[lesteve]

https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576

Followed scipy/scipy-release#46 and numpy/numpy-release#73.

We don't have the uv.lock setup so I guess we only need to update cibuildwheel.

Full disclosure: I don't really have a precise view of the potential impact, but I guess the tl;dr is something like this:

• pip could potentially install some malicious package with a MITM attack because of a compromised certificate thingy
• it could end up in our CI and potentially do nasty things like produce malicious wheels
• cibuildwheel uses pip somewhere

[lesteve]

CI is green enough, let's merge this one!