core:services:versionchooser: Fix yarl & python-multipart

[joaomariolago]

Fix a small mess that #3396 pushed to master...

• Fix yarl version to avoid error when aiohttp is parsing URLs
• Fix python-multipart

And make sure it is explicit that they are locked because other libraries couldn't lock by them self....

Summary by Sourcery

Bug Fixes:

• Lock yarl to v1.12.1 to avoid aiohttp URL parsing errors

Summary by Sourcery

Lock yarl and python-multipart to fixed versions in relevant services and update the lock file to prevent URL parsing and multipart form errors in aiohttp and FastAPI.

Bug Fixes:

• Lock yarl to 1.12.1 to avoid aiohttp URL parsing errors
• Lock python-multipart to 0.0.5 to resolve FastAPI multipart form issues

Enhancements:

• Add comments in pyproject.toml to clarify why these dependencies are locked

Build:

• Update pyproject.toml in core/services/ardupilot_manager and core/services/versionchooser with explicit version locks
• Regenerate uv.lock to incorporate the new dependency constraints

[sourcery-ai]

Reviewer's Guide

This PR explicitly locks the versions of python-multipart and yarl in their respective service pyproject.toml files—adding comments to explain the pins—and regenerates the uv.lock file to include these constraints.

File-Level Changes

Change	Details	Files
Lock python-multipart to a fixed version with explanatory comment	Add python-multipart==0.0.5 to ardupilot_manager dependencies Insert comment noting explicit lock because fastapi can’t pin it itself	core/services/ardupilot_manager/pyproject.toml
Lock yarl to v1.12.1 with explanatory comment	Add yarl==1.12.1 to versionchooser dependencies Insert comment noting explicit lock to avoid aiohttp URL parsing errors	core/services/versionchooser/pyproject.toml
Regenerate lockfile to include new dependency pins	Update core/uv.lock to reflect new python-multipart and yarl versions	core/uv.lock

---

Tips and commands

Interacting with Sourcery

• Trigger a new review: Comment @sourcery-ai review on the pull request.
• Continue discussions: Reply directly to Sourcery's review comments.
• Generate a GitHub issue from a review comment: Ask Sourcery to create an
  issue from a review comment by replying to it. You can also reply to a
  review comment with @sourcery-ai issue to create an issue from it.
• Generate a pull request title: Write @sourcery-ai anywhere in the pull
  request title to generate a title at any time. You can also comment
  @sourcery-ai title on the pull request to (re-)generate the title at any time.
• Generate a pull request summary: Write @sourcery-ai summary anywhere in
  the pull request body to generate a PR summary at any time exactly where you
  want it. You can also comment @sourcery-ai summary on the pull request to
  (re-)generate the summary at any time.
• Generate reviewer's guide: Comment @sourcery-ai guide on the pull
  request to (re-)generate the reviewer's guide at any time.
• Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
  pull request to resolve all Sourcery comments. Useful if you've already
  addressed all the comments and don't want to see them anymore.
• Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
  request to dismiss all existing Sourcery reviews. Especially useful if you
  want to start fresh with a new review - don't forget to comment
  @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

• Enable or disable review features such as the Sourcery-generated pull request
  summary, the reviewer's guide, and others.
• Change the review language.
• Add, remove or edit custom review instructions.
• Adjust other review settings.

Getting Help

• Contact our support team for questions or feedback.
• Visit our documentation for detailed guides and information.
• Keep in touch with the Sourcery team by following us on X/Twitter, LinkedIn or GitHub.

[sourcery-ai]

Hey @joaomariolago - I've reviewed your changes and they look great!

---

Sourcery is free for open source - if you like our reviews please consider sharing them ✨

• X
• Mastodon
• LinkedIn
• Facebook

_{Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.}

[sourcery-ai]

Hey @joaomariolago - I've reviewed your changes and they look great!

Prompt for AI Agents

Please address the comments from this code review:
## Individual Comments

### Comment 1
<location> `core/services/versionchooser/pyproject.toml:14` </location>
<code_context>
     "connexion[aiohttp,swagger-ui]==2.14.2",
     "docker==6.0.0",
     "loguru==0.5.3",
+    # This dependency needs to be locked due to error in aiohttp
+    "yarl==1.12.1",
 ]

</code_context>

<issue_to_address>
Consider specifying the nature of the aiohttp error requiring yarl pinning.

Adding details or a reference about the specific aiohttp error and affected versions will clarify the reason for pinning yarl and assist future maintenance.
</issue_to_address>

<suggested_fix>
<<<<<<< SEARCH
    # This dependency needs to be locked due to error in aiohttp
    "yarl==1.12.1",
=======
    # Pin yarl due to incompatibility with aiohttp 3.x and yarl>=1.13.0, which causes import errors.
    # See: https://github.com/aio-libs/aiohttp/issues/4324
    "yarl==1.12.1",
>>>>>>> REPLACE

</suggested_fix>

---

Sourcery is free for open source - if you like our reviews please consider sharing them ✨

• X
• Mastodon
• LinkedIn
• Facebook

_{Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.}

[sourcery-ai]

suggestion: Consider specifying the nature of the aiohttp error requiring yarl pinning.

Adding details or a reference about the specific aiohttp error and affected versions will clarify the reason for pinning yarl and assist future maintenance.

Suggested change

	# This dependency needs to be locked due to error in aiohttp
	"yarl==1.12.1",
	# Pin yarl due to incompatibility with aiohttp 3.x and yarl>=1.13.0, which causes import errors.
	# See: https://github.com/aio-libs/aiohttp/issues/4324
	"yarl==1.12.1",