From cc0fb844abd7964196bd6452912574810e94d5a0 Mon Sep 17 00:00:00 2001
From: Omer Cohen <639682+omercnet@users.noreply.github.com>
Date: Thu, 22 Oct 2026 10:18:59 +0000
Subject: [PATCH] fix(deps): require certifi>=2026.10.19 to distrust
 compromised eMudhra CAs

---
 pyproject.toml | 2 +-
 uv.lock        | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index 893c13324..a2a99923c 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -25,7 +25,7 @@ classifiers = [
 ]
 dependencies = [
     "httpx>=0.28,<0.29",
-    "certifi",
+    "certifi>=2026.10.19",
     "pyjwt[crypto]>=2.4.0",
     "email-validator>=2,<3",
 ]
diff --git a/uv.lock b/uv.lock
index 0846cba9e..2ab059ab2 100644
--- a/uv.lock
+++ b/uv.lock
@@ -104,11 +104,11 @@ wheels = [
 
 [[package]]
 name = "certifi"
-version = "2026.6.17"
+version = "2026.10.19"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/c9/c7/424b75da314c1045981bd9777432fad05a9e0c69daa4ed7e308bbaffe405/certifi-2026.6.17.tar.gz", hash = "sha256:024c88eeec92ca068db80f02b8b07c9cef7b9fe261d1d535abfd5abd6f6af432", size = 134594, upload-time = "2026-06-17T10:31:07.894Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/a6/bd/1436c50cc46699de0230fbaacc1d1de7bfec413176099949e9d5112e88f2/certifi-2026.10.19.tar.gz", hash = "sha256:035c1e85572b141bf1c3a3eff0e33a8eb74917522f2559075ff8d2fea780a1ae", size = 137598, upload-time = "2026-10-20T02:24:16.604Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/ef/2f/c5464532e965badff2f4c4c1a3a83f5697f0d7c407ed0cda44aaa99bb451/certifi-2026.6.17-py3-none-any.whl", hash = "sha256:2227dcbaafe0d2f59279d1762ddddc37783ed4354594f194ffc31d20f41fc3db", size = 133289, upload-time = "2026-06-17T10:31:06.348Z" },
+    { url = "https://files.pythonhosted.org/packages/c4/51/29046e48f693c54e5b7412216d447a1d8362c9653148d98c02cdf65fa733/certifi-2026.10.19-py3-none-any.whl", hash = "sha256:42d35340cc5b9ba78e818ddbff0c5b1c2b779de448a340fd1b989f5fa8670e1b", size = 136464, upload-time = "2026-10-20T02:24:15.072Z" },
 ]
 
 [[package]]
@@ -665,7 +665,7 @@ types = [
 
 [package.metadata]
 requires-dist = [
-    { name = "certifi" },
+    { name = "certifi", specifier = ">=2026.10.19" },
     { name = "email-validator", specifier = ">=2,<3" },
     { name = "flask", marker = "extra == 'flask'", specifier = ">=2" },
     { name = "httpx", specifier = ">=0.28,<0.29" },