Move certifi to 2026.10.19, past PYSEC-2026-4320 #28
No reviewers
Labels
No labels
bug
documentation
enhancement
performance
security
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set
Reference
Postulo/postulo-imap!28
Loading…
Reference in a new issue
No description provided.
Delete branch "certifi-advisory"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
The "audit the locked dependencies" job fails on
main:pip-audit --strictreports PYSEC-2026-4320 against certifi 2026.10.18, fixed in 2026.10.19, published after the last green run. The core and postulo-templates moved past it in postulo/postulo#1027 and postulo/postulo-templates#18.What changed
uv lock --upgrade-package certifi: certifi 2026.10.18 to 2026.10.19. Nothing else in the lock moves.Tests
The workflow's own audit command over the new export: no known vulnerabilities.
🤖 Generated with Claude Code