Skip to content

Bump certifi to 2026.10.19 (emSign CA incident) - #129

Open
C-Achard wants to merge 1 commit into
mainfrom
cy/bump-certifi
Open

C-Achard wants to merge 1 commit into
mainfrom
cy/bump-certifi

Conversation

@C-Achard

Copy link
Copy Markdown
Collaborator

Follow-up to the emSign/eMudhra CA incident advisory: certifi < 2026.10.19 still trusts the compromised eMudhra certificates.

  • uv lock --upgrade-package certifi: certifi 2026.4.22 → 2026.10.19.
  • Side effect: onnxruntime-gpu 1.24.3 → 1.24.1 for Python < 3.11. 1.24.3 is no longer on PyPI.

No runtime changes.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant