build(deps): update dependency idna to v3.10 (main)
Metadata
Current evaluation
Merged automated dependency update upgrading idna from v3.7 to v3.10. The change passed CI checks, received two approvals, and was merged into the main branch.
Suggested action: —
No scores available.
Issue body
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [idna](https://redirect.github.com/kjd/idna) ([changelog](https://redirect.github.com/kjd/idna/blob/master/HISTORY.rst)) | `==3.7` -> `==3.10` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
---
### Release Notes
<details>
<summary>kjd/idna (idna)</summary>
### [`v3.10`](https://redirect.github.com/kjd/idna/compare/v3.9...v3.10)
[Compare Source](https://redirect.github.com/kjd/idna/compare/v3.9...v3.10)
### [`v3.9`](https://redirect.github.com/kjd/idna/compare/v3.8...v3.9)
[Compare Source](https://redirect.github.com/kjd/idna/compare/v3.8...v3.9)
### [`v3.8`](https://redirect.github.com/kjd/idna/releases/tag/v3.8)
[Compare Source](https://redirect.github.com/kjd/idna/compare/v3.7...v3.8)
#### What's Changed
- Fix regression where IDNAError exception was not being produced for certain inputs.
- Add support for Python 3.13, drop support for Python 3.5 as it is no longer testable.
- Documentation improvements
- Updates to package testing using Github actions
Thanks to Hugo van Kemenade for contributions to this release.
**Full Changelog**: https://github.com/kjd/idna/compare/v3.7...v3.8
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "every weekend" in timezone Etc/UTC, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/charmcraft).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC45Ny4wIiwidXBkYXRlZEluVmVyIjoiMzguOTcuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Merged automated dependency update upgrading idna from v3.7 to v3.10. The change passed CI checks, received two approvals, and was merged into the main branch. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged automated dependency update upgrading idna from v3.7 to v3.10. Approved after tests passed and rebasing onto main. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged automated dependency update upgrading idna from v3.7 to v3.10. Maintainer approved following successful tests and merged into main. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #5439 build(deps): update dependency idna to v3.10 (main) | snapcraft | merged | Merged automated idna dependency update from v3.7 to v3.10 into main. Approved by two reviewers and passed CI checks before successful integration. | |
| #545 chore(deps): update dependency idna to v3.7 | rockcraft | merged | Merged automated dependency update upgrading idna from v3.6 to v3.7. Approved by two reviewers, passed CI checks, and merged into the main branch. | |
| #346 build(deps): bump idna | imagecraft | merged | Merged dependency update bumping idna from 3.11 to 3.15 to resolve an OSV vulnerability. Approved by two reviewers with all CI checks passing. Single file change with minimal modifications. | |
| #4726 chore(deps): update dependency idna to v3.7 [security] | snapcraft | merged | Merged automated dependency update upgrading idna to v3.7 from v3.6 and v3.4. Resolves CVE-2024-3651 denial-of-service vulnerability in idna.encode(). Approved by reviewers, passed CI, and merged to main. | |
| #4727 build(deps): bump idna from 3.6 to 3.7 | snapcraft | closed | Closed and superseded by pull request #4726. Dependabot proposed bumping idna from 3.6 to 3.7 to address CVE-2024-3651. The dependency update was handled through the referenced PR instead. | |
| #1615 build(deps): bump idna + urllib3 | craft-parts | merged | Merged dependency update bumping idna to v3.18 and urllib3 to v2.7.0 to resolve open source vulnerabilities. Approved by two reviewers and passed CI checks. | |
| #1644 chore(deps): update dependency idna to v3.7 [security] | charmcraft | merged | Merged automated dependency update upgrading idna from v3.6 to v3.7 to resolve CVE-2024-3651, a denial-of-service vulnerability in the encode function. Approved by reviewers and passed CI checks. | |
| #311 build(deps): update dependency python to 3.13 (main) | craft-store | merged | Merged automated dependency update upgrading Python from 3.11 to 3.13. Approved by two reviewers, passed CI checks, and applied to the main branch with a single line change. | |
| #4725 build(deps): bump idna from 3.4 to 3.7 in /docs/.sphinx | snapcraft | closed | Dependabot PR to update idna to 3.7 for CVE-2024-3651 was closed and superseded by pull request #4726. The security patch was applied in the alternative branch instead. | |
| #6265 build(deps): bump idna, urllib3 | snapcraft | merged | Merged a dependency update bumping idna and urllib3 to resolve OSV security vulnerabilities. Approved by two reviewers and successfully passed CI checks. |