Skip to content

fix(FEA-983): bump idna 3.10->3.18 in python/uv.lock#184

Merged
clemos merged 1 commit into
mainfrom
FEA-983-bump-idna-3.18
Jul 10, 2026
Merged

fix(FEA-983): bump idna 3.10->3.18 in python/uv.lock#184
clemos merged 1 commit into
mainfrom
FEA-983-bump-idna-3.18

Conversation

@clemos

@clemos clemos commented Jul 10, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Bumps idna from 3.10 to 3.18 in python/uv.lock
  • Fixes CVE-2026-45409 (GHSA-65pc-fj4g-8rjx): specially crafted inputs to idna.encode() could cause a denial of service via significant CPU usage

Linear

Closes https://linear.app/gladia/issue/FEA-983

Made with Cursor

Co-authored-by: Cursor <cursoragent@cursor.com>
@coderabbitai

coderabbitai Bot commented Jul 10, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (1)
  • python/uv.lock is excluded by !**/*.lock

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: e20e94be-4a41-43a0-965c-2e9ad7e57ab9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch FEA-983-bump-idna-3.18

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@clemos clemos requested review from a team, YoannKy, northvik and rpiotaix July 10, 2026 13:33
@clemos clemos merged commit f8165ae into main Jul 10, 2026
9 checks passed
@clemos clemos deleted the FEA-983-bump-idna-3.18 branch July 10, 2026 13:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants