Re: [BLFS Trac] #23487: Python Module Dependency Updates - certifi-2026.6.17 chardet-7.4.3 charset-normalizer-3.4.7 commonmark-0.9.2 editables-0.6 hatchling-1.30.1 idna-3.18 meson_python-0.12.0 msgpack-1.2.1 pathspec-1.1.1 pytz-2026.2 setuptools_rust-1.12.1 setuptools_scm-10.1.2 snowballstemmer-3.1.1 uv_build-0.11.24

#23487: Python Module Dependency Updates - certifi-2026.6.17 chardet-7.4.3 charset-
normalizer-3.4.7 commonmark-0.9.2 editables-0.6 hatchling-1.30.1 idna-3.18
meson_python-0.12.0 msgpack-1.2.1 pathspec-1.1.1 pytz-2026.2
setuptools_rust-1.12.1 setuptools_scm-10.1.2 snowballstemmer-3.1.1
uv_build-0.11.24
-----------------------------+------------------------------
 Reporter:  Douglas R. Reno  |       Owner:  Douglas R. Reno
     Type:  enhancement      |      Status:  assigned
 Priority:  high             |   Milestone:  13.1
Component:  BOOK             |     Version:  git
 Severity:  normal           |  Resolution:
 Keywords:                   |
-----------------------------+------------------------------
Comment (by Douglas R. Reno):

 **idna**

 **3.12**

 {{{
 3.12 (2026-04-21)

 Update to Unicode 17.0.0.

 Issue a deprecation warning for the transitional argument.

 Added lazy-loading to provide some performance improvements.

 Removed vestiges of code related to Python 2 support, including
 segmentation of data
 structures specific to Jython.
 }}}

 **3.13**

 {{{
 3.13 (2026-04-22)

     Correct classification error for codepoint U+A7F1
 }}}

 **3.14**

 {{{
 3.14 (2026-05-10)

 Removed opportunity to process long inputs into quadratic time by
 rejecting oversize
 inputs up-front. Closes a bypass of the CVE-2024-3651 mitigation.
 [CVE-2026-45409]
 }}}

 **3.15**

 {{{
 3.15 (2026-05-12)

 Enforce DNS-length cap on individual labels early in check_label, short-
 circuiting
 contextual-rule processing for oversized input while staying compatible
 with UTS 46
 usage.

 Tidy core helpers: hoist bidi category sets to module-level frozensets
 (avoiding
 per-codepoint list construction), simplify length checks, and reuse the
 shared
 _unicode_dots_re from idna.core in the codec module.

 Use raise ... from err for proper exception chaining and switch internal
 string
 formatting to f-strings.

 Allow flit_core 4.x in the build backend.

 Expand the ruff lint set (flake8-bugbear, flake8-simplify, pyupgrade,
 perflint) and
 apply the surfaced fixes; pin lint CI to Python 3.14.

 Add Dependabot configuration for GitHub Actions.

 Convert README and HISTORY from reStructuredText to Markdown.

 Reference CVE-2026-45409 for the 3.14 advisory in place of the initial
 GHSA identifier.
 }}}

 **3.16**

 {{{
 3.16 (2026-05-22)

 Add a command-line interface (python -m idna, also available as the idna
 script).

 Encodes or decodes one or more domains supplied as arguments or on
 standard input, with
 options to select A-label or U-label output and control error handling.

 Raise the minimum supported Python version to 3.9

 Various code quality improvements
 }}}

 **3.17**

 {{{
 3.17 (2026-05-28)

 Substantial 75% reduction in memory usage through new data structures and
 some
 optimization in processing speed.

 Added a general 1024-character input length cap to the public validation,
 conversion, and codec entry points. This is well above any legitimate
 domain or label
 and guards against pathological inputs.
 }}}

 **3.18**

 {{{
 3.18 (2026-06-02)

 When decoding a domain, add a display argument that will pass through
 invalid labels
 rather than raising an exception.
 }}}
-- 
Ticket URL: <https://wiki.linuxfromscratch.org/blfs/ticket/23487#comment:8>
BLFS Trac <https://wiki.linuxfromscratch.org/blfs/>
Beyond Linux From Scratch

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-book
Unsubscribe: See the above information page