Upgrade certifi, uv and pip to latest in all repos

Context: https://emudhra.we-have-a-problem.com/

Backport status

openedx-platform
- build: Upgrade certifi, pip, and pip-tools [verawood] openedx-platform#39280
- build: Upgrade certifi and pip-tools [ulmo] openedx-platform#39281
credentials
- build: Upgrade certifi and pip-tools [verawood] credentials#3016
- Ulmo: make upgrade fails once pip 26.2.2 is installed, because pip rejects the invalid #egg=edx_credentials_themes==0.5.6 fragment in requirements/base.in
codejail-service
- build: update pip, pip-tools and certifi [verawood] codejail-service#92
- build: update pip, pip-tools and certifi [ulmo] codejail-service#93
course-discovery
- build: Upgrade certifi, pip, and pip-tools [verawood] course-discovery#4744
- build: Upgrade certifi and pip-tools [ulmo] course-discovery#4745
openedx-translations
- build: Upgrade certifi, pip, and pip-tools [verawood] openedx-translations#82777
- build: Upgrade certifi, pip, and pip-tools [ulmo] openedx-translations#82776
openedx-wordpress-ecommerce
- build: Upgrade certifi, pip, and pip-tools [verawood] openedx-wordpress-ecommerce#140
- build: Upgrade certifi and pip [ulmo] openedx-wordpress-ecommerce#141
edx-notes-api
- build: Upgrade certifi, pip, and pip-tools [verawood] edx-notes-api#614
- build: Upgrade certifi, pip, and pip-tools [ulmo] edx-notes-api#615
enterprise-access
- build: Upgrade certifi, pip, and pip-tools [verawood] enterprise-access#1039
- build: Upgrade certifi, pip, and pip-tools [ulmo] enterprise-access#1038
enterprise-catalog
- build: Upgrade certifi and pip-tools [verawood] enterprise-catalog#1159
- build: Upgrade certifi, pip, and pip-tools [ulmo] enterprise-catalog#1158
event-bus-redis
- build: Upgrade certifi, pip, and pip-tools [verawood] event-bus-redis#273
- build: Upgrade certifi, pip, and pip-tools [ulmo] event-bus-redis#272
license-manager
- build: Upgrade certifi, pip, and pip-tools [verawood] license-manager#912
- build: Upgrade certifi and pip-tools [ulmo] license-manager#913
openedx-aspects
- build: Upgrade certifi [verawood] openedx-aspects#432
- build: Upgrade certifi, pip, and pip-tools [ulmo] openedx-aspects#433
platform-plugin-aspects
- build: Upgrade certifi, pip, and pip-tools [verawood] platform-plugin-aspects#269
- build: Upgrade certifi, pip, and pip-tools [ulmo] platform-plugin-aspects#268
xblock-skill-tagging
- build: Upgrade certifi, pip, and pip-tools [verawood] xblock-skill-tagging#68
- build: Upgrade certifi, pip, and pip-tools [ulmo] xblock-skill-tagging#69
openedx-authz
- Verawood: not released
- build: Upgrade certifi, pip, and pip-tools [ulmo] openedx-authz#554
DoneXBlock
- Verawood: not released
- build: Upgrade certifi, pip, and pip-tools [ulmo] DoneXBlock#436
docs.openedx.org
- Verawood: Patch was included in Verawood, because Verawood branch was cut on 2026-10-22
- build: Upgrade certifi, pip, and pip-tools [ulmo] docs.openedx.org#1533
xqueue
- build: Upgrade certifi, pip, and pip-tools [verawood] xqueue#990
- Ulmo: not released

Live tracker: https://openedx.ossvitals.org/maintenance (open the "Campaign: certifi 2026.10.19" tab). Refreshed hourly until 2026-10-24 00:00 PKT (2026-10-23 19:00 UTC), daily after that. It reads each repo's pinned certifi version from its requirements files and uv.lock, so it also counts repos fixed by PRs that do not mention certifi in the title.

Open and merged PRs in the openedx org with certifi in the title (found via GitHub search; PRs that change it without saying so are not listed). Checked = merged.

PRs from the bulk update job (2026-10-21)

Opened with openedx/.github Bulk Repo Update: uv lock --upgrade-package certifi for uv repos, and each repo's own make upgrade limited to --upgrade-package certifi for pip-tools repos. Each diff was checked to change only certifi. Checked = merged.

PRs opened by hand (2026-10-22)

Final round of certifi PRs (2026-10-22)

build: Upgrade certifi to latest

build: Upgrade `certifi` in uv.lock files

build: Upgrade certifi to latest

build: Upgrade certifi to latest (#39272)

build: upgrade certifi to 2026.10.19 (#43)

build: upgrade certifi to 2026.10.19 (#988)

build: upgrade certifi to 2026.10.19 (#21)

build: upgrade certifi to 2026.10.19 (#127)

build: upgrade certifi to 2026.10.19

build: upgrade certifi to 2026.10.19 (#330)

uv: PRs from the bulk update job (2026-10-22)

Opened with openedx/.github Bulk Repo Update: uv lock --upgrade-package uv with uv 0.13.5. Each diff was checked to change only uv in uv.lock. Checked = merged.

uv: still need a PR by hand

Repo	What's up
`codejail-includes`, `xblocks-extra`	Bulk job got a 404 creating the commit (bot lacks write access). The re-lock itself is clean.
`forum`	Re-lock drops cryptography wheels for macOS arm64, Windows and ppc64le.
`mockprock`	`uv.lock` is out of sync with `pyproject.toml`; the re-lock removes about 1,100 lines.
`openedx-platform`	uv is also pinned in `requirements/edx/development.txt`, so it needs a `make upgrade` change too.