diff --git a/aiohttp-3.13.0.tar.gz b/aiohttp-3.13.0.tar.gz
deleted file mode 100644
index 598a9a7..0000000
--- a/aiohttp-3.13.0.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:7a3398198d60c14ec060868ae6c1ede55833b67af728733d76944293a5b6e071
-size 1101225
diff --git a/aiohttp-3.13.2.tar.gz b/aiohttp-3.13.2.tar.gz
new file mode 100644
index 0000000..9a7ffef
--- /dev/null
+++ b/aiohttp-3.13.2.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:40176a52c186aefef6eb3cad2cdd30cd06e3afbe88fe8ab2af9c0b90f228daca
+size 7837994
diff --git a/python-aiohttp.changes b/python-aiohttp.changes
index b508330..28997f8 100644
--- a/python-aiohttp.changes
+++ b/python-aiohttp.changes
@@ -1,3 +1,51 @@
+-------------------------------------------------------------------
+Mon Nov  3 11:51:55 UTC 2025 - Dirk Müller <dmueller@suse.com>
+
+- update to 3.13.2:
+  * Fixed cookie parser to continue parsing subsequent cookies
+    when encountering a malformed cookie that fails regex
+    validation, such as Google's g_state cookie with unescaped
+    quotes -- by :user:`bdraco`. Related issues and pull requests
+    on GitHub: :issue:`11632`.
+  * Fixed loading netrc credentials from the default
+    :file:`~/.netrc` (:file:`~/_netrc` on Windows) location when
+    the :envvar:`NETRC` environment variable is not set -- by
+    :user:`bdraco`. Related issues and pull requests on GitHub:
+    :issue:`11713`, :issue:`11714`.
+  * Fixed WebSocket compressed sends to be cancellation safe.
+    Tasks are now shielded during compression to prevent
+    compressor state corruption. This ensures that the stateful
+    compressor remains consistent even when send operations are
+    cancelled -- by :user:`bdraco`. Related issues and pull
+    requests on GitHub: :issue:`11725`.
+  * Make configuration options in AppRunner also available in
+    run_app() -- by :user:`Cycloctane`. Related issues and pull
+    requests on GitHub: :issue:`11633`.
+  * Switched to backports.zstd for Python <3.14 and fixed zstd
+    decompression for chunked zstd streams -- by :user:`ZhaoMJ`.
+    Note: Users who installed zstandard for support on Python
+    <3.14 will now need to install backports.zstd instead
+    (installing aiohttp[speedups] will do this automatically).
+    Related issues and pull requests on GitHub: :issue:`11623`.
+  * Updated Content-Type header parsing to return
+    application/octet-stream when header contains invalid syntax.
+    See RFC 9110. -- by :user:`sgaist`. Related issues and pull
+    requests on GitHub: :issue:`10889`.
+  * Fixed Python 3.14 support when built without zstd support --
+    by :user:`JacobHenner`. Related issues and pull requests on
+    GitHub: :issue:`11603`.
+  * Fixed blocking I/O in the event loop when using netrc
+    authentication by moving netrc file lookup to an executor --
+    by :user:`bdraco`. Related issues and pull requests on
+    GitHub: :issue:`11634`.
+  * Fixed routing to a sub-application added via .add_domain()
+    not working if the same path exists on the parent app. -- by
+    :user:`Dreamsorcerer`. Related issues and pull requests on
+    GitHub: :issue:`11673`.
+  * Moved core packaging metadata from :file:`setup.cfg` to
+    :file:`pyproject.toml` per PEP 621 -- by :user:`cdce8p`.
+    Related issues and pull requests on GitHub: :issue:`9951`.
+
 -------------------------------------------------------------------
 Thu Oct 16 21:40:07 UTC 2025 - Matej Cepl <mcepl@cepl.eu>
 
diff --git a/python-aiohttp.spec b/python-aiohttp.spec
index ddfb1b6..b884b9e 100644
--- a/python-aiohttp.spec
+++ b/python-aiohttp.spec
@@ -19,7 +19,7 @@
 %bcond_with docs
 %{?sle15_python_module_pythons}
 Name:           python-aiohttp
-Version:        3.13.0
+Version:        3.13.2
 Release:        0
 Summary:        Asynchronous HTTP client/server framework
 License:        Apache-2.0
diff --git a/vendor-llhttp.tar.gz b/vendor-llhttp.tar.gz
index bb71077..774800f 100644
--- a/vendor-llhttp.tar.gz
+++ b/vendor-llhttp.tar.gz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:ea2acbf9b6a1e3eef3a0179f9d2c466e77f6b1a42fd4b7d984922177c09cc2b1
-size 27866937
+oid sha256:09618375df741263c1c6b4ba7d601e8ede0147579e435f0bea95e9595f44b831
+size 19740617