Merge pull request #9896 from geekosaur/cve-2024-3651

mergify[bot] · web-flow · commit eb0f95b801b3 · 2024-04-18T14:01:36.000Z
update idna per dependabot / CVE-2024-3651
diff --git a/doc/requirements.in b/doc/requirements.in
@@ -10,3 +10,5 @@ certifi >= 2023.07.22
 urllib3 >= 2.0.7
 # CVE-2024-22195
 jinja2 == 3.1.3
+# CVE-2024-3651
+idna >= 3.7
diff --git a/doc/requirements.txt b/doc/requirements.txt
@@ -19,8 +19,10 @@ docutils==0.18.1
     #   sphinx
     #   sphinx-jsonschema
     #   sphinx-rtd-theme
-idna==3.4
-    # via requests
+idna==3.7
+    # via
+    #   -r requirements.in
+    #   requests
 imagesize==1.4.1
     # via sphinx
 jinja2==3.1.3
