build(deps): bump certifi from 2022.9.24 to 2022.12.7
Metadata
Current evaluation
Closed unmerged as obsolete after certifi 2023.5.7 was adopted in #4129 (fc9f9ae44), superseding the proposed 2022.12.7 update.
Resolution: closed superseded
Reason: Maintainer @lengau closed the PR on 2023-05-18 because Snapcraft already used a newer certifi version. Commit fc9f9ae44 in #4129 had updated certifi to 2023.5.7, making this unmerged 2022.12.7 bump obsolete.
Evaluated by: mr-cal-bot
No scores available.
Issue body
Bumps [certifi](https://github.com/certifi/python-certifi) from 2022.9.24 to 2022.12.7.
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/certifi/python-certifi/commit/9e9e840925d7b8e76c76fdac1fab7e6e88c1c3b8"><code>9e9e840</code></a> 2022.12.07</li>
<li>See full diff in <a href="https://github.com/certifi/python-certifi/compare/2022.09.24...2022.12.07">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/snapcore/snapcraft/network/alerts).
</details>> **Note**
> Automatic rebases have been disabled on this pull request as it has been open for over 30 days.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed superseded | Closed unmerged as obsolete after certifi 2023.5.7 was adopted in #4129 (fc9f9ae44), superseding the proposed 2022.12.7 update. | |
| stealth/space-bunny-alpha | — | closed superseded | Closed unmerged as obsolete after certifi advanced beyond 2022.12.7; later update #4292 merged as commit 423826a11. | |
| stealth/space-bunny-alpha | — | closed superseded | Dependabot PR #4000 was closed unmerged because Snapcraft already used a newer certifi; PR #4292 later merged commit 423826a11 with certifi 2023.7.22. | |
| stealth/space-bunny-alpha | — | closed superseded | Closed unmerged on 2023-05-18 as obsolete after a newer certifi version was already adopted; Dependabot acknowledged the closure. | |
| stealth/space-bunny-alpha | — | closed superseded | Closed unmerged as obsolete after the project adopted a newer certifi version. The same 2022.12.7 update was later merged in #4114, while Dependabot acknowledged this PR’s closure. | |
| qwen/qwen3.6-35b-a3b | — | — | Closed without merging because the project already adopted a newer certifi version, rendering the update obsolete. Dependabot acknowledged the closure. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Closed and superseded as a newer version of certifi is already in use. Dependabot acknowledged the closure and will stop generating updates for this version. |
Update history
No update history recorded yet.
Related work
-
Superseded By:
canonical/snapcraft#4129
(confidence 95%)
Commit fc9f9ae44 updated certifi from 2022.12.7 to 2023.5.7 before #4000 was closed.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #1182 build(deps): bump certifi from 2023.5.7 to 2023.7.22 | charmcraft | merged | Merged PR #1182 in commit 8350a166, upgrading certifi from 2023.5.7 to 2023.7.22. | |
| #4896 build(deps): bump certifi from 2023.11.17 to 2024.7.4 | snapcraft | merged | Merged PR #4896, updating certifi from 2023.11.17 to 2024.7.4 in commit a4e2895da. | |
| #4114 build(deps): bump certifi from 2022.9.24 to 2022.12.7 in /docs/.sphinx | snapcraft | merged | Merged PR #4114, updating certifi from 2022.9.24 to 2022.12.7 in the Sphinx documentation environment. | |
| #4291 build(deps): bump certifi from 2022.12.7 to 2023.7.22 in /docs/.sphinx | snapcraft | merged | Dependabot PR merged as commit 363d2bd47, bumping certifi 2022.12.7 -> 2023.7.22 in docs/.sphinx requirements. Companion PR #4292 did the same for the main requirements file. | |
| #1936 build(deps): update dependency certifi to v2024.8.30 (main) | charmcraft | merged | Merged #1936 via commit 2f076407, updating certifi from 2024.7.4 to 2024.8.30 across two dependency files. | |
| #1234 build(deps): update dependency certifi to v2024.12.14 (hotfix/1.5) | rockcraft | closed | Certifi 2024.12.14 hotfix PR was closed unmerged after 113 days of inactivity; no resolving PR or commit was found. | |
| #4292 build(deps): bump certifi from 2023.5.7 to 2023.7.22 | snapcraft | merged | Dependabot PR #4292 merged via commit 423826a11, bumping certifi 2023.5.7 → 2023.7.22 in snapcraft's requirements. Companion docs bump in #4291 (commit 363d2bd47). | |
| #5376 build(deps): update dependency certifi to v2024.12.14 (main) | snapcraft | merged | Renovate bumped certifi from 2024.7.4 to 2024.12.14 in snapcraft's main requirements; merged as commit 9cc9b0678 with 2 approvals. | |
| #6512 build(deps): bump certifi to 2026.10.19 | snapcraft | merged | Bump certifi dependency to 2026.10.19 to resolve an OSV vulnerability. Merged into main. | |
| #4903 build(deps): bump certifi from 2023.7.22 to 2024.7.4 in /docs/.sphinx | snapcraft | merged | Merged PR #4903 in commit ccbc7b3d9, updating the Sphinx docs dependency certifi from 2023.7.22 to 2024.7.4. |