From 1a8070a90d1e0e6fee1caec3997aa9d1cc521c8f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 30 Jan 2024 00:34:47 +0000
Subject: [PATCH 1/2] Bump aiohttp from 3.9.1 to 3.9.2 in /src

Bumps [aiohttp](https://github.com/aio-libs/aiohttp) from 3.9.1 to 3.9.2.
- [Release notes](https://github.com/aio-libs/aiohttp/releases)
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](https://github.com/aio-libs/aiohttp/compare/v3.9.1...v3.9.2)

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 src/requirements-dev.txt | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/src/requirements-dev.txt b/src/requirements-dev.txt
index e8ef0921..541df8d8 100644
--- a/src/requirements-dev.txt
+++ b/src/requirements-dev.txt
@@ -4,7 +4,7 @@
 #
 #    pip-compile requirements-dev.in
 #
-aiohttp==3.9.1
+aiohttp==3.9.2
     # via
     #   -r requirements-dev.in
     #   aiohttp-cors
@@ -59,7 +59,9 @@ colorama==0.4.6
 colorful==0.5.5
     # via ray
 coverage[toml]==7.3.2
-    # via pytest-cov
+    # via
+    #   coverage
+    #   pytest-cov
 cryptography==41.0.7
     # via -r requirements.txt
 defusedxml==0.7.1

From 366de448793f42d11216073735b9997d28d21594 Mon Sep 17 00:00:00 2001
From: Anthony Romaniello <aromaniello@ntia.gov>
Date: Wed, 31 Jan 2024 00:20:14 +0000
Subject: [PATCH 2/2] Update requirements-dev.txt and recompile

---
 src/requirements-dev.in  | 2 +-
 src/requirements-dev.txt | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/requirements-dev.in b/src/requirements-dev.in
index 3c586abb..8fe2d167 100644
--- a/src/requirements-dev.in
+++ b/src/requirements-dev.in
@@ -9,4 +9,4 @@ tox>=4.0,<5.0
 # The following are sub-dependencies for which SCOS Sensor enforces a
 # higher minimum patch version than the dependencies which require them.
 # This is done to ensure the inclusion of specific security patches.
-aiohttp>=3.9.0        # CVE-2023-37276
+aiohttp>=3.9.2        # CVE-2023-37276
diff --git a/src/requirements-dev.txt b/src/requirements-dev.txt
index 541df8d8..3b95e482 100644
--- a/src/requirements-dev.txt
+++ b/src/requirements-dev.txt
@@ -4,7 +4,7 @@
 #
 #    pip-compile requirements-dev.in
 #
-aiohttp==3.9.2
+aiohttp==3.9.3
     # via
     #   -r requirements-dev.in
     #   aiohttp-cors
@@ -364,7 +364,7 @@ virtualenv==20.21.0
     #   tox
 wcwidth==0.2.12
     # via blessed
-yarl==1.9.3
+yarl==1.9.4
     # via aiohttp
 zipp==3.17.0
     # via