chore(deps): aiohttp>=3.13.5, add zstandard, zstd Accept-Encoding

CHANGELOG.md

@@ -2,6 +2,15 @@
 
 All notable changes to NOX are documented here.
 
+## [1.0.1] — 2026-04-13
+
+### Dependencies
+- **Updated:** `aiohttp` minimum pin raised to `>=3.13.5` (connection-pool stability fixes under high concurrency)
+- **Added:** `zstandard>=0.23.0` — enables native zstd decompression in aiohttp for Cloudflare/Fastly CDN responses
+
+### Engine
+- **Updated:** `Accept-Encoding` header now includes `zstd` (`gzip, deflate, br, zstd`) to match Chrome 124+ behaviour
+
 ## [1.0.1] — 2026-04-11
 
 ### Sources

nox.py

@@ -1598,7 +1598,7 @@ def _random_headers(extra: Optional[Dict] = None) -> Dict[str, str]:
         "User-Agent":                ua,
         "Accept":                    "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
         "Accept-Language":           random.choice(_ACCEPT_LANG_POOL),
-        "Accept-Encoding":           "gzip, deflate, br",
+        "Accept-Encoding":           "gzip, deflate, br, zstd",
         "DNT":                       "1",
         "Connection":                "keep-alive",
         "Upgrade-Insecure-Requests": "1",

pyproject.toml

@@ -4,18 +4,19 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "nox-cli"
-version = "1.0.1"
+version = "1.0.2"
 description = "Advanced Asynchronous Cyber Threat Intelligence Framework"
 readme = { file = "README.md", content-type = "text/markdown" }
 license = { text = "Apache-2.0" }
 authors = [{ name = "nox-project" }]
 requires-python = ">=3.8"
 dependencies = [
-    "aiohttp>=3.9.0",
+    "aiohttp>=3.13.5",
     "aiohttp-socks>=0.8.4",
     "aiosqlite>=0.20.0",
     "httpx[http2]>=0.27.0",
     "brotli>=1.1.0",
+    "zstandard>=0.23.0",
     "requests>=2.31.0",
     "certifi>=2024.2.2",
     "cloudscraper>=1.2.71",

requirements.txt

@@ -2,11 +2,12 @@
 # Python 3.8+  |  pip install -r requirements.txt
 
 # ── Core (Async) ───────────────────────────────────────────────────────
-aiohttp>=3.9.0
+aiohttp>=3.13.5
 aiohttp-socks>=0.8.4          # SOCKS4/5 proxy support for aiohttp
 aiosqlite>=0.20.0             # async SQLite (forensic persistence DB)
 httpx[http2]>=0.27.0          # Guardian Engine: dynamic proxy fetch + HTTP/2
 brotli>=1.1.0                 # brotli decompression for aiohttp br responses
+zstandard>=0.23.0             # zstd decompression for aiohttp zstd responses (Cloudflare/Fastly CDNs)
 
 # ── Intelligence & Scraping ────────────────────────────────────────────
 requests>=2.31.0