
             aiobotocore==2.1.0
             aiobotocore>=2.1.2,<=2.3.0
             aiobotocore>=2.3.4,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
         depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all of:
             aiobotocore==2.1.0
             aiobotocore>=2.1.2,<=2.3.0
             aiobotocore>=2.3.4,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
          cannot be used.
         And because aioboto3==9.3.1 depends on aiobotocore[boto3]==2.1.0, we can conclude that aioboto3==9.3.1 cannot be used.
         And because we know from (24) that all of:
             aioboto3<9.3.1
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used, we can conclude that all of:
             aioboto3<=9.3.1
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=9.3.1
             aioboto3>=9.4.0
         we can conclude that all of:
             aioboto3<9.4.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used. (25)

         Because all of:
             aiobotocore>=2.1.2,<=2.3.0
             aiobotocore>=2.3.4,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
         depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all of:
             aiobotocore>=2.1.2,<=2.3.0
             aiobotocore>=2.3.4,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
          cannot be used.
         And because aioboto3==9.4.0 depends on aiobotocore[boto3]==2.1.2, we can conclude that aioboto3==9.4.0 cannot be used.
         And because we know from (25) that all of:
             aioboto3<9.4.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used, we can conclude that all of:
             aioboto3<=9.4.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=9.4.0
             aioboto3>=9.5.0
         we can conclude that all of:
             aioboto3<9.5.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used. (26)

         Because all of:
             aiobotocore>=2.2.0,<=2.3.0
             aiobotocore>=2.3.4,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
         depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all of:
             aiobotocore>=2.2.0,<=2.3.0
             aiobotocore>=2.3.4,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
          cannot be used.
         And because aioboto3==9.5.0 depends on aiobotocore[boto3]==2.2.0, we can conclude that aioboto3==9.5.0 cannot be used.
         And because we know from (26) that all of:
             aioboto3<9.5.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used, we can conclude that all of:
             aioboto3<=9.5.0
             aioboto3>=10.0.0,<=10.0.1a0
          cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=9.5.0
             aioboto3==9.6.0
             aioboto3>=10.0.0
         we can conclude that all of:
             aioboto3<9.6.0
             aioboto3>9.6.0,<=10.0.1a0
          cannot be used. (27)

         Because all of:
             aiobotocore==2.3.0
             aiobotocore>=2.3.4,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
         depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all of:
             aiobotocore==2.3.0
             aiobotocore>=2.3.4,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
          cannot be used.
         And because aioboto3==9.6.0 depends on aiobotocore[boto3]==2.3.0, we can conclude that aioboto3==9.6.0 cannot be used.
         And because we know from (27) that all of:
             aioboto3<9.6.0
             aioboto3>9.6.0,<=10.0.1a0
          cannot be used, we can conclude that aioboto3<=10.0.1a0 cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=10.0.1a0
             aioboto3>=10.1.0
         we can conclude that aioboto3<10.1.0 cannot be used. (28)

         Because all of:
             aiobotocore>=2.4.0,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
         depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all of:
             aiobotocore>=2.4.0,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
          cannot be used.
         And because aioboto3==10.1.0 depends on aiobotocore[boto3]==2.4.0, we can conclude that aioboto3==10.1.0 cannot be used.
         And because we know from (28) that aioboto3<10.1.0 cannot be used, we can conclude that aioboto3<=10.1.0 cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=10.1.0
             aioboto3>=10.2.0
         we can conclude that aioboto3<10.2.0 cannot be used. (29)

         Because all of:
             aiobotocore>=2.4.1,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
         depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all of:
             aiobotocore>=2.4.1,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
          cannot be used.
         And because aioboto3>=10.2.0,<=10.3.0 depends on aiobotocore[boto3]==2.4.1, we can conclude that aioboto3>=10.2.0,<=10.3.0 cannot be used.
         And because we know from (29) that aioboto3<10.2.0 cannot be used, we can conclude that aioboto3<=10.3.0 cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=10.3.0
             aioboto3>=10.4.0
         we can conclude that aioboto3<10.4.0 cannot be used. (30)

         Because all of:
             aiobotocore>=2.4.2,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
         depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all of:
             aiobotocore>=2.4.2,<=2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
          cannot be used.
         And because aioboto3>=10.4.0,<=11.0.1 depends on aiobotocore[boto3]==2.4.2, we can conclude that aioboto3>=10.4.0,<=11.0.1 cannot be used.
         And because we know from (30) that aioboto3<10.4.0 cannot be used, we can conclude that aioboto3<=11.0.1 cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=11.0.1
             aioboto3>=11.1.0
         we can conclude that aioboto3<11.1.0 cannot be used. (31)

         Because all of:
             aiobotocore==2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
         depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all of:
             aiobotocore==2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
          cannot be used.
         And because all of:
             aioboto3==11.1.0
             aioboto3==11.2.0
         depend on aiobotocore[boto3]==2.5.0, we can conclude that all of:
             aioboto3==11.1.0
             aioboto3==11.2.0
          cannot be used.
         And because we know from (31) that aioboto3<11.1.0 cannot be used, we can conclude that all of:
             aioboto3<=11.1.0
             aioboto3==11.2.0
          cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=11.1.0
             aioboto3==11.1.1
             aioboto3>=11.2.0
         we can conclude that all of:
             aioboto3<11.1.1
             aioboto3>11.1.1,<=11.2.0
          cannot be used. (32)

         Because all of:
             aiobotocore==2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
         depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all of:
             aiobotocore==2.5.0
             aiobotocore>=2.5.4,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
          cannot be used.
         And because aioboto3==11.1.1 depends on aiobotocore[boto3]==2.5.4, we can conclude that aioboto3==11.1.1 cannot be used.
         And because we know from (32) that all of:
             aioboto3<11.1.1
             aioboto3>11.1.1,<=11.2.0
          cannot be used, we can conclude that aioboto3<=11.2.0 cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=11.2.0
             aioboto3>=11.3.0
         we can conclude that aioboto3<11.3.0 cannot be used. (33)

         Because all of:
             aiobotocore>=2.6.0,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
         depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all of:
             aiobotocore>=2.6.0,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
          cannot be used.
         And because aioboto3>=11.3.0,<=11.3.1 depends on aiobotocore[boto3]==2.6.0, we can conclude that aioboto3>=11.3.0,<=11.3.1 cannot be used.
         And because we know from (33) that aioboto3<11.3.0 cannot be used, we can conclude that aioboto3<=11.3.1 cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=11.3.1
             aioboto3>=12.0.0
         we can conclude that aioboto3<12.0.0 cannot be used. (34)

         Because all of:
             aiobotocore>=2.7.0,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
         depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all of:
             aiobotocore>=2.7.0,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
          cannot be used.
         And because aioboto3==12.0.0 depends on aiobotocore[boto3]==2.7.0, we can conclude that aioboto3==12.0.0 cannot be used.
         And because we know from (34) that aioboto3<12.0.0 cannot be used, we can conclude that aioboto3<=12.0.0 cannot be used.
         And because only the following versions of aioboto3 are available:
             aioboto3<=12.0.0
             aioboto3>=12.1.0
         we can conclude that aioboto3<12.1.0 cannot be used. (35)

         Because all of:
             aiobotocore>=2.8.0,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
         depend on aiohttp==3.14.4 and aiohttp==3.14.5, we can conclude that all of:
             aiobotocore>=2.8.0,<=2.9.0
             aiobotocore==2.11.2
             aiobotocore==2.12.3
             aiobotocore>=2.13.0,<=2.13.1
             aiobotocore>=2.15.2,<=2.16.0
             aiobotocore==2.18.0
             aiobotocore==2.20.0
             aiobotocore>=2.21.1,<=2.23.0
             aiobotocore==2.24.0
             aiobotocore>=2.24.2,<=2.25.1
          cannot be used.
         And because aioboto3==12.1.0 depends on aiobotocore[boto3]==2.8.0, we can conclude that aioboto3==12.1.0 cannot be used

> [!IMPORTANT]
> ✂ PR body was truncated to here.

@github-actions github-actions Bot added this to the KonradZuse milestone Oct 22, 2026
@github-actions github-actions Bot added a:infra+ops maintenance of infrastructure or operations (discussed in retro) a:storage issue related to storage service a:director issue related with the director service a:webserver webserver's codebase. Assigning the area is particularly useful for bugs a:services-library issues on packages/service-libs a:api framework api, data schemas, a:director-v2 issue related with the director-v2 service a:apiserver api-server service a:dynamic-sidecar dynamic-sidecar service a:dask-service Any of the dask services: dask-scheduler/sidecar or worker a:autoscaling autoscaling service in simcore's stack a:agent agent service a:invitations invitations service a:resource-usage-tracker resource usage tracker service a:clusters-keeper a:aws-library a:datcore-adapter a:simcore-sdk labels Oct 22, 2026
@github-actions github-actions Bot added a:notifications a:celery-library dependencies Pull requests that update a dependency file labels Oct 22, 2026
@giancarloromeo giancarloromeo mentioned this pull request Oct 23, 2026
Closed
@osparc-simcore-renovate
osparc-simcore-renovate Bot force-pushed the renovate/pypi-aiohttp-vulnerability branch 2 times, most recently from 484417f to da816ab Compare October 23, 2026 09:24
@osparc-simcore-renovate
osparc-simcore-renovate Bot force-pushed the renovate/pypi-aiohttp-vulnerability branch 3 times, most recently from c88d0d1 to d8f9a56 Compare October 24, 2026 02:41
@osparc-simcore-renovate
osparc-simcore-renovate Bot force-pushed the renovate/pypi-aiohttp-vulnerability branch from 3509632 to 2f8fb98 Compare October 24, 2026 10:58
@sonarqubecloud

sonarqubecloud Bot commented Oct 24, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@sanderegg
sanderegg merged commit 8d30f33 into master Oct 24, 2026
63 of 64 checks passed
@sanderegg
sanderegg deleted the renovate/pypi-aiohttp-vulnerability branch October 24, 2026 13:02
@sanderegg sanderegg mentioned this pull request Oct 26, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@giancarloromeo giancarloromeo giancarloromeo approved these changes
@GitHK GitHK GitHK approved these changes
@pcrespov pcrespov pcrespov approved these changes
@sanderegg sanderegg sanderegg approved these changes
@matusdrobuliak66 matusdrobuliak66 Awaiting requested review from matusdrobuliak66 matusdrobuliak66 is a code owner
@wvangeit wvangeit Awaiting requested review from wvangeit wvangeit is a code owner

Assignees

No one assigned

Labels

🤖-automerge marks PR as ready to be merged for Mergify a:agent agent service a:api framework api, data schemas, a:apiserver api-server service a:autoscaling autoscaling service in simcore's stack a:aws-library a:celery-library a:clusters-keeper a:dask-service Any of the dask services: dask-scheduler/sidecar or worker a:datcore-adapter a:director issue related with the director service a:director-v2 issue related with the director-v2 service a:dynamic-sidecar dynamic-sidecar service a:infra+ops maintenance of infrastructure or operations (discussed in retro) a:invitations invitations service a:notifications a:resource-usage-tracker resource usage tracker service a:services-library issues on packages/service-libs a:simcore-sdk a:storage issue related to storage service a:webserver webserver's codebase. Assigning the area is particularly useful for bugs dependencies Pull requests that update a dependency file t:maintenance Maintenance work; used to filter tasks for end-of-sprint reporting in Review (Agreed July 3, Retro)

Projects

None yet

Milestone

KonradZuse

Development

Successfully merging this pull request may close these issues.

4 participants

@giancarloromeo @GitHK @pcrespov @sanderegg