chore(deps): update dependency idna to v3.15 #31

Open

renovate-bot wants to merge 1 commit from renovate/idna-3.x into master

pull from: renovate/idna-3.x

merge into: ForgeFlux:master

ForgeFlux:master

ForgeFlux:renovate/requests-2.x

ForgeFlux:renovate/urllib3-2.x

ForgeFlux:renovate/charset-normalizer-3.x

ForgeFlux:renovate/xmltodict-1.x

ForgeFlux:renovate/xmltodict-0.x

ForgeFlux:renovate/behave-1.x

ForgeFlux:renovate/parse-type-0.x

ForgeFlux:renovate/certifi-2024.x

ForgeFlux:renovate/six-1.x

Conversation 0 Commits 1 Files changed 1 +1 -1

renovate-bot commented 2026-01-05 05:12:26 +05:30

Member

Copy link

This PR contains the following updates:

Package	Change	Age	Confidence
idna (changelog)	==3.10 -> ==3.15

---

Release Notes

kjd/idna (idna)

v3.15

Compare Source

• Enforce DNS-length cap on individual labels early in check_label,
  short-circuiting contextual-rule processing for oversized input
  while staying compatible with UTS 46 usage.
• Tidy core helpers: hoist bidi category sets to module-level
  frozensets (avoiding per-codepoint list construction), simplify
  length checks, and reuse the shared _unicode_dots_re from
  idna.core in the codec module.
• Use raise ... from err for proper exception chaining and
  switch internal string formatting to f-strings.
• Allow flit_core 4.x in the build backend.
• Expand the ruff lint set (flake8-bugbear, flake8-simplify,
  pyupgrade, perflint) and apply the surfaced fixes; pin lint CI
  to Python 3.14.
• Add Dependabot configuration for GitHub Actions.
• Convert README and HISTORY from reStructuredText to Markdown.
• Reference CVE-2026-45409 for the 3.14 advisory in place of the
  initial GHSA identifier.

Thanks to Felix Yan, Stan Ulbrych, and metsw24-max for
contributions to this release.

v3.14

Compare Source

• Removed opportunity to process long inputs into quadratic
  time by rejecting oversize inputs up-front. Closes a bypass
  of the CVE-2024-3651 mitigation. [CVE-2026-45409]

Thanks to Stan Ulbrych for reporting the issue.

v3.13

Compare Source

• Correct classification error for codepoint U+A7F1

v3.12

Compare Source

• Update to Unicode 17.0.0.
• Issue a deprecation warning for the transitional argument.
• Added lazy-loading to provide some performance improvements.
• Removed vestiges of code related to Python 2 support, including
  segmentation of data structures specific to Jython.

Thanks to Rodrigo Nogueira for contributions to this release.

v3.11

Compare Source

• Update to Unicode 16.0.0, including significant changes to UTS46
  processing. As a result of Unicode ending support for it, transitional
  processing no longer has an effect and returns the same result.
• Add support for Python 3.14, lowest supported version is Python 3.8.
• Various updates to packaging, including PEP 740 support.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [idna](https://github.com/kjd/idna) ([changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)) | `==3.10` -> `==3.15` |  |  | --- ### Release Notes <details> <summary>kjd/idna (idna)</summary> ### [`v3.15`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#315-2026-05-12) [Compare Source](https://github.com/kjd/idna/compare/v3.14...v3.15) - Enforce DNS-length cap on individual labels early in `check_label`, short-circuiting contextual-rule processing for oversized input while staying compatible with UTS 46 usage. - Tidy core helpers: hoist bidi category sets to module-level frozensets (avoiding per-codepoint list construction), simplify length checks, and reuse the shared `_unicode_dots_re` from `idna.core` in the codec module. - Use `raise ... from err` for proper exception chaining and switch internal string formatting to f-strings. - Allow `flit_core` 4.x in the build backend. - Expand the ruff lint set (flake8-bugbear, flake8-simplify, pyupgrade, perflint) and apply the surfaced fixes; pin lint CI to Python 3.14. - Add Dependabot configuration for GitHub Actions. - Convert README and HISTORY from reStructuredText to Markdown. - Reference CVE-2026-45409 for the 3.14 advisory in place of the initial GHSA identifier. Thanks to Felix Yan, Stan Ulbrych, and metsw24-max for contributions to this release. ### [`v3.14`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#314-2026-05-10) [Compare Source](https://github.com/kjd/idna/compare/v3.13...v3.14) - Removed opportunity to process long inputs into quadratic time by rejecting oversize inputs up-front. Closes a bypass of the CVE-2024-3651 mitigation. \[CVE-2026-45409] Thanks to Stan Ulbrych for reporting the issue. ### [`v3.13`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#313-2026-04-22) [Compare Source](https://github.com/kjd/idna/compare/v3.12...v3.13) - Correct classification error for codepoint U+A7F1 ### [`v3.12`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#312-2026-04-21) [Compare Source](https://github.com/kjd/idna/compare/v3.11...v3.12) - Update to Unicode 17.0.0. - Issue a deprecation warning for the transitional argument. - Added lazy-loading to provide some performance improvements. - Removed vestiges of code related to Python 2 support, including segmentation of data structures specific to Jython. Thanks to Rodrigo Nogueira for contributions to this release. ### [`v3.11`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#311-2025-10-12) [Compare Source](https://github.com/kjd/idna/compare/v3.10...v3.11) - Update to Unicode 16.0.0, including significant changes to UTS46 processing. As a result of Unicode ending support for it, transitional processing no longer has an effect and returns the same result. - Add support for Python 3.14, lowest supported version is Python 3.8. - Various updates to packaging, including PEP 740 support. </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi41Mi44IiwidXBkYXRlZEluVmVyIjoiNDIuNTIuOCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJyZW5vdmF0ZS1ib3QiXX0=-->

renovate-bot added the

renovate-bot

label 2026-01-05 05:12:26 +05:30

renovate-bot added 1 commit 2026-01-05 05:12:26 +05:30

chore(deps): update dependency idna to v3.11 32f92d439f

renovate-bot changed title from chore(deps): update dependency idna to v3.11 to chore(deps): update dependency idna to v3.13 2026-04-27 05:10:40 +05:30

renovate-bot force-pushed renovate/idna-3.x from 32f92d439f to 6d743ac9f2 2026-04-27 05:10:42 +05:30 Compare

renovate-bot changed title from chore(deps): update dependency idna to v3.13 to chore(deps): update dependency idna to v3.14 2026-05-11 05:12:02 +05:30

renovate-bot force-pushed renovate/idna-3.x from 6d743ac9f2 to 66f668a1b2 2026-05-11 05:12:03 +05:30 Compare

renovate-bot changed title from chore(deps): update dependency idna to v3.14 to chore(deps): update dependency idna to v3.15 2026-05-18 05:11:22 +05:30

renovate-bot force-pushed renovate/idna-3.x from 66f668a1b2 to 1b6754c7f6 2026-05-18 05:11:24 +05:30 Compare

Some checks are pending

Hide all checks

ci/woodpecker/pull_request_metadata/woodpecker Pipeline is pending

Details

ci/woodpecker/push/woodpecker Pipeline is pending

Details

ci/woodpecker/pr/woodpecker Pipeline is pending

Details

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin renovate/idna-3.x:renovate/idna-3.x

git switch renovate/idna-3.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch master

git merge --no-ff renovate/idna-3.x

git switch renovate/idna-3.x

git rebase master

git switch master

git merge --ff-only renovate/idna-3.x

git switch renovate/idna-3.x

git rebase master

git switch master

git merge --no-ff renovate/idna-3.x

git switch master

git merge --squash renovate/idna-3.x

git switch master

git merge --ff-only renovate/idna-3.x

git switch master

git merge renovate/idna-3.x

git push origin master

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

  

renovate-bot

  

renovate-security

  

security

No labels

renovate-bot

renovate-security

security

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

ForgeFlux/host-meta-test!31

No description provided.