You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
It appears the source of this issue is that idna/tools/intranges.py is a symlink to ../idna/intranges.py, which involves backward traversal one level that doesn't escape the source tree. According to PEP-721, "Tools MAY treat them as [invalid], but are NOT REQUIRED to do so". It seems like Poetry treats this as a violation.
Perhaps the idna-data can be refactored to not require this symlink, but I don't immediately see a security issue underlying the current composition.
Poetry follows the new PEP-721 (https://peps.python.org/pep-0721/), forcing source packages to be extracted with "data_filter".
This causes Poetry to fail source distribution installation for IDNA (python-poetry/poetry#8645).
The text was updated successfully, but these errors were encountered: