Skip to content

Fix MegaLinter OSV idna finding#2095

Merged
FlorianPfaff merged 3 commits into
mainfrom
fix/megalinter-idna-osv
May 20, 2026
Merged

Fix MegaLinter OSV idna finding#2095
FlorianPfaff merged 3 commits into
mainfrom
fix/megalinter-idna-osv

Conversation

@FlorianPfaff
Copy link
Copy Markdown
Owner

Summary

  • Update idna pins in requirements.txt and requirements-dev.txt from 3.13 to 3.15.
  • Add a narrow, temporary OSV package override for the stale idna==3.13 entry in poetry.lock.

Context

MegaLinter's OSV scanner reports GHSA-65pc-fj4g-8rjx for idna==3.13 in poetry.lock, requirements.txt, and requirements-dev.txt. The fixed version reported by OSV is 3.15.

Follow-up

poetry.lock should still be regenerated with Poetry so the temporary osv-scanner.toml override can be removed.

@FlorianPfaff FlorianPfaff merged commit 723029f into main May 20, 2026
17 of 18 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant