From 97a0cdc3445f267b87d3ca0a247f8d426c34aee4 Mon Sep 17 00:00:00 2001 From: Vaibhav Gulati Date: Thu, 22 Oct 2026 15:30:17 +0000 Subject: [PATCH] fix: upgrade certifi to 2026.10.19 and pip to 26.2.2 (eMudhra CA removal) The emSign root CA is removed from certifi 2026.10.19 after the eMudhra security incident (GHSA-6q48-6c7w-9gw2). pip vendors its own certifi, so pip must be upgraded to 26.2.2 as well. pip-tools is bumped to 7.6.2, the first release that works with pip 26.2.x. Ticket: LP-1401 Co-Authored-By: Claude Opus 5.5 --- requirements/base.txt | 2 +- requirements/ci.txt | 2 +- requirements/pip.txt | 2 +- requirements/pip_tools.txt | 2 +- requirements/production.txt | 2 +- requirements/test.txt | 2 +- 6 files changed, 6 insertions(+), 6 deletions(-) diff --git a/requirements/base.txt b/requirements/base.txt index 21154d1..74ff751 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -6,7 +6,7 @@ # -e git+https://github.com/openedx/codejail.git@4127fc4bd5775cc72aee8d7f0a70e31405e22439#egg=codejail # via -r requirements/base.in -certifi==2026.7.22 +certifi==2026.10.19 # via requests charset-normalizer==3.5.2 # via requests diff --git a/requirements/ci.txt b/requirements/ci.txt index 3f1a745..1cb3417 100644 --- a/requirements/ci.txt +++ b/requirements/ci.txt @@ -6,7 +6,7 @@ # -e git+https://github.com/openedx/codejail.git@4127fc4bd5775cc72aee8d7f0a70e31405e22439#egg=codejail # via -r requirements/test.txt -certifi==2026.7.22 +certifi==2026.10.19 # via # -r requirements/test.txt # requests diff --git a/requirements/pip.txt b/requirements/pip.txt index 047c23f..00020f8 100644 --- a/requirements/pip.txt +++ b/requirements/pip.txt @@ -10,7 +10,7 @@ wheel==0.48.0 # via -r requirements/pip.in # The following packages are considered to be unsafe in a requirements file: -pip==26.2.1 +pip==26.2.2 # via -r requirements/pip.in setuptools==84.0.0 # via -r requirements/pip.in diff --git a/requirements/pip_tools.txt b/requirements/pip_tools.txt index 3c7b908..2901c4d 100644 --- a/requirements/pip_tools.txt +++ b/requirements/pip_tools.txt @@ -12,7 +12,7 @@ packaging==26.3 # via # build # wheel -pip-tools==7.6.1 +pip-tools==7.6.2 # via -r requirements/pip_tools.in pyproject-hooks==1.3.3 # via diff --git a/requirements/production.txt b/requirements/production.txt index 29af186..76221d2 100644 --- a/requirements/production.txt +++ b/requirements/production.txt @@ -6,7 +6,7 @@ # -e git+https://github.com/openedx/codejail.git@4127fc4bd5775cc72aee8d7f0a70e31405e22439#egg=codejail # via -r requirements/base.txt -certifi==2026.7.22 +certifi==2026.10.19 # via # -r requirements/base.txt # requests diff --git a/requirements/test.txt b/requirements/test.txt index c2d01d0..1de1c5c 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -6,7 +6,7 @@ # -e git+https://github.com/openedx/codejail.git@4127fc4bd5775cc72aee8d7f0a70e31405e22439#egg=codejail # via -r requirements/production.txt -certifi==2026.7.22 +certifi==2026.10.19 # via # -r requirements/production.txt # requests