Pin certifi to an uncompromised version number. (4.x)

changelog.d/20261022_150635_derek_pin_certifi.rst

@@ -0,0 +1,5 @@
+
+Security
+--------
+
+- Pin certifi to an uncompromised version number. (:pr:`NUMBER`)

pyproject.toml

@@ -25,6 +25,7 @@ classifiers = [
 requires-python = ">=3.9"
 dependencies = [
     "requests>=2.19.1,<3.0.0",
+    "certifi>=2026.10.19",
     "pyjwt[crypto]>=2.0.0,<3.0.0",
     # cryptography 3.4.0 is known-bugged, see:
     #   https://github.com/pyca/cryptography/issues/5756

src/globus_sdk/token_storage/base.py

@@ -153,10 +153,6 @@ class FileTokenStorage(TokenStorage, metaclass=abc.ABCMeta):
     def __init__(
         self, filepath: pathlib.Path | str, *, namespace: str = "DEFAULT"
     ) -> None:
-        """
-        :param filepath: the name of the file to write to and read from
-        :param namespace: A user-supplied namespace for partitioning token data
-        """
         self.filepath = str(filepath)
         try:
             self._ensure_containing_dir_exists()