Skip to content

Commit b2d22d9

Browse files
fix(deps): update constraint-dependencies for idna
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
1 parent 30d1d45 commit b2d22d9

2 files changed

Lines changed: 2 additions & 0 deletions

File tree

src/ogx_api/pyproject.toml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,7 @@ build-backend = "setuptools.build_meta"
55
[tool.uv]
66
required-version = ">=0.7.0"
77
constraint-dependencies = [
8+
"idna>=3.15",
89
"protobuf>=6.33.5", # CVE-2026-0994: JSON recursion depth bypass
910
"requests>=2.33.0", # CVE-2026-25645: insecure temp file reuse in extract_zipped_paths()
1011
"urllib3>=2.6.3", # CVE-2026-21441 + CVE-2025-66471 + CVE-2025-66418: decompression bomb, streaming, chain bypass

src/ogx_api/uv.lock

Lines changed: 1 addition & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)