From 4129c2bead585ae28bd3708a2a9ccd156ffb93c6 Mon Sep 17 00:00:00 2001 From: Bryan Gin-ge Chen Date: Tue, 20 Oct 2026 15:51:16 -0400 Subject: [PATCH] fix(deps): bump certifi to 2026.10.19 certifi 2026.10.19 drops emSign ECC Root CA - G3, which cross-signs eMudhra intermediates whose private keys have been compromised (https://emudhra.we-have-a-problem.com/). requests verifies against certifi's bundle, so until now the app would accept a certificate issued with those keys for any host it calls, such as GitHub's API or Zulip. Only certifi changes in uv.lock. It was locked with uv 0.12.19, the version the production image uses, so the lockfile's format revision stays as it was. Tested in the production image built from this branch: requests rejects the disclosure's test hosts, and still reaches api.github.com. Co-Authored-By: Claude Opus 5.5 --- uv.lock | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/uv.lock b/uv.lock index 73c7194a..2ca09897 100644 --- a/uv.lock +++ b/uv.lock @@ -53,11 +53,11 @@ wheels = [ [[package]] name = "certifi" -version = "2025.8.3" +version = "2026.10.19" source = { registry = "https://pypi.org/simple" } -sdist = { url = "https://files.pythonhosted.org/packages/dc/67/960ebe6bf230a96cda2e0abcf73af550ec4f090005363542f0765df162e0/certifi-2025.8.3.tar.gz", hash = "sha256:e564105f78ded564e3ae7c923924435e1daa7463faeab5bb932bc53ffae63407", size = 162386, upload-time = "2025-08-03T03:07:47.08Z" } +sdist = { url = "https://files.pythonhosted.org/packages/a6/bd/1436c50cc46699de0230fbaacc1d1de7bfec413176099949e9d5112e88f2/certifi-2026.10.19.tar.gz", hash = "sha256:035c1e85572b141bf1c3a3eff0e33a8eb74917522f2559075ff8d2fea780a1ae", size = 137598, upload-time = "2026-10-20T02:24:16.604Z" } wheels = [ - { url = "https://files.pythonhosted.org/packages/e5/48/1549795ba7742c948d2ad169c1c8cdbae65bc450d6cd753d124b17c8cd32/certifi-2025.8.3-py3-none-any.whl", hash = "sha256:f6c12493cfb1b06ba2ff328595af9350c65d6644968e5d3a2ffd78699af217a5", size = 161216, upload-time = "2025-08-03T03:07:45.777Z" }, + { url = "https://files.pythonhosted.org/packages/c4/51/29046e48f693c54e5b7412216d447a1d8362c9653148d98c02cdf65fa733/certifi-2026.10.19-py3-none-any.whl", hash = "sha256:42d35340cc5b9ba78e818ddbff0c5b1c2b779de448a340fd1b989f5fa8670e1b", size = 136464, upload-time = "2026-10-20T02:24:15.072Z" }, ] [[package]]