From 4a4f860ea513cc9bbdb72ce7267cb03eb1bb1fd0 Mon Sep 17 00:00:00 2001 From: Anton Sauchyk Date: Tue, 27 Oct 2026 11:43:59 +0100 Subject: [PATCH] fix(deps): bump certifi to 2026.10.19 to drop eMudhra-compromised root certifi < 2026.10.19 still trusts emSign ECC Root CA - G3, whose intermediates were found to have compromised private keys in October 2026. Mozilla distrusted the root; 2026.10.19 removes it. Lockfile-only change: no other packages move. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_019oQ3ERQ8pGJMEpASnkWixb --- uv.lock | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/uv.lock b/uv.lock index b53d6eb..084a420 100644 --- a/uv.lock +++ b/uv.lock @@ -34,11 +34,11 @@ wheels = [ [[package]] name = "certifi" -version = "2026.2.25" +version = "2026.10.19" source = { registry = "https://pypi.org/simple" } -sdist = { url = "https://files.pythonhosted.org/packages/af/2d/7bf41579a8986e348fa033a31cdd0e4121114f6bce2457e8876010b092dd/certifi-2026.2.25.tar.gz", hash = "sha256:e887ab5cee78ea814d3472169153c2d12cd43b14bd03329a39a9c6e2e80bfba7", size = 155029 } +sdist = { url = "https://files.pythonhosted.org/packages/a6/bd/1436c50cc46699de0230fbaacc1d1de7bfec413176099949e9d5112e88f2/certifi-2026.10.19.tar.gz", hash = "sha256:035c1e85572b141bf1c3a3eff0e33a8eb74917522f2559075ff8d2fea780a1ae", size = 137598 } wheels = [ - { url = "https://files.pythonhosted.org/packages/9a/3c/c17fb3ca2d9c3acff52e30b309f538586f9f5b9c9cf454f3845fc9af4881/certifi-2026.2.25-py3-none-any.whl", hash = "sha256:027692e4402ad994f1c42e52a4997a9763c646b73e4096e4d5d6db8af1d6f0fa", size = 153684 }, + { url = "https://files.pythonhosted.org/packages/c4/51/29046e48f693c54e5b7412216d447a1d8362c9653148d98c02cdf65fa733/certifi-2026.10.19-py3-none-any.whl", hash = "sha256:42d35340cc5b9ba78e818ddbff0c5b1c2b779de448a340fd1b989f5fa8670e1b", size = 136464 }, ] [[package]]