Skip to content

build(deps): Bump certifi to 2026.10.19 - #71

Open
sentry-junior[bot] wants to merge 1 commit into
mainfrom
vuln-3216/certifi-2026.10.19
Open

sentry-junior[bot] wants to merge 1 commit into
mainfrom
vuln-3216/certifi-2026.10.19

Conversation

@sentry-junior

@sentry-junior sentry-junior Bot commented Oct 23, 2026

Copy link
Copy Markdown
Contributor

Bumps certifi from 2021.10.8 to 2026.10.19 in backend-py/requirements.txt. No other packages change.

certifi 2026.10.19 removes the compromised eMudhra root CAs from the bundled trust store (VULN-3216).

certifi 2026.10.19 needs Python >=3.7. The backend targets Python 3.9, so that's fine.

Verified with uv pip install --dry-run -r backend-py/requirements.txt on Python 3.9: it resolves before and after the change. Pre-commit hooks also pass on the changed file.

Running services keep the old CA bundle until they are rebuilt and redeployed.

via Geoff Goldsmith.

--

View Junior Session [Sentry]

@linear-code

linear-code Bot commented Oct 23, 2026

Copy link
Copy Markdown

VULN-3216

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants