build(deps): Bump yarl from 1.9.7 to 1.9.11

[dependabot]

Bumps yarl from 1.9.7 to 1.9.11.

Release notes

Sourced from yarl's releases.

1.9.11

Bug fixes

• Fixed a :exc:TypeError with MultiDictProxy and Python 3.8 -- by :user:bdraco.

  Related issues and pull requests on GitHub: #1084, #1105, #1107.

Miscellaneous internal changes

• Improved performance of encoding hosts -- by :user:bdraco.

  Previously, the library would unconditionally try to parse a host as an IP Address. The library now avoids trying to parse a host as an IP Address if the string is not in one of the formats described in :rfc:3986#section-3.2.2.

  Related issues and pull requests on GitHub: #1104.

---

1.9.10

Bug fixes

• :meth:URL.join() <yarl.URL.join> has been changed to match :rfc:3986 and align with :meth:/ operation <yarl.URL.__truediv__> and :meth:URL.joinpath() <yarl.URL.joinpath> when joining URLs with empty segments. Previously :py:func:urllib.parse.urljoin was used, which has known issues with empty segments (python/cpython#84774 <https://github.com/python/cpython/issues/84774>_).

  Due to the semantics of :meth:URL.join() <yarl.URL.join>, joining an URL with scheme requires making it relative, prefixing with ./.

  .. code-block:: pycon

  URL("https://web.archive.org/web/").join(URL("./https://github.com/aio-libs/yarl")) URL('https://web.archive.org/web/https://github.com/aio-libs/yarl')

  Empty segments are honored in the base as well as the joined part.

  .. code-block:: pycon

  URL("https://web.archive.org/web/https://").join(URL("github.com/aio-libs/yarl")) URL('https://web.archive.org/web/https://github.com/aio-libs/yarl')

... (truncated)

Changelog

Sourced from yarl's changelog.

1.9.11

(2024-09-04)

Bug fixes

• Fixed a :exc:TypeError with MultiDictProxy and Python 3.8 -- by :user:bdraco.

  Related issues and pull requests on GitHub: :issue:1084, :issue:1105, :issue:1107.

Miscellaneous internal changes

• Improved performance of encoding hosts -- by :user:bdraco.

  Previously, the library would unconditionally try to parse a host as an IP Address. The library now avoids trying to parse a host as an IP Address if the string is not in one of the formats described in :rfc:3986#section-3.2.2.

  Related issues and pull requests on GitHub: :issue:1104.

---

1.9.10

(2024-09-04)

Bug fixes

• :meth:URL.join() <yarl.URL.join> has been changed to match :rfc:3986 and align with :meth:/ operation <yarl.URL.__truediv__> and :meth:URL.joinpath() <yarl.URL.joinpath> when joining URLs with empty segments. Previously :py:func:urllib.parse.urljoin was used, which has known issues with empty segments (python/cpython#84774 <https://github.com/python/cpython/issues/84774>_).

  Due to the semantics of :meth:URL.join() <yarl.URL.join>, joining an URL with scheme requires making it relative, prefixing with ./.

  .. code-block:: pycon

... (truncated)

Commits

• 29d693d Release 1.9.11
• 7acfed4 Fix TypeError with MultiDictProxy and Python 3.8 (#1107)
• 51541ec Avoid trying to parse strings that cannot be IP Addresses (#1104)
• bccb8af Increment version to 1.9.11.dev0 (#1106)
• bfef130 Release 1.9.10
• af585b2 RFC3986 compatible URL.join honoring empty segments again (#1082)
• b631867 Introduce absolute cached property (#1100)
• f06445c Adjust missing type changelog message to be attr instead of meth (#1101)
• 3d4b8ca Increment version to 1.9.10.dev0 (#1099)
• 1466ce8 Release 1.9.9
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)