From dc9637a6f83fbf4d67f6f43a07caf4f3191b28e8 Mon Sep 17 00:00:00 2001 From: Kyle D McCormick Date: Thu, 22 Oct 2026 14:58:42 -0400 Subject: [PATCH] build: Upgrade certifi, pip, and pip-tools [verawood] Upgrades certifi from 2026.2.25 to 2026.10.19, pip from 26.0.1 to 26.2.2, and pip-tools from 7.5.3 to 7.6.2. pip-tools is upgraded because older versions don't work with pip 26.2+. certifi older than 2026.10.19 and pip older than 26.2.2 trust the compromised emSign intermediate CAs. Generated with `make upgrade` limited to --upgrade-package for those packages. Part of: https://github.com/openedx/public-engineering/issues/574 Co-authored-by: Claude Opus 5.5 --- requirements.txt | 2 +- requirements/dev.txt | 4 ++-- requirements/pip-tools.txt | 2 +- requirements/pip.txt | 2 +- requirements/test.txt | 2 +- 5 files changed, 6 insertions(+), 6 deletions(-) diff --git a/requirements.txt b/requirements.txt index b0cb0fc5..668a1ec3 100644 --- a/requirements.txt +++ b/requirements.txt @@ -14,7 +14,7 @@ botocore==1.42.84 # via # boto3 # s3transfer -certifi==2026.2.25 +certifi==2026.10.19 # via requests cffi==2.0.0 # via pynacl diff --git a/requirements/dev.txt b/requirements/dev.txt index f4e3ab78..5a07963b 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -25,7 +25,7 @@ cachetools==7.0.5 # via # -r requirements/ci.txt # tox -certifi==2026.2.25 +certifi==2026.10.19 # via # -r requirements/test.txt # requests @@ -118,7 +118,7 @@ packaging==26.0 # wheel path==17.1.1 # via -r requirements/test.txt -pip-tools==7.5.3 +pip-tools==7.6.2 # via -r requirements/pip-tools.txt platformdirs==4.9.4 # via diff --git a/requirements/pip-tools.txt b/requirements/pip-tools.txt index 8b3b2959..9ef82b22 100644 --- a/requirements/pip-tools.txt +++ b/requirements/pip-tools.txt @@ -12,7 +12,7 @@ packaging==26.0 # via # build # wheel -pip-tools==7.5.3 +pip-tools==7.6.2 # via -r requirements/pip-tools.in pyproject-hooks==1.2.0 # via diff --git a/requirements/pip.txt b/requirements/pip.txt index c87fe302..c1e0a352 100644 --- a/requirements/pip.txt +++ b/requirements/pip.txt @@ -10,7 +10,7 @@ wheel==0.46.3 # via -r requirements/pip.in # The following packages are considered to be unsafe in a requirements file: -pip==26.0.1 +pip==26.2.2 # via -r requirements/pip.in setuptools==82.0.1 # via -r requirements/pip.in diff --git a/requirements/test.txt b/requirements/test.txt index 4c947b7d..b293fbf1 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -17,7 +17,7 @@ botocore==1.42.84 # -r requirements.txt # boto3 # s3transfer -certifi==2026.2.25 +certifi==2026.10.19 # via # -r requirements.txt # requests