chore(deps-dev): bump yarl from 1.20.1 to 1.24.2

[dependabot]

Bumps yarl from 1.20.1 to 1.24.2.

Release notes

Sourced from yarl's releases.

1.24.2

Contributor-facing changes

• Switched the aarch64 and armv7l wheel builds to GitHub's native ARM runners. The aarch64 wheels now build without QEMU emulation, and armv7l runs on aarch64 hosts so its 32-bit ARM execution is far cheaper than the previous aarch64-on-x86_64 path -- by :user:bdraco.

  Related issues and pull requests on GitHub: #1724.

• Restored per-runner native arches in the Windows wheel matrix on tag releases. The previous CIBW_ARCHS_WINDOWS=AMD64 ARM64 setting made both windows-latest and windows-11-arm cross-compile the other arch, producing two artifacts with identically-named wheels whose bytes differed; the deploy job's download-artifact ... merge-multiple step tore those writes together, yielding a wheel that PyPI rejected with 400 Invalid distribution file. ZIP archive not accepted: Mis-matched data size during the 1.24.0 and 1.24.1 releases -- by :user:bdraco.

  Related issues and pull requests on GitHub: #1725.

---

1.24.1

This release was yanked from PyPI due to a partial wheel publishing problem.

Contributor-facing changes

• Allowed re-running the deploy job after a partial release failure: the Make Release step now skips when the GitHub Release already exists, and the PyPI publish step uses skip-existing so dists that were already uploaded on a prior attempt do not break the retry -- by :user:bdraco.

  Related issues and pull requests on GitHub: #1721.

---

1.24.0

This release was yanked from PyPI due to a partial wheel publishing problem.

... (truncated)

Changelog

Sourced from yarl's changelog.

v1.24.2

(2026-05-19)

Contributor-facing changes

• Switched the aarch64 and armv7l wheel builds to GitHub's native ARM runners. The aarch64 wheels now build without QEMU emulation, and armv7l runs on aarch64 hosts so its 32-bit ARM execution is far cheaper than the previous aarch64-on-x86_64 path -- by :user:bdraco.

  Related issues and pull requests on GitHub: :issue:1724.

• Restored per-runner native arches in the Windows wheel matrix on tag releases. The previous CIBW_ARCHS_WINDOWS=AMD64 ARM64 setting made both windows-latest and windows-11-arm cross-compile the other arch, producing two artifacts with identically-named wheels whose bytes differed; the deploy job's download-artifact ... merge-multiple step tore those writes together, yielding a wheel that PyPI rejected with 400 Invalid distribution file. ZIP archive not accepted: Mis-matched data size during the 1.24.0 and 1.24.1 releases -- by :user:bdraco.

  Related issues and pull requests on GitHub: :issue:1725.

---

v1.24.1

(2026-05-19)

Contributor-facing changes

• Allowed re-running the deploy job after a partial release failure: the Make Release step now skips when the GitHub Release already exists, and the PyPI publish step uses skip-existing so dists that were already uploaded on a prior attempt do not break the retry -- by :user:bdraco.

... (truncated)

Commits

• d7d5867 Release 1.24.2 (#1726)
• df6f4fa ci: build aarch64 and armv7l wheels on native ARM runners (#1724)
• 229e624 ci: pin CIBW_ARCHS_WINDOWS per runner to avoid wheel name collisions (#1725)
• 10de971 Release 1.24.1 (#1723)
• e6d1b8d Make the deploy job re-runnable after a partial release failure (#1721)
• 98425c2 ci: fall back to plain build frontend for odd-arch wheels (#1720)
• a9aa975 Release 1.24.0 (#1719)
• 8c35b6a Allow optional 'v' prefix in release head_line regex (#1718)
• 0b434a6 Pass PIP="uv pip" to make .develop in aiohttp workflow (#1717)
• c11af79 Switch the aiohttp workflow to astral-sh/setup-uv (#1716)
• Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
yarl	[>= 1.18.dev0, < 1.19]
yarl	[>= 1.17.dev0, < 1.18]
yarl	[>= 1.16.dev0, < 1.17]
yarl	[>= 1.15.5.dev0, < 1.15.6]
yarl	[< 1.16, > 1.15.2]

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[ramsessanchez]

Superseded by #1067

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.