chore(deps): bump uv to 0.13.4 and certifi to 2026.10.19 (#1104)

Bump uv to 0.13.4 and certifi to 2026.10.19

Eight eMudhra intermediate CA private keys were broken, so anyone
holding them can impersonate TLS servers to clients that still trust
emSign ECC Root CA - G3. uv 0.13.4 and certifi 2026.10.19 are the first
releases whose bundled CA store drops that root, and the versions pinned
here still trust it. See the Python.org notice.
https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576


Claude-Session: https://claude.ai/code/session_01T4ck1tYoQv3mzBTXH17asD

Co-authored-by: Claude <[email protected]>

Author: gantoine

.github/actions/setup-python-dev/action.yml

@@ -18,7 +18,7 @@ runs:
         - name: Install uv
           uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
           with:
-              version: "0.11.32"
+              version: "0.13.4"
               enable-cache: true
 
         - name: Install dev dependencies

.github/workflows/ci.yml

@@ -111,7 +111,7 @@ jobs:
             - name: Install uv
               uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
               with:
-                  version: "0.11.32"
+                  version: "0.13.4"
                   enable-cache: true
 
             - name: Build and verify distributions
@@ -139,7 +139,7 @@ jobs:
             - name: Install uv
               uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
               with:
-                  version: "0.11.32"
+                  version: "0.13.4"
                   enable-cache: true
 
             - name: Install test dependencies
@@ -178,7 +178,7 @@ jobs:
             - name: Install uv
               uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
               with:
-                  version: "0.11.32"
+                  version: "0.13.4"
                   enable-cache: true
 
             - name: Install test dependencies
@@ -244,7 +244,7 @@ jobs:
               if: steps.changes.outputs.changed == 'true'
               uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
               with:
-                  version: "0.11.32"
+                  version: "0.13.4"
                   enable-cache: true
 
             - name: Check utils CRAP score
@@ -325,7 +325,7 @@ jobs:
             - name: Install uv
               uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
               with:
-                  version: "0.11.32"
+                  version: "0.13.4"
                   enable-cache: true
 
             # openfeature-provider-posthog is a uv workspace member (declared in
@@ -380,7 +380,7 @@ jobs:
             - name: Install uv
               uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
               with:
-                  version: "0.11.32"
+                  version: "0.13.4"
                   enable-cache: true
 
             - name: Install Django 5 test project dependencies

.github/workflows/posthog-upgrade.yml

@@ -44,7 +44,7 @@ jobs:
       - name: Install uv
         uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
         with:
-          version: "0.12.21"
+          version: "0.13.4"
 
       - name: Install new package version in main repo
         shell: bash

.github/workflows/release.yml

@@ -103,7 +103,7 @@ jobs:
       - name: Install uv
         uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
         with:
-          version: "0.11.32"
+          version: "0.13.4"
           enable-cache: true
 
       - name: Install Rust
@@ -308,7 +308,7 @@ jobs:
       - name: Install uv
         uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
         with:
-          version: "0.11.32"
+          version: "0.13.4"
           enable-cache: true
 
       - name: Install dependencies
@@ -475,7 +475,7 @@ jobs:
       - name: Install uv
         uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
         with:
-          version: "0.11.32"
+          version: "0.13.4"
           enable-cache: true
 
       - name: Install Rust

examples/example-ai-anthropic/uv.lock

@@ -1 +1,3 @@
 exclude-newer = "7 days"
+# certifi 2026.10.19 drops the compromised eMudhra root and is newer than the 7-day cooldown.
+exclude-newer-package = { certifi = "1 day" }

examples/example-ai-anthropic/uv.toml

@@ -1 +1,3 @@
 exclude-newer = "7 days"
+# certifi 2026.10.19 drops the compromised eMudhra root and is newer than the 7-day cooldown.
+exclude-newer-package = { certifi = "1 day" }

examples/example-ai-autogen/uv.lock

@@ -1 +1,3 @@
 exclude-newer = "7 days"
+# certifi 2026.10.19 drops the compromised eMudhra root and is newer than the 7-day cooldown.
+exclude-newer-package = { certifi = "1 day" }