fix(deps): bump certifi to 2026.10.19

Merged
LA
2d ago
+14-5

Why

Eight eMudhra intermediate CA private keys were confirmed compromised (article). certifi 2026.10.19 drops the emSign ECC Root CA - G3 root. requests and httpx trust certifi's bundle and do not check revocation, so the older bundle accepts certificates chaining to that root.

What

  • uv.lock: certifi upgraded to 2026.10.19 (uv lock --upgrade-package certifi; no other packages changed).
  • Version bumped to 0.46.6 with a CHANGELOG entry.
  • No certifi floor added to pyproject.toml, so downstream installs are not constrained.

Tests: lock consistency checked locally; full suites left to CI.

Also requires certifi>=2026.10.19 in [project].dependencies and in gen.yaml python.additionalDependencies.main, so pip installs get the new bundle and Speakeasy regeneration keeps the floor.

🤖 Generated with Claude Code