fix: bump aiohttp for CVE-2026-69244

see CVE-2026-69244 for more details.

Signed-off-by: Charlie Doern <cdoern@redhat.com>

Author: cdoern

pyproject.toml

@@ -8,7 +8,7 @@ fallback_version = "1.2.1.dev0"
 [tool.uv]
 required-version = ">=0.7.0"
 constraint-dependencies = [
-    "aiohttp>=3.14.0",                # CVE-2026-34993: CookieJar.load() RCE
+    "aiohttp>=3.14.3",                # CVE-2026-34993: CookieJar.load() RCE
     "authlib>=1.6.11",                 # CVE-2026-41425 + 7 more: account takeover, JWE padding oracle, sig bypass
     "cryptography>=48.0.1",            # CVE-2026-39892: buffer overflow; CVE-2026-34073: DNS constraint bypass
     "fonttools>=4.60.2",