Skip to content

fix(deps): bump certifi to 2026.10.19 - #1176

Closed
welociraptor wants to merge 1 commit into
cloudnative-pg:mainfrom
welociraptor:fix/certifi-ghsa-6q48-6c7w-9gw2
Closed

welociraptor wants to merge 1 commit into
cloudnative-pg:mainfrom
welociraptor:fix/certifi-ghsa-6q48-6c7w-9gw2

Conversation

@welociraptor

Copy link
Copy Markdown

Bumps certifi in containers/sidecar-requirements.txt from 2026.10.18 to 2026.10.19 to address GHSA-6q48-6c7w-9gw2: certifi versions through 2026.10.18 bundle emSign root CAs whose intermediate CA keys were compromised.

Hashes are taken from the PyPI release. certifi is only pulled in via requests, so no other pins change.

🤖 Generated with Claude Code

certifi up to 2026.10.18 bundles emSign root CAs whose intermediate CA
keys were compromised.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Markku Halinen <markku.halinen@qutwo.com>
@welociraptor
welociraptor requested a review from a team as a code owner October 21, 2026 17:32
@welociraptor welociraptor changed the title fix(deps): bump certifi to 2026.10.19 for GHSA-6q48-6c7w-9gw2 fix(deps): bump certifi to 2026.10.19 Oct 21, 2026
@welociraptor

Copy link
Copy Markdown
Author

Closing as obsolete, superseded by 984115f

@welociraptor
welociraptor deleted the fix/certifi-ghsa-6q48-6c7w-9gw2 branch October 26, 2026 14:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant