From 540df45852c943ae6b35ba520f62074fb7eccac2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Adria=CC=80=20Sala?=
 <22398818+adrisala@users.noreply.github.com>
Date: Tue, 7 Jul 2026 10:59:52 +0200
Subject: [PATCH] chore: Upgrade kubernetes package to 36.0.2

Bumps kubernetes from 36.0.0 to 36.0.2, which requires aiohttp>=3.13.5.
Also bumps aiohttp[speedups] to 3.14.1 and Brotli to 1.2.0 to satisfy
the new dependency chain.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 requirements/requirements.in  |  4 ++--
 requirements/requirements.txt | 11 ++++++-----
 2 files changed, 8 insertions(+), 7 deletions(-)

diff --git a/requirements/requirements.in b/requirements/requirements.in
index 27b5659fa0..5952af5f5c 100644
--- a/requirements/requirements.in
+++ b/requirements/requirements.in
@@ -1,4 +1,4 @@
-aiohttp>=3.12.14 # CVE-2024-30251
+aiohttp>=3.13.5 # CVE-2024-30251, kubernetes>=36.0.2 requires >=3.13.5
 ansi2html  # Used to format the stdout from jobs into html for display
 jq  # used for indirect host counting feature
 asn1
@@ -36,7 +36,7 @@ maturin  # pydantic-core build dep
 msgpack
 msrestazure
 OPA-python-client==2.0.2 # upgrading requires urllib3 2.5.0+ which is blocked by other deps
-kubernetes>=36.0.0  # fixes NO_PROXY silently being reset to None
+kubernetes>=36.0.2  # fixes NO_PROXY silently being reset to None
 openshift
 opentelemetry-api~=1.37     # new y streams can be drastically different, in a good way
 opentelemetry-sdk~=1.37
diff --git a/requirements/requirements.txt b/requirements/requirements.txt
index 73817e6f02..0871604480 100644
--- a/requirements/requirements.txt
+++ b/requirements/requirements.txt
@@ -6,7 +6,7 @@ aiofiles==24.1.0
     # via opa-python-client
 aiohappyeyeballs==2.6.1
     # via aiohttp
-aiohttp[speedups]==3.13.0
+aiohttp[speedups]==3.14.1
     # via
     #   -r /awx_devel/requirements/requirements.in
     #   aiohttp-retry
@@ -67,6 +67,8 @@ azure-keyvault-keys==4.11.0
     # via azure-keyvault
 azure-keyvault-secrets==4.10.0
     # via azure-keyvault
+backports-zstd==1.6.0
+    # via aiohttp
 boto3==1.40.46
     # via -r /awx_devel/requirements/requirements.in
 botocore==1.40.46
@@ -74,7 +76,7 @@ botocore==1.40.46
     #   -r /awx_devel/requirements/requirements.in
     #   boto3
     #   s3transfer
-brotli==1.1.0
+brotli==1.2.0
     # via aiohttp
 cachetools==6.2.0
     # via -r /awx_devel/requirements/requirements.in
@@ -252,7 +254,7 @@ jsonschema==4.25.1
     #   drf-spectacular
 jsonschema-specifications==2025.9.1
     # via jsonschema
-kubernetes==36.0.0
+kubernetes==36.0.2
     # via
     #   -r /awx_devel/requirements/requirements.in
     #   openshift
@@ -500,6 +502,7 @@ txaio==25.9.2
     # via autobahn
 typing-extensions==4.15.0
     # via
+    #   aiohttp
     #   aiosignal
     #   azure-core
     #   azure-identity
@@ -544,8 +547,6 @@ zipp==3.23.0
     # via importlib-metadata
 zope-interface==8.0.1
     # via twisted
-zstandard==0.25.0
-    # via aiohttp
 
 # The following packages are considered to be unsafe in a requirements file:
 pip==25.3