build(deps): update dependency idna to v3.10 (main)
Metadata
Current evaluation
Merged PR #1938 in commit afd3b394, updating idna from 3.7 to 3.10 after tests passed and maintainers approved it.
Resolution: closed resolved
Reason: PR #1938 was merged into main by commit afd3b394, applying the idna 3.10 dependency update.
Evaluated by: mr-cal-bot
No scores available.
Issue body
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [idna](https://redirect.github.com/kjd/idna) ([changelog](https://redirect.github.com/kjd/idna/blob/master/HISTORY.rst)) | `==3.7` -> `==3.10` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
---
### Release Notes
<details>
<summary>kjd/idna (idna)</summary>
### [`v3.10`](https://redirect.github.com/kjd/idna/compare/v3.9...v3.10)
[Compare Source](https://redirect.github.com/kjd/idna/compare/v3.9...v3.10)
### [`v3.9`](https://redirect.github.com/kjd/idna/compare/v3.8...v3.9)
[Compare Source](https://redirect.github.com/kjd/idna/compare/v3.8...v3.9)
### [`v3.8`](https://redirect.github.com/kjd/idna/releases/tag/v3.8)
[Compare Source](https://redirect.github.com/kjd/idna/compare/v3.7...v3.8)
#### What's Changed
- Fix regression where IDNAError exception was not being produced for certain inputs.
- Add support for Python 3.13, drop support for Python 3.5 as it is no longer testable.
- Documentation improvements
- Updates to package testing using Github actions
Thanks to Hugo van Kemenade for contributions to this release.
**Full Changelog**: https://github.com/kjd/idna/compare/v3.7...v3.8
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "every weekend" in timezone Etc/UTC, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/charmcraft).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC45Ny4wIiwidXBkYXRlZEluVmVyIjoiMzguOTcuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #1938 in commit afd3b394, updating idna from 3.7 to 3.10 after tests passed and maintainers approved it. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged #1938 in commit afd3b394, upgrading idna from v3.7 to v3.10 on main. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged automated dependency update upgrading idna from v3.7 to v3.10. The change passed CI checks, received two approvals, and was merged into the main branch. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged automated dependency update upgrading idna from v3.7 to v3.10. Approved after tests passed and rebasing onto main. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #346 build(deps): bump idna | imagecraft | merged | Merged PR #346 in commit 4bf75c9, updating idna from 3.11 to 3.15 to resolve an OSV vulnerability. | |
| #5439 build(deps): update dependency idna to v3.10 (main) | snapcraft | merged | Merged #5439 via commit 1a4ddda70, updating Snapcraft's pinned idna dependency from 3.7 to 3.10. | |
| #4727 build(deps): bump idna from 3.6 to 3.7 | snapcraft | closed | Dependabot PR bumping idna 3.6→3.7 was closed unmerged by mr-cal in favour of the Renovate security PR #4726, which updated idna and landed as commit 077ebbfff. | |
| #545 chore(deps): update dependency idna to v3.7 | rockcraft | merged | Renovate PR #545 was merged, updating idna from 3.6 to 3.7 in commit 8432a136 after two approvals. | |
| #951 Update dependency idna to v3.4 - autoclosed | charmcraft | closed | Renovate's idna 3.3-to-3.4 PR was closed unmerged (autoclosed, no reviews/CI). The same bump landed in the bulk dependency update commit c545a05f (PR #1493); idna has since moved to 3.18 via uv.lock. | |
| #4725 build(deps): bump idna from 3.4 to 3.7 in /docs/.sphinx | snapcraft | closed | Dependabot PR to bump idna 3.4->3.7 in /docs/.sphinx was closed by @mr-cal on 2024-04-12 in favour of PR #4726, which landed the same upgrade as commit 077ebbfff fixing CVE-2024-3651. | |
| #4726 chore(deps): update dependency idna to v3.7 [security] | snapcraft | merged | Renovate PR #4726 merged as commit 077ebbfff, pinning idna 3.4/3.6 -> 3.7 to fix CVE-2024-3651 (idna.encode() DoS). Later bumped to 3.10 in #5439. | |
| #1644 chore(deps): update dependency idna to v3.7 [security] | charmcraft | merged | Renovate security bump of idna 3.6 -> 3.7 (CVE-2024-3651 DoS) merged into main via commit 2f38be1e, updating requirements.txt and the lock file; approved by 2 reviewers. Later superseded by #1938 (idna 3.10). | |
| #1615 build(deps): bump idna + urllib3 | craft-parts | merged | Merged #1615 in commit dd195de9, updating idna 3.11→3.18 and urllib3 2.6.3→2.7.0 to address reported OSV findings. |