From patchwork Fri Oct 23 10:36:55 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Paul Barker X-Patchwork-Id: 101793 Received: from fhigh-a3-smtp.messagingengine.com (fhigh-a3-smtp.messagingengine.com [103.168.172.154]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.4264.1792751826079210755 for ; Fri, 23 Oct 2026 03:37:06 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@pbarker.dev header.s=fm1 header.b=hbwXM90y; dkim=pass header.i=@messagingengine.com header.s=fm2 header.b=gekRiSMJ; spf=pass (domain: pbarker.dev, ip: 103.168.172.154, mailfrom: paul@pbarker.dev) Received: from phl-compute-01.internal (phl-compute-01.internal [10.202.2.41]) by mailfhigh.phl.internal (Postfix) with ESMTP id 2898C1400088 for ; Fri, 23 Oct 2026 06:37:05 -0400 (EDT) Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-01.internal (MEProxy); Fri, 23 Oct 2026 06:37:05 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pbarker.dev; h= cc:content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1792751825; x=1792838225; bh=IsM7/XsIrVXB4r+CS1PHKwLuTdex9oPK7hEoE0M1szA=; b= hbwXM90yQJF7ALRnTQSPnYR2xnPezw4B6tydyHeYdD4T2okQbEEWx3Z/gdttnSLd qALQ48Mnqg+XwlNiPZ3JiEdWWQ4eqJHHharIvWKYm6XZzUuFEkOQ2nO+piFfLTjS At8PCxn0njO89bkGllWR0zl+PBqIK74DiwaBUwpLnaZdLPRQelGvJqiJDXvnDc/k X7H5Eo7QbDpBHiKJhwKgJvUe3jWSn67qlpfspjniOCwNggq/RZp6bmNCS3UIXXWP 1by/7BZjldxWxQAnavtaRhsv+N9yVlJ/3ZYTDow5aLxMSlz/Vqf72vEtimKFYAp7 ekpo6YSwN2u1nGWrNxF+MA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; t=1792751825; x=1792838225; bh=I sM7/XsIrVXB4r+CS1PHKwLuTdex9oPK7hEoE0M1szA=; b=gekRiSMJP46Fx7ygY 8LywUvCZN5bOOdDmfFoGPKPHaDPilAPyx5GO7jKOxAIL5uBKcvJ3Vf9tFXnp5JX9 mIZsAcKb0Poqtzlm8LoYlINC0zd2xcfxWLe7LZRcTlW8Si91s4BWQDmRQK1MBT3i WiyiWFR528UVLLKUqYZH4IHTo8WI6lgp+bzUK11rCuEqPLCNrmkuqyEDVjjpeCA7 B8flcAgGoqh3WdGXFtxvhu1AdA8+T9VxwdooSaBz+KYSgaoaryaXS7riKIxUL6Fn fD2icULZeKiMpS/jYGUeJdycv31tzmocYBQCTFQdYyKAm3KMQx7IC3pq7r9OwTrN ZeFmQ== X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=sign d=pbarker.dev a=rsa-sha256; DKIM2-Signature: i=1; m=1; t=1792751825; d=pbarker.dev; mf=PHBhdWxAcGJhcmtlci5kZXY+; rt=PG9wZW5lbWJlZGRlZC1jb3JlQGxpc3RzLm9wZW5lbWJlZGRlZC5vcmc+; s=fm1:rsa-sha256:aSRh6geXCagS7Hmb5eKP5g0tIsERV+3+jL3pdDp8h8k+Amu sTu04Eb2IVxI5YDVTfPWEWUb/qWvIvWHBiClskkC+R5aOP6bLRcMumNmdROmnjlH 9MOeNi/10qvwzU6Xd2iX1Hx0Kh3Ioho0o7HUbH0OVsl1QOfVH8+pxLD9JYKeR8Vv DNaoycQkExUII41+p/dZvpPRbFiRRYaLJRANMgudSEzB1sHmGcFGFx1BZKPw60ne Ya+tN3bM67+/YvIjmD4in7YB1Sv0MJaMYBvj0ZzJvkn9jNTFPrcr0L0PxCi7tV5a iiPCy6aOgcDfkPwMOYdPxd7El3vEwgi4oCOtzWw==; X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=mi-m=1; hc=11; hn=content-transfer-encoding,content-type,date,feedback-id,from, in-reply-to,message-id,mime-version,references,subject,to; Message-Instance: m=1; h=sha256:dFNaPb02LM5Q9d+S/lNUSnHDgtRaYkX6e0Ge9oTbL1g=:eGRFDuAtbX2bjQIU/+EuSzSVPVDkLX2QVwpLnVzjs8g=; X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: dmFkZTEerW58kBxmfujaOJWJQ0MHMYD6sksBew91+uBIkutLUnP6hrOM65iYpZbjmHoIhU SdcJ8OSFTp82r+O/YsuJ+8kogYeMNod0ZzBgzPX99HMbWN837TcfRIwaUXHHKmCZkgoNDP zmrgmyUjWZj6sOM33FpQpe4xn2UvdIluLbNrPIzN7IwNk0qe9dX7sPCzMmXGo4otFEeEcG B+95w/owbGOGQWup5Wuq9OqIoqDS7Fw9V/g71unTmQ+6pL7MH1qXxi+W418FooMTgWUq5d DYCPdpai3WnmJwRz/+/ZWCc3tnOWAxo84pncDX1vR4cW8egFWbQhkMG8xNZw61h9IRc4NC 9z8bwhNq2vij3yjo0UBNR/oc3H6u5TcDf6n2618CN3mExJvMVh84XFw+SC+W78pLJ48wNc zYVm8XiiIfTiJ3kkWZV1LYLbDQ05ndDh4A2vS5pVnoNw/33MLDw2hlLCD6Jhnu5NoVGRUD EnzbQq1iTSKJR2WxPuTFo6Nu347lj6zasxSihjSoZlrBRDeRH+gognj4ZbjRlPOsoNCc6F xcxAMJ4dswS6IC3q+0RBajYxQExGrjHURw26OG4p7LcvZvDdscpBWJvCWz7rCoBMS7mNBe ts5k16uxB2TGyIiivbFWXjHqzeThOwIU2BaIpEjf0zjiRaJjP8CCOHPZQ8wA X-ME-Proxy: Feedback-ID: i51494658:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Fri, 23 Oct 2026 06:37:04 -0400 (EDT) From: Paul Barker Date: Fri, 23 Oct 2026 11:36:55 +0100 Subject: [PATCH wrynose 1/6] ca-certificates: Disable compromised CA certificates MIME-Version: 1.0 Message-Id: <20261023-certs-wrynose-v1-1-83dd2facdbd3@pbarker.dev> References: <20261023-certs-wrynose-v1-0-83dd2facdbd3@pbarker.dev> In-Reply-To: <20261023-certs-wrynose-v1-0-83dd2facdbd3@pbarker.dev> To: openembedded-core@lists.openembedded.org X-Mailer: b4 0.16.0 X-Developer-Signature: v=1; a=openssh-sha256; t=1792751822; l=3496; i=paul@pbarker.dev; s=id_piv_33200296; h=from:subject:message-id; bh=eGRFDuAtbX2bjQIU/+EuSzSVPVDkLX2QVwpLnVzjs8g=; b=U1NIU0lHAAAAAQAAAGgAAAATZWNkc2Etc2hhMi1uaXN0cDI1NgAAAAhuaXN0cDI1NgAAAEEEQ dOfZ4fCf9WdA7cHWnYqW4P6zifYTwJ18a3l28hvdGt3M0CTKu/FWpwoh+x5E487TvYA9iW0goTM GGtdemFzVgAAAAZwYXRhdHQAAAAAAAAABnNoYTUxMgAAAGQAAAATZWNkc2Etc2hhMi1uaXN0cDI 1NgAAAEkAAAAgcwUT0/1pyVCd+t5AXuofdD6bqt8z1rKRMjb+Gb8sr0gAAAAhAJCjrzNHGz+HOj e/cx211SVVAA/4mqS6N5IZOrrxYr6o X-Developer-Key: i=paul@pbarker.dev; a=openssh; fpr=SHA256:IlqExt9TPtGqXrqYg/YPMlsWlOGC6AVubz/PwuYw6KY List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Fri, 23 Oct 2026 10:37:07 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248510 Backported a patch to address the eMudhra Intermediate CA Compromise disclosed at https://emudhra.we-have-a-problem.com. As this is a certificate authority compromise rather than a software flaw it doesn't have a CVE number, but this should be treated like a CVE fix. This is a backport rather than a version bump as Debian did a "non-maintainer upload" 20260816+nmu1 instead of a typical new version release. Signed-off-by: Paul Barker Signed-off-by: Richard Purdie (cherry picked from commit c5098a7074996258e448bc6cf3d4fb1a708f7a42) Signed-off-by: Yoann Congal --- ...mSign-ECC-Root-CA-G3-and-Comodo-AAA-Servi.patch | 35 ++++++++++++++++++++++ .../ca-certificates/ca-certificates_20260816.bb | 1 + 2 files changed, 36 insertions(+) diff --git a/meta/recipes-support/ca-certificates/ca-certificates/0001-Blacklist-emSign-ECC-Root-CA-G3-and-Comodo-AAA-Servi.patch b/meta/recipes-support/ca-certificates/ca-certificates/0001-Blacklist-emSign-ECC-Root-CA-G3-and-Comodo-AAA-Servi.patch new file mode 100644 index 000000000000..9a0258919aa6 --- /dev/null +++ b/meta/recipes-support/ca-certificates/ca-certificates/0001-Blacklist-emSign-ECC-Root-CA-G3-and-Comodo-AAA-Servi.patch @@ -0,0 +1,35 @@ +From d5e08f63b1ca6746a51e62cda4df5483c0d3e2ec Mon Sep 17 00:00:00 2001 +From: Paul Barker +Date: Wed, 21 Oct 2026 07:16:23 +0100 +Subject: [PATCH] Blacklist "emSign ECC Root CA - G3" and "Comodo AAA Services + root" + +[PB: Backported to address the eMudhra Intermediate CA Compromise + disclosed at https://emudhra.we-have-a-problem.com. As this is a + certificate authority compromise rather than a software flaw it + doesn't have a CVE number, but this should be treated like a CVE + fix.] + +Upstream-Status: Backport [https://salsa.debian.org/debian/ca-certificates/-/commit/4a0203e5ce4ce1a064b97387f52ca6a00c97185c] +Signed-off-by: Paul Barker +--- + mozilla/blacklist.txt | 5 +++++ + 1 file changed, 5 insertions(+) + +diff --git a/mozilla/blacklist.txt b/mozilla/blacklist.txt +index d84ceb919906..ba3635f7af87 100644 +--- a/mozilla/blacklist.txt ++++ b/mozilla/blacklist.txt +@@ -3,4 +3,9 @@ + # Blacklist explicitly distrusted certificates to explicitly ignore them and prevent build errors + "Explicitly Distrust DigiNotar Root CA" + ++# Blacklist "emSign ECC Root CA - G3" (cf. #1151413) ++"emSign ECC Root CA - G3" ++# Blacklist "Comodo AAA Services root" (cf. #1151413) ++"Comodo AAA Services root" ++ + # Expired CAs +-- +2.43.0 + diff --git a/meta/recipes-support/ca-certificates/ca-certificates_20260816.bb b/meta/recipes-support/ca-certificates/ca-certificates_20260816.bb index 9dd3a05948c4..1b3865f33bb2 100644 --- a/meta/recipes-support/ca-certificates/ca-certificates_20260816.bb +++ b/meta/recipes-support/ca-certificates/ca-certificates_20260816.bb @@ -19,6 +19,7 @@ SRC_URI = "${DEBIAN_MIRROR}/main/c/ca-certificates/${BPN}_${PV}.tar.xz \ file://0001-update-ca-certificates-don-t-use-Debianisms-in-run-p.patch \ file://0003-update-ca-certificates-use-relative-symlinks-from-ET.patch \ file://0001-Revert-mozilla-certdata2pem.py-print-a-warning-for-e.patch \ + file://0001-Blacklist-emSign-ECC-Root-CA-G3-and-Comodo-AAA-Servi.patch \ " S = "${UNPACKDIR}/ca-certificates" inherit allarch From patchwork Fri Oct 23 10:36:56 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Paul Barker X-Patchwork-Id: 101792 Received: from fhigh-a3-smtp.messagingengine.com (fhigh-a3-smtp.messagingengine.com [103.168.172.154]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.4265.1792751826341264228 for ; Fri, 23 Oct 2026 03:37:06 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@pbarker.dev header.s=fm1 header.b=BABi+iWV; dkim=pass header.i=@messagingengine.com header.s=fm2 header.b=pkp1dHsK; spf=pass (domain: pbarker.dev, ip: 103.168.172.154, mailfrom: paul@pbarker.dev) Received: from phl-compute-05.internal (phl-compute-05.internal [10.202.2.45]) by mailfhigh.phl.internal (Postfix) with ESMTP id A155F140010F for ; Fri, 23 Oct 2026 06:37:05 -0400 (EDT) Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-05.internal (MEProxy); Fri, 23 Oct 2026 06:37:05 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pbarker.dev; h= cc:content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1792751825; x=1792838225; bh=VTDlIt1/Cn7iLR1yHQ78eWzYblnFm5S5jw5jGOULROE=; b= BABi+iWVZDV857CFi2YZwS1d3uNp8HYtwjVrETyei3fFksCdXnLuYR34CY3KTYGB z0gSc2eB4etWRGwlTDCUaEb02aCxlNzJHIBKoKequWlJ2/Hf7mapb7onymgIzaYD FteXMMoRqXh9wqGPYlwSkdGE30w46+2MOHZ2OKhh8ip20raZ5FTYt0xiR9L7fKdi IziayG3QRVi8U8Ue8eCOG3Y6JdsDX7W+0RbBloImF2m84Hg4QeT5QacjZZxpu6ye Cx964JKnMle7DMHey+2xkkA7Gvgb+whPAOh1rTrnY1GqMJRUV95GgmkoRkT5MTeY 1bJH/JZA4DoSujMYTLagtA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; t=1792751825; x=1792838225; bh=V TDlIt1/Cn7iLR1yHQ78eWzYblnFm5S5jw5jGOULROE=; b=pkp1dHsKxTHpgq4Af G/rcHXMfA8lRff6IHgta8cYoi34Gsqe4QjaCbxgF+SxfVNcvKUC7QeC3V0/viJpR G6ulptQh31DeTjd9QO2R34JLMkq763RcwcxFKcYXsUjvTnq+Hntp2sYelixxt4iY a+NkAK44I+z2GhbkvQKZ+/a9yv8wqWXGpe4TlwMCGNIhbiRyh4/XXsnyqKllHeIP hyPk8YjE98JhottC4aYmqORp+Lti492to0DV3kZIQJ4OxpV0FO/HCxg4EkO08IcJ OXP1J3FbgipqqE0ZwjUWVuh8HLamQSl+SATNlESJ4w+unYOeTImJTga/ptUzOCNh 5exWg== X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=sign d=pbarker.dev a=rsa-sha256; DKIM2-Signature: i=1; m=1; t=1792751825; d=pbarker.dev; mf=PHBhdWxAcGJhcmtlci5kZXY+; rt=PG9wZW5lbWJlZGRlZC1jb3JlQGxpc3RzLm9wZW5lbWJlZGRlZC5vcmc+; s=fm1:rsa-sha256:OiaPDduatA+fi9I6dUnwBcj8IeNRKrE7tK84MlatL01BRel i/qkG4gqrA4qXTdvd+0iuzAvI4Mkp/CUkDUSYEkZSHfxqmhNsMgL2X2SIkD3HX4z nQcd9SNStBgNoFBSEMNRM+YLS/sdvFTLDtVu9LiDsuxqR0LYkfV7al/Uo+d8mnCB nvKOwke0s8O7IZYja8Stg2Mfo1V6g58wt0vqWxdLiX9cC/rGlYRi0O7v0UCU3+be x2onTOYfgYqrVAHiOTEmniBZs4mZsO6TZyh1j1AxPgh/mLmcag+9Be0mWfeSWCNT Q0eHRpEGsw/N8bHDgZhfwoY4jjDohehZ+JS8f9Q==; X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=mi-m=1; hc=11; hn=content-transfer-encoding,content-type,date,feedback-id,from, in-reply-to,message-id,mime-version,references,subject,to; Message-Instance: m=1; h=sha256:4yCy97XUO5dtW/b2RjSeoWBeg18zLtUcXjVZheHcjQs=:2QA+pClgtCOg2+H2BDzGryF7ThnBy72rQSBBNM6Gl1k=; X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: dmFkZTGdXeWEdgZnrxsR0LfdKteSMLbi16IvVblMar6iaBUXKRIad9b/S1RFbYAPHM8w8i fH0EqDVuO+IAqrEfs25nXUvA98hpdiGCUYS+QIeihzz6K/vqil48ncRKsz1V8CDB9cDPoS rh4Dy76yV3MwTbJpWnKbCgRHE2rUZ3jLi4Q+Tmb9orUNsVUuWWJQgMpKiK+vij8nCQGmIK w9DEWSSOeRqTSsgrKYtDMv0d7E63TMM7B7H7cX4Ff0VskLU1f0REdI85KRRhfWfFubUM6G hYTYiCyHLl4iZwZYhXPNsBPuLPQ4hiMoT1sf5XoAWhtYx9BZYb0fupOe1GMh8OYkTjuyZH dUXiW8NsmG/CmarvK7oCgTmSpyY9NHUx1mTYsCaKJb7V4nfqW/4nyJzQz439/4GiTijB/B aji5Twe0SUwAxXD77moBjdYMjQO3QVnX9t3HLkNAP0AHzUl5fOxzMi8sDWEcOvVPMnZeJ7 ob8GzlH+MY2d72MhNxEJ5YpnhWkcxhIHs4p/cl7QeFBY59OCoeTJITbs1SePDloR82CKfm HksFQ5kl6QxDsg7+PApKrsawMNtQ+a3Z5BjhQJ/tr9YUgYeSLnj/9mQbeH2QKctvCf+rp5 WVf6N7Pu4kPMQfQtSAC25miQmtvqLToLYPpGT1JxWR73afJ82CvPHydVOl0w X-ME-Proxy: Feedback-ID: i51494658:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Fri, 23 Oct 2026 06:37:05 -0400 (EDT) From: Paul Barker Date: Fri, 23 Oct 2026 11:36:56 +0100 Subject: [PATCH wrynose 2/6] python3-certifi: upgrade 2026.2.25 -> 2026.4.22 MIME-Version: 1.0 Message-Id: <20261023-certs-wrynose-v1-2-83dd2facdbd3@pbarker.dev> References: <20261023-certs-wrynose-v1-0-83dd2facdbd3@pbarker.dev> In-Reply-To: <20261023-certs-wrynose-v1-0-83dd2facdbd3@pbarker.dev> To: openembedded-core@lists.openembedded.org X-Mailer: b4 0.16.0 X-Developer-Signature: v=1; a=openssh-sha256; t=1792751822; l=1328; i=paul@pbarker.dev; s=id_piv_33200296; h=from:subject:message-id; bh=m7ZxiVsKOFOVuJRi3nBEsscTTZShPRc1rJ5FA2RWuBE=; b=U1NIU0lHAAAAAQAAAGgAAAATZWNkc2Etc2hhMi1uaXN0cDI1NgAAAAhuaXN0cDI1NgAAAEEEQ dOfZ4fCf9WdA7cHWnYqW4P6zifYTwJ18a3l28hvdGt3M0CTKu/FWpwoh+x5E487TvYA9iW0goTM GGtdemFzVgAAAAZwYXRhdHQAAAAAAAAABnNoYTUxMgAAAGUAAAATZWNkc2Etc2hhMi1uaXN0cDI 1NgAAAEoAAAAhAKsI1rRjaSJ1947IZlBRnpvbaWcBLtlMgQTT6+uYD7NeAAAAIQD+pHKGIJshmi XbsaO1TYh6XI5y1ECY7i8DvTftihmj/Q== X-Developer-Key: i=paul@pbarker.dev; a=openssh; fpr=SHA256:IlqExt9TPtGqXrqYg/YPMlsWlOGC6AVubz/PwuYw6KY List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Fri, 23 Oct 2026 10:37:07 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248511 From: Richard Purdie Signed-off-by: Richard Purdie (cherry picked from commit cde7975e3e00cdc2803a03dd68aea594b81d43ba) This is just changes to GitHub Actions workflows and cacert.pem. See: https://github.com/certifi/python-certifi/compare/2026.02.25...2026.04.22 Signed-off-by: Paul Barker --- .../{python3-certifi_2026.2.25.bb => python3-certifi_2026.4.22.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/python/python3-certifi_2026.2.25.bb b/meta/recipes-devtools/python/python3-certifi_2026.4.22.bb similarity index 87% rename from meta/recipes-devtools/python/python3-certifi_2026.2.25.bb rename to meta/recipes-devtools/python/python3-certifi_2026.4.22.bb index fb08bff815f7..b8296a26feef 100644 --- a/meta/recipes-devtools/python/python3-certifi_2026.2.25.bb +++ b/meta/recipes-devtools/python/python3-certifi_2026.4.22.bb @@ -7,7 +7,7 @@ HOMEPAGE = "http://certifi.io/" LICENSE = "ISC" LIC_FILES_CHKSUM = "file://LICENSE;md5=11618cb6a975948679286b1211bd573c" -SRC_URI[sha256sum] = "e887ab5cee78ea814d3472169153c2d12cd43b14bd03329a39a9c6e2e80bfba7" +SRC_URI[sha256sum] = "8d455352a37b71bf76a79caa83a3d6c25afee4a385d632127b6afb3963f1c580" inherit pypi python_setuptools_build_meta From patchwork Fri Oct 23 10:36:57 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Paul Barker X-Patchwork-Id: 101794 Received: from fhigh-a3-smtp.messagingengine.com (fhigh-a3-smtp.messagingengine.com [103.168.172.154]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.4266.1792751827017929649 for ; Fri, 23 Oct 2026 03:37:07 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@pbarker.dev header.s=fm1 header.b=vlHXD97R; dkim=pass header.i=@messagingengine.com header.s=fm2 header.b=CAiKhoq+; spf=pass (domain: pbarker.dev, ip: 103.168.172.154, mailfrom: paul@pbarker.dev) Received: from phl-compute-01.internal (phl-compute-01.internal [10.202.2.41]) by mailfhigh.phl.internal (Postfix) with ESMTP id 2F71C1400116 for ; Fri, 23 Oct 2026 06:37:06 -0400 (EDT) Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-01.internal (MEProxy); Fri, 23 Oct 2026 06:37:06 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pbarker.dev; h= cc:content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1792751826; x=1792838226; bh=viqSMmoo5f2a/8L2lsRym3/Y2rqXmnnXS6SQ1Ac5+3Q=; b= vlHXD97R4mqbQikIOOD/NFzdGSkENOn5ccpuwLc88zZwR/F1ktq1eslXCxuecShc SlpH1Dh2IJX/fTya7m2hL+qBwjh/FLJzmvhq1S7lJ5aIlUiILrwLf3b9JdFs2a8i 6h7+LaZgjDQD7wNoYeftvSxsiXPf9Gs2MtXGILh2YI77T6Um9CkvGZ2Qdjt1DhfK 45MpwriD9e9OTz79ZuxaQ8eUr2M279XSswc78/+O8rhwqKagOTiz/Gnw/Ov1SbKL SJR9Tf4Hzz0vRBw2g2bkVuJA7+u6xcpJdaAX/FmK0R+LKXofLhBAr2dHfUOmd/tw TV92HCHGkiKHTgkURoZiAQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; t=1792751826; x=1792838226; bh=v iqSMmoo5f2a/8L2lsRym3/Y2rqXmnnXS6SQ1Ac5+3Q=; b=CAiKhoq+SUtLUR4JG 9gVezv6mG/xaR7lTajNqAZfz3hgH/fmJZETR3UtvVmmh6vfoQs/d2Ii/1GxyESs6 6o5o9s3NW6roH+8QH5Vq5bM1kI1ZesGZtPyod6Tq5Mh7+bSR75pzVO0EX1woARGZ 8ZSdgzFeSzeICra4HynvvR8oh2+3G4hR1AzvsZgMexzedkRR8kfDYigYtlwbkfJJ voGUEoPy/CbxlXE+qz/4WYpianaxUr6nQX3riqVN0Bmqsr1dU6uSaBEI53Fu4Va6 tKJ9rLrS2KGX2ZOWKfLDaVRCWRC94+F7bZklreigchtMQx+9uQwTx0z1BqC2Zw5e Qtcww== X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=sign d=pbarker.dev a=rsa-sha256; DKIM2-Signature: i=1; m=1; t=1792751826; d=pbarker.dev; mf=PHBhdWxAcGJhcmtlci5kZXY+; rt=PG9wZW5lbWJlZGRlZC1jb3JlQGxpc3RzLm9wZW5lbWJlZGRlZC5vcmc+; s=fm1:rsa-sha256:vNy1E6KAmUGM+hEn89Fd/VXU400heR24Uh82SyGZesnMfHm c4wAQ1fBLrt1+OB5r6GGdMWCZJ2npScIOfJjIwOUVblH9bo/WN/p/LFTpBQsLiMB ZX7g34QgnTwRsG0M67Wa+5+cXlyQ6x0gpQHNxiK4kqSabCniRgDVBVMBm6UVhuDT 8YfccH1yDMXCUox/UdT1dFWE75T/e1j3UdT9HMLV6WFnQTPq5cwgXMUFlhutNbrG 6c5PBYnA3OjKLM2Zym8/6TU+od+6s8b1zBX6vu+1RvZaIcmcnwUBOb79TTixjvRK gAod9M1s4SareebRHNmCAG2S6BNb2eo7vPzpEmg==; X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=mi-m=1; hc=11; hn=content-transfer-encoding,content-type,date,feedback-id,from, in-reply-to,message-id,mime-version,references,subject,to; Message-Instance: m=1; h=sha256:De9L1PS/npSPK8de9/bQ7/bwPKr0rPs8czqDe/q/5Ks=:kGAvpMI3Fd354MT7ZuNwLtrTzHDb8j05ryA2mUQo3nc=; X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: dmFkZTGdXeWEdgZnrxsR0LfdKteSMLbi16IvVblMar6iaBUXKRIad9b/S1RFbYAPHM8w8i fH0EqDVuO+IAqrEfs25nXUvA98hpdiGCUYS+QIeihzz6K/vqil48ncRKsz1V8CDB9cDPoS rh4Dy76yV3MwTbJpWnKbCgRHE2rUZ3jLi4Q+Tmb9orUNsVUuWWJQgMpKiK+vij8nCQGmIK w9DEWSSOeRqTSsgrKYtDMv0d7E63TMM7B7H7cX4Ff0VskLU1f0REdI85KRRhfWfFubUM6G hYTYiCyHLl4iZwZYhXPNsBPuLPQ4hiMoT1sf5XoAWhtYx9BZYb0fupOe1GMh8OYkTjuyiv /gqcXi8FG9qyAvH35ok4g2iwu4RmriDvrsWXdbxP3ZIb047XjuKNTdYlYIfhes4IUiD6YE EaUbmiQwsKAWOt0e2LnyaOiBMWkWaxmMei5GFb0QMDAT36IuosD5PzqDgwOMRqVQc3WQnA KB0f8Sr1zaVatElpqBtjjOSppT3t5rhv91r19swTz6n9n8j85EvMC2wWSLfEm3j0D0rG1n gUAqmq3L+hBNGejkQr0fp+bElKdya6JwufafTPaondv0QHHrvYIovy06rsT3jzUs04rBGw BO3AyDrasc5XYFZLMDcxfg1IHUqqspSnq+ZERiBDsXZKEad775uqX5SDj4KQ X-ME-Proxy: Feedback-ID: i51494658:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Fri, 23 Oct 2026 06:37:05 -0400 (EDT) From: Paul Barker Date: Fri, 23 Oct 2026 11:36:57 +0100 Subject: [PATCH wrynose 3/6] python3-certifi: upgrade 2026.4.22 -> 2026.5.20 MIME-Version: 1.0 Message-Id: <20261023-certs-wrynose-v1-3-83dd2facdbd3@pbarker.dev> References: <20261023-certs-wrynose-v1-0-83dd2facdbd3@pbarker.dev> In-Reply-To: <20261023-certs-wrynose-v1-0-83dd2facdbd3@pbarker.dev> To: openembedded-core@lists.openembedded.org X-Mailer: b4 0.16.0 X-Developer-Signature: v=1; a=openssh-sha256; t=1792751822; l=1882; i=paul@pbarker.dev; s=id_piv_33200296; h=from:subject:message-id; bh=HbknVWVwGB8sN8s4phQLagb/X4kpF6qI3s9an2KMvtw=; b=U1NIU0lHAAAAAQAAAGgAAAATZWNkc2Etc2hhMi1uaXN0cDI1NgAAAAhuaXN0cDI1NgAAAEEEQ dOfZ4fCf9WdA7cHWnYqW4P6zifYTwJ18a3l28hvdGt3M0CTKu/FWpwoh+x5E487TvYA9iW0goTM GGtdemFzVgAAAAZwYXRhdHQAAAAAAAAABnNoYTUxMgAAAGQAAAATZWNkc2Etc2hhMi1uaXN0cDI 1NgAAAEkAAAAgdLU603jdZFjbJWyKyAzpZc2OPQKEfjl24gyQ9TPV8jAAAAAhAIRqENJQWQdK/X CyIuXqDbfzf+UscuguqHV3hK27jnYV X-Developer-Key: i=paul@pbarker.dev; a=openssh; fpr=SHA256:IlqExt9TPtGqXrqYg/YPMlsWlOGC6AVubz/PwuYw6KY List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Fri, 23 Oct 2026 10:37:07 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248512 From: Tim Orling * Removes [1]: Issuer: O=Chunghwa Telecom Co., Ltd. OU=ePKI Root Certification Authority Subject: O=Chunghwa Telecom Co., Ltd. OU=ePKI Root Certification Authority Label: "ePKI Root Certification Authority" Serial: 28956088682735189655030529057352760477 MD5 Fingerprint: 1b:2e:00:ca:26:06:90:3d:ad:fe:6f:15:68:d3:6b:b3 SHA1 Fingerprint: 67:65:0d:f1:7e:8e:7e:5b:82:40:a4:f4:56:4b:cf:e2:3d:69:c6:f0 SHA256 Fingerprint: c0:a6:f4:dc:63:a2:4b:fd:cf:54:ef:2a:6a:08:2a:0a:72:de:35:80:3e:2f:f5:ff:52:7a:e5:d8:72:06:df:d5 [1] https://github.com/certifi/python-certifi/compare/2026.04.22...2026.05.20 Signed-off-by: Tim Orling Signed-off-by: Richard Purdie (cherry picked from commit bd0530a6fdef3331a60fc669aee05b2c26aa0b14) This only changes cacert.pem. Signed-off-by: Paul Barker --- .../{python3-certifi_2026.4.22.bb => python3-certifi_2026.5.20.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/python/python3-certifi_2026.4.22.bb b/meta/recipes-devtools/python/python3-certifi_2026.5.20.bb similarity index 87% rename from meta/recipes-devtools/python/python3-certifi_2026.4.22.bb rename to meta/recipes-devtools/python/python3-certifi_2026.5.20.bb index b8296a26feef..fcb395be7b69 100644 --- a/meta/recipes-devtools/python/python3-certifi_2026.4.22.bb +++ b/meta/recipes-devtools/python/python3-certifi_2026.5.20.bb @@ -7,7 +7,7 @@ HOMEPAGE = "http://certifi.io/" LICENSE = "ISC" LIC_FILES_CHKSUM = "file://LICENSE;md5=11618cb6a975948679286b1211bd573c" -SRC_URI[sha256sum] = "8d455352a37b71bf76a79caa83a3d6c25afee4a385d632127b6afb3963f1c580" +SRC_URI[sha256sum] = "69dea482ab64caa7b9f6aba1c6bf48bb6a5448d1c0f1b17ab42ad8c763a5344d" inherit pypi python_setuptools_build_meta From patchwork Fri Oct 23 10:36:58 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Paul Barker X-Patchwork-Id: 101797 Received: from fhigh-a3-smtp.messagingengine.com (fhigh-a3-smtp.messagingengine.com [103.168.172.154]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.4257.1792751827381972044 for ; Fri, 23 Oct 2026 03:37:07 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@pbarker.dev header.s=fm1 header.b=NaDwgB/K; dkim=pass header.i=@messagingengine.com header.s=fm2 header.b=Fujo43gv; spf=pass (domain: pbarker.dev, ip: 103.168.172.154, mailfrom: paul@pbarker.dev) Received: from phl-compute-04.internal (phl-compute-04.internal [10.202.2.44]) by mailfhigh.phl.internal (Postfix) with ESMTP id B91E61400047 for ; Fri, 23 Oct 2026 06:37:06 -0400 (EDT) Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-04.internal (MEProxy); Fri, 23 Oct 2026 06:37:06 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pbarker.dev; h= cc:content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1792751826; x=1792838226; bh=gFBPdL8QOPQl0a5Wj6mCZ2oXrZefnIj6Gvwx0IRvr/A=; b= NaDwgB/KluG/0yWXpI/GwQg9Qsi9s6GeVrdW2RG7CLd3EEa3muSO3r8AkkG9g9rR 7bh29HejXOW4PFmyJg62qky2+4t+/BWzahMfFg+vKOOiGTJHnZ4QmaMC3VR6D3yK XTRSF6h93uB+8eR/0+BZ90DQgAnxwCPbDj6d1Wjsc1DSxIJjRi7VtiZ0NOfEhxd/ zHhD6sIFAHzhCWipsa6kpw0rIr5+sLqmKE0lyhc2ZxpDoPbVuTewakxIgdkQzrt2 CaFFUFoH7Lq2DPLK4n/wfzoVK7AIuEIxp0o9R4z7UAbspleE7acqG0J5pRK64ikt os1POWBHN+F+2gyd94JY5A== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; t=1792751826; x=1792838226; bh=g FBPdL8QOPQl0a5Wj6mCZ2oXrZefnIj6Gvwx0IRvr/A=; b=Fujo43gvlkr1nMZi+ 1839gA+I+g/5kQAAQLFWeHYRTBnUIvWqq9OyzHFpYWHu/9m49hKt267si2pSxmuo GGHqXmjP7Js3gcPDYaunCnhLrilUoJk/LJN+p87CL6M9WzG7bLuL5ZCzWEIY0aNe DMFq/VzkzDKF9IOgbe3UH6r4U583URBFsUfF5RWYHgRTjoBqd8x8xP8LYsRfOJzd Uobji5SE/7HabuRTCtfgw6qXb/zMHuQrcA/cEfc/QydH2PmZwFO6aMeDOBuLHFaX UgXJxJ/5H/yd1+RGUsnk2SJ3DlGwGQD3j0rpp9HyRwcj0/mKr0+0cozl7uwLmUtr L54OA== X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=sign d=pbarker.dev a=rsa-sha256; DKIM2-Signature: i=1; m=1; t=1792751826; d=pbarker.dev; mf=PHBhdWxAcGJhcmtlci5kZXY+; rt=PG9wZW5lbWJlZGRlZC1jb3JlQGxpc3RzLm9wZW5lbWJlZGRlZC5vcmc+; s=fm1:rsa-sha256:YdunuyDD8oXwzdvTJe7vtJF522x8DZlcdn9CvBUBak2s9y6 7Hr+0WbbyWjSZ701211BPnlvgBPfoWGlnrOGIHnAqbOB57ybuWcCN4k27DXiJkiw OC2syN+Mm4aY3gVohdTVRx8Aa6+U6Q9yhiRk3kmrR8eRqwz6Vym9QPNsKsyRq5+L 28ZK/a9xBmorXXwqHLTJM7qRnYksirqOAFVStkCzfytNno7NOywAiks2u5dJjqAS xn34hYb8BJxx1CoPfYfeOgSLz7e5hS8vLtFLcGnzk2GxHEjEr3X1HMP7HZl0HHDc Jo5RzXDZuTVm8cIjOla6bIoKNHHRDFdDbNgarcA==; X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=mi-m=1; hc=11; hn=content-transfer-encoding,content-type,date,feedback-id,from, in-reply-to,message-id,mime-version,references,subject,to; Message-Instance: m=1; h=sha256:6aLEKRpnqvnSVHTMcPoTRjIFYeP6EgUr+MB4BsjRtHg=:0eHspfNdIELb+1ubkhCN01+XKgJHBMKycsMimmBkoSM=; X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: dmFkZTGdXeWEdgZnrxsR0LfdKteSMLbi16IvVblMar6iaBUXKRIad9b/S1RFbYAPHM8w8i fH0EqDVuO+IAqrEfs25nXUvA98hpdiGCUYS+QIeihzz6K/vqil48ncRKsz1V8CDB9cDPoS rh4Dy76yV3MwTbJpWnKbCgRHE2rUZ3jLi4Q+Tmb9orUNsVUuWWJQgMpKiK+vij8nCQGmIK w9DEWSSOeRqTSsgrKYtDMv0d7E63TMM7B7H7cX4Ff0VskLU1f0REdI85KRRhfWfFubUM6G hYTYiCyHLl4iZwZYhXPNsBPuLPQ4hiMoT1sf5XoAWhtYx9BZYb0fupOe1GMh8OYkTjuyiv /gqcXi8FG9qyAvH35ok4g2iwu4RmriDvrsWXdbxP3ZIb047XjuKNTdYlYIfhes4IUiD6YE EaUbmiQwsKAWOt0e2LnyaOiBMWkWaxmMei5GFb0QMDAT36IuosD5PzqDgwOMRqVQc3WQnA KB0f8Sr1zaVatElpqBtjjOSppT3t5rhv91r19swTz6n9n8j85EvMC2wWSLfEm3j0D0rG1n gUAqmq3L+hBNGejkQr0fp+bElKdya6JwufafTPaondv0QHHrvYIovy06rsT3jzUs04rBGw BO3AyDrasc5XYFZLMDcxfg1IHUqqspSnq+ZERiBDsXZKEad775uqX5SDj4KQ X-ME-Proxy: Feedback-ID: i51494658:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Fri, 23 Oct 2026 06:37:06 -0400 (EDT) From: Paul Barker Date: Fri, 23 Oct 2026 11:36:58 +0100 Subject: [PATCH wrynose 4/6] python3-certifi: upgrade 2026.5.20 -> 2026.6.17 MIME-Version: 1.0 Message-Id: <20261023-certs-wrynose-v1-4-83dd2facdbd3@pbarker.dev> References: <20261023-certs-wrynose-v1-0-83dd2facdbd3@pbarker.dev> In-Reply-To: <20261023-certs-wrynose-v1-0-83dd2facdbd3@pbarker.dev> To: openembedded-core@lists.openembedded.org X-Mailer: b4 0.16.0 X-Developer-Signature: v=1; a=openssh-sha256; t=1792751822; l=1683; i=paul@pbarker.dev; s=id_piv_33200296; h=from:subject:message-id; bh=lOloDMuShmm/t8t7LGi8ntgb16We359tvuAzHKQ5fEE=; b=U1NIU0lHAAAAAQAAAGgAAAATZWNkc2Etc2hhMi1uaXN0cDI1NgAAAAhuaXN0cDI1NgAAAEEEQ dOfZ4fCf9WdA7cHWnYqW4P6zifYTwJ18a3l28hvdGt3M0CTKu/FWpwoh+x5E487TvYA9iW0goTM GGtdemFzVgAAAAZwYXRhdHQAAAAAAAAABnNoYTUxMgAAAGQAAAATZWNkc2Etc2hhMi1uaXN0cDI 1NgAAAEkAAAAgFcXL9XX4qjo88nOjOL/4+2nKUk+/h6ava+bZ7FPYEBYAAAAhAKErNW6zrsHCSd Yqto2xBbOUW/ByBeQSxWSFEY7sJefM X-Developer-Key: i=paul@pbarker.dev; a=openssh; fpr=SHA256:IlqExt9TPtGqXrqYg/YPMlsWlOGC6AVubz/PwuYw6KY List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Fri, 23 Oct 2026 10:37:18 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248513 From: Tim Orling d46de62 Bump actions/checkout from 6.0.2 to 6.0.3 (#417) 6c183ec fix: update Requests docs link to canonical URL (#415) 36e3568 Bump dessant/lock-threads from 6.0.0 to 6.0.2 For full comparison of changes, see [2]. [2] https://github.com/certifi/python-certifi/compare/2026.05.20...2026.06.17 Signed-off-by: Tim Orling Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie (cherry picked from commit d3eb9f2ae9e887dcb70cf3bb6e284c0f861546c0) This only changes GitHub Actions workflows, README.rst and cacert.pem. Signed-off-by: Paul Barker --- .../{python3-certifi_2026.5.20.bb => python3-certifi_2026.6.17.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/python/python3-certifi_2026.5.20.bb b/meta/recipes-devtools/python/python3-certifi_2026.6.17.bb similarity index 87% rename from meta/recipes-devtools/python/python3-certifi_2026.5.20.bb rename to meta/recipes-devtools/python/python3-certifi_2026.6.17.bb index fcb395be7b69..e32fd1607aee 100644 --- a/meta/recipes-devtools/python/python3-certifi_2026.5.20.bb +++ b/meta/recipes-devtools/python/python3-certifi_2026.6.17.bb @@ -7,7 +7,7 @@ HOMEPAGE = "http://certifi.io/" LICENSE = "ISC" LIC_FILES_CHKSUM = "file://LICENSE;md5=11618cb6a975948679286b1211bd573c" -SRC_URI[sha256sum] = "69dea482ab64caa7b9f6aba1c6bf48bb6a5448d1c0f1b17ab42ad8c763a5344d" +SRC_URI[sha256sum] = "024c88eeec92ca068db80f02b8b07c9cef7b9fe261d1d535abfd5abd6f6af432" inherit pypi python_setuptools_build_meta From patchwork Fri Oct 23 10:36:59 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Paul Barker X-Patchwork-Id: 101796 Received: from fhigh-a3-smtp.messagingengine.com (fhigh-a3-smtp.messagingengine.com [103.168.172.154]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.4258.1792751827913939649 for ; Fri, 23 Oct 2026 03:37:08 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@pbarker.dev header.s=fm1 header.b=pgC4POyv; dkim=pass header.i=@messagingengine.com header.s=fm2 header.b=Kz/Afgrm; spf=pass (domain: pbarker.dev, ip: 103.168.172.154, mailfrom: paul@pbarker.dev) Received: from phl-compute-03.internal (phl-compute-03.internal [10.202.2.43]) by mailfhigh.phl.internal (Postfix) with ESMTP id 44B181400088 for ; Fri, 23 Oct 2026 06:37:07 -0400 (EDT) Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-03.internal (MEProxy); Fri, 23 Oct 2026 06:37:07 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pbarker.dev; h= cc:content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1792751827; x=1792838227; bh=Hs6FEtQ9R8dh3T4U8yTYgFIWqbY4mToWZ5Zryu6F98E=; b= pgC4POyvx0zjceR4lRKCy5fvi6Oafxwy8LNeHDFgMEgBoEUncDSDkbMM39EebFuy lp7h63oT3xE7GGpLROpQ8spaaLje/VtPxo2zh206lBCLD5QflaTGlnfoksgk5a2L qzxiNzJcY9TDt7RSB7FFK2pmgS+9ladn9gWdDz9GDO3zYZNZTFt4PTWIjkQbLJBW eV6htXbmSoJiDJfGXXh10yLZH8m2rCbiMgUVj2pntBOpw4Rr8m+csagPdLl6M3TV 8uSElfUvJqSMBXl4X+59N/B6Ilc+0ut6ZO/6R2noxMxVY4l2pI1quWbpioBFBnXp cNi/GjarHuldDZTtlGV4nA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; t=1792751827; x=1792838227; bh=H s6FEtQ9R8dh3T4U8yTYgFIWqbY4mToWZ5Zryu6F98E=; b=Kz/Afgrma6DBZTZNn LCBRDK1f3fCD525klVxHhNQGav2nXHH1BpOMME+QfCjVeLnJW16P6otwAaf7CRe4 pcWIBp4Momj5y3ZBH0xW6pdYV6vSTS7aLfSJPHHrZLU3oHrO/isxRIdvnNTtQxiX TNJNpYbCa4ZKCCy/oG3gi3a5x3gKNmsCHDkl1V0os9Ix4MGFg+UmrXhMGySabIak aV1KGQIjjoa9nEZcHTYoohQ/7Rj8O7jlxxWwL8U4MMAcqF3KbWvU45tP0HGvQmsv +ux3y2r4qM9gtp9JA+6pMGwJmtj2QjAmhMoeKePQm6vztgUWHBhBIbmmWswGa2Co OrlwQ== X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=sign d=pbarker.dev a=rsa-sha256; DKIM2-Signature: i=1; m=1; t=1792751827; d=pbarker.dev; mf=PHBhdWxAcGJhcmtlci5kZXY+; rt=PG9wZW5lbWJlZGRlZC1jb3JlQGxpc3RzLm9wZW5lbWJlZGRlZC5vcmc+; s=fm1:rsa-sha256:D0dHl8SdNU9K0tipdQOE1M/7g3P+KRSfmRNS21suWZkck0g BK2qCqwQJ5PSnZS70dJ++62wH9xugYdmTu7KDHG63/JqAYlKhcMIrDciz3XnzYHX mF+zEubesaO4ofBraGfjb3fLqcKJNb+/YLreoB4d31rIqdOUQLHfWb5VzgtlC8ZP dYCiO21jnLkyXsYcBSFeizdm9Jl/sICu9iHXUORnNN1DYYFyid5mJSHm3gofAk6B +Zx114VV65Upxj50XeEPn5nCGx6my/qcX5la5jQZG3PMyLwfTdCQ/BcdiL7frvFf +JhIBAWMfi5bShJUldeImnY5+t7vzKTuM3OzF1A==; X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=mi-m=1; hc=11; hn=content-transfer-encoding,content-type,date,feedback-id,from, in-reply-to,message-id,mime-version,references,subject,to; Message-Instance: m=1; h=sha256:uXTOPG/Kekjr7NwgtnIDdxTdRxh3yUdrNJaGamuPWIg=:pe7NimwbF5F2JV/lS4HGsvGclMGXU/SNK8lDQDBjoxg=; X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: dmFkZTGdXeWEdgZnrxsR0LfdKteSMLbi16IvVblMar6iaBUXKRIad9b/S1RFbYAPHM8w8i fH0EqDVuO+IAqrEfs25nXUvA98hpdiGCUYS+QIeihzz6K/vqil48ncRKsz1V8CDB9cDPoS rh4Dy76yV3MwTbJpWnKbCgRHE2rUZ3jLi4Q+Tmb9orUNsVUuWWJQgMpKiK+vij8nCQGmIK w9DEWSSOeRqTSsgrKYtDMv0d7E63TMM7B7H7cX4Ff0VskLU1f0REdI85KRRhfWfFubUM6G hYTYiCyHLl4iZwZYhXPNsBPuLPQ4hiMoT1sf5XoAWhtYx9BZYb0fupOe1GMh8OYkTjuylp l10X9PvYD/mR+QDNJ6oDjNRX68UaQbo2VbFFXJW/jetBK8GbD6DF7zCu/si4s/34BeE1Sk q3E5Udut6hyriMX7wpJvJhBQVaAwq/loKjY98ahUHA2tspIfoB+YNp7rc7RJ3XoS6nIINq 8J6LTlgi/qsnJ0S1iKNOocqGtaZRTKhEx0XzHaC+fnsuopZ1qh8wE8dtYU9OztwaHNdFpy 3CpJrzRs7ZjxZUGqkiEggX5J1Gt+r/ILkH5VmdSjimZLoWfUcYKZ5CuyS8+qJ/hdZ1LjFO sR29/k0V9hVF8LTLMnXAIb7VvvgVXnQzmIYA24ACfCvuaTcwy8e0EkqU33qw X-ME-Proxy: Feedback-ID: i51494658:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Fri, 23 Oct 2026 06:37:06 -0400 (EDT) From: Paul Barker Date: Fri, 23 Oct 2026 11:36:59 +0100 Subject: [PATCH wrynose 5/6] python3-certifi: upgrade 2026.6.17 -> 2026.7.22 MIME-Version: 1.0 Message-Id: <20261023-certs-wrynose-v1-5-83dd2facdbd3@pbarker.dev> References: <20261023-certs-wrynose-v1-0-83dd2facdbd3@pbarker.dev> In-Reply-To: <20261023-certs-wrynose-v1-0-83dd2facdbd3@pbarker.dev> To: openembedded-core@lists.openembedded.org X-Mailer: b4 0.16.0 X-Developer-Signature: v=1; a=openssh-sha256; t=1792751822; l=1855; i=paul@pbarker.dev; s=id_piv_33200296; h=from:subject:message-id; bh=R7CPZYvoc9LTx+aLrVZTL7Wl7yHEK1ezwOeQhjxkVB4=; b=U1NIU0lHAAAAAQAAAGgAAAATZWNkc2Etc2hhMi1uaXN0cDI1NgAAAAhuaXN0cDI1NgAAAEEEQ dOfZ4fCf9WdA7cHWnYqW4P6zifYTwJ18a3l28hvdGt3M0CTKu/FWpwoh+x5E487TvYA9iW0goTM GGtdemFzVgAAAAZwYXRhdHQAAAAAAAAABnNoYTUxMgAAAGMAAAATZWNkc2Etc2hhMi1uaXN0cDI 1NgAAAEgAAAAgLBfV/pnfd9mMe6HOcnilGkC+rHv5uFvE7tP0BLGkJxAAAAAgcn7RGmPhwsNjpe 50rWayTP1lzztgHiKma3gsdobfSXE= X-Developer-Key: i=paul@pbarker.dev; a=openssh; fpr=SHA256:IlqExt9TPtGqXrqYg/YPMlsWlOGC6AVubz/PwuYw6KY List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Fri, 23 Oct 2026 10:37:17 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248514 From: Tim Orling f4bc676 2026.07.22 (#428) 4c91f9c Bump actions/setup-python from 6.3.0 to 7.0.0 (#427) 01a66c5 Bump actions/checkout from 7.0.0 to 7.0.1 (#426) eb355f4 Bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.1 (#425) 474e6fc Include tests in the source distribution (#424) a31ef39 Bump actions/setup-python from 6.2.0 to 6.3.0 (#420) 98eb2c7 Bump actions/checkout from 6.0.3 to 7.0.0 (#419) For full comparison of changes, see: https://github.com/certifi/python-certifi/compare/2026.06.17...2026.07.22 Signed-off-by: Tim Orling Signed-off-by: Richard Purdie (cherry picked from commit 7d7fa3a3c6a5e62ceade6d02d09b909b88b1c6ee) This changes GitHub Actions workflows, MANIFEST.in and cacert.pem. The manifest changes should be harmless. Signed-off-by: Paul Barker --- .../{python3-certifi_2026.6.17.bb => python3-certifi_2026.7.22.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/python/python3-certifi_2026.6.17.bb b/meta/recipes-devtools/python/python3-certifi_2026.7.22.bb similarity index 87% rename from meta/recipes-devtools/python/python3-certifi_2026.6.17.bb rename to meta/recipes-devtools/python/python3-certifi_2026.7.22.bb index e32fd1607aee..a87bfe86afac 100644 --- a/meta/recipes-devtools/python/python3-certifi_2026.6.17.bb +++ b/meta/recipes-devtools/python/python3-certifi_2026.7.22.bb @@ -7,7 +7,7 @@ HOMEPAGE = "http://certifi.io/" LICENSE = "ISC" LIC_FILES_CHKSUM = "file://LICENSE;md5=11618cb6a975948679286b1211bd573c" -SRC_URI[sha256sum] = "024c88eeec92ca068db80f02b8b07c9cef7b9fe261d1d535abfd5abd6f6af432" +SRC_URI[sha256sum] = "741e2c3b351ddf169a738da9f2c048608ff7f2c5cc02f1ebc6b118bb090d5d55" inherit pypi python_setuptools_build_meta From patchwork Fri Oct 23 10:37:00 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Paul Barker X-Patchwork-Id: 101795 Received: from fhigh-a3-smtp.messagingengine.com (fhigh-a3-smtp.messagingengine.com [103.168.172.154]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.4267.1792751828358393777 for ; Fri, 23 Oct 2026 03:37:08 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@pbarker.dev header.s=fm1 header.b=gYd6y/kT; dkim=pass header.i=@messagingengine.com header.s=fm2 header.b=xSidCU9r; spf=pass (domain: pbarker.dev, ip: 103.168.172.154, mailfrom: paul@pbarker.dev) Received: from phl-compute-03.internal (phl-compute-03.internal [10.202.2.43]) by mailfhigh.phl.internal (Postfix) with ESMTP id B39BB1400047 for ; Fri, 23 Oct 2026 06:37:07 -0400 (EDT) Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-03.internal (MEProxy); Fri, 23 Oct 2026 06:37:07 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pbarker.dev; h= cc:content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1792751827; x=1792838227; bh=mYF9hfNGiFUtaVotMbdpmu5LHnNkGDsJJtC9/1yDysc=; b= gYd6y/kTMF90dVeZiX0OEHMX+sz9fPEaptKoZXErTZkFpEkJYEngqI5a6Ey/a1n6 9k07pLkmGy3SgjWyP774o93tfCHS8JuhTz0ty99/OPB+ONdGZFmpLuQMdD6kjZvw C4vVLLBLAzzu/e+nW6YR30xL+6ED6h+9uJvMLtqMyyWls6wtCo9t4+8f13va2FZP OVa5GeVpTXLUgiag77tgVovM4xxGFLr/IOR07+YVjwMujK6eP52mNkJ76oxx+Mre 2NwFOiOuc1skcFu9PJIp1b7h0IcxBq5KWrngKQTD0xYdpwMOemCS0IwWI37ftxu4 rBCD6EADDECUS4B66jBFhw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; t=1792751827; x=1792838227; bh=m YF9hfNGiFUtaVotMbdpmu5LHnNkGDsJJtC9/1yDysc=; b=xSidCU9rvpPHudg1R kFrJq9KjZWIXF124z8pb4KF1lCtrVXIfE7Wads03E+1oXFjfVtQRz7mEmrkvta8L vZz6NmraXShDnqEJf9gd5dt40AOCxdpbvcDMgVyZt7Fn1XX1S1Ix35dDxQ6YdjCK D6MJtOk5LTRgiXuS7YEQxxU+BYnKk+heC60W8MjFgUV31seSQhlhjYhSfOgHkA1H Xo/Ybj1zsb8ljsoyfdqbFS1V0JLeeeyE7Nb94eHl0hLYAzpGIUvO+9ror7m5TA6i ifMywwMrsxzxGtBl7aqFkRirfslA4DrTRJiwag0XGRpljUg4ztn8QCDjj01Go1cf 4eiWg== X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=sign d=pbarker.dev a=rsa-sha256; DKIM2-Signature: i=1; m=1; t=1792751827; d=pbarker.dev; mf=PHBhdWxAcGJhcmtlci5kZXY+; rt=PG9wZW5lbWJlZGRlZC1jb3JlQGxpc3RzLm9wZW5lbWJlZGRlZC5vcmc+; s=fm1:rsa-sha256:ERbNBhEZ7kX4rnDopjZp9eyEYfRfDw4mqYzEjI+a7TDCF1R yyf2i4nIBwzWvq+iDA6LYZTNvS0/w76W6Rgft/n1hoRUmEZMPbb/IV+Oet6jNZ9n eOKtFG5cl0AlYzs6EDZOxdcR9vAHD+TTqSCjkUjv3RNHHWvipgQGeo19HfNrRH+q 6SYWFyKfJCGv/98rI9oJoOU3TRwRR6o6VoLHGq8iS4auh0XyxALFUb3MRxGyQxPb ycjjZSwSnrqZt+xOD3cwE/GjL73i4LiQEBFra0oOdQ71UX7JqtyAywObhbJqhbdD ejxJvcR004AnTVnHtsnsQKw+1glHMlw/Xtuk/Pw==; X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=mi-m=1; hc=11; hn=content-transfer-encoding,content-type,date,feedback-id,from, in-reply-to,message-id,mime-version,references,subject,to; Message-Instance: m=1; h=sha256:fa7HpeR2uLbYB8ivsnu2QUZUuz369Bb3J4L7kQUBeUU=:MeAKnlj3oxSNNCLHP/YnqSkJ/59Gt+0vD9hnoe0HJQc=; X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: dmFkZTGpWqMsOU08sYMOnBkKfhzGoXWsyPRy2S4z2EU2hHLy0HuG2Ri16O/D7s4wGCMZ+j znU+v4Z7hSqpgPKlfmFtx/87p1EODqkm0m9BlE53HWs6yK+8tcq+829HbGUDUVhsTFm5bJ M08WjXUjj2Ma8O8j7Qhh5gpxBVo+CDtSCoSrtQg5sMTNUNIefmTtXABGgQYjh27d2m0GWD bK8woLZt8ccRBjhffs3QBJkBKPNcczRqvbTl4xSN+FwEj+CfiR3IfEkB59LNIzQIpHJCcV ZO10UUttqjzwW9HVBc5WFEVQFTt519EMQUVBaPPDMU7czUFtZth2hOh9v/rgECxmjshhbH k6rWQ5Hlx/UoK5Iq+AakdM7KQkUpf4KwSyI8yxUTDGwdiyjyAI7i+kM5kCAt1RYW4q3NvB XymxpepR7gQ8Y976YPgwCWAVpggWZKs6VnhjyFINc5eZJYrPh/2yA+PAURrQ1kXW0qVoWc RD5Iz/+kolrwqWxYLFRmQ976Xo5y//y8/5ctl2RbvMQJARPQD4VbuN0Y5Kk6QsDzNvqjQj xCVkOmzF0n1zSX5eLD78dZKbiHn+fa5GtR2RhACAGMMrl0PBfl7pRHi6D3Z048S86N5IWn PMZ+yH43EtK3pT8pDhb061HX7A/4sdD6JFFrshQ6vIGe5MPlIx9hi9UAceTA X-ME-Proxy: Feedback-ID: i51494658:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Fri, 23 Oct 2026 06:37:07 -0400 (EDT) From: Paul Barker Date: Fri, 23 Oct 2026 11:37:00 +0100 Subject: [PATCH wrynose 6/6] python3-certifi: upgrade 2026.7.22 -> 2026.10.19 MIME-Version: 1.0 Message-Id: <20261023-certs-wrynose-v1-6-83dd2facdbd3@pbarker.dev> References: <20261023-certs-wrynose-v1-0-83dd2facdbd3@pbarker.dev> In-Reply-To: <20261023-certs-wrynose-v1-0-83dd2facdbd3@pbarker.dev> To: openembedded-core@lists.openembedded.org X-Mailer: b4 0.16.0 X-Developer-Signature: v=1; a=openssh-sha256; t=1792751822; l=1377; i=paul@pbarker.dev; s=id_piv_33200296; h=from:subject:message-id; bh=geKg/xq/ZUroHo+ZOVMwvPwOyTsVTZS8AAcXe9vUDgg=; b=U1NIU0lHAAAAAQAAAGgAAAATZWNkc2Etc2hhMi1uaXN0cDI1NgAAAAhuaXN0cDI1NgAAAEEEQ dOfZ4fCf9WdA7cHWnYqW4P6zifYTwJ18a3l28hvdGt3M0CTKu/FWpwoh+x5E487TvYA9iW0goTM GGtdemFzVgAAAAZwYXRhdHQAAAAAAAAABnNoYTUxMgAAAGQAAAATZWNkc2Etc2hhMi1uaXN0cDI 1NgAAAEkAAAAgYCNE6Xy4264OqDZm9XNPnGbUKvNijD4CW3n/B/EJ3jAAAAAhAMaYa7kwX+A/TD EKdvr57i0z3kvsk1HzrInH28sYYoX+ X-Developer-Key: i=paul@pbarker.dev; a=openssh; fpr=SHA256:IlqExt9TPtGqXrqYg/YPMlsWlOGC6AVubz/PwuYw6KY List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Fri, 23 Oct 2026 10:37:17 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248515 From: Ross Burton This release has just one change: it removes the compromised eMudhra intermediate certificates[1]. [1] https://emudhra.we-have-a-problem.com Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 99c96202a2c9aea84f5ceb267a8c63c0cff58b1e) Signed-off-by: Paul Barker --- .../{python3-certifi_2026.7.22.bb => python3-certifi_2026.10.19.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/python/python3-certifi_2026.7.22.bb b/meta/recipes-devtools/python/python3-certifi_2026.10.19.bb similarity index 87% rename from meta/recipes-devtools/python/python3-certifi_2026.7.22.bb rename to meta/recipes-devtools/python/python3-certifi_2026.10.19.bb index a87bfe86afac..0a3ad7dac51c 100644 --- a/meta/recipes-devtools/python/python3-certifi_2026.7.22.bb +++ b/meta/recipes-devtools/python/python3-certifi_2026.10.19.bb @@ -7,7 +7,7 @@ HOMEPAGE = "http://certifi.io/" LICENSE = "ISC" LIC_FILES_CHKSUM = "file://LICENSE;md5=11618cb6a975948679286b1211bd573c" -SRC_URI[sha256sum] = "741e2c3b351ddf169a738da9f2c048608ff7f2c5cc02f1ebc6b118bb090d5d55" +SRC_URI[sha256sum] = "035c1e85572b141bf1c3a3eff0e33a8eb74917522f2559075ff8d2fea780a1ae" inherit pypi python_setuptools_build_meta