Bump aiohttp from 3.11.16 to 3.11.18

[dependabot]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[plaharanne]

changelog:

3.11.18 (2025-04-20)
Bug fixes

    Disabled TLS in TLS warning (when using HTTPS proxies) for uvloop and newer Python versions – by [@lezgomatt](https://github.com/sponsors/lezgomatt).

    Related issues and pull requests on GitHub: [#7686](https://github.com/aio-libs/aiohttp/issues/7686).

    Fixed reading fragmented WebSocket messages when the payload was masked – by [@bdraco](https://github.com/sponsors/bdraco).

    The problem first appeared in 3.11.17

    Related issues and pull requests on GitHub: [#10764](https://github.com/aio-libs/aiohttp/issues/10764).

3.11.17 (2025-04-19)
Miscellaneous internal changes

    Optimized web server performance when access logging is disabled by reducing time syscalls – by [@bdraco](https://github.com/sponsors/bdraco).

    Related issues and pull requests on GitHub: [#10713](https://github.com/aio-libs/aiohttp/issues/10713).

    Improved web server performance when connection can be reused – by [@bdraco](https://github.com/sponsors/bdraco).

    Related issues and pull requests on GitHub: [#10714](https://github.com/aio-libs/aiohttp/issues/10714).

    Improved performance of the WebSocket reader – by [@bdraco](https://github.com/sponsors/bdraco).

    Related issues and pull requests on GitHub: [#10740](https://github.com/aio-libs/aiohttp/issues/10740).

    Improved performance of the WebSocket reader with large messages – by [@bdraco](https://github.com/sponsors/bdraco).

    Related issues and pull requests on GitHub: [#10744](https://github.com/aio-libs/aiohttp/issues/10744).

[plaharanne]

@dependabot merge