[smypmsa]

Summary

• Bump certifi to 2026.10.19 in uv.lock. Older releases still trust emSign ECC Root CA - G3, the root above the eMudhra intermediates whose private keys were found compromised in October 2026. Mozilla emergency-distrusted the root, and certifi 2026.10.19 removes it.
• Lockfile-only: the diff touches just the certifi entry; no other dependency moves.

Test plan

• uv lock --locked passes on the patched lockfile
• uv sync --frozen installs certifi 2026.10.19
• The bundled cacert.pem no longer contains emSign ECC Root CA - G3

References: Endor Labs write-up, Help Net Security

🤖 Generated with Claude Code

https://claude.ai/code/session_019oQ3ERQ8pGJMEpASnkWixb

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters: 1

• uv.lock is excluded by !**/*.lock, !uv.lock

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

Run configuration

• Source mode: Auto
• Repository: chainstacklabs/pumpfun-cli
• Branch: fix/certifi-emudhra
• File: .coderabbit.yaml
• Commit: 4a4f860
• Layers: Repository YAML
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 545adc3f-ce66-4204-9684-132cdf159637

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}