← Back to issue list

build(deps): bump idna

View original Github issue

Metadata

Project
imagecraft
Number
#346
Type
pull request
State
merged
Author
smethnani
Labels
—
Created
Updated
Closed

Current evaluation

Merged PR #346 in commit 4bf75c9, updating idna from 3.11 to 3.15 to resolve an OSV vulnerability.

Resolution: closed resolved

Reason: The dependency update was merged as commit 4bf75c9 after two approvals and all CI checks passed.

Evaluated by: mr-cal-bot

No scores available.

Issue body

Bumps `idna` from 3.11 to 3.15 to resolve an osv --- - [x] I've followed the [contribution guidelines](https://github.com/canonical/imagecraft/blob/main/CONTRIBUTING.md). - [x] I've signed the [CLA](http://www.ubuntu.com/legal/contributors/). - [x] I've successfully run `make lint && make test`. - [ ] I've added or updated any relevant documentation. - [ ] In documents I changed, I [added a meta description](https://canonical-starflow.readthedocs-hosted.com/how-to/add-a-page-meta-description/) if one was missing.

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Merged PR #346 in commit 4bf75c9, updating idna from 3.11 to 3.15 to resolve an OSV vulnerability.
stealth/space-bunny-alpha — closed resolved Merged PR #346 in commit 4bf75c9, updating idna from 3.11 to 3.15 to resolve an OSV vulnerability; all tests, security scans, lint, and builds passed.
stealth/space-bunny-alpha — closed resolved Dependabot-style PR merged (commit 4bf75c9): bumped idna from 3.11 to 3.15 to clear an OSV advisory; all CI checks green and approved by 2 reviewers.
stealth/space-bunny-alpha — closed resolved Merged PR #346 (commit 4bf75c9), bumping idna from 3.11 to 3.15 to resolve an OSV vulnerability.
stealth/space-bunny-alpha — closed resolved Merged PR #346, commit 4bf75c9, updating idna from 3.11 to 3.15 to address an OSV vulnerability.
qwen/qwen3.6-35b-a3b — — Merged dependency update bumping idna from 3.11 to 3.15 to resolve an OSV vulnerability. Approved by two reviewers with all CI checks passing. Single file change with minimal modifications.
qwen3.6-35b-a3b-mtp-q6 — — Merged dependency update bumping idna from 3.11 to 3.15 to resolve an OSV vulnerability. Changes passed linting and testing before final merge.

Update history

No update history recorded yet.

Related issues

Issue Project State Summary Similarity
#4727 build(deps): bump idna from 3.6 to 3.7 snapcraft closed Dependabot PR bumping idna 3.6→3.7 was closed unmerged by mr-cal in favour of the Renovate security PR #4726, which updated idna and landed as commit 077ebbfff.
84%
#1938 build(deps): update dependency idna to v3.10 (main) charmcraft merged Merged PR #1938 in commit afd3b394, updating idna from 3.7 to 3.10 after tests passed and maintainers approved it.
82%
#1615 build(deps): bump idna + urllib3 craft-parts merged Merged #1615 in commit dd195de9, updating idna 3.11→3.18 and urllib3 2.6.3→2.7.0 to address reported OSV findings.
80%
#4725 build(deps): bump idna from 3.4 to 3.7 in /docs/.sphinx snapcraft closed Dependabot PR to bump idna 3.4->3.7 in /docs/.sphinx was closed by @mr-cal on 2024-04-12 in favour of PR #4726, which landed the same upgrade as commit 077ebbfff fixing CVE-2024-3651.
80%
#1076 build(deps): bump idna, urllib3 craft-application merged Merged idna and urllib3 dependency bumps to address OSV findings; commit 80a58477 records the accepted change.
78%
#4726 chore(deps): update dependency idna to v3.7 [security] snapcraft merged Renovate PR #4726 merged as commit 077ebbfff, pinning idna 3.4/3.6 -> 3.7 to fix CVE-2024-3651 (idna.encode() DoS). Later bumped to 3.10 in #5439.
74%
#6265 build(deps): bump idna, urllib3 snapcraft merged Merged idna and urllib3 dependency bumps to address reported OSV vulnerabilities in snapcraft#6265 (commit de6a28a9c).
73%
#951 Update dependency idna to v3.4 - autoclosed charmcraft closed Renovate's idna 3.3-to-3.4 PR was closed unmerged (autoclosed, no reviews/CI). The same bump landed in the bulk dependency update commit c545a05f (PR #1493); idna has since moved to 3.18 via uv.lock.
72%
#143 build(deps): resolve OSVs debcraft merged Merged in canonical/debcraft#143 as commit 3e9db88, updating idna 3.10→3.18 and urllib3 2.6.3→2.7.0 to resolve OSV findings. All CI checks passed.
71%
#5439 build(deps): update dependency idna to v3.10 (main) snapcraft merged Merged #5439 via commit 1a4ddda70, updating Snapcraft's pinned idna dependency from 3.7 to 3.10.
71%