← Back to issue list

build(deps): bump certifi to 2026.10.19

View original Github issue

Metadata

Project
snapcraft
Number
#6512
Type
pull request
State
merged
Author
mr-cal
Labels
—
Created
Updated
Closed

Current evaluation

Bump certifi dependency to 2026.10.19 to resolve an OSV vulnerability. Merged into main.

Resolution: closed resolved

Reason: PR #6512 was merged, bumping the certifi dependency to version 2026.10.19 to resolve an OSV vulnerability.

Evaluated by: mr-cal-bot

No scores available.

Issue body

Resolves an OSV. --- - [x] I've followed the [contribution guidelines](https://github.com/canonical/snapcraft/blob/main/CONTRIBUTING.md). - [x] I've signed the [CLA](http://www.ubuntu.com/legal/contributors/). - [ ] I've successfully run `make lint && make test`. - [ ] I've added or updated any relevant documentation. - [ ] In documents I changed, I [added a meta description](https://canonical-starflow.readthedocs-hosted.com/how-to/add-a-page-meta-description/) if one was missing. - [ ] I've updated the relevant release notes.

Evaluation history

Date Model Scores Action Summary
qwen/qwen3.6-35b-a3b — closed resolved Bump certifi dependency to 2026.10.19 to resolve an OSV vulnerability. Merged into main.
qwen/qwen3.6-35b-a3b
Impact: 50
Quick Win: 36
Complexity: 10
Confidence: 90
Actionability: 80
needs review Bumps certifi dependency to 2026.10.19 to resolve an OSV security vulnerability. Small change (+7/-5 lines) with passing CI, awaiting maintainer review.
qwen/qwen3.6-35b-a3b
Impact: 55
Quick Win: 40
Complexity: 10
Confidence: 85
Actionability: 80
needs review Bumps certifi dependency to 2026.10.19 to resolve an OSV security vulnerability. Small change (+7/-5 lines) with passing CI, awaiting maintainer review.

Update history

Date Change
merged
updated
created

Related issues

Issue Project State Summary Similarity
#1182 build(deps): bump certifi from 2023.5.7 to 2023.7.22 charmcraft merged Merged PR #1182 in commit 8350a166, upgrading certifi from 2023.5.7 to 2023.7.22.
80%
#4896 build(deps): bump certifi from 2023.11.17 to 2024.7.4 snapcraft merged Merged PR #4896, updating certifi from 2023.11.17 to 2024.7.4 in commit a4e2895da.
79%
#1936 build(deps): update dependency certifi to v2024.8.30 (main) charmcraft merged Merged #1936 via commit 2f076407, updating certifi from 2024.7.4 to 2024.8.30 across two dependency files.
78%
#4000 build(deps): bump certifi from 2022.9.24 to 2022.12.7 snapcraft closed Closed unmerged as obsolete after certifi 2023.5.7 was adopted in #4129 (fc9f9ae44), superseding the proposed 2022.12.7 update.
78%
#4292 build(deps): bump certifi from 2023.5.7 to 2023.7.22 snapcraft merged Dependabot PR #4292 merged via commit 423826a11, bumping certifi 2023.5.7 → 2023.7.22 in snapcraft's requirements. Companion docs bump in #4291 (commit 363d2bd47).
76%
#4291 build(deps): bump certifi from 2022.12.7 to 2023.7.22 in /docs/.sphinx snapcraft merged Dependabot PR merged as commit 363d2bd47, bumping certifi 2022.12.7 -> 2023.7.22 in docs/.sphinx requirements. Companion PR #4292 did the same for the main requirements file.
75%
#5376 build(deps): update dependency certifi to v2024.12.14 (main) snapcraft merged Renovate bumped certifi from 2024.7.4 to 2024.12.14 in snapcraft's main requirements; merged as commit 9cc9b0678 with 2 approvals.
75%
#6221 build(deps): bump pip snapcraft merged Merged PR #6221 in commit 948f284fa, updating the pip build dependency to resolve an OSV security vulnerability.
72%
#4114 build(deps): bump certifi from 2022.9.24 to 2022.12.7 in /docs/.sphinx snapcraft merged Merged PR #4114, updating certifi from 2022.9.24 to 2022.12.7 in the Sphinx documentation environment.
72%
#4903 build(deps): bump certifi from 2023.7.22 to 2024.7.4 in /docs/.sphinx snapcraft merged Merged PR #4903 in commit ccbc7b3d9, updating the Sphinx docs dependency certifi from 2023.7.22 to 2024.7.4.
72%