[syzsunshine219]

Summary

• Cherry-pick the certifi 2026.10.19 pin already merged to dev-v2.0.36 in fix: pin certifi 2026.10.19 to drop compromised eMudhra roots #2536 onto main, without bringing the rest of that development line.
• Docker requirements, Poetry lock, and uv lock stop shipping CA bundles that still trust the compromised eMudhra emSign roots.
• This branch name does not match the release branch pattern, so merging it does not start a MemOS release or a PyPI publish. Existing images still need a rebuild.

Test plan

• Confirm certifi==2026.10.19 in docker/requirements.txt, docker/requirements-full.txt, poetry.lock, and uv.lock
• Run uv lock --check
• Rebuild the Docker image from docker/requirements.txt and confirm certifi.__version__ is 2026.10.19

[Memtensor-AI]

🤖 Open Code Review

Target: PR #2539
Task: 5de5d9e1856e3aa1
Base: main
Head: fix/certifi-2026.10.19-main

✅ OpenCodeReview: Review skipped: no items were selected.

Generated by cloud-assistant via Open Code Review.

[Memtensor-AI]

⚠️ Automated Test Results: NO TEST SCOPE

Automated tests were not run because the changed files do not map to an executable test scope.

Details: No executable test scope maps to the changed files. Automated tests were not run; add env.yaml source_mapping + execution for this path family, then rerun. Changed files: (none detected)
Manual review or env.yaml source_mapping/execution coverage is required before merge.

Branch: fix/certifi-2026.10.19-main