From 323970013cae4077447644a851d137c81eda648a Mon Sep 17 00:00:00 2001 From: Vaibhav Gulati Date: Thu, 22 Oct 2026 15:30:03 +0000 Subject: [PATCH] fix: upgrade certifi to 2026.10.19 and pip to 26.2.2 (eMudhra CA removal) The emSign root CA is removed from certifi 2026.10.19 after the eMudhra security incident (GHSA-6q48-6c7w-9gw2). pip vendors its own certifi, so pip must be upgraded to 26.2.2 as well. pip-tools is bumped to 7.6.2, the first release that works with pip 26.2.x. Ticket: LP-1401 Co-Authored-By: Claude Opus 5.5 --- requirements/pip.txt | 6 ++++-- requirements/pip_tools.txt | 2 +- requirements/test.txt | 2 +- 3 files changed, 6 insertions(+), 4 deletions(-) diff --git a/requirements/pip.txt b/requirements/pip.txt index 9fbfa81..a3a5a58 100644 --- a/requirements/pip.txt +++ b/requirements/pip.txt @@ -10,7 +10,9 @@ wheel==0.46.3 # via -r requirements/pip.in # The following packages are considered to be unsafe in a requirements file: -pip==25.3 - # via -r requirements/pip.in +pip==26.2.2 + # via + # -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt + # -r requirements/pip.in setuptools==80.10.2 # via -r requirements/pip.in diff --git a/requirements/pip_tools.txt b/requirements/pip_tools.txt index 97cff3f..33a5a8d 100644 --- a/requirements/pip_tools.txt +++ b/requirements/pip_tools.txt @@ -12,7 +12,7 @@ packaging==26.0 # via # build # wheel -pip-tools==7.5.2 +pip-tools==7.6.2 # via -r requirements/pip_tools.in pyproject-hooks==1.2.0 # via diff --git a/requirements/test.txt b/requirements/test.txt index 911d5a7..c63f8b0 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -32,7 +32,7 @@ botocore==1.42.36 # boto3 # moto # s3transfer -certifi==2026.1.4 +certifi==2026.10.19 # via requests cffi==2.0.0 # via cryptography