Skip to content

fix(deps): vuln certifi (major → 2026.10.23) [tests/integration/requirements.txt] - #883

Merged
gh-worker-dd-mergequeue-cf854d[bot] merged 1 commit into
mainfrom
engraver-auto-version-upgrade/major/pip/integration/0-1794206116
Nov 11, 2026
Merged

gh-worker-dd-mergequeue-cf854d[bot] merged 1 commit into
mainfrom
engraver-auto-version-upgrade/major/pip/integration/0-1794206116

Conversation

@gh-worker-campaigns-3e9aa4

Copy link
Copy Markdown
Contributor

Summary: Critical-severity security update — 1 package upgraded (MAJOR changes included)

Manifests changed:

  • tests/integration/requirements.txt (pip)

✅ Action Required: Please review the changes below. If they look good, approve and merge this PR.


Updates

Package From To Type Dep Type Vulnerabilities Fixed
certifi 2024.12.14 2026.10.23 major Direct 1 CRITICAL

Warning

Major Version Upgrade

This update includes major version changes that may contain breaking changes. Please:

  • Review the changelog/release notes for breaking changes
  • Test thoroughly in a staging environment
  • Update any code that depends on changed APIs
  • Ensure all tests pass before merging

Security Details

🚨 Critical & High Severity (1 fixed)
Package CVE Severity Summary Unsafe Version Fixed In Case
certifi GHSA-6q48-6c7w-9gw2 CRITICAL certifi bundles emSign root CAs with compromised intermediate CA keys 2024.12.14 2026.10.18 -

Review Checklist

Extra review is recommended for this update:

  • Review changes for compatibility with your code
  • Check release notes for breaking changes
  • Run integration tests to verify service behavior
  • Test in staging environment before production
  • Monitor key metrics after deployment
  • Approve and merge this PR

Update Mode: all_vulns

🤖 Generated by DataDog Automated Dependency Management System

@datadog-datadog-prod-us1

datadog-datadog-prod-us1 Bot commented Nov 9, 2026 •

Copy link
Copy Markdown
Contributor

Pipelines

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 6233567 | Docs | View more details | Give us feedback!

…ts.txt]

Co-authored-by: gh-worker-campaigns-3e9aa4[bot] <244854796+gh-worker-campaigns-3e9aa4[bot]@users.noreply.github.com>
@gh-worker-campaigns-3e9aa4

Copy link
Copy Markdown
Contributor Author

Auto-rebase complete

Branch is up to date with main — rebased onto 3464eb2.


Auto-Rebase · Add no-auto-rebase to opt out

@dd-octo-sts-2c363b
dd-octo-sts-2c363b Bot force-pushed the engraver-auto-version-upgrade/major/pip/integration/0-1794206116 branch from 08f18de to 6233567 Compare November 10, 2026 15:23
@dd-octo-sts
dd-octo-sts Bot marked this pull request as ready for review November 10, 2026 19:08
@dd-octo-sts
dd-octo-sts Bot requested review from a team as code owners November 10, 2026 19:08
@dd-prapprover-prod-77c48c

dd-prapprover-prod-77c48c Bot commented Nov 10, 2026 •

Copy link
Copy Markdown

PRApprover will approve and merge this PR, FAQ, #dx-source-code-management

🛠️ PRApproval Status

  • ✅ PR is eligible for auto-approval by rule dependency-management-version-updater - 2026-11-10T19:09:16Z
  • ✅ CI tests passed - 2026-11-10T19:09:21Z
  • ✅ Approved (commit: 6233567) - 2026-11-10T19:09:25Z
  • ✅ Merge Started
  • ⬜ Merged

➡️ Current phase: ⏳ Merge via MergeQueue is still pending...

@dd-prapprover-prod-77c48c dd-prapprover-prod-77c48c Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This PR has been automatically approved by the DD PR Approver bot.

@datadog-datadog-prod-us1 datadog-datadog-prod-us1 Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bits Code Review: PASS

More details

The updated certifi package supports the integration suite’s Python versions, and its CA bundle loads successfully. Full integration behavior remains unverified.

Was this helpful? React 👍 or 👎

Open Bits AI session

🤖 Bits Code Review · Commit 6233567

@gh-worker-dd-mergequeue-cf854d
gh-worker-dd-mergequeue-cf854d Bot deleted the engraver-auto-version-upgrade/major/pip/integration/0-1794206116 branch November 11, 2026 11:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant