Skip to content

Emsign ca update - #1210

Merged
jeromekelleher merged 3 commits into
tskit-dev:mainfrom
jeromekelleher:emsign-ca-update
Oct 29, 2026
Merged

jeromekelleher merged 3 commits into
tskit-dev:mainfrom
jeromekelleher:emsign-ca-update

Conversation

@jeromekelleher

Copy link
Copy Markdown
Member

No description provided.

Jerome Kelleher added 3 commits October 29, 2026 15:17
Compromised eMudhra intermediate CA keys allow forged TLS certificates
for any host (GHSA-6q48-6c7w-9gw2). Bump the CI uv pin to 0.13.6
(fixed in 0.13.4), certifi to 2026.10.23 and cibuildwheel to 4.3.5 in
the lockfile, and pypa/gh-action-pypi-publish to v1.14.3 where used.

See https://discuss.python.org/t/109576
v22 pins uv 0.13.6 for the eMudhra/emSign CA incident.
@jeromekelleher
jeromekelleher marked this pull request as ready for review October 29, 2026 15:45
@codecov

codecov Bot commented Oct 29, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 92.68%. Comparing base (605b4fb) to head (21fc049).
⚠️ Report is 3 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #1210      +/-   ##
==========================================
+ Coverage   92.66%   92.68%   +0.02%     
==========================================
  Files          16       16              
  Lines        4910     4910              
  Branches      783      783              
==========================================
+ Hits         4550     4551       +1     
  Misses        254      254              
+ Partials      106      105       -1     
Flag Coverage Δ
C 82.61% <ø> (ø)
c-python 72.72% <ø> (ø)
python-tests 93.64% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

Components Coverage Δ
Python API 93.77% <ø> (+0.03%) ⬆️
Python C interface 89.82% <ø> (ø)
C library 91.15% <ø> (ø)
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@jeromekelleher
jeromekelleher merged commit 1283148 into tskit-dev:main Oct 29, 2026
13 checks passed
@jeromekelleher
jeromekelleher deleted the emsign-ca-update branch October 29, 2026 16:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant