From 6059a560dc27108a07471000ac5c5dda0fd57614 Mon Sep 17 00:00:00 2001 From: Kyle D McCormick Date: Thu, 22 Oct 2026 14:58:41 -0400 Subject: [PATCH] build: Upgrade certifi, pip, and pip-tools [ulmo] Upgrades certifi from 2026.1.4 to 2026.10.19, pip from 25.3 to 26.2.2, and pip-tools from 7.5.2 to 7.6.2. pip-tools is upgraded because older versions don't work with pip 26.2+. certifi older than 2026.10.19 and pip older than 26.2.2 trust the compromised emSign intermediate CAs. Generated with `make upgrade` limited to --upgrade-package for those packages. Part of: https://github.com/openedx/public-engineering/issues/574 Co-authored-by: Claude Opus 5.5 --- requirements/ci.txt | 2 +- requirements/docs.txt | 2 +- requirements/pip-tools.txt | 2 +- requirements/pip.txt | 6 ++++-- requirements/quality.txt | 2 +- requirements/test.txt | 2 +- 6 files changed, 9 insertions(+), 7 deletions(-) diff --git a/requirements/ci.txt b/requirements/ci.txt index 71bf71e..8afa791 100644 --- a/requirements/ci.txt +++ b/requirements/ci.txt @@ -42,7 +42,7 @@ cachetools==6.2.4 # via # -r requirements/tox.txt # tox -certifi==2026.1.4 +certifi==2026.10.19 # via # -r requirements/test.txt # requests diff --git a/requirements/docs.txt b/requirements/docs.txt index 9f20256..e943919 100644 --- a/requirements/docs.txt +++ b/requirements/docs.txt @@ -22,7 +22,7 @@ babel==2.17.0 # sphinx beautifulsoup4==4.14.3 # via pydata-sphinx-theme -certifi==2026.1.4 +certifi==2026.10.19 # via requests charset-normalizer==3.4.4 # via requests diff --git a/requirements/pip-tools.txt b/requirements/pip-tools.txt index fdfc83c..c069afb 100644 --- a/requirements/pip-tools.txt +++ b/requirements/pip-tools.txt @@ -10,7 +10,7 @@ click==8.3.1 # via pip-tools packaging==25.0 # via build -pip-tools==7.5.2 +pip-tools==7.6.2 # via -r requirements/pip-tools.in pyproject-hooks==1.2.0 # via diff --git a/requirements/pip.txt b/requirements/pip.txt index 929f3ee..3011cd7 100644 --- a/requirements/pip.txt +++ b/requirements/pip.txt @@ -8,7 +8,9 @@ wheel==0.45.1 # via -r requirements/pip.in # The following packages are considered to be unsafe in a requirements file: -pip==25.3 - # via -r requirements/pip.in +pip==26.2.2 + # via + # -c https://raw.githubusercontent.com/openedx/edx-lint/master/edx_lint/files/common_constraints.txt + # -r requirements/pip.in setuptools==80.9.0 # via -r requirements/pip.in diff --git a/requirements/quality.txt b/requirements/quality.txt index 7644683..0210a8b 100644 --- a/requirements/quality.txt +++ b/requirements/quality.txt @@ -26,7 +26,7 @@ botocore==1.42.25 # via # boto3 # s3transfer -certifi==2026.1.4 +certifi==2026.10.19 # via requests chardet==5.2.0 # via binaryornot diff --git a/requirements/test.txt b/requirements/test.txt index f1b8657..7f7c4e3 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -28,7 +28,7 @@ botocore==1.42.25 # via # boto3 # s3transfer -certifi==2026.1.4 +certifi==2026.10.19 # via requests cffi==2.0.0 # via cryptography