[Copilot]

nightly-complete was failing at the dependency vulnerability gate because aiohttp==3.14.3 is flagged by pip-audit advisories. This updates the runtime lock to the patched aiohttp line and resolves the resulting resolver constraint mismatch.

• Security patch

  • Bump aiohttp in requirements.txt from 3.14.3 to 3.14.4 (advisory-fixed version used by the nightly audit gate).

• Constraint alignment

  • Bump yarl from 1.24.2 to 1.25.1 to satisfy aiohttp==3.14.4 dependency requirements (yarl>=1.25.1).

• Resulting lock delta

  -aiohttp==3.14.3
  +aiohttp==3.14.4
  ...
  -yarl==1.24.2
  +yarl==1.25.1