chore(deps): update dependency idna to v3.17 #37

Open
renovate-bot wants to merge 1 commit from renovate/idna-3.x into master
Member

This PR contains the following updates:

Package Change Age Confidence
idna (changelog) ==3.10 -> ==3.17 age confidence

Release Notes

kjd/idna (idna)

v3.17

Compare Source

  • Substantial 75% reduction in memory usage through new data
    structures and some optimization in processing speed.
  • Added a general 1024-character input length cap to the public
    validation, conversion, and codec entry points. This is well above
    any legitimate domain or label and guards against pathological
    inputs.

v3.16

Compare Source

  • Add a command-line interface (python -m idna, also available as
    the idna script). Encodes or decodes one or more domains supplied
    as arguments or on standard input, with options to select A-label
    or U-label output and control error handling.
  • Raise the minimum supported Python version to 3.9
  • Various code quality improvements

v3.15

Compare Source

  • Enforce DNS-length cap on individual labels early in check_label,
    short-circuiting contextual-rule processing for oversized input
    while staying compatible with UTS 46 usage.
  • Tidy core helpers: hoist bidi category sets to module-level
    frozensets (avoiding per-codepoint list construction), simplify
    length checks, and reuse the shared _unicode_dots_re from
    idna.core in the codec module.
  • Use raise ... from err for proper exception chaining and
    switch internal string formatting to f-strings.
  • Allow flit_core 4.x in the build backend.
  • Expand the ruff lint set (flake8-bugbear, flake8-simplify,
    pyupgrade, perflint) and apply the surfaced fixes; pin lint CI
    to Python 3.14.
  • Add Dependabot configuration for GitHub Actions.
  • Convert README and HISTORY from reStructuredText to Markdown.
  • Reference CVE-2026-45409 for the 3.14 advisory in place of the
    initial GHSA identifier.

Thanks to Felix Yan, Stan Ulbrych, and metsw24-max for
contributions to this release.

v3.14

Compare Source

  • Removed opportunity to process long inputs into quadratic
    time by rejecting oversize inputs up-front. Closes a bypass
    of the CVE-2024-3651 mitigation. [CVE-2026-45409]

Thanks to Stan Ulbrych for reporting the issue.

v3.13

Compare Source

  • Correct classification error for codepoint U+A7F1

v3.12

Compare Source

  • Update to Unicode 17.0.0.
  • Issue a deprecation warning for the transitional argument.
  • Added lazy-loading to provide some performance improvements.
  • Removed vestiges of code related to Python 2 support, including
    segmentation of data structures specific to Jython.

Thanks to Rodrigo Nogueira for contributions to this release.

v3.11

Compare Source

  • Update to Unicode 16.0.0, including significant changes to UTS46
    processing. As a result of Unicode ending support for it, transitional
    processing no longer has an effect and returns the same result.
  • Add support for Python 3.14, lowest supported version is Python 3.8.
  • Various updates to packaging, including PEP 740 support.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [idna](https://github.com/kjd/idna) ([changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)) | `==3.10` -> `==3.17` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/idna/3.17?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/idna/3.10/3.17?slim=true) | --- ### Release Notes <details> <summary>kjd/idna (idna)</summary> ### [`v3.17`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#317-2026-05-28) [Compare Source](https://github.com/kjd/idna/compare/v3.16...v3.17) - Substantial 75% reduction in memory usage through new data structures and some optimization in processing speed. - Added a general 1024-character input length cap to the public validation, conversion, and codec entry points. This is well above any legitimate domain or label and guards against pathological inputs. ### [`v3.16`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#316-2026-05-22) [Compare Source](https://github.com/kjd/idna/compare/v3.15...v3.16) - Add a command-line interface (`python -m idna`, also available as the `idna` script). Encodes or decodes one or more domains supplied as arguments or on standard input, with options to select A-label or U-label output and control error handling. - Raise the minimum supported Python version to 3.9 - Various code quality improvements ### [`v3.15`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#315-2026-05-12) [Compare Source](https://github.com/kjd/idna/compare/v3.14...v3.15) - Enforce DNS-length cap on individual labels early in `check_label`, short-circuiting contextual-rule processing for oversized input while staying compatible with UTS 46 usage. - Tidy core helpers: hoist bidi category sets to module-level frozensets (avoiding per-codepoint list construction), simplify length checks, and reuse the shared `_unicode_dots_re` from `idna.core` in the codec module. - Use `raise ... from err` for proper exception chaining and switch internal string formatting to f-strings. - Allow `flit_core` 4.x in the build backend. - Expand the ruff lint set (flake8-bugbear, flake8-simplify, pyupgrade, perflint) and apply the surfaced fixes; pin lint CI to Python 3.14. - Add Dependabot configuration for GitHub Actions. - Convert README and HISTORY from reStructuredText to Markdown. - Reference CVE-2026-45409 for the 3.14 advisory in place of the initial GHSA identifier. Thanks to Felix Yan, Stan Ulbrych, and metsw24-max for contributions to this release. ### [`v3.14`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#314-2026-05-10) [Compare Source](https://github.com/kjd/idna/compare/v3.13...v3.14) - Removed opportunity to process long inputs into quadratic time by rejecting oversize inputs up-front. Closes a bypass of the CVE-2024-3651 mitigation. \[CVE-2026-45409] Thanks to Stan Ulbrych for reporting the issue. ### [`v3.13`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#313-2026-04-22) [Compare Source](https://github.com/kjd/idna/compare/v3.12...v3.13) - Correct classification error for codepoint U+A7F1 ### [`v3.12`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#312-2026-04-21) [Compare Source](https://github.com/kjd/idna/compare/v3.11...v3.12) - Update to Unicode 17.0.0. - Issue a deprecation warning for the transitional argument. - Added lazy-loading to provide some performance improvements. - Removed vestiges of code related to Python 2 support, including segmentation of data structures specific to Jython. Thanks to Rodrigo Nogueira for contributions to this release. ### [`v3.11`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#311-2025-10-12) [Compare Source](https://github.com/kjd/idna/compare/v3.10...v3.11) - Update to Unicode 16.0.0, including significant changes to UTS46 processing. As a result of Unicode ending support for it, transitional processing no longer has an effect and returns the same result. - Add support for Python 3.14, lowest supported version is Python 3.8. - Various updates to packaging, including PEP 740 support. </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi41Mi44IiwidXBkYXRlZEluVmVyIjoiNDIuNTIuOCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJyZW5vdmF0ZS1ib3QiXX0=-->
renovate-bot changed title from chore(deps): update dependency idna to v3.11 to chore(deps): update dependency idna to v3.13 2026-04-27 05:15:55 +05:30
renovate-bot force-pushed renovate/idna-3.x from 150c729c36 to 0ce3150aa3 2026-04-27 05:15:56 +05:30 Compare
renovate-bot changed title from chore(deps): update dependency idna to v3.13 to chore(deps): update dependency idna to v3.14 2026-05-11 05:18:40 +05:30
renovate-bot force-pushed renovate/idna-3.x from 0ce3150aa3 to f625b0ffba 2026-05-11 05:18:41 +05:30 Compare
renovate-bot changed title from chore(deps): update dependency idna to v3.14 to chore(deps): update dependency idna to v3.15 2026-05-18 05:16:41 +05:30
renovate-bot force-pushed renovate/idna-3.x from f625b0ffba to d62b600261 2026-05-18 05:16:43 +05:30 Compare
renovate-bot changed title from chore(deps): update dependency idna to v3.15 to chore(deps): update dependency idna to v3.16 2026-05-25 05:17:07 +05:30
renovate-bot force-pushed renovate/idna-3.x from d62b600261 to ed5190a160 2026-05-25 05:17:08 +05:30 Compare
renovate-bot changed title from chore(deps): update dependency idna to v3.16 to chore(deps): update dependency idna to v3.17 2026-05-28 23:33:16 +05:30
renovate-bot force-pushed renovate/idna-3.x from ed5190a160 to 3c266bfa3b 2026-05-28 23:33:16 +05:30 Compare
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/idna-3.x:renovate/idna-3.x
git switch renovate/idna-3.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch master
git merge --no-ff renovate/idna-3.x
git switch renovate/idna-3.x
git rebase master
git switch master
git merge --ff-only renovate/idna-3.x
git switch renovate/idna-3.x
git rebase master
git switch master
git merge --no-ff renovate/idna-3.x
git switch master
git merge --squash renovate/idna-3.x
git switch master
git merge --ff-only renovate/idna-3.x
git switch master
git merge renovate/idna-3.x
git push origin master
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
mCaptcha/mcaptcha-api-py!37
No description provided.