Update dependency certifi to v2024.7.4 [SECURITY] - autoclosed
Metadata
Current evaluation
Renovate's certifi 2024.7.4 security update was autoclosed without merging after prolonged inactivity.
Resolution: closed stale
Reason: canonical/imagecraft#45 was marked autoclosed, and repository metadata records it as closed without merging after inactivity. No resolving PR or certifi update commit was found.
Evaluated by: mr-cal-bot
No scores available.
Issue body
[](https://renovatebot.com)
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [certifi](https://togithub.com/certifi/python-certifi) | `==2024.6.2` -> `==2024.7.4` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
### GitHub Vulnerability Alerts
#### [CVE-2024-39689](https://togithub.com/certifi/python-certifi/security/advisories/GHSA-248v-346w-9cwc)
Certifi 2024.07.04 removes root certificates from "GLOBALTRUST" from the root store. These are in the process of being removed from Mozilla's trust store.
GLOBALTRUST's root certificates are being removed pursuant to an investigation which identified "long-running and unresolved compliance issues". Conclusions of Mozilla's investigation can be found [here]( https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/XpknYMPO8dI).
---
### Release Notes
<details>
<summary>certifi/python-certifi (certifi)</summary>
### [`v2024.7.4`](https://togithub.com/certifi/python-certifi/compare/2024.06.02...2024.07.04)
[Compare Source](https://togithub.com/certifi/python-certifi/compare/2024.06.02...2024.07.04)
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "" in timezone Etc/UTC, Automerge - "every weekend" in timezone Etc/UTC.
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/canonical/imagecraft).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40MjEuOSIsInVwZGF0ZWRJblZlciI6IjM3LjQyMS45IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed stale | Renovate's certifi 2024.7.4 security update was autoclosed without merging after prolonged inactivity. | |
| stealth/space-bunny-alpha | — | closed stale | Renovate’s certifi 2024.7.4 security update was autoclosed without merging after inactivity. | |
| qwen/qwen3.6-35b-a3b | — | — | Renovate dependency update for certifi to v2024.7.4 was autoclosed due to inactivity. Automerge was disabled, and the branch was never merged. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Renovate PR updating certifi to v2024.7.4 for CVE-2024-39689 was autoclosed without merging. Automerge was disabled by config, and the branch was automatically closed due to staleness or being superseded. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #15 Update dependency certifi to v2023 [SECURITY] - autoclosed | imagecraft | closed | Renovate PR #15 proposed certifi 2023.7.22 for security fixes but was autoclosed unmerged after inactivity; no resolving merge or commit was recorded. | |
| #4897 chore(deps): update dependency certifi to v2024 [security] - autoclosed | snapcraft | closed | Autoclosed unmerged as redundant; certifi 2024.7.4 landed via #4896 (a4e2895da), with the matching docs update later merged in #4903. | |
| #1181 chore(deps): update dependency certifi to v2023.7.22 [security] - autoclosed | charmcraft | closed | Autoclosed after the same certifi 2023.7.22 security update was merged via Dependabot PR #1182 in commit 8350a166. | |
| #3 Update dependency future to v0.18.3 [SECURITY] - autoclosed | imagecraft | closed | Renovate PR #3 was autoclosed without merging after prolonged inactivity, so the future 0.18.3 update for CVE-2022-40899 was not delivered. | |
| #12 Update dependency requests to v2.31.0 [SECURITY] - autoclosed | imagecraft | closed | Renovate's requests 2.28.1→2.31.0 security bump (CVE-2023-32681) got no reviews and was auto-closed as stale after ~993 days unmerged; requests reached 2.33.0 much later via #308 (cbca1c1). | |
| #5253 build(deps): update dependency cryptography to v44 [security] (hotfix/7.5) - autoclosed | snapcraft | closed | Renovate's cryptography 44.0.1 hotfix/7.5 update was autoclosed unmerged after prolonged inactivity; no review, CI result, or resolving commit was recorded. |