Skip to content

Bump idna to 3.15 in docs lock file - #10881

Open
luigi617 wants to merge 1 commit into
v2from
deps/docs-bump-idna
Open

luigi617 wants to merge 1 commit into
v2from
deps/docs-bump-idna

Conversation

@luigi617

Copy link
Copy Markdown
Contributor

Bumps idna 3.11 → 3.15 in requirements-docs-lock.txt to fix Dependabot alert #52 (GHSA-65pc-fj4g-8rjx, crafted inputs to idna.encode() can get around the CVE-2024-3651 fix).

The lock file was regenerated with pip-compile on Python 3.9 using the command in its header, with --upgrade-package so only this package changes. idna 3.15 still supports Python 3.9.


This PR was generated by AI tools, and reviewed by @luigi617.

@luigi617
luigi617 requested a review from a team as a code owner November 11, 2026 17:02

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants