Skip to content

Commit 669a645

Browse files
Merge pull request #192 from jrobhoward/cacert-remediation
Require certifi 2026.10.19 (CVE-2026-111943)
2 parents 3d2482c + 727ecc8 commit 669a645

3 files changed

Lines changed: 7 additions & 1 deletion

File tree

‎CHANGELOG.md‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,11 @@
99
how a consumer would use the library or CLI tool (e.g. adding unit tests, updating documentation, etc) are not captured
1010
here.
1111

12+
## 2.12.6 - 2026-10-23
13+
14+
### Security
15+
- Require `certifi` 2026.10.19 or newer so TLS verification rejects compromised eMudhra intermediate CAs (CVE-2026-111943)
16+
1217
## 2.12.5 - 2026-09-30
1318
- Fixed an issue where listing trusted activities in some cases would not return the entire list.
1419

‎pyproject.toml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,7 @@ classifiers = [
2525
]
2626
dependencies = [
2727
"boltons",
28+
"certifi>=2026.10.19",
2829
"requests",
2930
"requests-toolbelt",
3031
"rich",

‎src/_incydr_sdk/__version__.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
11
# SPDX-FileCopyrightText: 2022-present Code42 Software <integrations@code42.com>
22
#
33
# SPDX-License-Identifier: MIT
4-
__version__ = "2.12.5"
4+
__version__ = "2.12.6"

0 commit comments

Comments
 (0)