FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

chore(deps): bump idna from 3.11 to 3.15 in /src/ContentProcessorWorkflow by dependabot[bot] · Pull Request #597 · microsoft/content-processing-solution-accelerator · GitHub

/ content-processing-solution-accelerator Public

chore(deps): bump idna from 3.11 to 3.15 in /src/ContentProcessorWorkflow - #597

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/src/ContentProcessorWorkflow/idna-3.15
ConversationCommits (1)ChecksFiles changed
Closed

chore(deps): bump idna from 3.11 to 3.15 in /src/ContentProcessorWorkflow#597
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/src/ContentProcessorWorkflow/idna-3.15

Conversation

dependabot Bot commented on behalf of github May 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps idna from 3.11 to 3.15.

Changelog

Sourced from idna's changelog.

3.15 (2026-05-12)

  • Enforce DNS-length cap on individual labels early in check_label, short-circuiting contextual-rule processing for oversized input while staying compatible with UTS 46 usage.
  • Tidy core helpers: hoist bidi category sets to module-level frozensets (avoiding per-codepoint list construction), simplify length checks, and reuse the shared _unicode_dots_re from idna.core in the codec module.
  • Use raise ... from err for proper exception chaining and switch internal string formatting to f-strings.
  • Allow flit_core 4.x in the build backend.
  • Expand the ruff lint set (flake8-bugbear, flake8-simplify, pyupgrade, perflint) and apply the surfaced fixes; pin lint CI to Python 3.14.
  • Add Dependabot configuration for GitHub Actions.
  • Convert README and HISTORY from reStructuredText to Markdown.
  • Reference CVE-2026-45409 for the 3.14 advisory in place of the initial GHSA identifier.

Thanks to Felix Yan, Stan Ulbrych, and metsw24-max for contributions to this release.

3.14 (2026-05-10)

  • Removed opportunity to process long inputs into quadratic time by rejecting oversize inputs up-front. Closes a bypass of the CVE-2024-3651 mitigation. [CVE-2026-45409]

Thanks to Stan Ulbrych for reporting the issue.

3.13 (2026-04-22)

  • Correct classification error for codepoint U+A7F1

3.12 (2026-04-21)

  • Update to Unicode 17.0.0.
  • Issue a deprecation warning for the transitional argument.
  • Added lazy-loading to provide some performance improvements.
  • Removed vestiges of code related to Python 2 support, including segmentation of data structures specific to Jython.

Thanks to Rodrigo Nogueira for contributions to this release.

Commits
  • af30a09 Release 3.15
  • 30314d4 Pre-release 3.15rc0
  • 05d4b21 Merge pull request #237 from kjd/convert-docs-to-markdown
  • 2987fdb Convert README and HISTORY from reStructuredText to Markdown
  • 59fa800 Merge pull request #236 from kjd/dependabot/github_actions/actions-f3e34333ea
  • def6983 Merge branch 'master' into dependabot/github_actions/actions-f3e34333ea
  • bbd8004 Merge pull request #234 from StanFromIreland/patch-1
  • edd07c0 Bump github/codeql-action from 3.35.2 to 4.35.2 in the actions group
  • 5557db0 Merge branch 'master' into patch-1
  • f11746c Merge pull request #235 from StanFromIreland/patch-2
  • Additional commits viewable in compare view

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels May 19, 2026
dependabot Bot requested a review from Avijit-Microsoft as a code owner May 19, 2026 23:01
Copilot AI review requested due to automatic review settings May 19, 2026 23:01
Copilot AI reviewed May 19, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

chore(deps): bump idna in /src/ContentProcessorWorkflow
3afcdcc 
Bumps [idna](https://github.com/kjd/idna) from 3.11 to 3.15.
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](kjd/idna@v3.11...v3.15)

---
updated-dependencies:
- dependency-name: idna
  dependency-version: '3.15'
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
dependabot Bot changed the title build(deps): bump idna from 3.11 to 3.15 in /src/ContentProcessorWorkflow chore(deps): bump idna from 3.11 to 3.15 in /src/ContentProcessorWorkflow May 25, 2026
dependabot Bot force-pushed the dependabot/uv/src/ContentProcessorWorkflow/idna-3.15 branch from f33dfb7 to 3afcdcc Compare May 25, 2026 13:42
Ayaz-Microsoft added a commit that referenced this pull request Jun 1, 2026
fix: dependabot package upgrades (idna, authlib)
7f98c34 
Resolves dependabot PRs #595, #596, #597 (idna), #589 (authlib).

- idna: 3.13 -> 3.17 across requirements.txt and uv.lock files
  (bumped past dependabot's 3.15 to latest via uv resolution)
- authlib: 1.6.11 -> 1.6.12 (ContentProcessorWorkflow)
- Regenerated uv.lock for ContentProcessor, ContentProcessorAPI,
  ContentProcessorWorkflow with --upgrade-package flags
- Side effects from re-resolution:
  - github-copilot-sdk: 0.2.2 -> 0.3.0 (transitive in CP)
  - urllib3 lock entry synced to 2.7.0 (matches pyproject) in CPAPI
  - jsonschema deps added to CPAPI lock (matches pyproject)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Ayaz-Microsoft mentioned this pull request Jun 1, 2026
Closed
Shreyas-Microsoft mentioned this pull request Jun 1, 2026
Merged
Roopan-Microsoft added a commit that referenced this pull request Jun 12, 2026
Merge pull request #606 from microsoft/psl-sw/44960-dependabot-upgrades
cdf62bd 
chore(deps): bring dependabot upgrades (#589, #595, #596, #597) onto dev (AB#44960)
Priyanka-Microsoft pushed a commit to Priyanka-Microsoft/content-processing-solution-accelerator that referenced this pull request Jun 15, 2026
chore(deps): bump idna from 3.11 to 3.15 in ContentProcessorWorkflow …
77de405 
…uv.lock

Applies the changes from Dependabot PR microsoft#597 onto dev so they reach the dev branch ahead of the upstream PR (which targets main).

Refs: ADO #44960

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

dependabot Bot commented on behalf of github Jun 16, 2026

Copy link
Copy Markdown
Contributor Author

Looks like idna is up-to-date now, so this is no longer needed.

dependabot Bot closed this Jun 16, 2026
dependabot Bot deleted the dependabot/uv/src/ContentProcessorWorkflow/idna-3.15 branch June 16, 2026 12:45
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments
Avijit-Microsoft Awaiting requested review from Avijit-Microsoft Avijit-Microsoft is a code owner
Roopan-Microsoft Awaiting requested review from Roopan-Microsoft Roopan-Microsoft is a code owner
Prajwal-Microsoft Awaiting requested review from Prajwal-Microsoft Prajwal-Microsoft is a code owner
Vinay Sharma (Vinay-Microsoft) Awaiting requested review from Vinay-Microsoft Vinay-Microsoft is a code owner
Anish Arora (aniaroramsft) Awaiting requested review from aniaroramsft aniaroramsft is a code owner
Todd Herman (toherman-msft) Awaiting requested review from toherman-msft toherman-msft is a code owner
nchandhi Awaiting requested review from nchandhi nchandhi is a code owner
dgp10801 Awaiting requested review from dgp10801 dgp10801 is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

Back | FazBrowse Home | New Git URL