andylockran/parkrun-hackapi

Watch

Fork 0

Update dependency idna to v3 #20

Open

renovate wants to merge 1 commit from renovate/idna-3.x into master

renovate commented

2026-10-27 00:26:37 +00:00

Collaborator

This PR contains the following updates:

Package	Change	Age	Confidence
idna (changelog)	`==2.6` → `==3.20`

Release Notes

kjd/idna (idna)

`v3.20`

Compare Source

Update to Unicode 18.0.0.
Better enforcement of the domain length limit in the incremental
codec.
Add support for Python 3.15.

`v3.19`

Compare Source

Restore the std3_rules option, which had no effect since changes
to UTS #46 processing in Unicode 16. Note that uts46_remap()
defaults to enabling STD3 rules, so direct callers will see input
containing non-LDH ASCII characters rejected again.
Performance improvements to UTS #46 mapping, particularly for
ASCII-only domains.
Test on free-threaded CPython with the GIL disabled and document
thread safety.
Expose the Unicode version of the generated tables as
idna.unicode_version, and show it in idna --version.
Add code, text, codepoint and position attributes to
IDNAError so that the failed rule and the offending character can
be identified without parsing the exception message.
The deprecated transitional argument to encode() and
uts46_remap() is now completely ignored, and gives a deprecation warning
for the latter.
Reject A-labels that are not the canonical Punycode encoding of
their U-label.
Fix CONTEXTJ violations raising IDNAError instead of
InvalidCodepointContext.
Consistently raise IDNAError for empty labels and non-ASCII bytes
passed to label helper functions and the incremental codec.
Add property-based tests, extended fuzzing targets, coverage
measurement, and CI checks that the data tables match the generator
output.
Various code quality and tooling improvements.

Thanks to stefan6419846, LouieLuNZ, and Salvatore Corvaglia for
contributions to this release.

`v3.18`

Compare Source

When decoding a domain, add a display argument that will pass
through invalid labels rather than raising an exception.

`v3.17`

Compare Source

Substantial 75% reduction in memory usage through new data
structures and some optimization in processing speed.
Added a general 1024-character input length cap to the public
validation, conversion, and codec entry points. This is well above
any legitimate domain or label and guards against pathological
inputs.

`v3.16`

Compare Source

Add a command-line interface (python -m idna, also available as
the idna script). Encodes or decodes one or more domains supplied
as arguments or on standard input, with options to select A-label
or U-label output and control error handling.
Raise the minimum supported Python version to 3.9
Various code quality improvements

`v3.15`

Compare Source

Enforce DNS-length cap on individual labels early in check_label,
short-circuiting contextual-rule processing for oversized input
while staying compatible with UTS 46 usage.
Tidy core helpers: hoist bidi category sets to module-level
frozensets (avoiding per-codepoint list construction), simplify
length checks, and reuse the shared _unicode_dots_re from
idna.core in the codec module.
Use raise ... from err for proper exception chaining and
switch internal string formatting to f-strings.
Allow flit_core 4.x in the build backend.
Expand the ruff lint set (flake8-bugbear, flake8-simplify,
pyupgrade, perflint) and apply the surfaced fixes; pin lint CI
to Python 3.14.
Add Dependabot configuration for GitHub Actions.
Convert README and HISTORY from reStructuredText to Markdown.
Reference CVE-2026-45409 for the 3.14 advisory in place of the
initial GHSA identifier.

Thanks to Felix Yan, Stan Ulbrych, and metsw24-max for
contributions to this release.

`v3.14`

Compare Source

Removed opportunity to process long inputs into quadratic
time by rejecting oversize inputs up-front. Closes a bypass
of the CVE-2024-3651 mitigation. [CVE-2026-45409]

Thanks to Stan Ulbrych for reporting the issue.

`v3.13`

Compare Source

Correct classification error for codepoint U+A7F1

`v3.12`

Compare Source

Update to Unicode 17.0.0.
Issue a deprecation warning for the transitional argument.
Added lazy-loading to provide some performance improvements.
Removed vestiges of code related to Python 2 support, including
segmentation of data structures specific to Jython.

Thanks to Rodrigo Nogueira for contributions to this release.

`v3.11`

Compare Source

Update to Unicode 16.0.0, including significant changes to UTS46
processing. As a result of Unicode ending support for it, transitional
processing no longer has an effect and returns the same result.
Add support for Python 3.14, lowest supported version is Python 3.8.
Various updates to packaging, including PEP 740 support.

`v3.10`

Compare Source

Reverted to Unicode 15.1.0 data. Unicode 16 has some significant changes
to UTS46 processing that will require more work to properly implement.

`v3.9`

Compare Source

Update to Unicode 16.0.0
Deprecate setup.cfg in favour of pyproject.toml
Use ruff for code formatting

Thanks to Waket Zheng for contributions to this release.

`v3.8`

Compare Source

Fix regression where IDNAError exception was not being produced for
certain inputs.
Add support for Python 3.13, drop support for Python 3.5 as it is no
longer testable.
Documentation improvements
Updates to package testing using Github actions

Thanks to Hugo van Kemenade for contributions to this release.

`v3.7`

Compare Source

Fix issue where specially crafted inputs to encode() could
take exceptionally long amount of time to process. [CVE-2024-3651]

Thanks to Guido Vranken for reporting the issue.

`v3.6`

Compare Source

Fix regression to include tests in source distribution.

`v3.5`

Compare Source

Update to Unicode 15.1.0
String codec name is now "idna2008" as overriding the system codec
"idna" was not working.
Fix typing error for codec encoding
"setup.cfg" has been added for this release due to some downstream
lack of adherence to PEP 517. Should be removed in a future release
so please prepare accordingly.
Removed reliance on a symlink for the "idna-data" tool to comport
with PEP 517 and the Python Packaging User Guide for sdist archives.
Added security reporting protocol for project

Thanks Jon Ribbens, Diogo Teles Sant'Anna, Wu Tingfeng for contributions
to this release.

`v3.4`

Compare Source

Update to Unicode 15.0.0
Migrate to pyproject.toml for build information (PEP 621)
Correct another instance where generic exception was raised instead of
IDNAError for malformed input
Source distribution uses zeroized file ownership for improved
reproducibility

Thanks to Seth Michael Larson for contributions to this release.

`v3.3`

Compare Source

Update to Unicode 14.0.0
Update to in-line type annotations
Throw IDNAError exception correctly for some malformed input
Advertise support for Python 3.10
Improve testing regime on Github
Fix Russian typo in documentation

Thanks to Jon Defresne, Hugo van Kemenade, Seth Michael Larson,
Patrick Ventuzelo and Boris Verhovsky for contributions to this
release.

`v3.2`

Compare Source

Raise the minimum supported Python version to 3.10

`v3.1`

Compare Source

Restore the std3_rules option, which had no effect since changes
to UTS #46 processing in Unicode 16. Note that uts46_remap()
defaults to enabling STD3 rules, so direct callers will see input
containing non-LDH ASCII characters rejected again.
Performance improvements to UTS #46 mapping, particularly for
ASCII-only domains.
Test on free-threaded CPython with the GIL disabled and document
thread safety.
Expose the Unicode version of the generated tables as
idna.unicode_version, and show it in idna --version.
Add code, text, codepoint and position attributes to
IDNAError so that the failed rule and the offending character can
be identified without parsing the exception message.
The deprecated transitional argument to encode() and
uts46_remap() is now completely ignored, and gives a deprecation warning
for the latter.
Reject A-labels that are not the canonical Punycode encoding of
their U-label.
Fix CONTEXTJ violations raising IDNAError instead of
InvalidCodepointContext.
Consistently raise IDNAError for empty labels and non-ASCII bytes
passed to label helper functions and the incremental codec.
Add property-based tests, extended fuzzing targets, coverage
measurement, and CI checks that the data tables match the generator
output.
Various code quality and tooling improvements.

Thanks to stefan6419846, LouieLuNZ, and Salvatore Corvaglia for
contributions to this release.

`v3.0`

Compare Source

Python 2 is no longer supported (the 2.x branch supports Python 2,
use "idna<3" in your requirements file if you need Python 2 support)
Support for V2 UTS 46 test vectors.

`v2.10`

Compare Source

Update to Unicode 13.0.0.
Throws a more specific exception if "xn--" is provided as a label.
This is expected to be the last version that supports Python 2.

`v2.9`

Compare Source

Update to Unicode 12.1.0.
Prohibit A-labels ending with a hyphen (Thanks, Julien Bernard!)
Future-proofing: Test on Python 3.7 and 3.8, don't immediately
fail should Python 4 come along.
Made BSD 3-clause license clearer

`v2.8`

Compare Source

Update to Unicode 11.0.0.
Provide more specific exceptions for some malformed labels.

`v2.7`

Compare Source

Update to Unicode 10.0.0.
No longer accepts dot-prefixed domains (e.g. ".example") as valid.
This is to be more conformant with the UTS 46 spec. Users should
strip dot prefixes from domains before processing.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [idna](https://github.com/kjd/idna) ([changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)) | `==2.6` → `==3.20` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/idna/3.20?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/idna/2.6/3.20?slim=true) | --- ### Release Notes <details> <summary>kjd/idna (idna)</summary> ### [`v3.20`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#320-2026-09-17) [Compare Source](https://github.com/kjd/idna/compare/v3.19...v3.20) - Update to Unicode 18.0.0. - Better enforcement of the domain length limit in the incremental codec. - Add support for Python 3.15. ### [`v3.19`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#319-2026-08-18) [Compare Source](https://github.com/kjd/idna/compare/v3.18...v3.19) - Restore the `std3_rules` option, which had no effect since changes to UTS [#46](https://github.com/kjd/idna/issues/46) processing in Unicode 16. Note that `uts46_remap()` defaults to enabling STD3 rules, so direct callers will see input containing non-LDH ASCII characters rejected again. - Performance improvements to UTS [#46](https://github.com/kjd/idna/issues/46) mapping, particularly for ASCII-only domains. - Test on free-threaded CPython with the GIL disabled and document thread safety. - Expose the Unicode version of the generated tables as `idna.unicode_version`, and show it in `idna --version`. - Add `code`, `text`, `codepoint` and `position` attributes to `IDNAError` so that the failed rule and the offending character can be identified without parsing the exception message. - The deprecated `transitional` argument to `encode()` and `uts46_remap()` is now completely ignored, and gives a deprecation warning for the latter. - Reject A-labels that are not the canonical Punycode encoding of their U-label. - Fix CONTEXTJ violations raising `IDNAError` instead of `InvalidCodepointContext`. - Consistently raise `IDNAError` for empty labels and non-ASCII bytes passed to label helper functions and the incremental codec. - Add property-based tests, extended fuzzing targets, coverage measurement, and CI checks that the data tables match the generator output. - Various code quality and tooling improvements. Thanks to stefan6419846, LouieLuNZ, and Salvatore Corvaglia for contributions to this release. ### [`v3.18`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#318-2026-06-02) [Compare Source](https://github.com/kjd/idna/compare/v3.17...v3.18) - When decoding a domain, add a `display` argument that will pass through invalid labels rather than raising an exception. ### [`v3.17`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#317-2026-05-28) [Compare Source](https://github.com/kjd/idna/compare/v3.16...v3.17) - Substantial 75% reduction in memory usage through new data structures and some optimization in processing speed. - Added a general 1024-character input length cap to the public validation, conversion, and codec entry points. This is well above any legitimate domain or label and guards against pathological inputs. ### [`v3.16`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#316-2026-05-22) [Compare Source](https://github.com/kjd/idna/compare/v3.15...v3.16) - Add a command-line interface (`python -m idna`, also available as the `idna` script). Encodes or decodes one or more domains supplied as arguments or on standard input, with options to select A-label or U-label output and control error handling. - Raise the minimum supported Python version to 3.9 - Various code quality improvements ### [`v3.15`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#315-2026-05-12) [Compare Source](https://github.com/kjd/idna/compare/v3.14...v3.15) - Enforce DNS-length cap on individual labels early in `check_label`, short-circuiting contextual-rule processing for oversized input while staying compatible with UTS 46 usage. - Tidy core helpers: hoist bidi category sets to module-level frozensets (avoiding per-codepoint list construction), simplify length checks, and reuse the shared `_unicode_dots_re` from `idna.core` in the codec module. - Use `raise ... from err` for proper exception chaining and switch internal string formatting to f-strings. - Allow `flit_core` 4.x in the build backend. - Expand the ruff lint set (flake8-bugbear, flake8-simplify, pyupgrade, perflint) and apply the surfaced fixes; pin lint CI to Python 3.14. - Add Dependabot configuration for GitHub Actions. - Convert README and HISTORY from reStructuredText to Markdown. - Reference CVE-2026-45409 for the 3.14 advisory in place of the initial GHSA identifier. Thanks to Felix Yan, Stan Ulbrych, and metsw24-max for contributions to this release. ### [`v3.14`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#314-2026-05-10) [Compare Source](https://github.com/kjd/idna/compare/v3.13...v3.14) - Removed opportunity to process long inputs into quadratic time by rejecting oversize inputs up-front. Closes a bypass of the CVE-2024-3651 mitigation. \[CVE-2026-45409] Thanks to Stan Ulbrych for reporting the issue. ### [`v3.13`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#313-2026-04-22) [Compare Source](https://github.com/kjd/idna/compare/v3.12...v3.13) - Correct classification error for codepoint U+A7F1 ### [`v3.12`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#312-2026-04-21) [Compare Source](https://github.com/kjd/idna/compare/v3.11...v3.12) - Update to Unicode 17.0.0. - Issue a deprecation warning for the transitional argument. - Added lazy-loading to provide some performance improvements. - Removed vestiges of code related to Python 2 support, including segmentation of data structures specific to Jython. Thanks to Rodrigo Nogueira for contributions to this release. ### [`v3.11`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#311-2025-10-12) [Compare Source](https://github.com/kjd/idna/compare/v3.10...v3.11) - Update to Unicode 16.0.0, including significant changes to UTS46 processing. As a result of Unicode ending support for it, transitional processing no longer has an effect and returns the same result. - Add support for Python 3.14, lowest supported version is Python 3.8. - Various updates to packaging, including PEP 740 support. ### [`v3.10`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#310-2024-09-15) [Compare Source](https://github.com/kjd/idna/compare/v3.9...v3.10) - Reverted to Unicode 15.1.0 data. Unicode 16 has some significant changes to UTS46 processing that will require more work to properly implement. ### [`v3.9`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#39-2024-09-13) [Compare Source](https://github.com/kjd/idna/compare/v3.8...v3.9) - Update to Unicode 16.0.0 - Deprecate setup.cfg in favour of pyproject.toml - Use ruff for code formatting Thanks to Waket Zheng for contributions to this release. ### [`v3.8`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#38-2024-08-23) [Compare Source](https://github.com/kjd/idna/compare/v3.7...v3.8) - Fix regression where IDNAError exception was not being produced for certain inputs. - Add support for Python 3.13, drop support for Python 3.5 as it is no longer testable. - Documentation improvements - Updates to package testing using Github actions Thanks to Hugo van Kemenade for contributions to this release. ### [`v3.7`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#37-2024-04-11) [Compare Source](https://github.com/kjd/idna/compare/v3.6...v3.7) - Fix issue where specially crafted inputs to encode() could take exceptionally long amount of time to process. \[CVE-2024-3651] Thanks to Guido Vranken for reporting the issue. ### [`v3.6`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#36-2023-11-25) [Compare Source](https://github.com/kjd/idna/compare/v3.5...v3.6) - Fix regression to include tests in source distribution. ### [`v3.5`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#35-2023-11-24) [Compare Source](https://github.com/kjd/idna/compare/v3.4...v3.5) - Update to Unicode 15.1.0 - String codec name is now "idna2008" as overriding the system codec "idna" was not working. - Fix typing error for codec encoding - "setup.cfg" has been added for this release due to some downstream lack of adherence to PEP 517. Should be removed in a future release so please prepare accordingly. - Removed reliance on a symlink for the "idna-data" tool to comport with PEP 517 and the Python Packaging User Guide for sdist archives. - Added security reporting protocol for project Thanks Jon Ribbens, Diogo Teles Sant'Anna, Wu Tingfeng for contributions to this release. ### [`v3.4`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#34-2022-09-14) [Compare Source](https://github.com/kjd/idna/compare/v3.3...v3.4) - Update to Unicode 15.0.0 - Migrate to pyproject.toml for build information (PEP 621) - Correct another instance where generic exception was raised instead of IDNAError for malformed input - Source distribution uses zeroized file ownership for improved reproducibility Thanks to Seth Michael Larson for contributions to this release. ### [`v3.3`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#33-2021-10-13) [Compare Source](https://github.com/kjd/idna/compare/v3.2...v3.3) - Update to Unicode 14.0.0 - Update to in-line type annotations - Throw IDNAError exception correctly for some malformed input - Advertise support for Python 3.10 - Improve testing regime on Github - Fix Russian typo in documentation Thanks to Jon Defresne, Hugo van Kemenade, Seth Michael Larson, Patrick Ventuzelo and Boris Verhovsky for contributions to this release. ### [`v3.2`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#321-2026-XX-XX) [Compare Source](https://github.com/kjd/idna/compare/v3.1...v3.2) - Raise the minimum supported Python version to 3.10 ### [`v3.1`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#319-2026-08-18) [Compare Source](https://github.com/kjd/idna/compare/v3.0...v3.1) - Restore the `std3_rules` option, which had no effect since changes to UTS [#46](https://github.com/kjd/idna/issues/46) processing in Unicode 16. Note that `uts46_remap()` defaults to enabling STD3 rules, so direct callers will see input containing non-LDH ASCII characters rejected again. - Performance improvements to UTS [#46](https://github.com/kjd/idna/issues/46) mapping, particularly for ASCII-only domains. - Test on free-threaded CPython with the GIL disabled and document thread safety. - Expose the Unicode version of the generated tables as `idna.unicode_version`, and show it in `idna --version`. - Add `code`, `text`, `codepoint` and `position` attributes to `IDNAError` so that the failed rule and the offending character can be identified without parsing the exception message. - The deprecated `transitional` argument to `encode()` and `uts46_remap()` is now completely ignored, and gives a deprecation warning for the latter. - Reject A-labels that are not the canonical Punycode encoding of their U-label. - Fix CONTEXTJ violations raising `IDNAError` instead of `InvalidCodepointContext`. - Consistently raise `IDNAError` for empty labels and non-ASCII bytes passed to label helper functions and the incremental codec. - Add property-based tests, extended fuzzing targets, coverage measurement, and CI checks that the data tables match the generator output. - Various code quality and tooling improvements. Thanks to stefan6419846, LouieLuNZ, and Salvatore Corvaglia for contributions to this release. ### [`v3.0`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#30-2021-01-01) [Compare Source](https://github.com/kjd/idna/compare/v2.10...v3.0) - Python 2 is no longer supported (the 2.x branch supports Python 2, use "idna<3" in your requirements file if you need Python 2 support) - Support for V2 UTS 46 test vectors. ### [`v2.10`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#210-2020-06-27) [Compare Source](https://github.com/kjd/idna/compare/v2.9...v2.10) - Update to Unicode 13.0.0. - Throws a more specific exception if "xn--" is provided as a label. - This is expected to be the last version that supports Python 2. ### [`v2.9`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#29-2020-02-16) [Compare Source](https://github.com/kjd/idna/compare/v2.8...v2.9) - Update to Unicode 12.1.0. - Prohibit A-labels ending with a hyphen (Thanks, Julien Bernard!) - Future-proofing: Test on Python 3.7 and 3.8, don't immediately fail should Python 4 come along. - Made BSD 3-clause license clearer ### [`v2.8`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#28-2018-12-04) [Compare Source](https://github.com/kjd/idna/compare/v2.7...v2.8) - Update to Unicode 11.0.0. - Provide more specific exceptions for some malformed labels. ### [`v2.7`](https://github.com/kjd/idna/blob/HEAD/HISTORY.md#27-2018-06-10) [Compare Source](https://github.com/kjd/idna/compare/v2.6...v2.7) - Update to Unicode 10.0.0. - No longer accepts dot-prefixed domains (e.g. ".example") as valid. This is to be more conformant with the UTS 46 spec. Users should strip dot prefixes from domains before processing. </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

renovate added 1 commit

2026-10-27 00:26:37 +00:00

Update dependency idna to v3 d7a469c7ad

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin "renovate/idna-3.x:renovate/idna-3.x"

git switch "renovate/idna-3.x"

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch "master"

git merge --no-ff "renovate/idna-3.x"

git switch "renovate/idna-3.x"

git rebase "master"

git switch "master"

git merge --ff-only "renovate/idna-3.x"

git switch "renovate/idna-3.x"

git rebase "master"

git switch "master"

git merge --no-ff "renovate/idna-3.x"

git switch "master"

git merge --squash "renovate/idna-3.x"