Update dependency idna to v3.4 - autoclosed
Metadata
Current evaluation
Renovate's idna 3.3-to-3.4 PR was closed unmerged (autoclosed, no reviews/CI). The same bump landed in the bulk dependency update commit c545a05f (PR #1493); idna has since moved to 3.18 via uv.lock.
Resolution: closed superseded
Reason: The PR was never merged and was auto-closed by Renovate. The idna 3.3->3.4 update it proposed was instead delivered in the consolidated dependency update commit c545a05f (PR #1493), which is the commit that actually changed the pin in requirements.txt. Later idna bumps (#1644 to 3.7, #1938 to 3.10, and the current 3.18 in uv.lock) further supersede it.
Evaluated by: mr-cal-bot
No scores available.
Issue body
[](https://renovatebot.com)
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [idna](https://togithub.com/kjd/idna) ([changelog](https://togithub.com/kjd/idna/blob/master/HISTORY.rst)) | `==3.3` -> `==3.4` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
---
### Release Notes
<details>
<summary>kjd/idna</summary>
### [`v3.4`](https://togithub.com/kjd/idna/compare/v3.3...v3.4)
[Compare Source](https://togithub.com/kjd/idna/compare/v3.3...v3.4)
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "every weekend" in timezone Etc/UTC, Automerge - "after 1 am and before 7 am" in timezone Etc/UTC.
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://app.renovatebot.com/dashboard#github/canonical/charmcraft).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNC41MS4wIiwidXBkYXRlZEluVmVyIjoiMzQuNTEuMCJ9-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed superseded | Renovate's idna 3.3-to-3.4 PR was closed unmerged (autoclosed, no reviews/CI). The same bump landed in the bulk dependency update commit c545a05f (PR #1493); idna has since moved to 3.18 via uv.lock. | |
| stealth/space-bunny-alpha | — | closed superseded | Renovate's idna 3.4 PR was auto-closed unmerged; the bump later landed in merged PR #1493 via commit c545a05f. | |
| stealth/space-bunny-alpha | — | closed resolved | Renovate's idna 3.3-to-3.4 PR was auto-closed unmerged; the bump landed with other dependency updates in #1493 (c545a05f). | |
| qwen/qwen3.6-35b-a3b | — | — | Renovate bot dependency update for idna 3.3 to 3.4 was automatically closed due to inactivity. No changes were merged. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Dependency update for idna from v3.3 to v3.4 was abandoned and autoclosed. Automated merging was disabled by configuration, and the request remained inactive before closure. |
Update history
No update history recorded yet.
Related work
-
Superseded By:
canonical/charmcraft#1493
(confidence 88%)
Commit c545a05f 'build(deps): update dependencies (#1493)' is the commit that actually applied the idna==3.4 pin, replacing this unmerged Renovate PR.
-
Related To:
canonical/charmcraft#1644
(confidence 80%)
Later idna bump to v3.7 [security], showing the dependency continued to be tracked after this PR was superseded.
-
Related To:
canonical/charmcraft#1938
(confidence 78%)
Later idna bump to v3.10, later still followed by uv.lock resolution to 3.18.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #4727 build(deps): bump idna from 3.6 to 3.7 | snapcraft | closed | Dependabot PR bumping idna 3.6→3.7 was closed unmerged by mr-cal in favour of the Renovate security PR #4726, which updated idna and landed as commit 077ebbfff. | |
| #1938 build(deps): update dependency idna to v3.10 (main) | charmcraft | merged | Merged PR #1938 in commit afd3b394, updating idna from 3.7 to 3.10 after tests passed and maintainers approved it. | |
| #346 build(deps): bump idna | imagecraft | merged | Merged PR #346 in commit 4bf75c9, updating idna from 3.11 to 3.15 to resolve an OSV vulnerability. | |
| #545 chore(deps): update dependency idna to v3.7 | rockcraft | merged | Renovate PR #545 was merged, updating idna from 3.6 to 3.7 in commit 8432a136 after two approvals. | |
| #950 Update dependency humanize to v4.4.0 - autoclosed | charmcraft | closed | Renovate PR #950 was auto-closed without merge; its humanize 4.4.0 update was incorporated by merged dependency-refresh PR #957 (75a30fd5). |