release: 0.14.0

[ianhodge]

Automated Release PR

0.14.0 (2026-07-07)

Features

• deps: seal idna>=3.15 + aiohttp>=3.13.5 CVE floors as custom code (27e79ac)

Bug Fixes

• deps: pin aiohttp>=3.14.1, pytest>=9.0.3, pygments>=2.20.0 (CVE fixes) (9bcd811)
• deps: seal aiohttp>=3.14.1, pytest>=9.0.3, pygments>=2.20.0 CVE fixes (5ad6a6e)
• lint: suppress pyright errors for optional httpx_aiohttp import on Python 3.9 (779259f)
• stlc: seal handlebars>=4.7.9 pin for CVE-2026-33937 and related (oz-sdk-typescript) (46c1428)
• update aiohttp to resolve CVE-2026-22815 (#25) (03d6bc4)

Chores

• reseal python stlc tracking file to current staging main (ed25fd4)
• restore promote workflow and changelog as sealed custom code (7ac7b1f)

---

This PR was generated with Release Please. See documentation.

[ianhodge]

🤖 Created releases:

• v0.14.0

🌻