Postulo/postulo-mcp
Postulo/postulo-mcp
Watch
1
0
Fork
You've already forked postulo-mcp
 0
Code Issues 3 Pull requests Projects Releases Packages Wiki Activity Actions

Move certifi to 2026.10.19, past PYSEC-2026-4320 #23

Merged
tiagoagueda merged 1 commit from certifi-advisory into main 2026-10-23 09:30:23 +00:00
Conversation 0 Commits 1 Files changed 1 +4 -4
tiagoagueda commented 2026-10-23 09:26:03 +00:00
Owner

The "audit the locked dependencies" job fails on main: pip-audit --strict reports PYSEC-2026-4320 against certifi 2026.10.18, fixed in 2026.10.19, published after the last green run. The core and postulo-templates moved past it in postulo/postulo#1027 and postulo/postulo-templates#18.

What changed

uv lock --upgrade-package certifi: certifi 2026.10.18 to 2026.10.19. Nothing else in the lock moves.

Tests

The workflow's own audit command over the new export: no known vulnerabilities.

🤖 Generated with Claude Code

The "audit the locked dependencies" job fails on `main`: `pip-audit --strict` reports PYSEC-2026-4320 against certifi 2026.10.18, fixed in 2026.10.19, published after the last green run. The core and postulo-templates moved past it in postulo/postulo#1027 and postulo/postulo-templates#18. ## What changed `uv lock --upgrade-package certifi`: certifi 2026.10.18 to 2026.10.19. Nothing else in the lock moves. ## Tests The workflow's own audit command over the new export: no known vulnerabilities. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
Move certifi to 2026.10.19, past PYSEC-2026-4320
All checks were successful
CI / Audit the dependencies (pull_request) Successful in 50s
Details
CI / Lint and test (Python 3.12) (pull_request) Successful in 20s
Details
CI / Lint and test (Python 3.14) (pull_request) Successful in 24s
Details
CI / Lint and test (Python 3.13) (pull_request) Successful in 27s
Details
434df0ff96
 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
tiagoagueda deleted branch certifi-advisory 2026-10-23 09:30:23 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
bug
Something does not do what it says it does

  
documentation
The README, or the words a person reads

  
enhancement
An improvement or a new capability

  
security
Credentials, personal data, or what this may reach

No labels
bug
documentation
enhancement
security
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
Postulo/postulo-mcp!23
No description provided.