Bump idna from 3.15 to 3.17

[dependabot]

Bumps idna from 3.15 to 3.17.

Changelog

Sourced from idna's changelog.

3.17 (2026-05-28)

• Substantial 75% reduction in memory usage through new data structures and some optimization in processing speed.
• Added a general 1024-character input length cap to the public validation, conversion, and codec entry points. This is well above any legitimate domain or label and guards against pathological inputs.

3.16 (2026-05-22)

• Add a command-line interface (python -m idna, also available as the idna script). Encodes or decodes one or more domains supplied as arguments or on standard input, with options to select A-label or U-label output and control error handling.
• Raise the minimum supported Python version to 3.9
• Various code quality improvements

Commits

• f48619c Release 3.17
• 7421ba8 Pre-release 3.17rc0
• 22ebb73 Merge pull request #251 from kjd/structure-optimizations
• 2a7ac0a Drop redundant parallel-arrays comment from uts46data
• 354eee9 Apply ruff format to uts46data.py
• 8c34ffc Refactor uts46data into parallel arrays
• 1189629 Range-encode joining_types for compact representation
• f90b87a Generic length limit for functions
• d6ffd28 Merge pull request #247 from kjd/release-3.16
• 6d1a0de Release 3.16
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.92%. Comparing base (8903033) to head (60f2efe).
⚠️ Report is 1 commits behind head on master.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##           master   #12732   +/-   ##
=======================================
  Coverage   98.92%   98.92%           
=======================================
  Files         131      131           
  Lines       46790    46790           
  Branches     2425     2425           
=======================================
  Hits        46285    46285           
  Misses        379      379           
  Partials      126      126           

Flag	Coverage Δ
Autobahn	22.47% <ø> (ø)
CI-GHA	98.89% <ø> (ø)
OS-Linux	98.64% <ø> (-0.01%)	⬇️
OS-Windows	97.01% <ø> (ø)
OS-macOS	97.90% <ø> (-0.01%)	⬇️
Py-3.10	98.12% <ø> (+<0.01%)	⬆️
Py-3.11	98.38% <ø> (-0.01%)	⬇️
Py-3.12	98.47% <ø> (+<0.01%)	⬆️
Py-3.13	98.43% <ø> (-0.01%)	⬇️
Py-3.14	98.46% <ø> (-0.01%)	⬇️
Py-3.14t	97.52% <ø> (-0.01%)	⬇️
Py-pypy-3.11	97.39% <ø> (-0.01%)	⬇️
VM-macos	97.90% <ø> (-0.01%)	⬇️
VM-ubuntu	98.64% <ø> (-0.01%)	⬇️
VM-windows	97.01% <ø> (ø)
cython-coverage	37.92% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[codspeed-hq]

Merging this PR will not alter performance

✅ 72 untouched benchmarks
⏩ 72 skipped benchmarks¹

---

_{Comparing dependabot/pip/idna-3.17 (60f2efe) with master (8903033)²}

Footnotes

1. 72 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

2. No successful run was found on master (7719dad) during the generation of this report, so 8903033 was used instead as the comparison base. There might be some changes unrelated to this pull request in this report. ↩