Bump the pip group across 4 directories with 1 update

CHANGELOG.md

@@ -28,6 +28,7 @@ See [Legacy Airlock & migration](docs/azure-tre-overview/airlock.md#legacy-airlo
 * Add weekly and manual builds for Dockerfiles and Porter bundles, with selected pull request builds. Retry a failed target once and report final results. ([#5088](https://github.com/microsoft/AzureTRE/issues/5088))
 
 BUG FIXES:
+* Update `aiohttp` from 3.14.3 to 3.14.4 in `api_app`, `resource_processor`, and the CLI to address security advisories. (`API` 0.28.7, `resource_processor` 0.13.15, `CLI` 0.2.13) ([#5270](https://github.com/microsoft/AzureTRE/pull/5270))
 * Rename a test variable in the E2E polling tests so that CodeQL stops reporting false clear-text logging alerts. ([#5266](https://github.com/microsoft/AzureTRE/pull/5266))
 * Protect active validation environments and require successful smoke tests before custom tests. Validate shared-service command arguments and forward explicit Nexus EULA consent. (`devops` 0.6.20, `build-scripts` 1.1.4) ([#5255](https://github.com/microsoft/AzureTRE/pull/5255))
 * Give E2E cleanup separate deadlines and allow 30 seconds for smoke health requests. ([#5255](https://github.com/microsoft/AzureTRE/pull/5255))

api_app/_version.py

@@ -1 +1 @@
-__version__ = "0.28.6"
+__version__ = "0.28.7"

api_app/requirements.txt

@@ -1,4 +1,4 @@
-aiohttp==3.14.3
+aiohttp==3.14.4
 azure-core==1.38.0
 azure-cosmos==4.14.3
 azure-eventgrid==4.22.0

cli/requirements.txt

@@ -8,4 +8,4 @@ pygments==2.20.0
 PyJWT==2.15.0
 azure-cli-core==2.68.0
 azure-identity==1.25.1
-aiohttp==3.14.3
+aiohttp==3.14.4

cli/setup.py

@@ -4,7 +4,7 @@
 from setuptools import setup
 
 PROJECT = "azure-tre-cli"
-VERSION = "0.2.12"
+VERSION = "0.2.13"
 
 try:
     long_description = open("README.md", "rt").read()
@@ -42,7 +42,7 @@
         "PyJWT==2.15.0",
         "azure-cli-core==2.68.0",
         "azure-identity==1.25.1",
-        "aiohttp==3.14.3",
+        "aiohttp==3.14.4",
     ],
     namespace_packages=[],
     packages=find_packages(),

resource_processor/_version.py

@@ -1 +1 @@
-__version__ = "0.13.14"
+__version__ = "0.13.15"

resource_processor/vmss_porter/requirements.txt

@@ -1,4 +1,4 @@
-aiohttp==3.14.3
+aiohttp==3.14.4
 azure-cli-core==2.68.0
 azure-identity==1.25.1
 azure-monitor-opentelemetry==1.8.9