Security release: pin idna, lxml and urllib3 transitive deps (#31) #32

Merged

coding-agent-marvin8 merged 0 commits from refs/pull/32/head into main 2026-05-24 06:48:41 +00:00

Conversation 0 Commits - Files changed -

coding-agent-marvin8 commented 2026-05-24 06:41:55 +00:00 (Migrated from codeberg.org)

Copy link

Closes #31

Changes

• Pin idna>=3.15 (GHSA-65pc-fj4g-8rjx, MEDIUM), lxml>=6.1.0 (GHSA-vfmq-68hx-4jfw), urllib3>=2.7.0 (GHSA-qccp-gfcp-xxvc) via uv constraint-dependencies
• Add .claude/settings.local.json (nox Bash permission allowlist) to version control
• Remove Co-Authored-By trailer guidance from CLAUDE.md

Verification

• nox -s pysentry exits 0 — 77 packages scanned, 0 vulnerabilities

Closes #31 ## Changes - Pin idna>=3.15 (GHSA-65pc-fj4g-8rjx, MEDIUM), lxml>=6.1.0 (GHSA-vfmq-68hx-4jfw), urllib3>=2.7.0 (GHSA-qccp-gfcp-xxvc) via uv constraint-dependencies - Add .claude/settings.local.json (nox Bash permission allowlist) to version control - Remove Co-Authored-By trailer guidance from CLAUDE.md ## Verification - [x] `nox -s pysentry` exits 0 — 77 packages scanned, 0 vulnerabilities

Commenting is not possible because the repository is archived.

Reviewers

No reviewers

Labels

Clear labels   

Ideas

Ideas for future features

No labels

Ideas

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

marvin8/playlist2podcasts!32

No description provided.