Skip to content

Bump idna from 3.19 to 3.20 - #29

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/idna-3.20
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/idna-3.20

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 27, 2026 •

Copy link
Copy Markdown
Contributor

Bumps idna from 3.19 to 3.20.

Release notes

Sourced from idna's releases.

v3.20

  • Update to Unicode 18.0.0.
  • Better enforcement of the domain length limit in the incremental codec.
  • Add support for Python 3.15.
Changelog

Sourced from idna's changelog.

3.20 (2026-09-17)

  • Update to Unicode 18.0.0.
  • Better enforcement of the domain length limit in the incremental codec.
  • Add support for Python 3.15.
Commits
  • d55e65e Release 3.20
  • 0c0824a Pre-release 3.20rc0
  • bd7c316 Note Python 3.15 support in the 3.20 changelog
  • b6cce85 Merge pull request #276 from kjd/unicode-18
  • 9a4bc59 Update to Unicode 18.0.0
  • dfab5a0 Merge branch 'python-3.15'
  • 417c354 Read the latest Unicode version from the DerivedAge.txt header instead of the...
  • cd17392 Merge pull request #274 from kjd/fix-decode-length-check
  • c5796d7 Skip the decode round-trip check for domains past encode's length limit
  • d6ee690 Update to Python 3.15 release candidate in CI and add trove classifier
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 27, 2026
@dependabot
dependabot Bot requested a review from atx-omni as a code owner September 27, 2026 06:23
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 27, 2026
@dependabot
dependabot Bot force-pushed the dependabot/pip/idna-3.20 branch from be84bb5 to 282b55b Compare September 29, 2026 14:38
Bumps [idna](https://github.com/kjd/idna) from 3.19 to 3.20.
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](kjd/idna@v3.19...v3.20)

---
updated-dependencies:
- dependency-name: idna
  dependency-version: '3.20'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/idna-3.20 branch from 282b55b to a2aa1df Compare October 16, 2026 03:50
atx-omni added a commit that referenced this pull request Oct 16, 2026
* Bump charset-normalizer from 3.5.1 to 3.5.2

Bumps [charset-normalizer](https://github.com/jawah/charset_normalizer) from 3.5.1 to 3.5.2.
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.5.1...3.5.2)

---
updated-dependencies:
- dependency-name: charset-normalizer
  dependency-version: 3.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 3b6a549)

* Bump anchore/sbom-action from 0.24.2 to 0.24.3

Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.24.2 to 0.24.3.
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md)
- [Commits](anchore/sbom-action@3ad7283...66cbf4b)

---
updated-dependencies:
- dependency-name: anchore/sbom-action
  dependency-version: 0.24.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit eee53fe)

* fix: reconcile idna update and isolate release asset publication

Preserves #29 alongside #33 and #34. Keep SBOM generation read-only; the protected publishing job owns release assets.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@atx-omni

Copy link
Copy Markdown
Collaborator

Superseded by merged PR #40. The idna 3.20 update and its exact hashes are included in main at f14d7e6, alongside the overlapping charset-normalizer update. All required checks passed on the combined candidate. Closing this duplicate without deleting its branch.

@atx-omni atx-omni closed this Oct 16, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 16, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/pip/idna-3.20 branch October 16, 2026 05:05
atx-omni added a commit to atx-omni/OmniFlow that referenced this pull request Oct 16, 2026
…ni (#33)

* Reconcile dependency updates and isolate release publication (#40)

* Bump charset-normalizer from 3.5.1 to 3.5.2

Bumps [charset-normalizer](https://github.com/jawah/charset_normalizer) from 3.5.1 to 3.5.2.
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.5.1...3.5.2)

---
updated-dependencies:
- dependency-name: charset-normalizer
  dependency-version: 3.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 3b6a54930d4256d929b705b4fe0de311089d349d)

* Bump anchore/sbom-action from 0.24.2 to 0.24.3

Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.24.2 to 0.24.3.
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md)
- [Commits](anchore/sbom-action@3ad7283...66cbf4b)

---
updated-dependencies:
- dependency-name: anchore/sbom-action
  dependency-version: 0.24.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit eee53fe0a6c99ce5b905d3d8b784064b1b830662)

* fix: reconcile idna update and isolate release asset publication

Preserves exploreomni/OmniFlow#29 alongside #33 and #34. Keep SBOM generation read-only; the protected publishing job owns release assets.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit f14d7e6ab22ce97a528da5c6ae24c820c111ac8f)

* docs: clarify credential choice and preserve current validation safeguards (#32)

(cherry picked from commit cfee053cddbc7cda3836fba368aeed902442e441)

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant