Skip to content

fix(security): bump certifi to 2026.10.23 for the eMudhra distrust - #161

Merged
thomasrockhu-codecov merged 1 commit into
masterfrom
th/emudhra-ca
Oct 24, 2026
Merged

thomasrockhu-codecov merged 1 commit into
masterfrom
th/emudhra-ca

Conversation

@thomasrockhu-codecov

Copy link
Copy Markdown
Contributor

Summary

  • Pin certifi to 2026.10.23. production-release-db55f42 still has 2026.6.17.
  • Raise pip from 26.1.2 to 26.2.2 in both the build stage and the runtime install.
  • Go 1.27.3 is already in that image.

Test plan

  • CI passes
  • The rebuilt image contains certifi 2026.10.23 and pip 26.2.2

Made with Cursor

The published image still has certifi 2026.6.17 and pip 26.1.2.
@thomasrockhu-codecov
thomasrockhu-codecov merged commit 693c7f5 into master Oct 24, 2026
4 checks passed
@thomasrockhu-codecov
thomasrockhu-codecov deleted the th/emudhra-ca branch October 24, 2026 15:51

This branch was successfully deployed

1 active deployment
staging — d3b39492 Deployed Oct 24, 2026 by thomasrockhu-codecov via Build and Push #6
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants