Skip to content

Prepare Python SDK 3.1.1 security patch - #4

Merged
wenbinf merged 2 commits into
mainfrom
fix/ca-trust-patch
Oct 22, 2026
Merged

wenbinf merged 2 commits into
mainfrom
fix/ca-trust-patch

Conversation

@wenbinf

@wenbinf wenbinf commented Oct 22, 2026 •

Copy link
Copy Markdown
Member

Published Python SDK 3.1.0 does not require a patched Certifi bundle. Prepare 3.1.1 with certifi>=2026.10.19 so installing the release upgrades older bundles or reports conflicting dependency constraints.

Raise the Certifi minimum in the package requirements and lockfile metadata, and bump the SDK and generated contract to 3.1.1. The lockfile already resolves Certifi 2026.10.19.

This prepares the patch release; package publication is a separate step.

Validation:

  • Python 3.10 and 3.14: 84 offline tests passed and 13 opt-in integration tests skipped on each version.
  • Black and Flake8 passed.
  • Built the wheel and source distribution and validated distribution metadata with a publication dry run.
  • An isolated wheel installation exposes all 31 API methods, requires the patched Certifi minimum, and passes the certificate-bundle audit.
  • Confirmed neither release archive includes a changelog.

@wenbinf
wenbinf merged commit 4d5d1d7 into main Oct 22, 2026
4 checks passed
@wenbinf
wenbinf deleted the fix/ca-trust-patch branch October 22, 2026 17:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant