Bump certifi from 2022.6.15 to 2022.12.7
Metadata
Current evaluation
Dependabot's certifi 2022.6.15→2022.12.7 bump was closed unmerged as redundant: Renovate PR canonical/charmcraft#946 had already landed the same upgrade (commit 8ab4b1bd, merge 9103c49c).
Resolution: closed superseded
Reason: Dependabot itself commented on 2022-12-12 that "certifi is up-to-date now, so this is no longer needed" and closed the PR. The identical Renovate security bump PR #946 (commit 8ab4b1bd, merged as 9103c49c) had already applied certifi 2022.12.7 to the project.
Evaluated by: mr-cal-bot
No scores available.
Issue body
Bumps [certifi](https://github.com/certifi/python-certifi) from 2022.6.15 to 2022.12.7.
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/certifi/python-certifi/commit/9e9e840925d7b8e76c76fdac1fab7e6e88c1c3b8"><code>9e9e840</code></a> 2022.12.07</li>
<li><a href="https://github.com/certifi/python-certifi/commit/b81bdb269f1edb791bcd4ec8a9d0c053758f961a"><code>b81bdb2</code></a> 2022.09.24</li>
<li><a href="https://github.com/certifi/python-certifi/commit/939a28ffc57b1613770f572b584745c7b6d43e7d"><code>939a28f</code></a> 2022.09.14</li>
<li><a href="https://github.com/certifi/python-certifi/commit/aca828a78e73235a513dff9ebc181a47ef7dbf7b"><code>aca828a</code></a> 2022.06.15.2</li>
<li><a href="https://github.com/certifi/python-certifi/commit/de0eae12a6d5794a4c1e33052af6717707ce1fcc"><code>de0eae1</code></a> Only use importlib.resources's new files() / Traversable API on Python ≥3.11 ...</li>
<li><a href="https://github.com/certifi/python-certifi/commit/b8eb5e9af9143b22b7f651942b393e369ed4c52a"><code>b8eb5e9</code></a> 2022.06.15.1</li>
<li><a href="https://github.com/certifi/python-certifi/commit/47fb7ab715965684e035292d2ad3386aabdc4d25"><code>47fb7ab</code></a> Fix deprecation warning on Python 3.11 (<a href="https://github-redirect.dependabot.com/certifi/python-certifi/issues/199">#199</a>)</li>
<li><a href="https://github.com/certifi/python-certifi/commit/b0b48e059995f455ac1e79b3ad373ad4ef355516"><code>b0b48e0</code></a> fixes <a href="https://github-redirect.dependabot.com/certifi/python-certifi/issues/198">#198</a> -- update link in license</li>
<li>See full diff in <a href="https://github.com/certifi/python-certifi/compare/2022.06.15...2022.12.07">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/canonical/charmcraft/network/alerts).
</details>
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed superseded | Dependabot's certifi 2022.6.15→2022.12.7 bump was closed unmerged as redundant: Renovate PR canonical/charmcraft#946 had already landed the same upgrade (commit 8ab4b1bd, merge 9103c49c). | |
| stealth/space-bunny-alpha | — | closed superseded | Closed unmerged as redundant: canonical/charmcraft#946 had already upgraded certifi to 2022.12.7, merging as commit 9103c49c. | |
| qwen/qwen3.6-35b-a3b | — | — | Closed without merging as the certifi dependency was already updated to the target version. Dependabot automatically resolved the request as it was no longer needed. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Automated certifi update to 2022.12.7 was abandoned because the dependency is already at the latest version, making the change unnecessary. |
Update history
No update history recorded yet.
Related work
-
Superseded By:
canonical/charmcraft#946
(confidence 97%)
Renovate PR applying the same certifi 2022.6.15 -> 2022.12.7 security bump was merged (8ab4b1bd / 9103c49c) before #945 was closed.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #1182 build(deps): bump certifi from 2023.5.7 to 2023.7.22 | charmcraft | merged | Merged PR #1182 in commit 8350a166, upgrading certifi from 2023.5.7 to 2023.7.22. | |
| #4000 build(deps): bump certifi from 2022.9.24 to 2022.12.7 | snapcraft | closed | Closed unmerged as obsolete after certifi 2023.5.7 was adopted in #4129 (fc9f9ae44), superseding the proposed 2022.12.7 update. | |
| #4896 build(deps): bump certifi from 2023.11.17 to 2024.7.4 | snapcraft | merged | Merged PR #4896, updating certifi from 2023.11.17 to 2024.7.4 in commit a4e2895da. | |
| #946 Update dependency certifi to v2022.12.7 [SECURITY] | charmcraft | merged | Renovate security bump of certifi 2022.6.15 -> 2022.12.7 (removes TrustCor roots, CVE-2022-23491) merged via PR #946 (commit 8ab4b1bd, merge 9103c49c), pinning the version in requirements. | |
| #4291 build(deps): bump certifi from 2022.12.7 to 2023.7.22 in /docs/.sphinx | snapcraft | merged | Dependabot PR merged as commit 363d2bd47, bumping certifi 2022.12.7 -> 2023.7.22 in docs/.sphinx requirements. Companion PR #4292 did the same for the main requirements file. | |
| #4292 build(deps): bump certifi from 2023.5.7 to 2023.7.22 | snapcraft | merged | Dependabot PR #4292 merged via commit 423826a11, bumping certifi 2023.5.7 → 2023.7.22 in snapcraft's requirements. Companion docs bump in #4291 (commit 363d2bd47). | |
| #1695 chore(deps): update dependency certifi to v2024.6.2 | charmcraft | merged | Renovate dependency bump PR: certifi 2024.2.2 → 2024.6.2 merged into main via commit 7460a6fe (+2/-2 lines in 2 requirements files), approved by 2 reviewers. |