Repository navigation
Commit 2a1f70f
Relax idna pin from ==3.7 to >=3.7 (#504)
* Relax idna pin from ==3.7 to >=3.7
idna is a transitive dependency (via requests) and is not imported
anywhere in the SDK; the exact pin existed only to enforce the
CVE-2024-3651 security floor (fixed in idna 3.7, added by Dependabot).
The exact `==3.7` propagates to every package that installs `roboflow`
and forces the resolver to backtrack when a sibling dependency (e.g.
google-cloud) needs a newer idna — this is the root cause worked around
in roboflow-queues#121. Relaxing to `>=3.7` keeps the security floor
while letting the resolver pick a compatible newer idna (requests caps
it at <4). Matches requirements-slim.txt, which already leaves idna
unpinned.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
* bump version
---------
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>1 parent fdbd33b commit 2a1f70f
2 files changed
Lines changed: 2 additions & 2 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | 1 | | |
2 | | - | |
| 2 | + | |
3 | 3 | | |
4 | 4 | | |
5 | 5 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
21 | 21 | | |
22 | 22 | | |
23 | 23 | | |
24 | | - | |
| 24 | + | |
25 | 25 | | |
26 | 26 | | |
27 | 27 | | |
| |||
0 commit comments