[VforVitorio]

Updates the locked certifi bundle from 2025.8.3 to 2026.10.23. The old bundle contains the emSign root associated with compromised intermediate CA keys (GHSA-6q48-6c7w-9gw2). The current bundle removes the compromised root while keeping TLS verification operational.\n\nVerified locally with uv sync --frozen --extra dev, the full Python suite (246 passed), and an HTTPS request to PyPI using certifi.where(). Confirmed the compromised root is absent from the loaded trust store.\n\nThis change only updates uv.lock.

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters: 1

• uv.lock is excluded by !**/*.lock

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 273ae9e9-42d6-47d9-a36f-fb869d954a5e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn