Move certifi to 2026.10.19, past PYSEC-2026-4320 #31

Merged
tiagoagueda merged 1 commit from certifi-advisory into main 2026-10-23 09:27:03 +00:00
Owner

The "audit the locked dependencies" job fails on main: pip-audit --strict reports PYSEC-2026-4320 against certifi 2026.10.18, fixed in 2026.10.19, published after the last green run. The core and postulo-templates moved past it in postulo/postulo#1027 and postulo/postulo-templates#18.

What changed

uv lock --upgrade-package certifi: certifi 2026.10.18 to 2026.10.19. Nothing else in the lock moves.

Tests

The workflow's own audit command over the new export: no known vulnerabilities.

🤖 Generated with Claude Code

The "audit the locked dependencies" job fails on `main`: `pip-audit --strict` reports PYSEC-2026-4320 against certifi 2026.10.18, fixed in 2026.10.19, published after the last green run. The core and postulo-templates moved past it in postulo/postulo#1027 and postulo/postulo-templates#18. ## What changed `uv lock --upgrade-package certifi`: certifi 2026.10.18 to 2026.10.19. Nothing else in the lock moves. ## Tests The workflow's own audit command over the new export: no known vulnerabilities. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
Move certifi to 2026.10.19, past PYSEC-2026-4320
All checks were successful
CI / Security audit (pull_request) Successful in 27s
CI / test (pull_request) Successful in 2m12s
d32e0db0fe
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
tiagoagueda deleted branch certifi-advisory 2026-10-23 09:27:03 +00:00
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
Postulo/postulo-apprise!31
No description provided.