Bugfix release

Changes

• Fix passing client max size on cloning request obj. (#2385)
• Fix ClientConnectorSSLError and ClientProxyConnectionError for proxy connector. (#2408)
• Drop generated _http_parser shared object from tarball distribution. (#2414)
• Fix connector convert OSError to ClientConnectorError. (#2423)
• Fix connection attempts for multiple dns hosts. (#2424)
• Fix ValueError for AF_INET6 sockets if a preexisting INET6 socket to the aiohttp.web.run_app function. (#2431)
• _SessionRequestContextManager closes the session properly now. (#2441)
• Rename from_env to trust_env in client reference. (#2451)

Changes

• Relax attribute lookup in warning about old-styled middleware (#2340)

On behalf of aiohttp development team I'm pleased to announce next aiohttp release.

It contains very long list of new features and bug fixes (see it below).

Most important changes are:

• ClientSession supports trust_env parameter for getting proxy configuration from environment variables (disabled by default).
• New alternatives for filing route table: route table (https://github.com/aio-libs/aiohttp/blob/master/examples/web_srv_route_table.py) and router decorators (https://github.com/aio-libs/aiohttp/blob/master/examples/web_srv_route_deco.py)
• Request.remote property for accessing to IP of connected client.
• Support brotli encoding
• Support websockets compression

The full list of changes:

Features

• Add SSL related params to ClientSession.request (#1128)
• Make enable_compression work on HTTP/1.0 (#1828)
• Deprecate registering synchronous web handlers (#1993)
• Switch to multidict 3.0. All HTTP headers preserve casing now but compared in case-insensitive way. (#1994)
• Improvement for normalize_path_middleware. Added possibility to handle URLs with query string. (#1995)
• Use towncrier for CHANGES.txt build (#1997)
• Implement trust_env=True param in ClientSession. (#1998)
• Added variable to customize proxy headers (#2001)
• Implement router.add_routes and router decorators. (#2004)
• Deprecated BaseRequest.has_body in favor of BaseRequest.can_read_body Added BaseRequest.body_exists attribute that stays static for the lifetime of the request (#2005)
• Provide BaseRequest.loop attribute (#2024)
• Make _CoroGuard awaitable and fix ClientSession.close warning message (#2026)
• Responses to redirects without Location header are returned instead of raising a RuntimeError (#2030)
• Added get_client, get_server, setUpAsync and tearDownAsync methods to AioHTTPTestCase (#2032)
• Add automatically a SafeChildWatcher to the test loop (#2058)
• add ability to disable automatic response decompression (#2110)
• Add support for throttling DNS request, avoiding the requests saturation when there is a miss in the DNS cache and many requests getting into the connector at the same time. (#2111)
• Use request for getting access log information instead of message/transport pair. Add RequestBase.remote property for accessing to IP of client initiated HTTP request. (#2123)
• json() raises a ContentTypeError exception if the content-type does not meet the requirements instead of raising a generic ClientResponseError. (#2136)
• Make the HTTP client able to return HTTP chunks when chunked transfer encoding is used. (#2150)
• add append_version arg into StaticResource.url and StaticResource.url_for methods for getting an url with hash (version) of the file. (#2157)
• Fix parsing the Forwarded header. * commas and semicolons are allowed inside quoted-strings; * empty forwarded-pairs (as in for=_1;;by=_2) are allowed; * non-standard parameters are allowed (although this alone could be easily done in the previous parser). (#2173)
• Don't require ssl module to run. aiohttp does not require SSL to function. The code paths involved with SSL will only be hit upon SSL usage. Raise RuntimeError if HTTPS protocol is required but ssl module is not present. (#2221)
• Accept coroutine fixtures in pytest plugin (#2223)
• Call shutdown_asyncgens before event loop closing on Python 3.6. (#2227)
• Speed up Signals when there are no receivers (#2229)
• Raise InvalidURL instead of ValueError on fetches with invalid URL. (#2241)
• Move DummyCookieJar into cookiejar.py (#2242)
• run_app: Make print=None disable printing (#2260)
• Support brotli encoding (generic-purpose lossless compression algorithm) (#2270)
• Add server support for WebSockets Per-Message Deflate. Add client option to add deflate compress header in WebSockets request header. If calling ClientSession.ws_connect() with compress=15 the client will support deflate compress negotiation. (#2273)
• Support verify_ssl, fingerprint, ssl_context and proxy_headers by client.ws_connect. (#2292)
• Added aiohttp.ClientConnectorSSLError when connection fails due ssl.SSLError (#2294)
• aiohttp.web.Application.make_handler support access_log_class (#2315)
• Build HTTP parser extension in non-strict mode by default. (#2332)

Bugfixes

• Clear auth information on redirecting to other domain (#1699)
• Fix missing app.loop on startup hooks during tests (#2060)
• Fix issue with synchronous session closing when using ClientSession as an asynchronous context manager. (#2063)
• Fix issue with CookieJar incorrectly expiring cookies in some edge cases. (#2084)
• Force use of IPv4 during test, this will make tests run in a Docker container (#2104)
• Warnings about unawaited coroutines now correctly point to the user's code. (#2106)
• Fix issue with IndexError being raised by the StreamReader.iter_chunks() generator. (#2112)
• Support HTTP 308 Permanent redirect in client class. (#2114)
• Fix FileResponse sending empty chunked body on 304. (#2143)
• Do not add Content-Length: 0 to GET/HEAD/TRACE/OPTIONS requests by default. (#2167)
• Fix parsing the Forwarded header according to RFC 7239. (#2170)
• Securely determining remote/scheme/host #2171 (#2171)
• Fix header name parsing, if name is split into multiple lines (#2183)
• Handle session close during connection, KeyError: <aiohttp.connector._TransportPlaceholder> (#2193)
• Fixes uncaught TypeError in helpers.guess_filename if name is not a string (#2201)
• Raise OSError on async DNS lookup if resolved domain is an alias for another one, which does not have an A or CNAME record. (#2231)
• Fix incorrect warning in StreamReader. (#2251)
• Properly clone state of web request (#2284)
• Fix C HTTP parser for cases when status line is split into different TCP packets. (#2311)
• Fix web.FileResponse overriding user supplied Content-Type (#2317)

Improved Documentation

• Add a note about possible performance degradation in await resp.text() if charset was not provided by Content-Type HTTP header. Pass explicit encoding to solve it. (#1811)
• Drop disqus widget from documentation pages. (#2018)
• Add a graceful shutdown section to the client usage documentation. (#2039)
• Document connector_owner parameter. (#2072)
• Update the doc of web.Application (#2081)
• Fix mistake about access log disabling. (#2085)
• Add example usage of on_startup and on_shutdown signals by creating and disposing an aiopg connection engine. (#2131)
• Document encoded=True for yarl.URL, it disables all yarl transformations. (#2198)
• Document that all app's middleware factories are run for every request. (#2225)
• Reflect the fact that default resolver is threaded one starting from aiohttp 1.1 (#2228)

Deprecations and Removals

• Drop deprecated Server.finish_connections (#2006)
• Drop %O format from logging, use %b instead. Drop %e format from logging, environment variables are not supported anymore. (#2123)
• Drop deprecated secure_proxy_ssl_header support (#2171)
• Removed TimeService in favor of simple caching. TimeService also had a bug where it lost about 0.5 seconds per second. (#2176)
• Drop unused response_factory from static files API (#2290)

• Don't raise deprecation warning on loop.run_until_complete(client.close()) (#2065)

---

• Fix issue with synchronous session closing when using ClientSession as an asynchronous context manager. (#2063)

---

• Fix _CoroGuard for python 3.4

---

• Allow await session.close() along with yield from session.close()

---

• Relax yarl requirement to 0.11+

• Backport #2026: session.close is a coroutine (#2029)

---

CHANGES

• Add doc for add_head, update doc for add_get. #1944

• Fixed consecutive calls for Response.write_eof.

• Retain method attributes (e.g. :code:__doc__) when registering synchronous handlers for resources. #1953

• Added signal TERM handling in run_app to gracefully exit #1932

• Fix websocket issues caused by frame fragmentation. #1962

• Raise RuntimeError is you try to set the Content Length and enable chunked encoding at the same time #1941

• Small update for unittest_run_loop

• Use CIMultiDict for ClientRequest.skip_auto_headers #1970

• Fix wrong startup sequence: test server and run_app() are not raise DeprecationWarning now #1947

• Make sure cleanup signal is sent if startup signal has been sent #1959

• Fixed server keep-alive handler, could cause 100% cpu utilization #1955

• Connection can be destroyed before response get processed if await aiohttp.request(..) is used #1981

• MultipartReader does not work with -OO #1969

• Fixed ClientPayloadError with blank Content-Encoding header #1931

• Support deflate encoding implemented in httpbin.org/deflate #1918

• Fix BadStatusLine caused by extra CRLF after POST data #1792

• Keep a reference to ClientSession in response object #1985

• Deprecate undocumented app.on_loop_available signal #1978

Changes

• Added support for experimental async-tokio event loop written in Rust https://github.com/PyO3/tokio

• Write to transport \r\n before closing after keepalive timeout, otherwise client can not detect socket disconnection. #1883

• Only call loop.close in run_app if the user did not supply a loop. Useful for allowing clients to specify their own cleanup before closing the asyncio loop if they wish to tightly control loop behavior

• Content disposition with semicolon in filename #917

• Added request_info to response object and ClientResponseError. #1733

• Added history to ClientResponseError. #1741

• Allow to disable redirect url re-quoting #1474

• Handle RuntimeError from transport #1790

• Dropped "%O" in access logger #1673

• Added args and kwargs to unittest_run_loop. Useful with other decorators, for example @patch. #1803

• Added iter_chunks to response.content object. #1805

• Avoid creating TimerContext when there is no timeout to allow compatibility with Tornado. #1817 #1180

• Add proxy_from_env to ClientRequest to read from environment variables. #1791

• Add DummyCookieJar helper. #1830

• Fix assertion errors in Python 3.4 from noop helper. #1847

• Do not unquote + in match_info values #1816

• Use Forwarded, X-Forwarded-Scheme and X-Forwarded-Host for better scheme and host resolution. #1134

• Fix sub-application middlewares resolution order #1853

• Fix applications comparison #1866

• Fix static location in index when prefix is used #1662

• Make test server more reliable #1896

• Use Forwarded, X-Forwarded-Scheme and X-Forwarded-Host for better scheme and host resolution. #1134

• Extend list of web exceptions, add HTTPUnprocessableEntity, HTTPFailedDependency, HTTPInsufficientStorage status codes #1920

Changes

• Fix pypi distribution

• Fix exception description #1807

• Handle socket error in FileResponse #1773

• Cancel websocket heartbeat on close #1793

Changes

• Fix web.run_app not to bind to default host-port pair if only socket is passed #1786

• Keeping blank values for request.post() and multipart.form() #1765

• TypeError in ResponseHandler.data_received #1770

Changes

• Memory leak with aiohttp.request #1756

• Disable cleanup closed ssl transports by default.

• Exception in request handling if the server responds before the body is sent #1761

Changes

• Memory leak with aiohttp.request #1756

• Encoding is always UTF-8 in POST data #1750

• Do not add "Content-Disposition" header by default #1755

• Call https website through proxy will cause error (#1745)

• Fix exception on multipart/form-data post if content-type is not set (#1743)

---

Changes

• Fixed Application.on_loop_available signal #1739

• Remove debug code

Changes

• Fix allow-head to include name on route #1737

• Fixed AttributeError in WebSocketResponse.can_prepare #1736

For this release we completely refactored low-level implementation of http handling. Finally uvloop gives performance improvement. Overall performance improvement should be around 70-90% compared to 1.x version.

We took opportunity to refactor long standing api design problems across whole package. Client exceptions handling has been cleaned up and now much more straight forward. Client payload management simplified and allows to extend with any custom type. Client connection pool implementation has been redesigned as well, now there is no need for actively releasing response objects, aiohttp handles connection release automatically.

Another major change, we moved aiohttp development to public organization https://github.com/aio-libs

With this amount of api changes we had to make backward incompatible changes. Please check this migration document http://aiohttp.readthedocs.io/en/latest/migration.html

Please report problems or annoyance with with api to https://github.com/aio-libs/aiohttp

Changes

2.0.0 (2017-03-20)

• Added json to ClientSession.request() method #1726

• Added session's raise_for_status parameter, automatically calls raise_for_status() on any request. #1724

• response.json() raises ClientReponseError exception if response's content type does not match #1723

• Cleanup timer and loop handle on any client exception.

• Deprecate loop parameter for Application's constructor

2.0.0rc1 (2017-03-15)

• Properly handle payload errors #1710

• Added ClientWebSocketResponse.get_extra_info() #1717

• It is not possible to combine Transfer-Encoding and chunked parameter, same for compress and Content-Encoding #1655

• Connector's limit parameter indicates total concurrent connections. New limit_per_host added, indicates total connections per endpoint. #1601

• Use url's raw_host for name resolution #1685

• Change ClientResponse.url to yarl.URL instance #1654

• Add max_size parameter to web.Request reading methods #1133

• Web Request.post() stores data in temp files #1469

• Add the allow_head=True keyword argument for add_get #1618

• run_app and the Command Line Interface now support serving over Unix domain sockets for faster inter-process communication.

• run_app now supports passing a preexisting socket object. This can be useful e.g. for socket-based activated applications, when binding of a socket is done by the parent process.

• Implementation for Trailer headers parser is broken #1619

• Fix FileResponse to not fall on bad request (range out of file size)

• Fix FileResponse to correct stream video to Chromes

• Deprecate public low-level api #1657

• Deprecate encoding parameter for ClientSession.request() method

• Dropped aiohttp.wsgi #1108

• Dropped version from ClientSession.request() method

• Dropped websocket version 76 support #1160

• Dropped: aiohttp.protocol.HttpPrefixParser #1590

• Dropped: Servers response's .started, .start() and .can_start() method #1591

• Dropped: Adding sub app via app.router.add_subapp() is deprecated use app.add_subapp() instead #1592

• Dropped: Application.finish() and Application.register_on_finish() #1602

• Dropped: web.Request.GET and web.Request.POST

• Dropped: aiohttp.get(), aiohttp.options(), aiohttp.head(), aiohttp.post(), aiohttp.put(), aiohttp.patch(), aiohttp.delete(), and aiohttp.ws_connect() #1593

• Dropped: aiohttp.web.WebSocketResponse.receive_msg() #1605

• Dropped: ServerHttpProtocol.keep_alive_timeout attribute and keep-alive, keep_alive_on, timeout, log constructor parameters #1606

• Dropped: TCPConnector's`` .resolve, .resolved_hosts, .clear_resolved_hosts()attributes andresolve` constructor parameter #1607

• Dropped ProxyConnector #1609

Major aiohttp2.0 release!

Warning! This is not final release. It contains backward incompatible change, please check compatibility before installing on production systems.

For this release we completely refactored low-level implementation of http handling. Finally uvloop gives performance improvement. Overall performance improvement should be around 70-90% compared to 1.x version.

We took opportunity to refactor long standing api design problem across whole package. Client exceptions handling has been cleaned up and now much more strait forward. Client payload management simplified and allows to extends with any custom types. Client collection pool implementation has been redesigned as well, now there is no need for actively releasing responses, aiohttp handles connection release automatically.

Another major change, we moved aiohttp development to public organization https://github.com/aio-libs The aiohttp community would like to thank Keepsafe (https://www.getkeepsafe.com) for it's support in the early days of the project.

Alas we had to make backward incompatible changes. Please check this migration document http://aiohttp.readthedocs.io/en/latest/migration.html

Please report problems or annoyance with with api to https://github.com/aio-libs/aiohttp

You can install and test this release with::

pip install https://github.com/aio-libs/aiohttp/archive/2.0.0rc1.tar.gz#egg=aiohttp-2.0.0rc1

CHANGES

• Fixed None timeout support #1720

CHANGES

• Revert timeout handling in client request

• Fix StreamResponse representation after eof

• Fix file_sender to not fall on bad request (range out of file size)

• Fix file_sender to correct stream video to Chromes

• Fix NotImplementedError server exception #1703

• Clearer error message for URL without a host name. #1691

• Silence deprecation warning in repr #1690

• IDN + HTTPS = ssl.CertificateError #1685

CHANGES

• Fixed memory leak in time service #1656

CHANGES

• Awaiting on WebSocketResponse.send_* does not work #1645
• Fix multiple calls to client ws_connect when using a shared header dict #1643
• Make CookieJar.filter_cookies() accept plain string parameter. #1636

CHANGES

• Handle CLOSING in WebSocketResponse.__anext__
• Fixed AttributeError 'drain' for server websocket handler #1613

CHANGES

• Multipart writer validates the data on append instead of on a request send #920
• Multipart reader accepts multipart messages with or without their epilogue to consistently handle valid and legacy behaviors #1526 #1581
• Separate read + connect + request timeouts # 1523
• Do not swallow Upgrade header #1587
• Fix polls demo run application #1487
• Ignore unknown 1XX status codes in client #1353
• Fix sub-Multipart messages missing their headers on serialization #1525
• Do not use readline when reading the content of a part in the multipart reader #1535
• Add optional flag for quoting FormData fields #916
• 416 Range Not Satisfiable if requested range end > file size #1588
• Having a : or @ in a route does not work #1552
• Added receive_timeout timeout for websocket to receive complete message. #1325
• Added heartbeat parameter for websocket to automatically send ping message. #1024 #777
• Remove web.Application dependency from web.UrlDispatcher #1510
• Accepting back-pressure from slow websocket clients #1367
• Do not pause transport during set_parser stage #1211
• Lingering close doesn't terminate before timeout #1559
• setsockopt may raise OSError exception if socket is closed already #1595
• Lots of CancelledError when requests are interrupted #1565
• Allow users to specify what should happen to decoding errors when calling a responses text() method #1542
• Back port std module http.cookies for python3.4.2 #1566
• Maintain url's fragment in client response #1314
• Allow concurrently close WebSocket connection #754
• Gzipped responses with empty body raises ContentEncodingError #609
• Return 504 if request handle raises TimeoutError.
• Refactor how we use keep-alive and close lingering timeouts.
• Close response connection if we can not consume whole http message during client response release
• Abort closed ssl client transports, broken servers can keep socket open un-limit time #1568
• Log warning instead of RuntimeError is websocket connection is closed.
• Deprecated: aiohttp.protocol.HttpPrefixParser will be removed in 1.4 #1590
• Deprecated: Servers response's .started, .start() and .can_start() method will be removed in 1.4 #1591
• Deprecated: Adding sub app via app.router.add_subapp() is deprecated use app.add_subapp() instead, will be removed in 1.4 #1592
• Deprecated: aiohttp.get(), aiohttp.options(), aiohttp.head(), aiohttp.post(), aiohttp.put(), aiohttp.patch(), aiohttp.delete(), and aiohttp.ws_connect() will be removed in 1.4 #1593
• Deprecated: Application.finish() and Application.register_on_finish() will be removed in 1.4 #1602

CHANGES

• Extract BaseRequest from web.Request, introduce web.Server (former RequestHandlerFactory), introduce new low-level web server which is not coupled with web.Application and routing #1362
• Make TestServer.make_url compatible with yarl.URL #1389
• Implement range requests for static files #1382
• Support task attribute for StreamResponse #1410
• Drop TestClient.app property, use TestClient.server.app instead (BACKWARD INCOMPATIBLE)
• Drop TestClient.handler property, use TestClient.server.handler instead (BACKWARD INCOMPATIBLE)
• TestClient.server property returns a test server instance, was asyncio.AbstractServer (BACKWARD INCOMPATIBLE)
• Follow gunicorn's signal semantics in Gunicorn[UVLoop]WebWorker #1201
• Call worker_int and worker_abort callbacks in Gunicorn[UVLoop]WebWorker #1202
• Has functional tests for client proxy #1218
• Fix bugs with client proxy target path and proxy host with port #1413
• Fix bugs related to the use of unicode hostnames #1444
• Preserve cookie quoting/escaping #1453
• FileSender will send gzipped response if gzip version available #1426
• Don't override Content-Length header in web.Response if no body was set #1400
• Introduce router.post_init() for solving #1373
• Fix raise error in case of multiple calls of TimeServive.stop()
• Allow to raise web exceptions on router resolving stage #1460
• Add a warning for session creation outside of coroutine #1468
• Avoid a race when application might start accepting incoming requests but startup signals are not processed yet e98e8c6
• Raise a RuntimeError when trying to change the status of the HTTP response after the headers have been sent #1480
• Fix bug with https proxy acquired cleanup #1340
• Use UTF-8 as the default encoding for multipart text parts #1484

• Fix BodyPartReader.read_chunk bug about returns zero bytes before EOF (#1428)

---

• Fix static file serving in fallback mode (#1401)

---

Bugfix release.

Changes

• Make TestServer.make_url compatible with yarl.URL #1389
• Generate informative exception on redirects from server which doesn't provide redirection headers #1396

Fixes

• Support root resources for sub-applications #1379

Bugfix release.

Fixed bugs:

• Allow starting variables with an underscore #1379
• Properly process UNIX sockets by gunicorn worker #1375
• Fix ordering for FrozenList
• Don't propagate pre and post signals to sub-application #1377

Changes

• Fix documentation generation #1120

Main news are:

• sub-application support
• using YARL library for working with URLs on both client and server side
• performance improvements

Full list of changes:

• Drop deprecated WSClientDisconnectedError (BACKWARD INCOMPATIBLE)

• Use yarl.URL in client API. The change is 99% backward compatible but ClientResponse.url is an yarl.URL instance now. #1217

• Close idle keep-alive connections on shutdown #1222

• Modify regex in AccessLogger to accept underscore and numbers #1225

• Use yarl.URL in web server API. web.Request.rel_url and web.Request.url are added. URLs and templates are percent-encoded now. #1224

• Accept yarl.URL by server redirections #1278

• Return yarl.URL by .make_url() testing utility #1279

• Properly format IPv6 addresses by aiohttp.web.run_app #1139

• Use yarl.URL by server API #1288

  • Introduce resource.url_for(), deprecate resource.url().
  • Implement StaticResource.
  • Inherit SystemRoute from AbstractRoute
  • Drop old-style routes: Route, PlainRoute, DynamicRoute, StaticRoute, ResourceAdapter.

• Revert resp.url back to str, introduce resp.url_obj #1292

• Raise ValueError if BasicAuth login has a ":" character #1307

• Fix bug when ClientRequest send payload file with opened as open('filename', 'r+b') #1306

• Enhancement to AccessLogger (pass extra dict) #1303

• Show more verbose message on import errors #1319

• Added save and load functionality for CookieJar #1219

• Added option on StaticRoute to follow symlinks #1299

• Force encoding of application/json content type to utf-8 #1339

• Fix invalid invocations of errors.LineTooLong #1335

• Websockets: Stop async for iteration when connection is closed #1144

• Ensure TestClient HTTP methods return a context manager #1318

• Raise ClientDisconnectedError to FlowControlStreamReader read function if ClientSession object is closed by client when reading data. #1323

• Document deployment without Gunicorn #1120

• Add deprecation warning for MD5 and SHA1 digests when used for fingerprint of site certs in TCPConnector. #1186

• Implement sub-applications #1301

• Don't inherit web.Request from dict but implement MutableMapping protocol.

• Implement frozen signals

• Don't inherit web.Application from dict but implement MutableMapping protocol.

• Support freezing for web applications

• Accept access_log parameter in web.run_app, use None to disable logging

• Don't flap tcp_cork and tcp_nodelay in regular request handling. tcp_nodelay is still enabled by default.

• Improve performance of web server by removing premature computing of Content-Type if the value was set by web.Response constructor.

  While the patch boosts speed of trivial web.Response(text='OK', content_type='text/plain) very well please don't expect significant boost of your application -- a couple DB requests and business logic is still the main bottleneck.

• Boost performance by adding a custom time service #1350

• Extend ClientResponse with content_type and charset properties like in web.Request. #1349

• Disable aiodns by default #559

• Don't flap tcp_cork in client code, use TCP_NODELAY mode by default.

• Implement web.Request.clone() #1361

CHANGES

• Fix StreamReader._read_nowait to return all available data up to the requested amount. It boosts a performance in edge cases #1297

Changes

• Make CookieJar compatible with 32-bit systems #1188
• Add missing WSMsgType to web_ws.__all__, see #1200
• Fix CookieJar ctor when called with loop=None #1203
• Fix broken upper-casing in wsgi support #1197

CHANGES

• Restore aiohttp.web.MsgType alias for aiohttp.WSMsgType for sake of backward compatibility #1178
• Tune alabaster schema.
• Use text/html content type for displaying index pages by static file handler.
• Fix AssertionError in static file handling #1177
• Fix access log formats %O and %b for static file handling

The first officially stable release. We are working hard on aiohttp stability. This release is tagged as 1.0 -- the library is mature enough for this. Backward compatibility with previous releases is kept as usual. Deprecation period is 1.5 years.

The list of changes is pretty long, but the most significant ones are:

Common

• HTTP headers are title-cased (Content-Length) now, they was upper-cased (CONTENT-LENGTH) in previous releases.
• aiohttp.Timeout is alias for async_timeout.timeout

Client

• Client cookies support was rewritten in backward incompatible manner to split cookies with the same name but belonging to different domains #1173
• ProxyConnector is deprecated, regular methods like ClientSession.get() accepts proxy and proxy_auth parameters explicitly #998
• Default settings for aiohttp.TCPConnector uses asynchronous DNS requests and cache for given DNS resolutions #1152

Server

• Router has handy methods for route adding like app.router.add_get(), app.router.add_post() etc. #986
• Request has .multipart() methods for easy access to multipart encoded data #1067

Testing

• Significant improvements in aiohttp testing suite: new parameters for tuning test server and client are added

Full list of changes

• Change default size for client session's connection pool from unlimited to 20 #977
• Add IE support for cookie deletion. #994
• Remove deprecated WebSocketResponse.wait_closed method (BACKWARD INCOMPATIBLE)
• Remove deprecated force parameter for ClientResponse.close method (BACKWARD INCOMPATIBLE)
• Avoid using of mutable CIMultiDict kw param in make_mocked_request #997
• Make WebSocketResponse.close a little bit faster by avoiding new task creating just for timeout measurement
• Add proxy and proxy_auth params to client.get() and family, deprecate ProxyConnector #998
• Add support for websocket send_json and receive_json, synchronize server and client API for websockets #984
• Implement router shourtcuts for most useful HTTP methods, use app.router.add_get(), app.router.add_post() etc. instead of app.router.add_route() #986
• Support SSL connections for gunicorn worker #1003
• Move obsolete examples to legacy folder
• Switch to multidict 2.0 and title-cased strings #1015
• {FOO}e logger format is case-sensitive now
• Fix logger report for unix socket 8e8469b
• Rename aiohttp.websocket to aiohttp._ws_impl
• Rename aiohttp.MsgType tp aiohttp.WSMsgType
• Introduce aiohttp.WSMessage officially
• Rename Message -> WSMessage
• Remove deprecated decode param from resp.read(decode=True)
• Use 5min default client timeout #1028
• Relax HTTP method validation in UrlDispatcher #1037
• Pin minimal supported asyncio version to 3.4.2+ (loop.is_close() should be present)
• Remove aiohttp.websocket module (BACKWARD IMCOMPATIBLE) Please use high-level client and server approaches
• Link header for 451 status code is mandatory
• Fix test_client fixture to allow multiple clients per test #1072
• make_mocked_request now accepts dict as headers #1073
• Add Python 3.5.2/3.6+ compatibility patch for async generator protocol change #1082
• Improvement test_client can accept instance object #1083
• Simplify ServerHttpProtocol implementation #1060
• Add a flag for optional showing directory index for static file handling #921
• Define web.Application.on_startup() signal handler #1103
• Drop ChunkedParser and LinesParser #1111
• Call Application.startup in GunicornWebWorker #1105
• Fix client handling hostnames with 63 bytes when a port is given in the url #1044
• Implement proxy support for ClientSession.ws_connect #1025
• Return named tuple from WebSocketResponse.can_prepare #1016
• Fix access_log_format in GunicornWebWorker #1117
• Setup Content-Type to application/octet-stream by default #1124
• Deprecate debug parameter from app.make_handler(), use Application(debug=True) instead #1121
• Remove fragment string in request path #846
• Use aiodns.DNSResolver.gethostbyname() if available #1136
• Fix static file sending on uvloop when sendfile is available #1093
• Make prettier urls if query is empty dict #1143
• Fix redirects for HEAD requests #1147
• Default value for StreamReader.read_nowait is -1 from now #1150
• aiohttp.StreamReader is not inherited from asyncio.StreamReader from now (BACKWARD INCOMPATIBLE) #1150
• Streams documentation added #1150
• Add multipart coroutine method for web Request object #1067
• Publish ClientSession.loop property #1149
• Fix static file with spaces #1140
• Fix piling up asyncio loop by cookie expiration callbacks #1061
• Drop Timeout class for sake of async_timeout external library. aiohttp.Timeout is an alias for async_timeout.timeout
• use_dns_cache parameter of aiohttp.TCPConnector is True by default (BACKWARD INCOMPATIBLE) #1152
• aiohttp.TCPConnector uses asynchronous DNS resolver if available by default (BACKWARD INCOMPATIBLE) #1152
• Conform to RFC3986 - do not include url fragments in client requests #1174
• Drop ClientSession.cookies (BACKWARD INCOMPATIBLE) #1173
• Refactor AbstractCookieJar public API (BACKWARD INCOMPATIBLE) #1173
• Fix clashing cookies with have the same name but belong to different domains (BACKWARD INCOMPATIBLE) #1125
• Support binary Content-Transfer-Encoding #1169

Pin miltidict version to >=1.2.2,<2.0.0

It fixes a bug with broken multidict dependecy

Changes

• Do not filter cookies if unsafe flag provided #1005

Thanks to Misha Behersky for finding and fixing!

Bugfix release that introduces usafe cookie jar which should not be used in production but very useful for test writing.

Changes

• Suppress CancelledError when Timeout raises TimeoutError #970
• Don't expose aiohttp.__version__
• Add unsafe parameter to CookieJar #968
• Use unsafe cookie jar in test client tools
• Expose aiohttp.CookieJar name

The release fixes a very annoying regression: client API was broken when code accepts cookie with expiration date larger than 24 days.

Update is highly recommended.

After long pause we proud to present new aiohttp major release.

The main changes:

• Fixed security issue with leaking cookies in client session: #799
• Added aiodns support: #819
• Added public api for testing: #900 #902 #914
• Added narrative tutorial
• Dropped features deprecated in 0.14 and 0.15 releases (more than year ago).
• multidict is spitted into separate library
• aiohttp now is published as linux wheels as well as old good gzipped tarball.

Full list of changes:

• Fix bug in serving static directory #803
• Fix command line arg parsing #797
• Fix a documentation chapter about cookie usage #790
• Handle empty body with gzipped encoding #758
• Support 451 Unavailable For Legal Reasons http status #697
• Fix Cookie share example and few small typos in docs #817
• UrlDispatcher.add_route with partial coroutine handler #814
• Optional support for aiodns #728
• Add ServiceRestart and TryAgainLater websocket close codes #828
• Fix prompt message for web.run_app #832
• Allow to pass None as a timeout value to disable timeout logic #834
• Fix leak of connection slot during connection erro #835
• Gunicorn worker with uvloop support aiohttp.worker.GunicornUVLoopWebWorker #878
• Don't send body in response to HEAD request #838
• Skip the preamble in MultipartReader #881
• Implement BasicAuth decode classmethod. #744
• Don't crash logger when transport is None #889
• Use a create_future compatibility wrapper instead of creating Futures directly #896
• Add test utilities to aiohttp #902
• Improve Request.repr #875
• Skip DNS resolving if provided host is already an ip address #874
• Add headers to ClientSession.ws_connect #785
• Document that server can send pre-compressed data #906
• Don't add Content-Encoding and Transfer-Encoding if no body #891
• Add json() convenience methods to websocket message objects #897
• Add client_resp.raise_for_status() #908
• Implement cookie filter #799
• Include an example of middleware to handle error pages #909
• Fix error handling in StaticFileMixin #856
• Add mocked request helper #900
• Fix empty ALLOW Response header for cls based View #929
• Respect CONNECT method to implement a proxy server #847
• Add pytest_plugin #914
• Add tutorial
• Add backlog option to support more than 128 (default value in "create_server" function) concurrent connections #892
• Allow configuration of header size limits #912
• Separate sending file logic from StaticRoute dispatcher #901
• Drop deprecated share_cookies connector option (BACKWARD INCOMPATIBLE)
• Drop deprecated support for tuple as auth paramter. Use aiohttp.BasicAuth instead (BACKWARD INCOMPATIBLE)
• Remove deprecated request.payload property, use content instead. (BACKWARD INCOMPATIBLE)
• Drop all mentions about api changes in documentaion for versions older than 0.16
• Allow to override default cookie jar #963
• Add manylinux wheel builds
• Dup a socket for sendfile usage #964

Thanks to all for contributions!