From 3199614f73d4be9632dde095431d171ed4ddc1ee Mon Sep 17 00:00:00 2001 From: Andrew Chiu Date: Tue, 20 Oct 2026 18:02:44 -0300 Subject: [PATCH] fix: bump certifi dependency version to remove vulnerable emuhdra certs --- .changeset/emudhra-certifi.yml | 4 ++++ packages/http/pyproject.toml | 1 + 2 files changed, 5 insertions(+) create mode 100644 .changeset/emudhra-certifi.yml diff --git a/.changeset/emudhra-certifi.yml b/.changeset/emudhra-certifi.yml new file mode 100644 index 0000000..ea4988a --- /dev/null +++ b/.changeset/emudhra-certifi.yml @@ -0,0 +1,4 @@ +type: patch +packages: [http] +changelog: |- + Require certifi>=2026.10.19 to use the corrected CA bundle for the October 2026 eMudhra intermediate CA compromise. Applications that override Requests' CA bundle must update their custom trust store separately. diff --git a/packages/http/pyproject.toml b/packages/http/pyproject.toml index 03a8d6e..e131af3 100644 --- a/packages/http/pyproject.toml +++ b/packages/http/pyproject.toml @@ -25,6 +25,7 @@ classifiers = [ ] dependencies = [ "requests>=2.31.0", + "certifi>=2026.10.19", "turnkey-api-key-stamper", "turnkey-sdk-types", ]