mirror of
https://github.com/home-assistant/supervisor.git
synced 2026-08-21 21:57:26 +01:00
* Bump aiohttp from 3.13.5 to 3.14.0 --- updated-dependencies: - dependency-name: aiohttp dependency-version: 3.14.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * Adjust API layer for aiohttp 3.14 aiohttp 3.14 raises NotAppKeyWarning when a plain string is used as a request storage key. Convert REQUEST_FROM to a web.RequestKey instance so request[REQUEST_FROM] no longer triggers the warning (which the test suite escalates to an error, failing every authenticated endpoint). It is typed as RequestKey[Any] to preserve the current access semantics: handlers store different origins (App, Home Assistant, host, observer) and narrow the value to the concrete type they expect. aiohttp 3.14 also widened the request.post() return type to include bytearray. Update the _process_dict annotation accordingly to satisfy mypy. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> * Use encode_basic_auth for registry token requests aiohttp 3.14 deprecates the BasicAuth constructor and the client auth= request parameter (both removed in aiohttp 4.0), each emitting a DeprecationWarning at runtime. The registry manifest fetcher hit both when requesting a token with stored credentials. Switch to aiohttp.encode_basic_auth() and pass the result via an Authorization header instead. Add a test covering the credentials path, which the existing tests skipped by mocking _get_auth_token. It asserts the Authorization header is sent and, since the suite escalates warnings to errors, guards against the deprecations returning. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Stefan Agner <stefan@agner.ch> Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>