Postulo/postulo-templates
Postulo/postulo-templates
Watch
2
0
Fork
You've already forked postulo-templates
 0
Code Issues 13 Pull requests Projects Releases 2 Packages Wiki Activity Actions

Move certifi to 2026.10.19, past PYSEC-2026-4320 #18

Merged
tiagoagueda merged 1 commit from audit-lock into main 2026-10-23 08:43:04 +00:00
Conversation 0 Commits 1 Files changed 1 +4 -4
tiagoagueda commented 2026-10-23 08:40:12 +00:00
Owner

The "Audit the locked dependencies" job fails on Weblate's pull request #17. The translations are not the cause: pip-audit --strict now reports PYSEC-2026-4320 against certifi 2026.10.18, fixed in 2026.10.19, which was published after main last passed. The core moved past the same advisory in postulo/postulo#1027.

What changed

uv lock --upgrade-package certifi: certifi 2026.10.18 to 2026.10.19. Nothing else in the lock moves.

Tests

  • The workflow's own audit command over the new export: no known vulnerabilities.
  • uv run pytest: 19 passed, 3 skipped.

Once this is merged, #17 needs main brought in (Weblate does it on its next update) for its audit to pass.

🤖 Generated with Claude Code

The "Audit the locked dependencies" job fails on Weblate's pull request #17. The translations are not the cause: `pip-audit --strict` now reports PYSEC-2026-4320 against certifi 2026.10.18, fixed in 2026.10.19, which was published after `main` last passed. The core moved past the same advisory in postulo/postulo#1027. ## What changed `uv lock --upgrade-package certifi`: certifi 2026.10.18 to 2026.10.19. Nothing else in the lock moves. ## Tests - The workflow's own audit command over the new export: no known vulnerabilities. - `uv run pytest`: 19 passed, 3 skipped. Once this is merged, #17 needs `main` brought in (Weblate does it on its next update) for its audit to pass. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
Move certifi to 2026.10.19, past PYSEC-2026-4320
All checks were successful
CI / Audit the locked dependencies (pull_request) Successful in 1m34s
Details
CI / test (pull_request) Successful in 2m2s
Details
a34888c140
 
The audit job failed on Weblate's pull request (#17), not because of the translations: an
advisory published against certifi 2026.10.18 since main last passed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
tiagoagueda deleted branch audit-lock 2026-10-23 08:43:05 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
bug
Something does not do what it says it does

  
documentation
The README, or the words a person reads

  
enhancement
An improvement or a new capability

  
security
Credentials, personal data, or what this may reach

No labels
bug
documentation
enhancement
security
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
Postulo/postulo-templates!18
No description provided.