chore(deps): update dependency idna to v3.7 [security]

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
idna (changelog)	==3.6 -> ==3.7

GitHub Vulnerability Alerts

CVE-2024-3651

Impact

A specially crafted argument to the idna.encode() function could consume significant resources. This may lead to a denial-of-service.

Patches

The function has been refined to reject such strings without the associated resource consumption in version 3.7.

Workarounds

Domain names cannot exceed 253 characters in length, if this length limit is enforced prior to passing the domain to the idna.encode() function it should no longer consume significant resources. This is triggered by arbitrarily large inputs that would not occur in normal usage, but may be passed to the library assuming there is no preliminary input validation by the higher-level application.

References

• https://huntr.com/bounties/93d78d07-d791-4b39-a845-cbfabc44aadb

---

Release Notes

kjd/idna (idna)

v3.7

Compare Source

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

🦙 MegaLinter status: ⚠️ WARNING

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ ACTION	actionlint	18		0	0.34s
✅ BASH	bash-exec	4		0	0.06s
✅ BASH	shellcheck	1		0	0.06s
✅ BASH	shfmt	4		0	0.01s
✅ CSHARP	csharpier	1		0	1.92s
⚠️ CSHARP	dotnet-format	1		1	1.12s
⚠️ CSHARP	roslynator	1		1	10.51s
✅ CSS	stylelint	1		0	2.06s
✅ DOCKERFILE	hadolint	4		0	0.2s
✅ EDITORCONFIG	editorconfig-checker	376		0	3.77s
✅ ENV	dotenv-linter	1		0	0.02s
✅ GROOVY	npm-groovy-lint	7		0	14.19s
✅ HTML	djlint	2		0	1.37s
✅ HTML	htmlhint	2		0	0.36s
✅ JAVA	checkstyle	59		0	13.35s
✅ JSON	eslint-plugin-jsonc	31		0	5.65s
✅ JSON	jsonlint	31		0	0.44s
✅ JSON	prettier	31		0	4.84s
✅ JSON	v8r	31		0	87.03s
⚠️ MARKDOWN	markdownlint	22		177	1.78s
✅ PYTHON	bandit	1		0	1.08s
✅ PYTHON	black	1		0	0.89s
✅ PYTHON	flake8	1		0	0.42s
✅ PYTHON	isort	1		0	0.35s
✅ PYTHON	mypy	1		0	7.96s
✅ PYTHON	ruff	1		0	0.06s
✅ REPOSITORY	checkov	yes		no	20.19s
✅ REPOSITORY	gitleaks	yes		no	1.52s
✅ REPOSITORY	git_diff	yes		no	0.18s
✅ REPOSITORY	kics	yes		no	68.52s
✅ REPOSITORY	secretlint	yes		no	2.97s
✅ REPOSITORY	syft	yes		no	3.91s
✅ REPOSITORY	trivy	yes		no	27.56s
✅ REPOSITORY	trivy-sbom	yes		no	11.76s
✅ REPOSITORY	trufflehog	yes		no	11.17s
✅ SQL	sql-lint	2		0	0.84s
✅ XML	xmllint	3		0	0.02s
✅ YAML	prettier	109		0	3.99s

See detailed report in MegaLinter reports

You could have same capabilities but better runtime performances if you request a new MegaLinter flavor.

• Click here to request the new flavor

MegaLinter is graciously provided by