Skip to content

Commit 2a1f70f

Browse files
iurisilvioclaude
andauthored
Relax idna pin from ==3.7 to >=3.7 (#504)
* Relax idna pin from ==3.7 to >=3.7 idna is a transitive dependency (via requests) and is not imported anywhere in the SDK; the exact pin existed only to enforce the CVE-2024-3651 security floor (fixed in idna 3.7, added by Dependabot). The exact `==3.7` propagates to every package that installs `roboflow` and forces the resolver to backtrack when a sibling dependency (e.g. google-cloud) needs a newer idna — this is the root cause worked around in roboflow-queues#121. Relaxing to `>=3.7` keeps the security floor while letting the resolver pick a compatible newer idna (requests caps it at <4). Matches requirements-slim.txt, which already leaves idna unpinned. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> * bump version --------- Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
1 parent fdbd33b commit 2a1f70f

2 files changed

Lines changed: 2 additions & 2 deletions

File tree

‎requirements.txt‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
certifi
2-
idna==3.7
2+
idna>=3.7
33
cycler
44
kiwisolver>=1.3.1
55
matplotlib

‎roboflow/__init__.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@
2121
CLIPModel = None # type: ignore[assignment,misc]
2222
GazeModel = None # type: ignore[assignment,misc]
2323

24-
__version__ = "1.3.11"
24+
__version__ = "1.3.12"
2525

2626

2727
def check_key(api_key, model, notebook, num_retries=0):

0 commit comments

Comments
 (0)