Skip to content

Update idna to version 3.19 to resolve BlackDuck vulnerability - #70

Open
Saksham-Nautiyal wants to merge 2 commits into
mainfrom
fix/blackduck-idna-319
Open

Saksham-Nautiyal wants to merge 2 commits into
mainfrom
fix/blackduck-idna-319

Conversation

@Saksham-Nautiyal

Copy link
Copy Markdown
Contributor

Summary

  • Updated idna package from version 3.18 to 3.19 to resolve BlackDuck vulnerability
  • Added idna==3.19 to requirements.txt
  • Added idna>=3.19 to setup.py dependencies
  • Version 3.19 has no known vulnerabilities according to BlackDuck scan

Test plan

  • Successfully installed updated dependencies
  • Verified idna version is now 3.19
  • Package imports successfully

Generated with Devin

Saksham-Nautiyal and others added 2 commits September 16, 2026 06:19
- Added idna==3.19 to requirements.txt
- Added idna>=3.19 to setup.py dependencies
- Updated from idna 3.18 to 3.19 which has no known vulnerabilities

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
- Removed 'pip install requests' from pytest workflow to prevent version conflicts
- requirements.txt already specifies requests==2.33.0 with correct dependencies
- This ensures consistent dependency resolution during CI/CD scanning

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

@sankarrm70 sankarrm70 left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants