Skip to content
This repository was archived by the owner on Aug 29, 2023. It is now read-only.

Update dependency certifi from 2022.12.07 to v2023 [SECURITY]#46

Merged
wbaker-figure merged 1 commit intomainfrom
renovate/pypi-certifi-vulnerability
Aug 16, 2023
Merged

Update dependency certifi from 2022.12.07 to v2023 [SECURITY]#46
wbaker-figure merged 1 commit intomainfrom
renovate/pypi-certifi-vulnerability

Conversation

@figure-renovate
Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
certifi ==2022.12.07 -> ==2023.7.22 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2023-37920

Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store. These are in the process of being removed from Mozilla's trust store.

e-Tugra's root certificates are being removed pursuant to an investigation prompted by reporting of security issues in their systems. Conclusions of Mozilla's investigation can be found here.


Release Notes

certifi/python-certifi

v2023.7.22

Compare Source

v2023.5.7

Compare Source


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

@figure-renovate figure-renovate bot requested a review from a team July 26, 2023 10:38
@figure-renovate figure-renovate bot force-pushed the renovate/pypi-certifi-vulnerability branch from 4d28c61 to 1f21c47 Compare August 7, 2023 06:43
@wbaker-figure wbaker-figure merged commit 10a54d9 into main Aug 16, 2023
@wbaker-figure wbaker-figure deleted the renovate/pypi-certifi-vulnerability branch August 16, 2023 14:43
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant