Skip to content

Bump certifi to 2026.10.19 in the stream backup samples - #143

Merged
maksvet merged 1 commit into
masterfrom
17646-certifi-pip-uv
Oct 22, 2026
Merged

maksvet merged 1 commit into
masterfrom
17646-certifi-pip-uv

Conversation

@maksvet

@maksvet maksvet commented Oct 22, 2026

Copy link
Copy Markdown
Contributor

Bump certifi from 2021.10.8 to 2026.10.19 in the fargate and lambda stream backup requirements. The new version drops the eMudhra roots that sign intermediates with weak keys. botocore and requests both use certifi when it is installed. The pinned requirements install and import cleanly on Python 3.12.

Closes #142
Part of https://github.com/elastio/blue-stack/issues/17608 (tracked in https://github.com/elastio/blue-stack/issues/17646)

Drop trust in the eMudhra roots (emSign ECC Root CA - G3, AAA Certificate
Services) that sign intermediates with weak keys.

Closes #142
@maksvet maksvet self-assigned this Oct 22, 2026
@maksvet

maksvet commented Oct 22, 2026

Copy link
Copy Markdown
Contributor Author

@greg-aligiannis Can you review this one? It is part of the emSign fix (elastio/blue-stack#17597).

@maksvet
maksvet merged commit 0a5f7d2 into master Oct 22, 2026
7 checks passed
@maksvet
maksvet deleted the 17646-certifi-pip-uv branch October 22, 2026 21:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Bump certifi, pip and uv to drop the eMudhra roots

2 participants