Skip to content

Commit f41aea1

Browse files
Update changelogs from fern repo (#5009)
Co-authored-by: dsinghvi <10870189+dsinghvi@users.noreply.github.com>
1 parent b4d7c5a commit f41aea1

File tree

1 file changed

+9
-0
lines changed

1 file changed

+9
-0
lines changed

fern/products/sdks/generators/python/changelog/2026-04-20.mdx

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,12 @@
1+
## 5.5.5
2+
**`(fix):`** Raise the generated `aiohttp` optional-dependency lower bound from
3+
`>=3.10.0,<4` to `>=3.13.4,<4` and add a `python = ">=3.9"` marker on
4+
both `aiohttp` and `httpx-aiohttp` so the aiohttp extra is only installed
5+
on Python 3.9+ while still allowing the SDK itself to support Python 3.8.
6+
Enforces the patched minimum version for GHSA-c427-h43c-vf67
7+
(CVE-2026-34525) at the dependency spec level.
8+
9+
110
## 5.5.4
211
**`(fix):`** Clamp the minimum Python version produced by the generator to ^3.10. Python 3.8 reached EOL in Oct 2024 and Python 3.9 in Oct 2025; many popular PyPI packages (e.g. `requests` >=2.33) no longer publish wheels for those versions, which causes dependency resolution to pin older, known-vulnerable releases (GHSA-gc5v-m9x4-r6x2 / CVE-2026-25645). When `pyproject_python_version` specifies a range that allows a version older than 3.10, the generator now logs a warning and emits `python = "^3.10"` in the generated `pyproject.toml`.
312

0 commit comments

Comments
 (0)