Skip to content

Upgrade certifi to resolve GHSA-6q48-6c7w-9gw2 - #1141

Merged
TheWitness merged 1 commit into
mainfrom
GHSA-6q48-6c7w-9gw2
Oct 23, 2026
Merged

TheWitness merged 1 commit into
mainfrom
GHSA-6q48-6c7w-9gw2

Conversation

@cigamit

@cigamit cigamit commented Oct 23, 2026

Copy link
Copy Markdown
Collaborator

No description provided.

@cigamit
cigamit requested a review from TheWitness October 23, 2026 06:38
@cigamit cigamit self-assigned this Oct 23, 2026
Copilot AI balanced review requested due to automatic review settings October 23, 2026 06:38
@cigamit cigamit added documentation Improvements or additions to documentation dependencies Pull requests that update a dependency file SECURITY A security related issue like a CVE specifically labels Oct 23, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔵 Needs a closer look

The additional Sphinx and major-version sphinxcontrib-jsmath upgrades need documentation-build validation to establish compatibility.

No open issues 🎉

What changed in this PR

Updates the documentation site's dependency pins to address GHSA-6q48-6c7w-9gw2 through a certifi upgrade.

Changes:

  • Bumps certifi from 2026.7.22 to 2026.10.19.
  • Updates charset-normalizer, idna, and MarkupSafe.
  • Upgrades Sphinx to 9.2.0 and sphinxcontrib-jsmath to 2.0.0.
File Description
docs/​docsite/​requirements.txt Updates certifi and related documentation-build dependencies.

Review effort: Balanced

@TheWitness
TheWitness merged commit 9d31adf into main Oct 23, 2026
15 checks passed
@TheWitness
TheWitness deleted the GHSA-6q48-6c7w-9gw2 branch October 23, 2026 12:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file documentation Improvements or additions to documentation SECURITY A security related issue like a CVE specifically

Development

Successfully merging this pull request may close these issues.

3 participants