fix: require patched certificate trust bundles

Author: wenbinf

.github/workflows/python.yml

@@ -21,7 +21,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
         with:
-          version: '0.11.25'
+          version: '0.13.4'
           python-version: ${{ matrix.python-version }}
           enable-cache: true
       - run: uv sync --locked
@@ -34,7 +34,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
         with:
-          version: '0.11.25'
+          version: '0.13.4'
           python-version: '3.14'
           enable-cache: true
       - run: uv sync --locked
@@ -46,7 +46,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
         with:
-          version: '0.11.25'
+          version: '0.13.4'
           python-version: '3.14'
           enable-cache: true
       - run: uv sync --locked

pyproject.toml

@@ -12,7 +12,7 @@ license = "MIT"
 license-files = ["LICENSE"]
 authors = [{name = "Listen Notes, Inc.", email = "hello@listennotes.com"}]
 keywords = ["listen notes", "podcast", "api"]
-dependencies = ["requests>=2.34.1,<3"]
+dependencies = ["requests>=2.34.1,<3", "certifi>=2026.10.18"]
 classifiers = [
     "Development Status :: 5 - Production/Stable",
     "Intended Audience :: Developers",
@@ -42,7 +42,7 @@ dev = [
 ]
 
 [tool.uv]
-required-version = ">=0.11.25"
+required-version = ">=0.13.4"
 
 [tool.setuptools]
 packages = ["listennotes"]