From 6dcda6bb50451b9e6cfc2dd49300a4312887f8c2 Mon Sep 17 00:00:00 2001 From: Yoshihito Aso Date: Wed, 21 Oct 2026 10:18:10 +0900 Subject: [PATCH] fix(deps): update certifi for GHSA-6q48-6c7w-9gw2 --- pyproject.toml | 3 +++ uv.lock | 12 +++++++++--- 2 files changed, 12 insertions(+), 3 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index cda81d69c..3d08d76af 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -120,3 +120,6 @@ include = [ [tool.uv] exclude-newer = "7 days" +# GHSA-6q48-6c7w-9gw2: require the fixed CA bundle without the release-age delay. +constraint-dependencies = ["certifi>=2026.10.19"] +exclude-newer-package = { certifi = "0 days" } diff --git a/uv.lock b/uv.lock index 3ea1620e1..33d271393 100644 --- a/uv.lock +++ b/uv.lock @@ -6,6 +6,12 @@ requires-python = "==3.14.*" exclude-newer = "0001-01-01T00:00:00Z" # This has no effect and is included for backwards compatibility when using relative exclude-newer values. exclude-newer-span = "P7D" +[options.exclude-newer-package] +certifi = { timestamp = "0001-01-01T00:00:00Z", span = "PT0S" } + +[manifest] +constraints = [{ name = "certifi", specifier = ">=2026.10.19" }] + [[package]] name = "aiohappyeyeballs" version = "2.6.2" @@ -714,11 +720,11 @@ wheels = [ [[package]] name = "certifi" -version = "2026.5.20" +version = "2026.10.19" source = { registry = "https://pypi.org/simple" } -sdist = { url = "https://files.pythonhosted.org/packages/f3/ce/ee2ecad540810a79593028e88299baeae54d346cc7a0d94b6199988b89b1/certifi-2026.5.20.tar.gz", hash = "sha256:69dea482ab64caa7b9f6aba1c6bf48bb6a5448d1c0f1b17ab42ad8c763a5344d", size = 135422, upload-time = "2026-05-20T11:46:50.073Z" } +sdist = { url = "https://files.pythonhosted.org/packages/a6/bd/1436c50cc46699de0230fbaacc1d1de7bfec413176099949e9d5112e88f2/certifi-2026.10.19.tar.gz", hash = "sha256:035c1e85572b141bf1c3a3eff0e33a8eb74917522f2559075ff8d2fea780a1ae", size = 137598, upload-time = "2026-10-20T02:24:16.604Z" } wheels = [ - { url = "https://files.pythonhosted.org/packages/59/8c/57e832b7af6d7c5abe66eb3fbe3a3a32f4d11ea23a1aa7131371035be991/certifi-2026.5.20-py3-none-any.whl", hash = "sha256:3c52e209ba0a4ad7aebe60436a4ab349c39e1e602e8c134221e546902ad25897", size = 134134, upload-time = "2026-05-20T11:46:48.578Z" }, + { url = "https://files.pythonhosted.org/packages/c4/51/29046e48f693c54e5b7412216d447a1d8362c9653148d98c02cdf65fa733/certifi-2026.10.19-py3-none-any.whl", hash = "sha256:42d35340cc5b9ba78e818ddbff0c5b1c2b779de448a340fd1b989f5fa8670e1b", size = 136464, upload-time = "2026-10-20T02:24:15.072Z" }, ] [[package]]