Merge pull request #298 from NTIA/dependabot/pip/src/aiohttp-3.10.2

Bump aiohttp from 3.9.4 to 3.10.2 in /src

src/requirements-dev.in

@@ -9,4 +9,4 @@ tox>=4.0,<5.0
 # The following are sub-dependencies for which SCOS Sensor enforces a
 # higher minimum patch version than the dependencies which require them.
 # This is done to ensure the inclusion of specific security patches.
-aiohttp>=3.9.4        # CVE-2024-30251, CVE-2024-27306
+aiohttp>=3.10.2       # CVE-2024-42367

src/requirements-dev.txt

@@ -4,7 +4,9 @@
 #
 #    pip-compile requirements-dev.in
 #
-aiohttp==3.9.4
+aiohappyeyeballs==2.4.0
+    # via aiohttp
+aiohttp==3.10.2
     # via
     #   -r requirements-dev.in
     #   aiohttp-cors
@@ -59,9 +61,7 @@ colorama==0.4.6
 colorful==0.5.5
     # via ray
 coverage[toml]==7.3.2
-    # via
-    #   coverage
-    #   pytest-cov
+    # via pytest-cov
 cryptography==43.0.1
     # via -r requirements.txt
 defusedxml==0.7.1
@@ -126,7 +126,7 @@ idna==3.7
     #   -r requirements.txt
     #   requests
     #   yarl
-importlib-resources==6.1.1
+importlib-resources==6.4.5
     # via
     #   -r requirements.txt
     #   jsonschema

src/requirements.txt

@@ -65,7 +65,7 @@ idna==3.7
     # via
     #   -r requirements.in
     #   requests
-importlib-resources==6.1.1
+importlib-resources==6.4.5
     # via
     #   jsonschema
     #   jsonschema-specifications