fix(deps): patch urllib3 and idna security advisories

[lorenjphillips]

Summary

• Bumps urllib3 2.2.3 → 2.7.0 (Dependabot alert Fix deploy.yml permission issues #9, high) — fixes cross-origin header leak in proxied low-level redirects.
• Bumps idna 3.10 → 3.15 (Dependabot alert Update action.yml #10, moderate) — closes the bypass of the CVE-2024-3651 fix in idna.encode().

Both are pinned transitive deps of requests==2.32.3; no API changes.

Test plan

• CI green on this branch
• pip install -r requirements.txt resolves cleanly
• Dependabot alerts Fix deploy.yml permission issues #9 and Update action.yml #10 auto-close after merge

Summary by CodeRabbit

• Chores
  • Updated Python dependencies to current versions.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 1034bdbb-0698-4f66-ada7-73566ad17c80

📥 Commits

Reviewing files that changed from the base of the PR and between 4d14c9c and ed13b8c.

📒 Files selected for processing (1)

• requirements.txt

---

📝 Walkthrough

Walkthrough

This PR updates two pinned Python dependencies in requirements.txt: idna is bumped from 3.10 to 3.15, and urllib3 is bumped from 2.2.3 to 2.7.0. No other dependencies are modified.

Changes

Dependency Updates

Layer / File(s)	Summary
Pinned dependency versions requirements.txt	idna version is raised to 3.15 and urllib3 version is raised to 2.7.0 to bring the project dependencies up to date.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Poem

A rabbit hops through version lanes,
With idna fresh and urllib3 new,
Dependencies dance in their domains,
Pinned and patched in morning dew. 🐰✨

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The PR title 'fix(deps): patch urllib3 and idna security advisories' accurately and directly describes the main change: updating two dependencies to address security vulnerabilities, which aligns perfectly with the changeset that bumps urllib3 and idna versions.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch security/bump-urllib3-idna

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}