Merge pull request #9910 from haskell/mergify/bp/3.12/pr-9896

update idna per dependabot / CVE-2024-3651 (backport #9896)
haskell · May 1, 2024 · fdfa4f0 · fdfa4f0
2 parents 9b92dd2 + e144a43
commit fdfa4f0
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/doc/requirements.in b/doc/requirements.in
@@ -10,3 +10,5 @@ certifi >= 2023.07.22
 urllib3 >= 2.0.7
 # CVE-2024-22195
 jinja2 == 3.1.3
+# CVE-2024-3651
+idna >= 3.7
diff --git a/doc/requirements.txt b/doc/requirements.txt
@@ -19,8 +19,10 @@ docutils==0.18.1
     #   sphinx
     #   sphinx-jsonschema
     #   sphinx-rtd-theme
-idna==3.4
-    # via requests
+idna==3.7
+    # via
+    #   -r requirements.in
+    #   requests
 imagesize==1.4.1
     # via sphinx
 jinja2==3.1.3