chore(deps): update dependency idna to v3.16 - autoclosed #71

Closed

renovate-bot wants to merge 1 commit from renovate/idna-3.x into main

renovate-bot commented

2026-05-11 00:07:16 +00:00

Collaborator

This PR contains the following updates:

Package	Change	Age	Confidence
idna (changelog)	`==3.13` → `==3.16`

Release Notes

kjd/idna (idna)

`v3.16`

Compare Source

Add a command-line interface (python -m idna, also available as
the idna script). Encodes or decodes one or more domains supplied
as arguments or on standard input, with options to select A-label
or U-label output and control error handling.
Raise the minimum supported Python version to 3.9
Various code quality improvements

`v3.15`

Compare Source

Enforce DNS-length cap on individual labels early in check_label,
short-circuiting contextual-rule processing for oversized input
while staying compatible with UTS 46 usage.
Tidy core helpers: hoist bidi category sets to module-level
frozensets (avoiding per-codepoint list construction), simplify
length checks, and reuse the shared _unicode_dots_re from
idna.core in the codec module.
Use raise ... from err for proper exception chaining and
switch internal string formatting to f-strings.
Allow flit_core 4.x in the build backend.
Expand the ruff lint set (flake8-bugbear, flake8-simplify,
pyupgrade, perflint) and apply the surfaced fixes; pin lint CI
to Python 3.14.
Add Dependabot configuration for GitHub Actions.
Convert README and HISTORY from reStructuredText to Markdown.
Reference CVE-2026-45409 for the 3.14 advisory in place of the
initial GHSA identifier.

Thanks to Felix Yan, Stan Ulbrych, and metsw24-max for
contributions to this release.

`v3.14`

Compare Source

Removed opportunity to process long inputs into quadratic
time by rejecting oversize inputs up-front. Closes a bypass
of the CVE-2024-3651 mitigation. [CVE-2026-45409]

Thanks to Stan Ulbrych for reporting the issue.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [idna](https://github.com/kjd/idna) ([changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)) | `==3.13` → `==3.16` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/idna/3.16?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/idna/3.13/3.16?slim=true) | --- ### Release Notes <details> <summary>kjd/idna (idna)</summary> ### [`v3.16`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#316-2026-05-22) [Compare Source](https://github.com/kjd/idna/compare/v3.15...v3.16) - Add a command-line interface (`python -m idna`, also available as the `idna` script). Encodes or decodes one or more domains supplied as arguments or on standard input, with options to select A-label or U-label output and control error handling. - Raise the minimum supported Python version to 3.9 - Various code quality improvements ### [`v3.15`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#315-2026-05-12) [Compare Source](https://github.com/kjd/idna/compare/v3.14...v3.15) - Enforce DNS-length cap on individual labels early in `check_label`, short-circuiting contextual-rule processing for oversized input while staying compatible with UTS 46 usage. - Tidy core helpers: hoist bidi category sets to module-level frozensets (avoiding per-codepoint list construction), simplify length checks, and reuse the shared `_unicode_dots_re` from `idna.core` in the codec module. - Use `raise ... from err` for proper exception chaining and switch internal string formatting to f-strings. - Allow `flit_core` 4.x in the build backend. - Expand the ruff lint set (flake8-bugbear, flake8-simplify, pyupgrade, perflint) and apply the surfaced fixes; pin lint CI to Python 3.14. - Add Dependabot configuration for GitHub Actions. - Convert README and HISTORY from reStructuredText to Markdown. - Reference CVE-2026-45409 for the 3.14 advisory in place of the initial GHSA identifier. Thanks to Felix Yan, Stan Ulbrych, and metsw24-max for contributions to this release. ### [`v3.14`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#314-2026-05-10) [Compare Source](https://github.com/kjd/idna/compare/v3.13...v3.14) - Removed opportunity to process long inputs into quadratic time by rejecting oversize inputs up-front. Closes a bypass of the CVE-2024-3651 mitigation. \[CVE-2026-45409] Thanks to Stan Ulbrych for reporting the issue. </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit

2026-05-11 00:07:16 +00:00

chore(deps): update dependency idna to v3.14 883517dd85

renovate-bot force-pushed renovate/idna-3.x from 883517dd85 to 92d12059e7

2026-05-13 00:06:21 +00:00

Compare

renovate-bot changed title from ~~chore(deps): update dependency idna to v3.14~~ to chore(deps): update dependency idna to v3.15

2026-05-13 00:06:21 +00:00

renovate-bot force-pushed renovate/idna-3.x from 92d12059e7 to 28786ed7f8

2026-05-18 06:02:16 +00:00

Compare

renovate-bot force-pushed renovate/idna-3.x from 28786ed7f8 to 03981a7d50