Skip to content

Bump certifi - #462

Merged
hugovk merged 1 commit into
python:mainfrom
hugovk:certifi
Oct 20, 2026
Merged

hugovk merged 1 commit into
python:mainfrom
hugovk:certifi

Conversation

@hugovk

@hugovk hugovk commented Oct 20, 2026

Copy link
Copy Markdown
Member

Done via:

pip-compile --generate-hashes --upgrade-package certifi --output-file=requirements.txt requirements.in

To deal with GHSA-6q48-6c7w-9gw2.

pip-compile --generate-hashes --upgrade-package certifi --output-file=requirements.txt requirements.in
@sethmlarson

Copy link
Copy Markdown
Collaborator

Separate issue: it seems like our Dependabot has stopped submitting updates to this repository?

@hugovk

hugovk commented Oct 20, 2026

Copy link
Copy Markdown
Member Author

Dependabot is still working but has a stupid bug: it updates the mypy requirements file and decides that's enough and doesn't need to update the normal requirements files. But the advisories remain open and need manually bumping.

See #417.

@hugovk
hugovk merged commit bea981b into python:main Oct 20, 2026
18 checks passed
@hugovk
hugovk deleted the certifi branch October 20, 2026 14:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants