From patchwork Fri Oct 23 10:50:02 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Paul Barker X-Patchwork-Id: 101807 Received: from fout-a3-smtp.messagingengine.com (fout-a3-smtp.messagingengine.com [103.168.172.146]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.4430.1792752611513127752 for ; Fri, 23 Oct 2026 03:50:11 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@pbarker.dev header.s=fm1 header.b=GCVsOTyW; dkim=pass header.i=@messagingengine.com header.s=fm2 header.b=k0XiGTlH; spf=pass (domain: pbarker.dev, ip: 103.168.172.146, mailfrom: paul@pbarker.dev) Received: from phl-compute-03.internal (phl-compute-03.internal [10.202.2.43]) by mailfout.phl.internal (Postfix) with ESMTP id 99BDFEC0067 for ; Fri, 23 Oct 2026 06:50:10 -0400 (EDT) Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-03.internal (MEProxy); Fri, 23 Oct 2026 06:50:10 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pbarker.dev; h= cc:content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1792752610; x=1792839010; bh=YyuDw90ZCrex6ItJTfBFkD7VsgFy8G/YrU+/jWqJhIM=; b= GCVsOTyW7rQTbVJE+Q1YriIj1b7b+/0V1zCIxw3CZn7kQdqIRNf0vBwr5+oIcnz4 s+C2TUV09Lc9MZMrGKeoc5dsRnuFf/caBjUqH6yd97Pqofe/TgDLjEmeCUbkflyh Skreu7YWFpJ6qEF5BCDsCmG3YkoVHt88q1edlshCu/c89R9jB9wNOxiprV4hit7Y BxM55FVyur9mmJuI92ZSr1iEdQOyiBKEceMmEmWjfuCLbRKdWP01jItBAAttortW j/+/5qqE6vNTQIGcEqHmjbqTsXHnLH2dShl3DtRQBlXr9X6Osl3wg1OP1R1/O3pd yJMHQy1q9/UYbdJq9xVQlw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; t=1792752610; x=1792839010; bh=Y yuDw90ZCrex6ItJTfBFkD7VsgFy8G/YrU+/jWqJhIM=; b=k0XiGTlHV2VN3MegQ AVFA7wps/9Pn/Z+Be6dlnShIX408SfPy/O20b516cyw/t0TjtXHIw8Qo01RSCffD 3aAhqZelvBLD/tZ5RJwnl9RXPYiEhqWmybjobm1psv90pRRdwI/TAzZdh9AU2Usv PcpsV/PEHprAYkwMGWMGb1Us9kVQS9MwkhxIatD6QTdV1NXGsnXiriPj6dOtTy+r IMQVBdUd4rq/cFUm2454NfSgVppxQ3zPq2hlEDUPmw5MQPFff1f/Sm+78bSdSpPr spHwJgAocPrKsrNpnSB2Fhkk0/PxDaBbPyyhWgqbTYifNsEswORutbfl8tqoJJbv +Wa1w== X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=sign d=pbarker.dev a=rsa-sha256; DKIM2-Signature: i=1; m=1; t=1792752610; d=pbarker.dev; mf=PHBhdWxAcGJhcmtlci5kZXY+; rt=PG9wZW5lbWJlZGRlZC1jb3JlQGxpc3RzLm9wZW5lbWJlZGRlZC5vcmc+; s=fm1:rsa-sha256:Z8OJYta3y0fCszLMF2JWxzp+qC8o9G6Fssh9tEjYaG9kfyg DFe54xpDMZncZipvz+OHgPsT3QAtm8uqMdpLO1klT8Z3waLp8BoPYf8nil15l4TD Aq7hjeDZN7m/PCBss+gLS98LUOMuqMITtC5lQdkbN9VM9XfpinC633DCB7bGZuZN BKhgnU7/PTpGn2WAop2Nw67DyHFwMobzaCJFewFWSN8OWEvV1i+eKEnIEaRocM3x ucDGDOIojso1rigrTDt8+lDDsXXkiepY1QpbkJbfyuJuWY3g8cuM3tcrdgLC9G60 Cgd56OEagZ9tsMciFTKN+mcdnfS7ZqcQRoUvuiQ==; X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=mi-m=1; hc=11; hn=content-transfer-encoding,content-type,date,feedback-id,from, in-reply-to,message-id,mime-version,references,subject,to; Message-Instance: m=1; h=sha256:WS9dTmZULEb6xFGvEVr/2CCicEvPbb84Qc2XrazOC+0=:GOL3OWbf6tPvEcyYt4NAtAzLNybDhep84moYZvNf4f0=; X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: dmFkZTEPIDhShl3yCcgAurf/hJzv2/GxphN22zqirSF7PuziOE9ewuEc6wT8xq1sBMxLgz 2hzvm9Lq8wKKIoZ97WZRVGqSLWOGMl1la23XPA9ul1B43sTAzW9GBPyp4Z5QR3mWWKNMdJ hBZ/uNU98t/emI9hX1dYnsjLafZ8g32WPQsrCiSZ5pVTEEzt6GHUpymGP9/iagc/lpW3nP jWuQnTwGchgICTHWd1esL6L8191AOExE6Ye9W1vhMwm5W/KNvzQZ0Z0fowjRjoWv7ckbHJ kmpqAS9xU+PUF9tPRI9zFCPQoSpFT4l4ZlszJkf+WYCzs1MwisRPdGT1wZ8WixFWpIe0G8 /yqUHZaBlmt9kEIQN/Xs0DNI5jMCE/59f9iC/ilkeEkHe8fvY+e6zZpD/WaaYsjP57HmQF EYS7KbfO0HVIXNamJQlDtyTufOWCD1x+EpQi81/KFZ6iAvFwAyTpwMpVO7QVjNB3ZOcmqL yicBYrghi8WrmuTI/FrMdHuA3OWsoXB8LmCiR9q9jVeb6pqJLJwL8oPgW+znzwNyta3auh kiHDi4p2AUWk8GmN8svas2ubs7jLZeCp+zPghDhkrDCk879ly8l9y7YJHsKlQxgj0AKIVG lab3BwcynZMZ8yCR/UQL3YCuIRccAHjt9YnzYhf+Lgkb3LsPDUO6H8b8JUfg X-ME-Proxy: Feedback-ID: i51494658:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Fri, 23 Oct 2026 06:50:10 -0400 (EDT) From: Paul Barker Date: Fri, 23 Oct 2026 11:50:02 +0100 Subject: [PATCH scarthgap 01/19] ca-certificates: Disable compromised CA certificates MIME-Version: 1.0 Message-Id: <20261023-certs-scarthgap-v1-1-0ba436174193@pbarker.dev> References: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> In-Reply-To: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> To: openembedded-core@lists.openembedded.org X-Mailer: b4 0.16.0 X-Developer-Signature: v=1; a=openssh-sha256; t=1792752607; l=3356; i=paul@pbarker.dev; s=id_piv_33200296; h=from:subject:message-id; bh=GOL3OWbf6tPvEcyYt4NAtAzLNybDhep84moYZvNf4f0=; b=U1NIU0lHAAAAAQAAAGgAAAATZWNkc2Etc2hhMi1uaXN0cDI1NgAAAAhuaXN0cDI1NgAAAEEEQ dOfZ4fCf9WdA7cHWnYqW4P6zifYTwJ18a3l28hvdGt3M0CTKu/FWpwoh+x5E487TvYA9iW0goTM GGtdemFzVgAAAAZwYXRhdHQAAAAAAAAABnNoYTUxMgAAAGUAAAATZWNkc2Etc2hhMi1uaXN0cDI 1NgAAAEoAAAAhAPnG8xj2X3qd7SsaGYrhbUPw4WKeXRj5S37M4dvNkorHAAAAIQCfMz53rJAWRl zmDedPXREgZx0HStw3PSrTopMu3M1RMw== X-Developer-Key: i=paul@pbarker.dev; a=openssh; fpr=SHA256:IlqExt9TPtGqXrqYg/YPMlsWlOGC6AVubz/PwuYw6KY List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Fri, 23 Oct 2026 10:50:20 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248518 Backported a patch to address the eMudhra Intermediate CA Compromise disclosed at https://emudhra.we-have-a-problem.com. As this is a certificate authority compromise rather than a software flaw it doesn't have a CVE number, but this should be treated like a CVE fix. This is a backport rather than a version bump as Debian did a "non-maintainer upload" 20260816+nmu1 instead of a typical new version release. Signed-off-by: Paul Barker Signed-off-by: Yoann Congal --- ...mSign-ECC-Root-CA-G3-and-Comodo-AAA-Servi.patch | 35 ++++++++++++++++++++++ .../ca-certificates/ca-certificates_20260816.bb | 1 + 2 files changed, 36 insertions(+) diff --git a/meta/recipes-support/ca-certificates/ca-certificates/0001-Blacklist-emSign-ECC-Root-CA-G3-and-Comodo-AAA-Servi.patch b/meta/recipes-support/ca-certificates/ca-certificates/0001-Blacklist-emSign-ECC-Root-CA-G3-and-Comodo-AAA-Servi.patch new file mode 100644 index 000000000000..9a0258919aa6 --- /dev/null +++ b/meta/recipes-support/ca-certificates/ca-certificates/0001-Blacklist-emSign-ECC-Root-CA-G3-and-Comodo-AAA-Servi.patch @@ -0,0 +1,35 @@ +From d5e08f63b1ca6746a51e62cda4df5483c0d3e2ec Mon Sep 17 00:00:00 2001 +From: Paul Barker +Date: Wed, 21 Oct 2026 07:16:23 +0100 +Subject: [PATCH] Blacklist "emSign ECC Root CA - G3" and "Comodo AAA Services + root" + +[PB: Backported to address the eMudhra Intermediate CA Compromise + disclosed at https://emudhra.we-have-a-problem.com. As this is a + certificate authority compromise rather than a software flaw it + doesn't have a CVE number, but this should be treated like a CVE + fix.] + +Upstream-Status: Backport [https://salsa.debian.org/debian/ca-certificates/-/commit/4a0203e5ce4ce1a064b97387f52ca6a00c97185c] +Signed-off-by: Paul Barker +--- + mozilla/blacklist.txt | 5 +++++ + 1 file changed, 5 insertions(+) + +diff --git a/mozilla/blacklist.txt b/mozilla/blacklist.txt +index d84ceb919906..ba3635f7af87 100644 +--- a/mozilla/blacklist.txt ++++ b/mozilla/blacklist.txt +@@ -3,4 +3,9 @@ + # Blacklist explicitly distrusted certificates to explicitly ignore them and prevent build errors + "Explicitly Distrust DigiNotar Root CA" + ++# Blacklist "emSign ECC Root CA - G3" (cf. #1151413) ++"emSign ECC Root CA - G3" ++# Blacklist "Comodo AAA Services root" (cf. #1151413) ++"Comodo AAA Services root" ++ + # Expired CAs +-- +2.43.0 + diff --git a/meta/recipes-support/ca-certificates/ca-certificates_20260816.bb b/meta/recipes-support/ca-certificates/ca-certificates_20260816.bb index 33ca9291f4d9..6291fab0a1ff 100644 --- a/meta/recipes-support/ca-certificates/ca-certificates_20260816.bb +++ b/meta/recipes-support/ca-certificates/ca-certificates_20260816.bb @@ -19,6 +19,7 @@ SRC_URI = "${DEBIAN_MIRROR}/main/c/ca-certificates/${BPN}_${PV}.tar.xz \ file://0001-update-ca-certificates-don-t-use-Debianisms-in-run-p.patch \ file://0003-update-ca-certificates-use-relative-symlinks-from-ET.patch \ file://0001-Revert-mozilla-certdata2pem.py-print-a-warning-for-e.patch \ + file://0001-Blacklist-emSign-ECC-Root-CA-G3-and-Comodo-AAA-Servi.patch \ " S = "${WORKDIR}/ca-certificates" inherit allarch From patchwork Fri Oct 23 10:50:03 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Paul Barker X-Patchwork-Id: 101800 Received: from fhigh-a3-smtp.messagingengine.com (fhigh-a3-smtp.messagingengine.com [103.168.172.154]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.4431.1792752612050778602 for ; Fri, 23 Oct 2026 03:50:12 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@pbarker.dev header.s=fm1 header.b=cQdn4PKo; dkim=pass header.i=@messagingengine.com header.s=fm2 header.b=j7GhSjQx; spf=pass (domain: pbarker.dev, ip: 103.168.172.154, mailfrom: paul@pbarker.dev) Received: from phl-compute-03.internal (phl-compute-03.internal [10.202.2.43]) by mailfhigh.phl.internal (Postfix) with ESMTP id 2413C140016B for ; Fri, 23 Oct 2026 06:50:11 -0400 (EDT) Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-03.internal (MEProxy); Fri, 23 Oct 2026 06:50:11 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pbarker.dev; h= cc:content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1792752611; x=1792839011; bh=jN+MlX5Hcohw+ZRDcgPHKTmMwKvSZwp4o0CEYkmbz20=; b= cQdn4PKoDHxImh4FaWkrBoZIULXKkK7AYsfU4ebPsxbf6FdXPeRoS46faoTJEQT0 RvoxsImEEIGT8aWLKsyzs5jRmm588yoYfBaG5uHJu4itkJtRucjABPKX4ob5wJp6 eesSNQcwez0txtY/MlJLl0Pz3VhdG5h9ImyWMfwFS0MX9tGuebfjwdfOLPJMuG5T ikmzc19m9RZxgOP3lgWeaZMMliDZXRQR8ZiRvOr/mfkFfZjnymTUhjm4HnNMnlnK PAtbIK//3Vq6DqczJQ5CgCtyC4qW7MHSgkPBrcPDghWl3oLb3MNaaQjNs3t8N+U4 zmX0e3phx+fNDigCtfrnDg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; t=1792752611; x=1792839011; bh=j N+MlX5Hcohw+ZRDcgPHKTmMwKvSZwp4o0CEYkmbz20=; b=j7GhSjQx9vw2tpXCC HV01B9+2KNIhlasC8KDBHlK5nnb1ZxdSYnmZSFHBNGG32NeN4SxObExitpN7YpmL ZDjcJQd4zAoOfDicaCBaTAV9T0D4MGFYYdvEDTAGaAJ8MocChWfMMpsXuPvfILlw qACpK4OMAFY2AFFEAn8J6fDgDEUyz826jEnTrbhRXowzIHaQO6IIkHQ9YbQ/iOS+ tu63RkNyIYJoULxwF9ueSFCMhoxKLTZGqpIgggT4zHP5RTAZNueKAS1qZZDt8h67 /IMDdeZ9yTMs1aAyGcPxMomr+FEWo6BTYiRAzPmhhymTV7GTGvurTFfbPyfAPvGj W0Oag== X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=sign d=pbarker.dev a=rsa-sha256; DKIM2-Signature: i=1; m=1; t=1792752611; d=pbarker.dev; mf=PHBhdWxAcGJhcmtlci5kZXY+; rt=PG9wZW5lbWJlZGRlZC1jb3JlQGxpc3RzLm9wZW5lbWJlZGRlZC5vcmc+; s=fm1:rsa-sha256:LiFEtK4eL6Ll5u9I+8IgZ2lCUUBiNN8BdVWPwI3qswBvGws MIuSCo5kOSeJdBBWI0S0ECLvS2U3jk67MJrykrdrJjRmOt5qDiXQq8zssz4FSHYl 3CG4O2pY1hJnMZ04oNmcGcYmqrhA0yRzyLKqk2hdE5vHM0JZKrtuvw84GOdmJlu4 xtq05z6YSLO2et1dJcXasp7SCLluhoPnjcqA0/Y0ZZFNSSphpuHC05LV5qQ4Fk81 Ugv5D1zafdhlvWa0vLZvaBibwTeeaN8xAV4wQQVenxuv/dH1iv5xpYYNZfQnx1tp 22xtGicECbMdfVC1rf3Oq8E7jY+hj3iAK9EwNag==; X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=mi-m=1; hc=11; hn=content-transfer-encoding,content-type,date,feedback-id,from, in-reply-to,message-id,mime-version,references,subject,to; Message-Instance: m=1; h=sha256:Z50lI2oxlD7EAavkQOWKnZTnojeLtPa/Lt1Ggh4dDqA=:SPVLJNQ1r6dU6sSoFRQjyXdsOcvnqBFKxETELKHyJaE=; X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: dmFkZTER2m1YIMQ8eg4MnNIsZi4FBhMIWqS+ZbVhuw44e/27Tf4AY+BIRzUquKEjhnhqTt 0g6mNqv1U4MXkuCVTEXHNpw7k6cApW8LB3Imp3g3tgBd1M7lN1nyNBlZ6ljZ7+w7s0kABJ OV8tzTnnhZsHV87VOCEnnZFbKd0n7dJt7inA1oB89LeOnbhKaS7Zl7E4arQgdppveXVqY+ /ejNy2IbeLlV0yWnZ/3utWpncsMkMtxPfg/jUWMsYZjsi+TmiqBcjObVWshyFBAv3oJQ9F JgGzmA7v5p9VzUuc3bYY1CVs5RvcX5e8N3Cet7kuxRSynSJadNIj13L+qM6pWAHS3btCTa 9x0QnovirxjAVUn41IDWbQA9qq+lnf8Y85kOxEepn8WxW5TNS56I5lJVpaUZmGQNEcuXxk uxTP8ZV4NDpkaFN1NyNaLXTLmP/csoGaxiZvaKNzW0ETSCulbPsnGhdl3x5GUGRJssVzeF xQR6udILvh/HK3JJT9PkeayAFbCMUJMopSmha/9tqnEFawc5tLBmwClY2ihjl9KmI6nnTu BJtYzbcBhtkXh+E1Mzh4BtICPOuUuOBaYwqbAx5RnrkIPd+z9s/0eFK8XXX9PPYHe0npMz i3wXmTrUcNjEvSzJJQDUXLKebDPtj4XCU78Nrk12kypXXy3/dl8FzEOC61DA X-ME-Proxy: Feedback-ID: i51494658:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Fri, 23 Oct 2026 06:50:10 -0400 (EDT) From: Paul Barker Date: Fri, 23 Oct 2026 11:50:03 +0100 Subject: [PATCH scarthgap 02/19] Revert "python3-certifi: Fix CVE-2024-39689" MIME-Version: 1.0 Message-Id: <20261023-certs-scarthgap-v1-2-0ba436174193@pbarker.dev> References: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> In-Reply-To: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> To: openembedded-core@lists.openembedded.org X-Mailer: b4 0.16.0 X-Developer-Signature: v=1; a=openssh-sha256; t=1792752607; l=5122; i=paul@pbarker.dev; s=id_piv_33200296; h=from:subject:message-id; bh=SPVLJNQ1r6dU6sSoFRQjyXdsOcvnqBFKxETELKHyJaE=; b=U1NIU0lHAAAAAQAAAGgAAAATZWNkc2Etc2hhMi1uaXN0cDI1NgAAAAhuaXN0cDI1NgAAAEEEQ dOfZ4fCf9WdA7cHWnYqW4P6zifYTwJ18a3l28hvdGt3M0CTKu/FWpwoh+x5E487TvYA9iW0goTM GGtdemFzVgAAAAZwYXRhdHQAAAAAAAAABnNoYTUxMgAAAGMAAAATZWNkc2Etc2hhMi1uaXN0cDI 1NgAAAEgAAAAgeh88ZyduFUbeRNuEdvWaQ5eH0rzl7Q5sbxHQWWCoNPEAAAAgbboEUxc/IfO+2d OuxxoT584U96kKfFw0k9lRYqZ68os= X-Developer-Key: i=paul@pbarker.dev; a=openssh; fpr=SHA256:IlqExt9TPtGqXrqYg/YPMlsWlOGC6AVubz/PwuYw6KY List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Fri, 23 Oct 2026 10:50:18 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248519 This CVE fix will now be handled by upgrading python3-certifi instead to ensure that we capture other changes to certificate validity. This reverts commit 2ec1ba32a23611484e5d3819008bbab85336ae20. Signed-off-by: Paul Barker --- .../python/python3-certifi/CVE-2024-39689.patch | 69 ---------------------- .../python/python3-certifi_2024.2.2.bb | 3 - 2 files changed, 72 deletions(-) diff --git a/meta/recipes-devtools/python/python3-certifi/CVE-2024-39689.patch b/meta/recipes-devtools/python/python3-certifi/CVE-2024-39689.patch deleted file mode 100644 index a2ecc15d2c3c..000000000000 --- a/meta/recipes-devtools/python/python3-certifi/CVE-2024-39689.patch +++ /dev/null @@ -1,69 +0,0 @@ -From bd8153872e9c6fc98f4023df9c2deaffea2fa463 Mon Sep 17 00:00:00 2001 -From: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> -Date: Wed, 3 Jul 2024 21:34:29 -0400 -Subject: [PATCH] 2024.07.04 (#295) - -Co-authored-by: alex <772+alex@users.noreply.github.com> - -CVE: CVE-2024-39689 - -Upstream-Status: Backport [https://github.com/certifi/python-certifi/commit/bd8153872e9c6fc98f4023df9c2deaffea2fa463] - -Signed-off-by: Soumya Sambu ---- - certifi/cacert.pem | 40 ---------------------------------------- - 1 file changed, 40 deletions(-) - -diff --git a/certifi/cacert.pem b/certifi/cacert.pem -index 1bec256..6bb8cf8 100644 ---- a/certifi/cacert.pem -+++ b/certifi/cacert.pem -@@ -3857,46 +3857,6 @@ DgQWBBQxCpCPtsad0kRLgLWi5h+xEk8blTAKBggqhkjOPQQDAwNoADBlAjEA31SQ - +RHUjE7AwWHCFUyqqx0LMV87HOIAl0Qx5v5zli/altP+CAezNIm8BZ/3Hobui3A= - -----END CERTIFICATE----- - --# Issuer: CN=GLOBALTRUST 2020 O=e-commerce monitoring GmbH --# Subject: CN=GLOBALTRUST 2020 O=e-commerce monitoring GmbH --# Label: "GLOBALTRUST 2020" --# Serial: 109160994242082918454945253 --# MD5 Fingerprint: 8a:c7:6f:cb:6d:e3:cc:a2:f1:7c:83:fa:0e:78:d7:e8 --# SHA1 Fingerprint: d0:67:c1:13:51:01:0c:aa:d0:c7:6a:65:37:31:16:26:4f:53:71:a2 --# SHA256 Fingerprint: 9a:29:6a:51:82:d1:d4:51:a2:e3:7f:43:9b:74:da:af:a2:67:52:33:29:f9:0f:9a:0d:20:07:c3:34:e2:3c:9a -------BEGIN CERTIFICATE----- --MIIFgjCCA2qgAwIBAgILWku9WvtPilv6ZeUwDQYJKoZIhvcNAQELBQAwTTELMAkG --A1UEBhMCQVQxIzAhBgNVBAoTGmUtY29tbWVyY2UgbW9uaXRvcmluZyBHbWJIMRkw --FwYDVQQDExBHTE9CQUxUUlVTVCAyMDIwMB4XDTIwMDIxMDAwMDAwMFoXDTQwMDYx --MDAwMDAwMFowTTELMAkGA1UEBhMCQVQxIzAhBgNVBAoTGmUtY29tbWVyY2UgbW9u --aXRvcmluZyBHbWJIMRkwFwYDVQQDExBHTE9CQUxUUlVTVCAyMDIwMIICIjANBgkq --hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAri5WrRsc7/aVj6B3GyvTY4+ETUWiD59b --RatZe1E0+eyLinjF3WuvvcTfk0Uev5E4C64OFudBc/jbu9G4UeDLgztzOG53ig9Z --YybNpyrOVPu44sB8R85gfD+yc/LAGbaKkoc1DZAoouQVBGM+uq/ufF7MpotQsjj3 --QWPKzv9pj2gOlTblzLmMCcpL3TGQlsjMH/1WljTbjhzqLL6FLmPdqqmV0/0plRPw --yJiT2S0WR5ARg6I6IqIoV6Lr/sCMKKCmfecqQjuCgGOlYx8ZzHyyZqjC0203b+J+ --BlHZRYQfEs4kUmSFC0iAToexIiIwquuuvuAC4EDosEKAA1GqtH6qRNdDYfOiaxaJ --SaSjpCuKAsR49GiKweR6NrFvG5Ybd0mN1MkGco/PU+PcF4UgStyYJ9ORJitHHmkH --r96i5OTUawuzXnzUJIBHKWk7buis/UDr2O1xcSvy6Fgd60GXIsUf1DnQJ4+H4xj0 --4KlGDfV0OoIu0G4skaMxXDtG6nsEEFZegB31pWXogvziB4xiRfUg3kZwhqG8k9Me --dKZssCz3AwyIDMvUclOGvGBG85hqwvG/Q/lwIHfKN0F5VVJjjVsSn8VoxIidrPIw --q7ejMZdnrY8XD2zHc+0klGvIg5rQmjdJBKuxFshsSUktq6HQjJLyQUp5ISXbY9e2 --nKd+Qmn7OmMCAwEAAaNjMGEwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC --AQYwHQYDVR0OBBYEFNwuH9FhN3nkq9XVsxJxaD1qaJwiMB8GA1UdIwQYMBaAFNwu --H9FhN3nkq9XVsxJxaD1qaJwiMA0GCSqGSIb3DQEBCwUAA4ICAQCR8EICaEDuw2jA --VC/f7GLDw56KoDEoqoOOpFaWEhCGVrqXctJUMHytGdUdaG/7FELYjQ7ztdGl4wJC --XtzoRlgHNQIw4Lx0SsFDKv/bGtCwr2zD/cuz9X9tAy5ZVp0tLTWMstZDFyySCstd --6IwPS3BD0IL/qMy/pJTAvoe9iuOTe8aPmxadJ2W8esVCgmxcB9CpwYhgROmYhRZf --+I/KARDOJcP5YBugxZfD0yyIMaK9MOzQ0MAS8cE54+X1+NZK3TTN+2/BT+MAi1bi --kvcoskJ3ciNnxz8RFbLEAwW+uxF7Cr+obuf/WEPPm2eggAe2HcqtbepBEX4tdJP7 --wry+UUTF72glJ4DjyKDUEuzZpTcdN3y0kcra1LGWge9oXHYQSa9+pTeAsRxSvTOB --TI/53WXZFM2KJVj04sWDpQmQ1GwUY7VA3+vA/MRYfg0UFodUJ25W5HCEuGwyEn6C --MUO+1918oa2u1qsgEu8KwxCMSZY13At1XrFP1U80DhEgB3VDRemjEdqso5nCtnkn --4rnvyOL2NSl6dPrFf4IFYqYK6miyeUcGbvJXqBUzxvd4Sj1Ce2t+/vdG6tHrju+I --aFvowdlxfv1k7/9nR4hYJS8+hge9+6jlgqispdNpQ80xiEmEU5LAsTkbOYMBMMTy --qfrQA71yN2BWHzZ8vTmR9W0Nv3vXkg== -------END CERTIFICATE----- -- - # Issuer: CN=ANF Secure Server Root CA O=ANF Autoridad de Certificacion OU=ANF CA Raiz - # Subject: CN=ANF Secure Server Root CA O=ANF Autoridad de Certificacion OU=ANF CA Raiz - # Label: "ANF Secure Server Root CA" --- -2.40.0 diff --git a/meta/recipes-devtools/python/python3-certifi_2024.2.2.bb b/meta/recipes-devtools/python/python3-certifi_2024.2.2.bb index 617b597a40eb..e5325b1f12b9 100644 --- a/meta/recipes-devtools/python/python3-certifi_2024.2.2.bb +++ b/meta/recipes-devtools/python/python3-certifi_2024.2.2.bb @@ -7,9 +7,6 @@ HOMEPAGE = "http://certifi.io/" LICENSE = "ISC" LIC_FILES_CHKSUM = "file://LICENSE;md5=11618cb6a975948679286b1211bd573c" -SRC_URI += "file://CVE-2024-39689.patch \ - " - SRC_URI[sha256sum] = "0569859f95fc761b18b45ef421b1290a0f65f147e92a1e5eb3e635f9a5e4e66f" CVE_PRODUCT = "certifi:certifi" From patchwork Fri Oct 23 10:50:04 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Paul Barker X-Patchwork-Id: 101801 Received: from fout-a3-smtp.messagingengine.com (fout-a3-smtp.messagingengine.com [103.168.172.146]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.4432.1792752612322997922 for ; Fri, 23 Oct 2026 03:50:12 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@pbarker.dev header.s=fm1 header.b=T5ZER32e; dkim=pass header.i=@messagingengine.com header.s=fm2 header.b=R/xelrsC; spf=pass (domain: pbarker.dev, ip: 103.168.172.146, mailfrom: paul@pbarker.dev) Received: from phl-compute-04.internal (phl-compute-04.internal [10.202.2.44]) by mailfout.phl.internal (Postfix) with ESMTP id A8B42EC009C for ; Fri, 23 Oct 2026 06:50:11 -0400 (EDT) Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-04.internal (MEProxy); Fri, 23 Oct 2026 06:50:11 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pbarker.dev; h= cc:content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1792752611; x=1792839011; bh=LSwdW4Pdoo1pS7cGWZCd1wElaJxydII9SgENyI8pug0=; b= T5ZER32eCRDJR1hxXzxmce/6C+hdfal+icaGw7DspYI483XD0RZHAPG0QaQPQ08T k9DcccJZFsuHcfwGtPigqzaQ5xbBI8pMfn9uEZ7U0v+yzVCyRdObC7H0omidFZyh eNtGSCv9SLlTrMhCOaDhj7EE+7tr4+yuD446uq3fQC4ykjo2Aq+3MFmRJ/p5gSHd F9Meisq4z0iz4V6xIbmlgXiigbDRr5dAuNfaRoyYDhIVDwfEv5VHsKcIlcFC6Uo2 fzTNCb3edDWsX1KcM5QBHHfm7Oqlx/mSsYOWfIGfoPzaHdnGA/zQBY+Zqihargqg J6JhRO63w8fFJ8/SCcxtvQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; t=1792752611; x=1792839011; bh=L SwdW4Pdoo1pS7cGWZCd1wElaJxydII9SgENyI8pug0=; b=R/xelrsCitnCsBrX1 clG4GHljH5foPlwYPcdfs/5OJlz0dkmSXapbcxceNXz57yAC0TrV6JHTvH3tazZs 9tQ5u1NExjFJdsATdK2/iBQP1haBGEfXFpe6Hu4r0PFoW5eX6vtbi0wX/EbSqWNM E8Dh4m+AIl2xWy2GDqukd2blzW9ekBJylCQurOXeJmES96KMmYfpV7owL9IeG4ND xYXaFda8iz2CU/x6LkTGa27PZSakKbsycqgtBddpbLT75IGbyYVSLcEpmBO/eJ9A b2mKbS/42vQ2ySpd63QVw+CgbsKJT702LghIjhKadZUrJiggG6663XI5N7GRwwJt Uw5Qg== X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=sign d=pbarker.dev a=rsa-sha256; DKIM2-Signature: i=1; m=1; t=1792752611; d=pbarker.dev; mf=PHBhdWxAcGJhcmtlci5kZXY+; rt=PG9wZW5lbWJlZGRlZC1jb3JlQGxpc3RzLm9wZW5lbWJlZGRlZC5vcmc+; s=fm1:rsa-sha256:DpaE2vz4Mgy7NkuyHn2fSj5E+8LnUc+oLMYjjlc+tjrKEOP /xOAiPeFNAMOKj7T5y3HkF5XZ5Vc2E5IOfFoQYCjTrKFBhFopUHHgtie9quPtEAV WUM3vFsD60WwHV8nycbwwzC0riDvY/XNF+FsWteJBSpeLX3/hcbVmy6S3rbhQZoA ICwxiw8pw+OaSiN923fdoUG6aweMA88+kV5Fd7cDQjBq9xNVW6jyUe2L5yi5DT+/ Sv0jFhNRqduoDT+lXp3HhcuteFSZFztSi72G9SuzD1jhlDrmIFdDJzUBtV0x6zkT K6Kre+2Qh4OEcKYrSO7AarfsR9K2g/02Tlhd0mw==; X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=mi-m=1; hc=11; hn=content-transfer-encoding,content-type,date,feedback-id,from, in-reply-to,message-id,mime-version,references,subject,to; Message-Instance: m=1; h=sha256:n7WMUug3zWwRYROwmw9tS1VlYFFrhnXjGTzRgo56WIY=:cFef6DK8zqYXADmlnJXkZkqj81SwKIAAjp+LGFARx/k=; X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: dmFkZTGyOagm9BfzPb+YtFk66N3nGLsZpb/VPM8XjyvCI6H5ALoAzhuChEVFVvDnkE/SF/ JqM9HdccU5QGXh85+PcHSXfPlinR50XvCANansdfjHdI2y4yWT98LB5sYItFtv/YCkRC+D gCz49oXUOiIA3GSaVy8hQyIFhJVj70/v42lZYRXkC6yDHyO8Mxh8BPFCEOUQWBw2ymS8E7 RnCBWgaoCjRMBc+ufLfygswQfPbZu8I30UCpB32sT/SGJkXdSH8ooLc1ooYQLEosEVguDB nl2tS57Hfyetr9KYXK2lnhEOBFdFfv/pn1dtrEglp90LQOD/J+D0fLXSLeer7z4rPcHWTa 9x0QnovirxjAVUn41IDWbQA9qq+lnf8Y85kOxEepn8WxW5TNS56I5lJVpaUZmGQNEcuXxk uxTP8ZV4NDpkaFN1NyNaLXTLmP/csoGaxiZvaKNzW0ETSCulbPsnGhdl3x5GUGRJssVzeF xQR6udILvh/HK3JJT9PkeayAFbCMUJMopSmha/9tqnEFawc5tLBmwClY2ihjl9KmI6nnTu BJtYzbcBhtkXh+E1Mzh4BtICPOuUuOBaYwqbAx5RnrkIPd+z9s/0eFK8XXX9PPYHe0npMz i3wXmTrUcNjEvSzJJQDUXLKebDPtj4XCU78Nrk12kypXXy3/dl8FzEOC61DA X-ME-Proxy: Feedback-ID: i51494658:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Fri, 23 Oct 2026 06:50:11 -0400 (EDT) From: Paul Barker Date: Fri, 23 Oct 2026 11:50:04 +0100 Subject: [PATCH scarthgap 03/19] python3-certifi: upgrade 2024.2.2 -> 2024.6.2 MIME-Version: 1.0 Message-Id: <20261023-certs-scarthgap-v1-3-0ba436174193@pbarker.dev> References: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> In-Reply-To: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> To: openembedded-core@lists.openembedded.org X-Mailer: b4 0.16.0 X-Developer-Signature: v=1; a=openssh-sha256; t=1792752607; l=1531; i=paul@pbarker.dev; s=id_piv_33200296; h=from:subject:message-id; bh=3U55rfcO21zBd60LFsIN/T89Cs3dyEebq86597w7f1M=; b=U1NIU0lHAAAAAQAAAGgAAAATZWNkc2Etc2hhMi1uaXN0cDI1NgAAAAhuaXN0cDI1NgAAAEEEQ dOfZ4fCf9WdA7cHWnYqW4P6zifYTwJ18a3l28hvdGt3M0CTKu/FWpwoh+x5E487TvYA9iW0goTM GGtdemFzVgAAAAZwYXRhdHQAAAAAAAAABnNoYTUxMgAAAGUAAAATZWNkc2Etc2hhMi1uaXN0cDI 1NgAAAEoAAAAhAOLV8/5SWTbIu0qb+wB4gRih5brtkgfrPdK1tuUU0FXGAAAAIQCKrB+CHkOyn/ L6vSQ9rsiV5bPlloM3x9qsHuNuOE9a1A== X-Developer-Key: i=paul@pbarker.dev; a=openssh; fpr=SHA256:IlqExt9TPtGqXrqYg/YPMlsWlOGC6AVubz/PwuYw6KY List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Fri, 23 Oct 2026 10:50:19 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248520 From: Tim Orling https://github.com/certifi/python-certifi/compare/2024.02.02...2024.06.02 * Various dependabot updates to dependencies * Test against Python 3.12 stable and 3.13-dev * Added 3.12 classifier Signed-off-by: Tim Orling Signed-off-by: Richard Purdie (cherry picked from commit eb2d7da0aa8df7788db1ee15b0f8af8a88c09fa2) This changes GitHub Actions workflows, cacert.pem and adds a classifier which is safe to do on the stable branch. Signed-off-by: Paul Barker --- .../python/{python3-certifi_2024.2.2.bb => python3-certifi_2024.6.2.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/python/python3-certifi_2024.2.2.bb b/meta/recipes-devtools/python/python3-certifi_2024.6.2.bb similarity index 87% rename from meta/recipes-devtools/python/python3-certifi_2024.2.2.bb rename to meta/recipes-devtools/python/python3-certifi_2024.6.2.bb index e5325b1f12b9..e0b2a4a8d08a 100644 --- a/meta/recipes-devtools/python/python3-certifi_2024.2.2.bb +++ b/meta/recipes-devtools/python/python3-certifi_2024.6.2.bb @@ -7,7 +7,7 @@ HOMEPAGE = "http://certifi.io/" LICENSE = "ISC" LIC_FILES_CHKSUM = "file://LICENSE;md5=11618cb6a975948679286b1211bd573c" -SRC_URI[sha256sum] = "0569859f95fc761b18b45ef421b1290a0f65f147e92a1e5eb3e635f9a5e4e66f" +SRC_URI[sha256sum] = "3cd43f1c6fa7dedc5899d69d3ad0398fd018ad1a17fba83ddaf78aa46c747516" CVE_PRODUCT = "certifi:certifi" From patchwork Fri Oct 23 10:50:05 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Paul Barker X-Patchwork-Id: 101802 Received: from fhigh-a3-smtp.messagingengine.com (fhigh-a3-smtp.messagingengine.com [103.168.172.154]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.4434.1792752612826627648 for ; Fri, 23 Oct 2026 03:50:12 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@pbarker.dev header.s=fm1 header.b=RCw/Nq6Z; dkim=pass header.i=@messagingengine.com header.s=fm2 header.b=JVsJgPql; spf=pass (domain: pbarker.dev, ip: 103.168.172.154, mailfrom: paul@pbarker.dev) Received: from phl-compute-03.internal (phl-compute-03.internal [10.202.2.43]) by mailfhigh.phl.internal (Postfix) with ESMTP id 2FFB41400168 for ; Fri, 23 Oct 2026 06:50:12 -0400 (EDT) Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-03.internal (MEProxy); Fri, 23 Oct 2026 06:50:12 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pbarker.dev; h= cc:content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1792752612; x=1792839012; bh=lADe+ksXZChnzvMCyS4wvi6E0B9iIjfOJpikxJ1GbmE=; b= RCw/Nq6ZmEcUMfrP3I24M4OHaS4sV3mlJfbZki1k+uX3678D7dgvXuB5iWZIQDq2 XOnkZ+XKbEFw7gE5eVcQT1JSE4pWHBu5QdMKyLGsicBoAQs0NOYby1pnmRitdaDH 4iuaqP4uRymtV+FZhZFLriiwWHeF8IvU3xwvs+fKUHnZOxInRIMO3ryTOYcS4QkU vdBPvt0AXGwKiRWxJGpxfd56bvAcgs19Wy58BzqEQImA1jXgmgl8nkWWEuYXTAiC LbdiJI9DqME4aluSG+a1Dy0DuZQVV677RIzliD6cetqFo7Q1ngEEFzVg2h6TRltX U3bHkwko/3eOT8sAWMPh7A== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; t=1792752612; x=1792839012; bh=l ADe+ksXZChnzvMCyS4wvi6E0B9iIjfOJpikxJ1GbmE=; b=JVsJgPql3OjpyQw6k lJ4kImcq0k8Ax4GHE7XuIO0KNwXjhUP7jQZ/iy1K3dAC6z2sXIA/Cv8eTmxdi7s2 oQ8NbXEpCOqJffUVyEcfRGkemxf3JIyQ8Ws/9uyycsrSsd5hMaWUVwwgKstsmxH8 LmebBUMNZioOFq+ji7AwKYfO17cpsR3KzTki+mEufVlOtEZodBaC3XGLEz7HIb6x VgFfSZ7udmdG6zw2MXgkjR1IXN86NGmvsy0DCNbwQ/NNwa5q6eTG4v1I4rV+em52 zNf9QZdxBluA8sx9WF3lfy0LxMylDU1K37wO+762kr5bQ76C2IIKbg7sHpObOYoz tes0A== X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=sign d=pbarker.dev a=rsa-sha256; DKIM2-Signature: i=1; m=1; t=1792752612; d=pbarker.dev; mf=PHBhdWxAcGJhcmtlci5kZXY+; rt=PG9wZW5lbWJlZGRlZC1jb3JlQGxpc3RzLm9wZW5lbWJlZGRlZC5vcmc+; s=fm1:rsa-sha256:eqPssK1l+zRzUeraFMe0I2D+xsZjRtIrBqZGuyfbSyhXZsk QqrpDJJrrPDO/Nfgm1+9yUqxnNi5f9t7Hggnmvn8TD2Pagc8q9pWlnS0Q/i1WS9B Q8m/CviKc7Msebmyui7YlHvmrGxDWyZwJx4TLMUvLq0wfOfElAFG8XO2HV4J+kKN WL+FP4dWk+vsFn3LBXR7SKfm8IYu+BrwxKR5Wb8eKdDLSWyuwIfFA3BvKkZzUj70 mBKQiE/cbKOMC9RP69ml/XZ5e2U2uG4tuBseIUTe/iFs+JGLL0oF1bMHtc7H3P5F 5Z+C+jDTUd9pAoxdJWYq1qe/1erZ7u8VQqSipuw==; X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=mi-m=1; hc=11; hn=content-transfer-encoding,content-type,date,feedback-id,from, in-reply-to,message-id,mime-version,references,subject,to; Message-Instance: m=1; h=sha256:xu6cYwazugfwz6ikZ3v7M18zLXiog37TcTIHUMl/Djc=:RWLPRyhByool9KwpBvIg6aeCN50++z2E1lUXNrQy5M4=; X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: dmFkZTER2m1YIMQ8eg4MnNIsZi4FBhMIWqS+ZbVhuw44e/27Tf4AY+BIRzUquKEjhnhqTt 0g6mNqv1U4MXkuCVTEXHNpw7k6cApW8LB3Imp3g3tgBd1M7lN1nyNBlZ6ljZ7+w7s0kABJ OV8tzTnnhZsHV87VOCEnnZFbKd0n7dJt7inA1oB89LeOnbhKaS7Zl7E4arQgdppveXVqY+ /ejNy2IbeLlV0yWnZ/3utWpncsMkMtxPfg/jUWMsYZjsi+TmiqBcjObVWshyFBAv3oJQ9F JgGzmA7v5p9VzUuc3bYY1CVs5RvcX5e8N3Cet7kuxRSynSJadNIj13L+qM6pWAHS3btCm4 4/8WeU9Y8Rq7/iyWKw9zTTm2VWd1rbe9CPgC22LOMy0r2uaWAtvvvy4bcDbv8d7KVCVYiI 1/tBBDAurlGbMMgoIXxtYALGw4zSK/40/1kuynaxjzwH6iMy4v+41R1PTnA8BkqbU+zqza XlqDe6xLCuF+nG0J515IyrqVRuZvFqnZ4EKNMy9uQuitk1imV+1Fgkw6CWEhPmyuCTGtuV Gcu/6O4v+/vEJN18BnP1hnoZkv7XH5PCDfcqvxLPFBV2eoUjtcfUrophUq7FfAOP/P56hG zdSvzzdnsa0HBYnpSm5mQyfWQWC0OJPRW9Ei0BNdINTERWGY25BfClFk+svw X-ME-Proxy: Feedback-ID: i51494658:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Fri, 23 Oct 2026 06:50:11 -0400 (EDT) From: Paul Barker Date: Fri, 23 Oct 2026 11:50:05 +0100 Subject: [PATCH scarthgap 04/19] python3-certifi: upgrade 2024.6.2 -> 2024.7.4 MIME-Version: 1.0 Message-Id: <20261023-certs-scarthgap-v1-4-0ba436174193@pbarker.dev> References: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> In-Reply-To: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> To: openembedded-core@lists.openembedded.org X-Mailer: b4 0.16.0 X-Developer-Signature: v=1; a=openssh-sha256; t=1792752607; l=1608; i=paul@pbarker.dev; s=id_piv_33200296; h=from:subject:message-id; bh=92DtPMKf2sl21NK12zgmVLpwUewkl9q+mGnixepN1O4=; b=U1NIU0lHAAAAAQAAAGgAAAATZWNkc2Etc2hhMi1uaXN0cDI1NgAAAAhuaXN0cDI1NgAAAEEEQ dOfZ4fCf9WdA7cHWnYqW4P6zifYTwJ18a3l28hvdGt3M0CTKu/FWpwoh+x5E487TvYA9iW0goTM GGtdemFzVgAAAAZwYXRhdHQAAAAAAAAABnNoYTUxMgAAAGMAAAATZWNkc2Etc2hhMi1uaXN0cDI 1NgAAAEgAAAAgUB5/ap8JvAuxReM0a5LJU8KUT4hrP26ShD/Tan1FjIQAAAAgXREY6aDXkREwd0 68WCGXEH8o2GI+levSy86h1+UqOAo= X-Developer-Key: i=paul@pbarker.dev; a=openssh; fpr=SHA256:IlqExt9TPtGqXrqYg/YPMlsWlOGC6AVubz/PwuYw6KY List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Fri, 23 Oct 2026 10:50:20 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248521 From: Wang Mingyu Changelog: ========== - Bump peter-evans/create-pull-request from 6.0.5 to 6.1.0 - Bump actions/checkout from 4.1.6 to 4.1.7 - Bump pypa/gh-action-pypi-publish from 1.8.14 to 1.9.0 Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit c572b0afd889ea22b5d229a2d7efca9cef9b0926) This only changes GitHub Actions workflows and cacert.pem. See https://github.com/certifi/python-certifi/compare/2024.06.02...2024.07.04 Signed-off-by: Paul Barker --- .../python/{python3-certifi_2024.6.2.bb => python3-certifi_2024.7.4.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/python/python3-certifi_2024.6.2.bb b/meta/recipes-devtools/python/python3-certifi_2024.7.4.bb similarity index 87% rename from meta/recipes-devtools/python/python3-certifi_2024.6.2.bb rename to meta/recipes-devtools/python/python3-certifi_2024.7.4.bb index e0b2a4a8d08a..fa71e3c0aed9 100644 --- a/meta/recipes-devtools/python/python3-certifi_2024.6.2.bb +++ b/meta/recipes-devtools/python/python3-certifi_2024.7.4.bb @@ -7,7 +7,7 @@ HOMEPAGE = "http://certifi.io/" LICENSE = "ISC" LIC_FILES_CHKSUM = "file://LICENSE;md5=11618cb6a975948679286b1211bd573c" -SRC_URI[sha256sum] = "3cd43f1c6fa7dedc5899d69d3ad0398fd018ad1a17fba83ddaf78aa46c747516" +SRC_URI[sha256sum] = "5a1e7645bc0ec61a09e26c36f6106dd4cf40c6db3a1fb6352b0244e7fb057c7b" CVE_PRODUCT = "certifi:certifi" From patchwork Fri Oct 23 10:50:06 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Paul Barker X-Patchwork-Id: 101814 Received: from fout-a3-smtp.messagingengine.com (fout-a3-smtp.messagingengine.com [103.168.172.146]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.4474.1792752613578968603 for ; Fri, 23 Oct 2026 03:50:13 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@pbarker.dev header.s=fm1 header.b=uO/4WxZZ; dkim=pass header.i=@messagingengine.com header.s=fm2 header.b=JLG+xJ00; spf=pass (domain: pbarker.dev, ip: 103.168.172.146, mailfrom: paul@pbarker.dev) Received: from phl-compute-03.internal (phl-compute-03.internal [10.202.2.43]) by mailfout.phl.internal (Postfix) with ESMTP id A08E3EC0067 for ; Fri, 23 Oct 2026 06:50:12 -0400 (EDT) Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-03.internal (MEProxy); Fri, 23 Oct 2026 06:50:12 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pbarker.dev; h= cc:content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1792752612; x=1792839012; bh=DumRcNDNzfgJDsa6jSooq+aX8PUixsd56OxmamJgZdo=; b= uO/4WxZZgFIhjCQbP/S0Mx6jP9jNnu0Q8FSllNP6Pe4JrR8wNQSyw0Vzhoql6a9J Qsei2pES+LDkMhERWvFYbl41fsf0B3N+Bn9OFCfkU79HObPoDN5BcVc5FBngEi+3 3dghZyzPJZ1+lNooaszoZ3vCoW/rFNnKj8SmPxV6kWZ/8ImQLWouARyk0kiXxkZR vXh3oopmx5go7PKVkONZveK3HBnwMvaq0eoCjDllQqJorwoJ/T/2obGhvSRoUYfM uuhUnS2TTjCMbIZwBkz6Ulh3Ds5HoflcyNaEJAPg3oQsL6Vr3hAIjyWnGUyVK7y8 CNKyUsu6WZ5uHM5folDRgA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; t=1792752612; x=1792839012; bh=D umRcNDNzfgJDsa6jSooq+aX8PUixsd56OxmamJgZdo=; b=JLG+xJ00XnQlhVd9W gMlpFDTMpZYCQzWQ/cF/Z0qlpVDJzndWrsC9pkynuHFCClxRjjV3IYY2FjIPFIt7 xs00luPq7FpZXw7GtfPcgImQPl6l63dKauphVMr7eb/JxZIMTCofdpVVFNfyxivS 3/ESLwid64y7VxHT3X7C+q6v0rBD+vohBEKAD4UseUuZVfzcWyxdeSK/8kNnmria CAL7bxaQMojPfL7grUO7f8a1/jmyyMdSD19KGYl6lPbDNeoQITQKIHnJTi4q8S6m lkqW5l+zK95cr/0Uvxsst/VxAzdJG5GaskSpnZ2RxN7BmAQCdejrgp0QbLpvEpBT VwGHA== X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=sign d=pbarker.dev a=rsa-sha256; DKIM2-Signature: i=1; m=1; t=1792752612; d=pbarker.dev; mf=PHBhdWxAcGJhcmtlci5kZXY+; rt=PG9wZW5lbWJlZGRlZC1jb3JlQGxpc3RzLm9wZW5lbWJlZGRlZC5vcmc+; s=fm1:rsa-sha256:YFYhyyQH/ub+iZSEV2tiaTF7s0AU1fo7lzKrqM2991K1o5I RbNmyDxCmdGPPsJksi94ii4MQLY+p1oBxraoJ3s5yrlU8cmMKwPCHYGB0JUh3EYU VVb9sBKH1J90VKVcwhWyI6jbxpVqAIpCKHKkXLEOw+HeiiRE99WZPUhxjOWK9P4V nFJVwFZyuoo3UbCfkX/N5k4qYVP70zvj8X8guXRf9u1Msj+c73c3yMeJR+tkvb8K CkuNUnpXsweKktYBqfYSpqQN2kWd1FD81dMLKDKPhq1ksTC03QZMEwSTaJWOjUEd 2Tuj/Xs8qNuN14/9bZyZAPG668qt+62A0SmaOzA==; X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=mi-m=1; hc=11; hn=content-transfer-encoding,content-type,date,feedback-id,from, in-reply-to,message-id,mime-version,references,subject,to; Message-Instance: m=1; h=sha256:XC4fnsuyESKAubK5FxZnJ4VumzZEbnkP7sCh6wBWX04=:eYdtm17NpNYpcit2Ih5M+zodWTZ4FhOTIqXCWpoKhHk=; X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: dmFkZTER2m1YIMQ8eg4MnNIsZi4FBhMIWqS+ZbVhuw44e/27Tf4AY+BIRzUquKEjhnhqTt 0g6mNqv1U4MXkuCVTEXHNpw7k6cApW8LB3Imp3g3tgBd1M7lN1nyNBlZ6ljZ7+w7s0kABJ OV8tzTnnhZsHV87VOCEnnZFbKd0n7dJt7inA1oB89LeOnbhKaS7Zl7E4arQgdppveXVqY+ /ejNy2IbeLlV0yWnZ/3utWpncsMkMtxPfg/jUWMsYZjsi+TmiqBcjObVWshyFBAv3oJQ9F JgGzmA7v5p9VzUuc3bYY1CVs5RvcX5e8N3Cet7kuxRSynSJadNIj13L+qM6pWAHS3btCm4 4/8WeU9Y8Rq7/iyWKw9zTTm2VWd1rbe9CPgC22LOMy0r2uaWAtvvvy4bcDbv8d7KVCVYiI 1/tBBDAurlGbMMgoIXxtYALGw4zSK/40/1kuynaxjzwH6iMy4v+41R1PTnA8BkqbU+zqza XlqDe6xLCuF+nG0J515IyrqVRuZvFqnZ4EKNMy9uQuitk1imV+1Fgkw6CWEhPmyuCTGtuV Gcu/6O4v+/vEJN18BnP1hnoZkv7XH5PCDfcqvxLPFBV2eoUjtcfUrophUq7FfAOP/P56hG zdSvzzdnsa0HBYnpSm5mQyfWQWC0OJPRW9Ei0BNdINTERWGY25BfClFk+svw X-ME-Proxy: Feedback-ID: i51494658:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Fri, 23 Oct 2026 06:50:12 -0400 (EDT) From: Paul Barker Date: Fri, 23 Oct 2026 11:50:06 +0100 Subject: [PATCH scarthgap 05/19] python3-certifi: upgrade 2024.7.4 -> 2024.8.30 MIME-Version: 1.0 Message-Id: <20261023-certs-scarthgap-v1-5-0ba436174193@pbarker.dev> References: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> In-Reply-To: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> To: openembedded-core@lists.openembedded.org X-Mailer: b4 0.16.0 X-Developer-Signature: v=1; a=openssh-sha256; t=1792752608; l=1357; i=paul@pbarker.dev; s=id_piv_33200296; h=from:subject:message-id; bh=PbPyUT2+tR5fc6rmRHOvMO+UKjOw/rGidIlfyEVLLc4=; b=U1NIU0lHAAAAAQAAAGgAAAATZWNkc2Etc2hhMi1uaXN0cDI1NgAAAAhuaXN0cDI1NgAAAEEEQ dOfZ4fCf9WdA7cHWnYqW4P6zifYTwJ18a3l28hvdGt3M0CTKu/FWpwoh+x5E487TvYA9iW0goTM GGtdemFzVgAAAAZwYXRhdHQAAAAAAAAABnNoYTUxMgAAAGUAAAATZWNkc2Etc2hhMi1uaXN0cDI 1NgAAAEoAAAAhAMbkvGyyrpqKMttng2S2ZxPcspZxifwFuv2RlOXiZux3AAAAIQCWU7KeGCp8Vq g/MF9BxgZw4xOEjpLc8qBqKn+ccO6FFQ== X-Developer-Key: i=paul@pbarker.dev; a=openssh; fpr=SHA256:IlqExt9TPtGqXrqYg/YPMlsWlOGC6AVubz/PwuYw6KY List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Fri, 23 Oct 2026 10:50:22 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248522 From: Wang Mingyu Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie (cherry picked from commit 864b7b4affae0bf6a57cbdd2f2e4a07c1468705b) This only changes GitHub Actions workflows and cacert.pem. See https://github.com/certifi/python-certifi/compare/2024.07.04...2024.08.30 Signed-off-by: Paul Barker --- .../{python3-certifi_2024.7.4.bb => python3-certifi_2024.8.30.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/python/python3-certifi_2024.7.4.bb b/meta/recipes-devtools/python/python3-certifi_2024.8.30.bb similarity index 87% rename from meta/recipes-devtools/python/python3-certifi_2024.7.4.bb rename to meta/recipes-devtools/python/python3-certifi_2024.8.30.bb index fa71e3c0aed9..eddd05282df9 100644 --- a/meta/recipes-devtools/python/python3-certifi_2024.7.4.bb +++ b/meta/recipes-devtools/python/python3-certifi_2024.8.30.bb @@ -7,7 +7,7 @@ HOMEPAGE = "http://certifi.io/" LICENSE = "ISC" LIC_FILES_CHKSUM = "file://LICENSE;md5=11618cb6a975948679286b1211bd573c" -SRC_URI[sha256sum] = "5a1e7645bc0ec61a09e26c36f6106dd4cf40c6db3a1fb6352b0244e7fb057c7b" +SRC_URI[sha256sum] = "bec941d2aa8195e248a60b31ff9f0558284cf01a52591ceda73ea9afffd69fd9" CVE_PRODUCT = "certifi:certifi" From patchwork Fri Oct 23 10:50:07 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Paul Barker X-Patchwork-Id: 101817 Received: from fhigh-a3-smtp.messagingengine.com (fhigh-a3-smtp.messagingengine.com [103.168.172.154]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.4475.1792752613788003508 for ; Fri, 23 Oct 2026 03:50:13 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@pbarker.dev header.s=fm1 header.b=dg0OVpwc; dkim=pass header.i=@messagingengine.com header.s=fm2 header.b=Qw13xxA2; spf=pass (domain: pbarker.dev, ip: 103.168.172.154, mailfrom: paul@pbarker.dev) Received: from phl-compute-06.internal (phl-compute-06.internal [10.202.2.46]) by mailfhigh.phl.internal (Postfix) with ESMTP id 282711400163 for ; Fri, 23 Oct 2026 06:50:13 -0400 (EDT) Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-06.internal (MEProxy); Fri, 23 Oct 2026 06:50:13 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pbarker.dev; h= cc:content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1792752613; x=1792839013; bh=ZKAN2iQIbrEDEI5haHgRwdrtpCQ02XJVQKflz8HJH7M=; b= dg0OVpwc/1DcfjmnU/v8kNldtgXJt0rUK8XQae3WmDqnqwwMgY/CfuGHVDq2KSQ2 SpPsmzgEBgzpp37cJZ+eW4k8ckpu/3nqWnWi07F4u/TfXC2Hm9cx2d5a6wq4MeC2 8dkkNEsQenfm+btSB2KVKWGOjRqLH9tV9iTUo/KnVmjFkxqjOnVFmWXnWf/XRe5v CNXK5ZjctMFqAz6pepc+xWnE2vmmZnmWdtpJAdrLM+TLM2IIF3WkAR86z3Bj/B92 rUq73A121WIyrovX6OLGjMusCtioIZsenNuUerLgvN/JwsLwyLyNFV8yGEuZOsbV k4Pk788nXiQAbe+i6dUCWA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; t=1792752613; x=1792839013; bh=Z KAN2iQIbrEDEI5haHgRwdrtpCQ02XJVQKflz8HJH7M=; b=Qw13xxA2JOD/31OQ2 9VomdOyy1BrSRN9pb4FfDAA+CxOzreVBQkpnSAqLk8JLDWHLrQOLlimLw7myk7m2 YK3ClUSFxncLCGBVm9nrzJOR+JyEBC+IBS626/hBl5mU1brxf8aXDbRKFUMvV4+o jVs7916Ujgdy5tNviH2owO1RBqmgIoUe7bw6Rx+kHPWd6bF2zOWQxyZrjAD2mC7i Wz8v5nlQm8sKsFYJLh7qzPmlrUMiK51wDNPsY3N1R1d1iRIsMrfxBfP9NSfunDzT DM2Pcm/I7lGm8JVoCmdONfS8k+YWUzs7svdWAkkyoSVftGlmoK0zR1SlNytahs01 Kr1ZQ== X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=sign d=pbarker.dev a=rsa-sha256; DKIM2-Signature: i=1; m=1; t=1792752613; d=pbarker.dev; mf=PHBhdWxAcGJhcmtlci5kZXY+; rt=PG9wZW5lbWJlZGRlZC1jb3JlQGxpc3RzLm9wZW5lbWJlZGRlZC5vcmc+; s=fm1:rsa-sha256:i3n7VxUTR8FzwSRyCph5ZUZ9LscqqWfWhDGeo9qCK3ubdmB mDjKn/7506NOf+1QpLGalD66ennqqHHx5J57BkneoK3ppxQp1R5bQJT3YCVZV+bG 1C1ONLLG68/9Yuno/96t9ze+MOoL4Imelw8sX0LE4OYqjE/IVQPhgaXZQ7z+YJdl dWbgx5I06IU0k7581d4UlKz8qmxNBr6oIoA+AN5zxVeitFE4d5AEZmD1y+AVZAj/ +zlWllb+vLrNC4Z7uRHNmpisWIGMGFWPkXbH0bQPQtNieuw0Bgv3HHg86eTv8KDg 2hEjGptQGNjzReWSUxMfBBWAhoyefpKWxf6JGXw==; X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=mi-m=1; hc=11; hn=content-transfer-encoding,content-type,date,feedback-id,from, in-reply-to,message-id,mime-version,references,subject,to; Message-Instance: m=1; h=sha256:oSApb/0JH3FBhKlDIRBuITha2wsT0Wx/5UT+jX9c6P4=:YhtT76E2qziOio2TrvJWmDqRmAulqxUkYtDtPy44QAo=; X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: dmFkZTGyOagm9BfzPb+YtFk66N3nGLsZpb/VPM8XjyvCI6H5ALoAzhuChEVFVvDnkE/SF/ JqM9HdccU5QGXh85+PcHSXfPlinR50XvCANansdfjHdI2y4yWT98LB5sYItFtv/YCkRC+D gCz49oXUOiIA3GSaVy8hQyIFhJVj70/v42lZYRXkC6yDHyO8Mxh8BPFCEOUQWBw2ymS8E7 RnCBWgaoCjRMBc+ufLfygswQfPbZu8I30UCpB32sT/SGJkXdSH8ooLc1ooYQLEosEVguDB nl2tS57Hfyetr9KYXK2lnhEOBFdFfv/pn1dtrEglp90LQOD/J+D0fLXSLeer7z4rPcHWjS jI5oXyvGYx/7zxwunj9V4aI0VwLSJc6ggRO1Xnv2gs2QNXNCSl8Nal6FGe8KAi3wc+5qXb l0Kmb2w8OZArDZgKrOzgGDs6sqQnepx53uGC88NBsXYWWvpxmgtIAmZ4N1pBMESdSAb6px fvn7a3qX/FiPumyuMAf4nB9iZ2yJNIoIGvrib5CUNqwakK0L9/3G1zhzA4YzyyDDhPmWfF t8wSpFPZwCL5+dpMIhwI5rgSAP2A0o/qnFGBT+PDR1anwKRb+U3FFNTr8iCppgdhw5h2UD qWwmcM8WHBmeiupsDWfzyejF1RQt0thcfWa1pe8EIcT+lkSB2cQFZ3acDeEA X-ME-Proxy: Feedback-ID: i51494658:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Fri, 23 Oct 2026 06:50:12 -0400 (EDT) From: Paul Barker Date: Fri, 23 Oct 2026 11:50:07 +0100 Subject: [PATCH scarthgap 06/19] python3-certifi: upgrade 2024.8.30 -> 2024.12.14 MIME-Version: 1.0 Message-Id: <20261023-certs-scarthgap-v1-6-0ba436174193@pbarker.dev> References: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> In-Reply-To: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> To: openembedded-core@lists.openembedded.org X-Mailer: b4 0.16.0 X-Developer-Signature: v=1; a=openssh-sha256; t=1792752608; l=1493; i=paul@pbarker.dev; s=id_piv_33200296; h=from:subject:message-id; bh=N0/jGV0NijMjAicO1LAb2WW0zzDhPy372tbFh2JRAZo=; b=U1NIU0lHAAAAAQAAAGgAAAATZWNkc2Etc2hhMi1uaXN0cDI1NgAAAAhuaXN0cDI1NgAAAEEEQ dOfZ4fCf9WdA7cHWnYqW4P6zifYTwJ18a3l28hvdGt3M0CTKu/FWpwoh+x5E487TvYA9iW0goTM GGtdemFzVgAAAAZwYXRhdHQAAAAAAAAABnNoYTUxMgAAAGMAAAATZWNkc2Etc2hhMi1uaXN0cDI 1NgAAAEgAAAAgcUdnw2kzN2X9pQC9NklnOk2+uYiylK0ZVR3PkEoYTm0AAAAgKaRJllCrY+9RuK 1ND5W4/w4UjSwCJT/PHYoNFhPB/Ow= X-Developer-Key: i=paul@pbarker.dev; a=openssh; fpr=SHA256:IlqExt9TPtGqXrqYg/YPMlsWlOGC6AVubz/PwuYw6KY List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Fri, 23 Oct 2026 10:50:22 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248523 From: Wang Mingyu Signed-off-by: Wang Mingyu Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie (cherry picked from commit bc24b0e7b647a655a0e34d446aa867e8b6a445e4) This changes GitHub Actions workflows, cacert.pem and adds a classifier which is safe to do on the stable branch. See https://github.com/certifi/python-certifi/compare/2024.08.30...2024.12.14 Signed-off-by: Paul Barker --- .../{python3-certifi_2024.8.30.bb => python3-certifi_2024.12.14.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/python/python3-certifi_2024.8.30.bb b/meta/recipes-devtools/python/python3-certifi_2024.12.14.bb similarity index 87% rename from meta/recipes-devtools/python/python3-certifi_2024.8.30.bb rename to meta/recipes-devtools/python/python3-certifi_2024.12.14.bb index eddd05282df9..cb2cc969aec7 100644 --- a/meta/recipes-devtools/python/python3-certifi_2024.8.30.bb +++ b/meta/recipes-devtools/python/python3-certifi_2024.12.14.bb @@ -7,7 +7,7 @@ HOMEPAGE = "http://certifi.io/" LICENSE = "ISC" LIC_FILES_CHKSUM = "file://LICENSE;md5=11618cb6a975948679286b1211bd573c" -SRC_URI[sha256sum] = "bec941d2aa8195e248a60b31ff9f0558284cf01a52591ceda73ea9afffd69fd9" +SRC_URI[sha256sum] = "b650d30f370c2b724812bee08008be0c4163b163ddaec3f2546c1caf65f191db" CVE_PRODUCT = "certifi:certifi" From patchwork Fri Oct 23 10:50:08 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Paul Barker X-Patchwork-Id: 101803 Received: from fhigh-a3-smtp.messagingengine.com (fhigh-a3-smtp.messagingengine.com [103.168.172.154]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.4435.1792752614527281907 for ; Fri, 23 Oct 2026 03:50:14 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@pbarker.dev header.s=fm1 header.b=QvwbfoxQ; dkim=pass header.i=@messagingengine.com header.s=fm2 header.b=sp0Jkncu; spf=pass (domain: pbarker.dev, ip: 103.168.172.154, mailfrom: paul@pbarker.dev) Received: from phl-compute-05.internal (phl-compute-05.internal [10.202.2.45]) by mailfhigh.phl.internal (Postfix) with ESMTP id A4E46140016B for ; Fri, 23 Oct 2026 06:50:13 -0400 (EDT) Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-05.internal (MEProxy); Fri, 23 Oct 2026 06:50:13 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pbarker.dev; h= cc:content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1792752613; x=1792839013; bh=/khFKDUjsZ0ykwwR9nhRWdqWFs6Vxmpa4p4vdaO/Um0=; b= QvwbfoxQAR0CFrhA3fpeUQeoDOBwQGOCV9fsVYOcdmeRNJj1vya0NNXH+XTZqggI 0Qr/KbzOLZrwxlagxmvrD/wYAAcdPNT7HVtCEHWyzv920zeDg19nvQPp63rgk8Bx ecSMzZ64w2h0JM5MxrmuE0KOCE/XifBSkGTdv/D89WHQm8y5k8w0QjScruSwrkYn 2bLgM+0aY1e90ZvQc7GaKD6oD2tfPxhBFT88DcptzMQPKb3drupJePu+S7wpDYGN 6IECdrXR9mYcFGp/ptUy3anxrCqNAM6UchjV1JZ9SydvIbsL8woX9iTVOOWu149z mwoD7O9aTsJKNpZwbxUzqg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; t=1792752613; x=1792839013; bh=/ khFKDUjsZ0ykwwR9nhRWdqWFs6Vxmpa4p4vdaO/Um0=; b=sp0JkncutGpHCaTmm C8scFsqC4SfNfMeCV2nrYX7+i/98Df+gmt2uYx4CV0sJRAjb91vl+UIU8hgP/XhR mSmI8fiJbkoPhsBUJyWEsnmJYtB252Ig0o/vivAsUIYEssdRKHVSvR00FigEgphv dUpPO0mdVZau+ZxBBsd0EE1voMnPbukrrRkiyodIseHKuPUDPamgsVmB4P0UHpfs jtYWuVmZwaP3Mr8jMu1eQKPle7o4UOu2vUj3COS0U4kT4J/DxxdnAyUpi01YsH3+ YJo7Y5TCoFOEMeY6TpQdaC0PTSF7g5ZDEnw2mPSWK9eBgQyeyk2IV77B7VaMgz+I ACW+w== X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=sign d=pbarker.dev a=rsa-sha256; DKIM2-Signature: i=1; m=1; t=1792752613; d=pbarker.dev; mf=PHBhdWxAcGJhcmtlci5kZXY+; rt=PG9wZW5lbWJlZGRlZC1jb3JlQGxpc3RzLm9wZW5lbWJlZGRlZC5vcmc+; s=fm1:rsa-sha256:Y25+abdOrZksbpU/IjKOpcKNp2AwWZxcuZvVdbqBpPoB0aS wazJ24op8CMbljXg/1osfR7tjx5CHNmSQ9T+DL2HUle7M18qfJjoe0XZbzrZEZau znNe/VREJOIqon5ArmXZJ03wkqmgIarxUrqxupKoBqgSPDXvjM9f5S8j7NCH7vBR 6p8tKQh9B2CY5+omCMmjG/jYZTgyrmCD+5vECUTm2CDucLGT0siUKuq4C7rz+UB1 VdpNl2IB6KE13QSO5t44SLHmeCH/tk/SBg9qRWKH0jzLtBY2wUcupVQ76NpPQroe zLGKroKj36OuMrumJx4zzpIerzSk/fd1XZ2ul9Q==; X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=mi-m=1; hc=11; hn=content-transfer-encoding,content-type,date,feedback-id,from, in-reply-to,message-id,mime-version,references,subject,to; Message-Instance: m=1; h=sha256:RgqJKyUg2OTaZ3NnlE5MSxFV0V+ZJ2GpX6oF8nJAZtI=:TIPxp7w3qWJ++cEHxVnyQ7Q6tt4VfGFS+kRWQtXlQDk=; X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: dmFkZTGyOagm9BfzPb+YtFk66N3nGLsZpb/VPM8XjyvCI6H5ALoAzhuChEVFVvDnkE/SF/ JqM9HdccU5QGXh85+PcHSXfPlinR50XvCANansdfjHdI2y4yWT98LB5sYItFtv/YCkRC+D gCz49oXUOiIA3GSaVy8hQyIFhJVj70/v42lZYRXkC6yDHyO8Mxh8BPFCEOUQWBw2ymS8E7 RnCBWgaoCjRMBc+ufLfygswQfPbZu8I30UCpB32sT/SGJkXdSH8ooLc1ooYQLEosEVguDB nl2tS57Hfyetr9KYXK2lnhEOBFdFfv/pn1dtrEglp90LQOD/J+D0fLXSLeer7z4rPcHWjS jI5oXyvGYx/7zxwunj9V4aI0VwLSJc6ggRO1Xnv2gs2QNXNCSl8Nal6FGe8KAi3wc+5qXb l0Kmb2w8OZArDZgKrOzgGDs6sqQnepx53uGC88NBsXYWWvpxmgtIAmZ4N1pBMESdSAb6px fvn7a3qX/FiPumyuMAf4nB9iZ2yJNIoIGvrib5CUNqwakK0L9/3G1zhzA4YzyyDDhPmWfF t8wSpFPZwCL5+dpMIhwI5rgSAP2A0o/qnFGBT+PDR1anwKRb+U3FFNTr8iCppgdhw5h2UD qWwmcM8WHBmeiupsDWfzyejF1RQt0thcfWa1pe8EIcT+lkSB2cQFZ3acDeEA X-ME-Proxy: Feedback-ID: i51494658:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Fri, 23 Oct 2026 06:50:13 -0400 (EDT) From: Paul Barker Date: Fri, 23 Oct 2026 11:50:08 +0100 Subject: [PATCH scarthgap 07/19] python3-certifi: upgrade 2024.12.14 -> 2025.1.31 MIME-Version: 1.0 Message-Id: <20261023-certs-scarthgap-v1-7-0ba436174193@pbarker.dev> References: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> In-Reply-To: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> To: openembedded-core@lists.openembedded.org X-Mailer: b4 0.16.0 X-Developer-Signature: v=1; a=openssh-sha256; t=1792752608; l=1314; i=paul@pbarker.dev; s=id_piv_33200296; h=from:subject:message-id; bh=KcRuXV7Vq3y8jATnBWEDDoyJWGg1Oy8F97cfoPNTfa8=; b=U1NIU0lHAAAAAQAAAGgAAAATZWNkc2Etc2hhMi1uaXN0cDI1NgAAAAhuaXN0cDI1NgAAAEEEQ dOfZ4fCf9WdA7cHWnYqW4P6zifYTwJ18a3l28hvdGt3M0CTKu/FWpwoh+x5E487TvYA9iW0goTM GGtdemFzVgAAAAZwYXRhdHQAAAAAAAAABnNoYTUxMgAAAGUAAAATZWNkc2Etc2hhMi1uaXN0cDI 1NgAAAEoAAAAhANpJ+wuhQWEP6/n65opxvzLdUT+COg6eORh5yUsVerlEAAAAIQCWJGDdJSjd1H xp57WhRPwTIDnHTJwaQ+84gUukApklqQ== X-Developer-Key: i=paul@pbarker.dev; a=openssh; fpr=SHA256:IlqExt9TPtGqXrqYg/YPMlsWlOGC6AVubz/PwuYw6KY List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Fri, 23 Oct 2026 10:50:20 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248524 From: Richard Purdie Signed-off-by: Richard Purdie (cherry picked from commit 7bfeecb1321171521cb73060f6367467b6084562) This only changes GitHub Actions workflows and cacert.pem. See https://github.com/certifi/python-certifi/compare/2024.12.14...2025.01.31 Signed-off-by: Paul Barker --- .../{python3-certifi_2024.12.14.bb => python3-certifi_2025.1.31.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/python/python3-certifi_2024.12.14.bb b/meta/recipes-devtools/python/python3-certifi_2025.1.31.bb similarity index 87% rename from meta/recipes-devtools/python/python3-certifi_2024.12.14.bb rename to meta/recipes-devtools/python/python3-certifi_2025.1.31.bb index cb2cc969aec7..4283376110f3 100644 --- a/meta/recipes-devtools/python/python3-certifi_2024.12.14.bb +++ b/meta/recipes-devtools/python/python3-certifi_2025.1.31.bb @@ -7,7 +7,7 @@ HOMEPAGE = "http://certifi.io/" LICENSE = "ISC" LIC_FILES_CHKSUM = "file://LICENSE;md5=11618cb6a975948679286b1211bd573c" -SRC_URI[sha256sum] = "b650d30f370c2b724812bee08008be0c4163b163ddaec3f2546c1caf65f191db" +SRC_URI[sha256sum] = "3d5da6925056f6f18f119200434a4780a94263f10d1c21d032a6f6b2baa20651" CVE_PRODUCT = "certifi:certifi" From patchwork Fri Oct 23 10:50:09 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Paul Barker X-Patchwork-Id: 101809 Received: from fhigh-a3-smtp.messagingengine.com (fhigh-a3-smtp.messagingengine.com [103.168.172.154]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.4476.1792752614760386168 for ; Fri, 23 Oct 2026 03:50:14 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@pbarker.dev header.s=fm1 header.b=U59CGNwg; dkim=pass header.i=@messagingengine.com header.s=fm2 header.b=baVvVRDF; spf=pass (domain: pbarker.dev, ip: 103.168.172.154, mailfrom: paul@pbarker.dev) Received: from phl-compute-01.internal (phl-compute-01.internal [10.202.2.41]) by mailfhigh.phl.internal (Postfix) with ESMTP id 20B241400163 for ; Fri, 23 Oct 2026 06:50:14 -0400 (EDT) Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-01.internal (MEProxy); Fri, 23 Oct 2026 06:50:14 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pbarker.dev; h= cc:content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1792752614; x=1792839014; bh=4OSzyVTXARX2jzBugVC3Vgayxbv7L9WWo5egBwU4E/A=; b= U59CGNwgNPhV7AEijX4WJdM+4R85vA+vp2P7fxGRPK9eoqJQL2Q5zPxiXlG245Bc e6bUfXLr7xl2KOXDLrZ4BYK0O3On/ffCVVzpE8bW3Hahpx+ThXq1Fa5OBC0LlZKL cHo90ST6gYZUuTMJLWjs48Uy6RT0Dc+WWaZBK0pZidHkE/kkGMi6o3zUoDB3XpJq nzUwxiOneKS4T2vNLSsWS3vtR78HQAded85Y0rmAF+gmPrqCC53t9dWdb+gkkxm5 2/QrHV+n6cjWFT7HkeGe9Xg3b9Gt0bKqFVsQbUqROQUArck8Q6ET1eyyyzion4Hy Emc5me8lmLFarS9DJXwSww== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; t=1792752614; x=1792839014; bh=4 OSzyVTXARX2jzBugVC3Vgayxbv7L9WWo5egBwU4E/A=; b=baVvVRDF92214q9MM 2jRyQhXtf6cqYa8pe+YJ9CRTAE2y1AWhpRT1cIt3uZY/60SFaRYMInRgQmrMlI4y rmkBdqp+8TSXYUHTQL3mzwswN0W2zG96T3XZdx85Gcbl6Ii31+HwkCPY5GQo8btO +mhOq2VuvZ72X0QqmjCG6kVioxU0mD08vwgVGQJac3HGaBJ0XM4kSiUkVuzLTILe Mv7BHhsydd+3Bh/iHQedERbF90cIEmig74fo3opAfvk+BwFwkmo0k2JEpNnwWzqC FgS5WZ0hOaXKPG440UEw/8DMHiWrREUsEj9l+91ai9nP7FZyzmNcbHsV0VB+ANbe IJ2gQ== X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=sign d=pbarker.dev a=rsa-sha256; DKIM2-Signature: i=1; m=1; t=1792752614; d=pbarker.dev; mf=PHBhdWxAcGJhcmtlci5kZXY+; rt=PG9wZW5lbWJlZGRlZC1jb3JlQGxpc3RzLm9wZW5lbWJlZGRlZC5vcmc+; s=fm1:rsa-sha256:DHxWBN6UfeX4GmJ6Ba7YHWyGnOvtrmypVje5pEe6T4RkQou L97tgJ2zLiSci7I0PuRQkyaeKFgWpt+lyU6/C7le7Q14zyhOX8gCrdFlXEPm2/VK Es8grblEsDfv/Wbbj0gqni3Rzf5oZdTSFgi16KM2OZOBY+XU+f9STW1RmVwPfE/T z+06yF6KDHIFhS43WaIHJSc0zms6Q8nQ2CzvbZvXSDABUB+mY0jqMmh/3qDhB2Gh 9XlCnSws/l2EkDpSFiTny+dw62sAX2iZnlddms60Rbsv0588YpWT0mToZKtTYXWE I4/8aA7YotPYtQsfsZsLbmguGh077dWhOvg1jvg==; X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=mi-m=1; hc=11; hn=content-transfer-encoding,content-type,date,feedback-id,from, in-reply-to,message-id,mime-version,references,subject,to; Message-Instance: m=1; h=sha256:wrktWT/5fHGbaeuLUmgvn52yEOTpG2oe1uXRG6CLs/A=:2U9sGv1t1Vcm9hzxvA1WkF7Hzh1YDglOK6D/rImqodA=; X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: dmFkZTGyOagm9BfzPb+YtFk66N3nGLsZpb/VPM8XjyvCI6H5ALoAzhuChEVFVvDnkE/SF/ JqM9HdccU5QGXh85+PcHSXfPlinR50XvCANansdfjHdI2y4yWT98LB5sYItFtv/YCkRC+D gCz49oXUOiIA3GSaVy8hQyIFhJVj70/v42lZYRXkC6yDHyO8Mxh8BPFCEOUQWBw2ymS8E7 RnCBWgaoCjRMBc+ufLfygswQfPbZu8I30UCpB32sT/SGJkXdSH8ooLc1ooYQLEosEVguDB nl2tS57Hfyetr9KYXK2lnhEOBFdFfv/pn1dtrEglp90LQOD/J+D0fLXSLeer7z4rPcHWI6 iDTaSybuYB2Rf4i3g+rU3sPHYpqqhkjx6qO6iiXIP9T/njNGykzCviVctPlc5ue0CwvU80 4llqTPBtkoBYSp9jFXn5ZE+xuP2E3S5J7E2283D/jxpVmXF537UlNZVJcVopPix94KFsWC 1aTIwF8LHbFecSNj5b6KlOXk3HuN4XYMV+jGye3awzxir1rgLQX0o2FWToPAkSsw6YhAYn twqXpywsge5jlm+ipl3jICEsZfHfUvWMpm8V1KvEVgV+7Zs2d8L6DMaPzVlsphD0TF5JaJ J3NAQAHMwjzVQSPyNDuy+94XggJMX/5zNWsy9pqu+wAGk3A9RRN5DMcP9WBA X-ME-Proxy: Feedback-ID: i51494658:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Fri, 23 Oct 2026 06:50:13 -0400 (EDT) From: Paul Barker Date: Fri, 23 Oct 2026 11:50:09 +0100 Subject: [PATCH scarthgap 08/19] python3-certifi: upgrade 2025.1.31 -> 2025.4.26 MIME-Version: 1.0 Message-Id: <20261023-certs-scarthgap-v1-8-0ba436174193@pbarker.dev> References: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> In-Reply-To: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> To: openembedded-core@lists.openembedded.org X-Mailer: b4 0.16.0 X-Developer-Signature: v=1; a=openssh-sha256; t=1792752608; l=1360; i=paul@pbarker.dev; s=id_piv_33200296; h=from:subject:message-id; bh=UxIo/olDg+LZjxFEHOSVCu3s+rlJYPpyE1pqhaQUSQU=; b=U1NIU0lHAAAAAQAAAGgAAAATZWNkc2Etc2hhMi1uaXN0cDI1NgAAAAhuaXN0cDI1NgAAAEEEQ dOfZ4fCf9WdA7cHWnYqW4P6zifYTwJ18a3l28hvdGt3M0CTKu/FWpwoh+x5E487TvYA9iW0goTM GGtdemFzVgAAAAZwYXRhdHQAAAAAAAAABnNoYTUxMgAAAGQAAAATZWNkc2Etc2hhMi1uaXN0cDI 1NgAAAEkAAAAgchiBTCycj1y1+llXtjmsqm6G2Rcd4m106K6WnLDW/O0AAAAhAJzmoSmZia5GFd hF/QdrWIazZNTygdzBAuafElNUKj2b X-Developer-Key: i=paul@pbarker.dev; a=openssh; fpr=SHA256:IlqExt9TPtGqXrqYg/YPMlsWlOGC6AVubz/PwuYw6KY List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Fri, 23 Oct 2026 10:50:21 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248525 From: Wang Mingyu Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie (cherry picked from commit f45a8bbe689ae7d006f8463fd156ebbd8e745227) This only changes GitHub Actions workflows and cacert.pem. See https://github.com/certifi/python-certifi/compare/2025.01.31...2025.04.26 Signed-off-by: Paul Barker --- .../{python3-certifi_2025.1.31.bb => python3-certifi_2025.4.26.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/python/python3-certifi_2025.1.31.bb b/meta/recipes-devtools/python/python3-certifi_2025.4.26.bb similarity index 87% rename from meta/recipes-devtools/python/python3-certifi_2025.1.31.bb rename to meta/recipes-devtools/python/python3-certifi_2025.4.26.bb index 4283376110f3..bedc3d253c3a 100644 --- a/meta/recipes-devtools/python/python3-certifi_2025.1.31.bb +++ b/meta/recipes-devtools/python/python3-certifi_2025.4.26.bb @@ -7,7 +7,7 @@ HOMEPAGE = "http://certifi.io/" LICENSE = "ISC" LIC_FILES_CHKSUM = "file://LICENSE;md5=11618cb6a975948679286b1211bd573c" -SRC_URI[sha256sum] = "3d5da6925056f6f18f119200434a4780a94263f10d1c21d032a6f6b2baa20651" +SRC_URI[sha256sum] = "0a816057ea3cdefcef70270d2c515e4506bbc954f417fa5ade2021213bb8f0c6" CVE_PRODUCT = "certifi:certifi" From patchwork Fri Oct 23 10:50:10 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Paul Barker X-Patchwork-Id: 101804 Received: from fhigh-a3-smtp.messagingengine.com (fhigh-a3-smtp.messagingengine.com [103.168.172.154]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.4436.1792752615266435777 for ; Fri, 23 Oct 2026 03:50:15 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@pbarker.dev header.s=fm1 header.b=WgstOe/5; dkim=pass header.i=@messagingengine.com header.s=fm2 header.b=BOAwW2dO; spf=pass (domain: pbarker.dev, ip: 103.168.172.154, mailfrom: paul@pbarker.dev) Received: from phl-compute-05.internal (phl-compute-05.internal [10.202.2.45]) by mailfhigh.phl.internal (Postfix) with ESMTP id 9D9701400185 for ; Fri, 23 Oct 2026 06:50:14 -0400 (EDT) Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-05.internal (MEProxy); Fri, 23 Oct 2026 06:50:14 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pbarker.dev; h= cc:content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1792752614; x=1792839014; bh=WqeLfn1pw2iEeh7+5LYRUkejlYSPFkV5mjzhrV/ceEw=; b= WgstOe/5tHBq1BkH6qkEG+tZDzSzVgx4HIYaKeAUemYABmXJpK3v5bPt7KfKY0KA nRjNAJ5wQ6XBpc9SwcqD/ksX/AbFuo3rbC3v3GdPJZvoL9uZg1P0PB662ZvoODGc Zd2JHEFgSFepyHfclZEJWH1Qp8n2yrPVIYWq+/TzRfBP04Y5MAGUnXjNlC1iMzdT yTQf/XndLGcCaW8TCR6DpFunK7SyVvTcQ3s9tNxvqH85uErIUPLSb56mcj8ZvSmk EC37sbcVsUBBu1pcN8dBDlE9kivhFjLUTWLh2G7CoSpv9LFoqQIaDcW3vRZ0YGf9 G05pxIFqdHOd81DaJNVOmw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; t=1792752614; x=1792839014; bh=W qeLfn1pw2iEeh7+5LYRUkejlYSPFkV5mjzhrV/ceEw=; b=BOAwW2dOy6qBlk0+6 m2PkVyr0zAbr13di496f8dpflxsPQn6SDCJdSYR9v6l39LqCGKX9dawdQxL2wp6d OovqasHsFTvK1jzkoG99pQ5YcyUx3U5FuRt3vgZ+/IGrXMmH6iX2TrgJiiMX7YcK 62xznn6UjQ4SICoSSVHH4yFgZLtA2aEeOP5fYzoJrzOT4zEoNK4opCibCTAu2NnU Ptgkn4YqhLEM+xiv+CpEhF6VwteMjjqmUyYgxBQthI57trrrYMpW8LlEtf4p5j0t pYDTDjazT2RqaWSY7D3LN7DmjDCaNvM9PX8/zARIsa6fOe89F7UxJvz2/waXk74f 4d/1Q== X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=sign d=pbarker.dev a=rsa-sha256; DKIM2-Signature: i=1; m=1; t=1792752614; d=pbarker.dev; mf=PHBhdWxAcGJhcmtlci5kZXY+; rt=PG9wZW5lbWJlZGRlZC1jb3JlQGxpc3RzLm9wZW5lbWJlZGRlZC5vcmc+; s=fm1:rsa-sha256:aQTseOsmJaPKSDKBj3ZYRFWGIjmaQKmMnVOwVDsLpR5tWyy hCEWHuiUVsqDl8iuba5aqypsLlQj6p4LftwBUraz82eNIB/B2aoI4AUt94mrdMFa rXPCFX0WRWuLEtHjaIglc2hgpJJVfnbo+rkSa5C7usEM+z5mX4PEoGmX/BJ7UuvZ sK6FSWQ2rNpdSFFX0HEpdR2xnb9gMCZJJAPZGjDA3HK8gaQqIhYBQmoVJLOAV/2r nK4yLdHkaCS2UrDFqg4mvuchL/13mL3e456roolyO9h6bAl4ubfa9OX69POBqyz+ itvGCP/MnobYE4KR314f1lGDK+GHmdEwe16T81g==; X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=mi-m=1; hc=11; hn=content-transfer-encoding,content-type,date,feedback-id,from, in-reply-to,message-id,mime-version,references,subject,to; Message-Instance: m=1; h=sha256:GBgejr96mcgi6VCVq/n2YGFwle+8dwPP7reY8Ind79A=:B9jLivHGOu79Yx9b8uzrz6l35oiAV8wzuOTS4yQgBC8=; X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: dmFkZTGyOagm9BfzPb+YtFk66N3nGLsZpb/VPM8XjyvCI6H5ALoAzhuChEVFVvDnkE/SF/ JqM9HdccU5QGXh85+PcHSXfPlinR50XvCANansdfjHdI2y4yWT98LB5sYItFtv/YCkRC+D gCz49oXUOiIA3GSaVy8hQyIFhJVj70/v42lZYRXkC6yDHyO8Mxh8BPFCEOUQWBw2ymS8E7 RnCBWgaoCjRMBc+ufLfygswQfPbZu8I30UCpB32sT/SGJkXdSH8ooLc1ooYQLEosEVguDB nl2tS57Hfyetr9KYXK2lnhEOBFdFfv/pn1dtrEglp90LQOD/J+D0fLXSLeer7z4rPcHWI6 iDTaSybuYB2Rf4i3g+rU3sPHYpqqhkjx6qO6iiXIP9T/njNGykzCviVctPlc5ue0CwvU80 4llqTPBtkoBYSp9jFXn5ZE+xuP2E3S5J7E2283D/jxpVmXF537UlNZVJcVopPix94KFsWC 1aTIwF8LHbFecSNj5b6KlOXk3HuN4XYMV+jGye3awzxir1rgLQX0o2FWToPAkSsw6YhAYn twqXpywsge5jlm+ipl3jICEsZfHfUvWMpm8V1KvEVgV+7Zs2d8L6DMaPzVlsphD0TF5JaJ J3NAQAHMwjzVQSPyNDuy+94XggJMX/5zNWsy9pqu+wAGk3A9RRN5DMcP9WBA X-ME-Proxy: Feedback-ID: i51494658:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Fri, 23 Oct 2026 06:50:14 -0400 (EDT) From: Paul Barker Date: Fri, 23 Oct 2026 11:50:10 +0100 Subject: [PATCH scarthgap 09/19] python3-certifi: upgrade 2025.4.26 -> 2025.6.15 MIME-Version: 1.0 Message-Id: <20261023-certs-scarthgap-v1-9-0ba436174193@pbarker.dev> References: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> In-Reply-To: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> To: openembedded-core@lists.openembedded.org X-Mailer: b4 0.16.0 X-Developer-Signature: v=1; a=openssh-sha256; t=1792752608; l=2142; i=paul@pbarker.dev; s=id_piv_33200296; h=from:subject:message-id; bh=6zlLbhjuAjrOWzeTlBr6bYWmJTAgIGH+YuQw46+jLCs=; b=U1NIU0lHAAAAAQAAAGgAAAATZWNkc2Etc2hhMi1uaXN0cDI1NgAAAAhuaXN0cDI1NgAAAEEEQ dOfZ4fCf9WdA7cHWnYqW4P6zifYTwJ18a3l28hvdGt3M0CTKu/FWpwoh+x5E487TvYA9iW0goTM GGtdemFzVgAAAAZwYXRhdHQAAAAAAAAABnNoYTUxMgAAAGMAAAATZWNkc2Etc2hhMi1uaXN0cDI 1NgAAAEgAAAAgE1cT5/zGFgPZwqy3SEXkyRCiHU7d8ZYQcG9Ee3l4p8UAAAAgQjBUel6I5lmuBl LxkqhDBr4eiTVzIXs7IHJZmV7ticA= X-Developer-Key: i=paul@pbarker.dev; a=openssh; fpr=SHA256:IlqExt9TPtGqXrqYg/YPMlsWlOGC6AVubz/PwuYw6KY List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Fri, 23 Oct 2026 10:50:20 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248526 From: Tim Orling * Switch to PEP-517 backend with inherit python_setuptools_build_meta Commit log highlights: * Declare setuptools as the build backend in pyproject.toml (#350) * remove code that's no longer required that 3.7 is our minimum (#351) Comparing changes from 2025.4.26 -> 2025.6.15: https://github.com/certifi/python-certifi/compare/2025.04.26...2025.06.15 Signed-off-by: Tim Orling Signed-off-by: Richard Purdie (cherry picked from commit fa38fa24ad26f8bf68fd139b5e8496144987326b) This is a slightly larger change for the stable branch, but I consider it safe. Python 3.6 has been EOL since 2021-12-23, long before the initial Scarthgap release, so making the minimum Python version 3.7 is ok. The other significant change here is the build system, but that should not affect users of certifi. Then we have the usual GitHub Actions workflow changes (irrelevant) and cacert.pem changes (which we actually want). Signed-off-by: Paul Barker --- .../{python3-certifi_2025.4.26.bb => python3-certifi_2025.6.15.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/recipes-devtools/python/python3-certifi_2025.4.26.bb b/meta/recipes-devtools/python/python3-certifi_2025.6.15.bb similarity index 81% rename from meta/recipes-devtools/python/python3-certifi_2025.4.26.bb rename to meta/recipes-devtools/python/python3-certifi_2025.6.15.bb index bedc3d253c3a..c8484425dcfb 100644 --- a/meta/recipes-devtools/python/python3-certifi_2025.4.26.bb +++ b/meta/recipes-devtools/python/python3-certifi_2025.6.15.bb @@ -7,11 +7,11 @@ HOMEPAGE = "http://certifi.io/" LICENSE = "ISC" LIC_FILES_CHKSUM = "file://LICENSE;md5=11618cb6a975948679286b1211bd573c" -SRC_URI[sha256sum] = "0a816057ea3cdefcef70270d2c515e4506bbc954f417fa5ade2021213bb8f0c6" +SRC_URI[sha256sum] = "d747aa5a8b9bbbb1bb8c22bb13e22bd1f18e9796defa16bab421f7f7a317323b" CVE_PRODUCT = "certifi:certifi" -inherit pypi setuptools3 +inherit pypi python_setuptools_build_meta BBCLASSEXTEND = "native nativesdk" From patchwork Fri Oct 23 10:50:11 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Paul Barker X-Patchwork-Id: 101805 Received: from fhigh-a3-smtp.messagingengine.com (fhigh-a3-smtp.messagingengine.com [103.168.172.154]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.4437.1792752615697430333 for ; Fri, 23 Oct 2026 03:50:15 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@pbarker.dev header.s=fm1 header.b=Qtk7Zyh3; dkim=pass header.i=@messagingengine.com header.s=fm2 header.b=YJ8cAhpk; spf=pass (domain: pbarker.dev, ip: 103.168.172.154, mailfrom: paul@pbarker.dev) Received: from phl-compute-06.internal (phl-compute-06.internal [10.202.2.46]) by mailfhigh.phl.internal (Postfix) with ESMTP id 122341400163 for ; Fri, 23 Oct 2026 06:50:15 -0400 (EDT) Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-06.internal (MEProxy); Fri, 23 Oct 2026 06:50:15 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pbarker.dev; h= cc:content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1792752615; x=1792839015; bh=XbwWh16dKDma3TcdAoZic5hVOBajHgTzIYBrwkfVfU4=; b= Qtk7Zyh335aisbh9zaQhUttFmiKhefPW/6BhXFOlaRwfngiUyF2EDZYxBdG+wThG YfWR88eWtYf46oyxhFwxyyah8unWOdKu8Dv/AB30r2v+fMDlPO0zT/b8DqeHg3sJ 5an0oZHraC2ut/mM+VpDa8vXzM5+Acnd1TsYqv+01s76jGCmY+wbk5XXWzsFGAyF sl3ZW3PuzJA7Td8jLD427TonLR4iJicwGTdcNntmFg3qKQJ6urv02UOZoJ6gSe5C sQFmIc+K9fH9C6mfIPiJSjdy/cenuIv8twGZhsZPWBoxVFm+gPSy6LWXywwTPgP4 uHorPiv9zsAc47s0qv1kiw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; t=1792752615; x=1792839015; bh=X bwWh16dKDma3TcdAoZic5hVOBajHgTzIYBrwkfVfU4=; b=YJ8cAhpkV5dSe9zl7 XAvpk9I3Dt5enCWGEqt0qIPrzuHQuCgbVCzZjgxh8rUW0ijDerViBUjhwKRhAtKQ X+a8Gvt9Av6d2jxtfp2bzF/oXIIXPj3g5FZosgLKvk7dsZcBXkiKhVFTarKSHz5G t9SdtcQee9lBDWmWLUuLY53U6DDoUY2HeF6W12WILpOpCAbw/p7fYgzZygS5mCC+ JijFAq79V/hoigFBKu/y6P6HmRjKN0kUfR+F+TkfRalftB78LvrkZmy6Jioz+fFr N6GMoMkdRVO1YSaLlKqT85uGNCsjOut0GGMT0o2aUfWgs38E3cU0edPBMTffZOg+ Tov0A== X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=sign d=pbarker.dev a=rsa-sha256; DKIM2-Signature: i=1; m=1; t=1792752615; d=pbarker.dev; mf=PHBhdWxAcGJhcmtlci5kZXY+; rt=PG9wZW5lbWJlZGRlZC1jb3JlQGxpc3RzLm9wZW5lbWJlZGRlZC5vcmc+; s=fm1:rsa-sha256:KCyQtYTZ8I/rTXPd0A8Y4TauvNcnNwf3NSPXdwiCwCpRhNa VOTwazJG6J+Uq2OsAcu2oGkEGg5Ck7MV7KRGlma7RblrDe5r5hnddG90hUEjJ0bu YXCMCpTxBtap91vCZ4sTVjPM85Y+LQQd6UrAm2uDsDs0zoWkC9y2/ycrt33s4fW4 Ft7Cc9xO8K+4KNJJu/7kmdbaOa5iEY9dgQG8AN8qFxEPVEGPbrFs1j9UTlSYgfXL RgpnhKhITAEwcSP4UpXBGlRU4fVCOeEDAha4T5fFgUBn8UFSggXE7NQ90U5Q+uqH PCnrsqZ7FhA/cGWK1F/5EwNN8r4f/6ViYzDERkA==; X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=mi-m=1; hc=11; hn=content-transfer-encoding,content-type,date,feedback-id,from, in-reply-to,message-id,mime-version,references,subject,to; Message-Instance: m=1; h=sha256:RP0kT2qsGeM3obtq0Aivhiw0BDJ0tygdrKvcQ6IIBKk=:8ueimzjp1mHnkke7wRd1+2l8Iak0iXMwbW+R2LD7SQk=; X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: dmFkZTGyOagm9BfzPb+YtFk66N3nGLsZpb/VPM8XjyvCI6H5ALoAzhuChEVFVvDnkE/SF/ JqM9HdccU5QGXh85+PcHSXfPlinR50XvCANansdfjHdI2y4yWT98LB5sYItFtv/YCkRC+D gCz49oXUOiIA3GSaVy8hQyIFhJVj70/v42lZYRXkC6yDHyO8Mxh8BPFCEOUQWBw2ymS8E7 RnCBWgaoCjRMBc+ufLfygswQfPbZu8I30UCpB32sT/SGJkXdSH8ooLc1ooYQLEosEVguDB nl2tS57Hfyetr9KYXK2lnhEOBFdFfv/pn1dtrEglp90LQOD/J+D0fLXSLeer7z4rPcHWXI 6+36gIeH0xspkBbMhvT/hjrm+uBOd1hZf+f4/oZuy54SE9Pl3CA7FBXeevYtZXBKMjcTEQ FDTYvRYCwC2KyVorKWQ6QhBLtEHwzaITz2/mA/MHw4jNZ8Cs1wGIV1aVQKQkH82ThW9hrM eGdY4uTCH5GehqFmgKo7r9KAyHhnfpu0qeHbVvsE8FKkQfhNznX20Yv25q1gY6qaUy/oWK o9Y59om3u8RM3Bt3QjSpDhUUC+5dEWCxS53fCR3/E8LWmD62mXMu4TX1VSkJ6wjMQZGchZ XxlLcRWXnR2tIJ8YVU2E5RJedrgqyvm7syegHEoEn2W116Y3oRERN5GWzAeA X-ME-Proxy: Feedback-ID: i51494658:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Fri, 23 Oct 2026 06:50:14 -0400 (EDT) From: Paul Barker Date: Fri, 23 Oct 2026 11:50:11 +0100 Subject: [PATCH scarthgap 10/19] python3-certifi: upgrade 2025.6.15 -> 2025.7.9 MIME-Version: 1.0 Message-Id: <20261023-certs-scarthgap-v1-10-0ba436174193@pbarker.dev> References: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> In-Reply-To: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> To: openembedded-core@lists.openembedded.org X-Mailer: b4 0.16.0 X-Developer-Signature: v=1; a=openssh-sha256; t=1792752608; l=1406; i=paul@pbarker.dev; s=id_piv_33200296; h=from:subject:message-id; bh=xWpqKvY4yhhvwfLL0qgYhx+Mfhha8WYyEL4Tlb7JkeM=; b=U1NIU0lHAAAAAQAAAGgAAAATZWNkc2Etc2hhMi1uaXN0cDI1NgAAAAhuaXN0cDI1NgAAAEEEQ dOfZ4fCf9WdA7cHWnYqW4P6zifYTwJ18a3l28hvdGt3M0CTKu/FWpwoh+x5E487TvYA9iW0goTM GGtdemFzVgAAAAZwYXRhdHQAAAAAAAAABnNoYTUxMgAAAGQAAAATZWNkc2Etc2hhMi1uaXN0cDI 1NgAAAEkAAAAhANbymxZRU+6z6FNJCOtiE+nb9Ef+nwCyFjpOSIMUQPs4AAAAIGd4LBy3wMCG/Y clk2gWmBnTOuaQohvAsH5mT20JexR8 X-Developer-Key: i=paul@pbarker.dev; a=openssh; fpr=SHA256:IlqExt9TPtGqXrqYg/YPMlsWlOGC6AVubz/PwuYw6KY List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Fri, 23 Oct 2026 10:50:20 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248527 From: Wang Mingyu Signed-off-by: Wang Mingyu Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie (cherry picked from commit 99ce38d5ed6f27da5467d3053e80aefcd0184b37) This is just a cacert.pem update. See https://github.com/certifi/python-certifi/compare/2025.06.15...2025.07.09 Signed-off-by: Paul Barker --- .../{python3-certifi_2025.6.15.bb => python3-certifi_2025.7.9.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/python/python3-certifi_2025.6.15.bb b/meta/recipes-devtools/python/python3-certifi_2025.7.9.bb similarity index 87% rename from meta/recipes-devtools/python/python3-certifi_2025.6.15.bb rename to meta/recipes-devtools/python/python3-certifi_2025.7.9.bb index c8484425dcfb..f6607dee0a48 100644 --- a/meta/recipes-devtools/python/python3-certifi_2025.6.15.bb +++ b/meta/recipes-devtools/python/python3-certifi_2025.7.9.bb @@ -7,7 +7,7 @@ HOMEPAGE = "http://certifi.io/" LICENSE = "ISC" LIC_FILES_CHKSUM = "file://LICENSE;md5=11618cb6a975948679286b1211bd573c" -SRC_URI[sha256sum] = "d747aa5a8b9bbbb1bb8c22bb13e22bd1f18e9796defa16bab421f7f7a317323b" +SRC_URI[sha256sum] = "c1d2ec05395148ee10cf672ffc28cd37ea0ab0d99f9cc74c43e588cbd111b079" CVE_PRODUCT = "certifi:certifi" From patchwork Fri Oct 23 10:50:12 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Paul Barker X-Patchwork-Id: 101806 Received: from fout-a3-smtp.messagingengine.com (fout-a3-smtp.messagingengine.com [103.168.172.146]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.4438.1792752616170450043 for ; Fri, 23 Oct 2026 03:50:16 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@pbarker.dev header.s=fm1 header.b=c+47d0ZA; dkim=pass header.i=@messagingengine.com header.s=fm2 header.b=dZjXcmXN; spf=pass (domain: pbarker.dev, ip: 103.168.172.146, mailfrom: paul@pbarker.dev) Received: from phl-compute-02.internal (phl-compute-02.internal [10.202.2.42]) by mailfout.phl.internal (Postfix) with ESMTP id 85BD7EC0067 for ; Fri, 23 Oct 2026 06:50:15 -0400 (EDT) Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-02.internal (MEProxy); Fri, 23 Oct 2026 06:50:15 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pbarker.dev; h= cc:content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1792752615; x=1792839015; bh=QI3GVYqPFloiff8Dqiu2rCtnK10istKDiQ38PMp74kM=; b= c+47d0ZAGoD2aEOOeNYnYw7TGw0vcCOJTbMkTbqPInNV9OvcFeJtdt/aQ4SfmaKB BGvgs4JF4KHhzk5H9GX5Jm7tiJZA9xs/WKLezLoGuRLuioN5mPdMX3n1qiPubk9C YoTU+1S31mkqrMnN/XLcAAY7bqi3WX9WRnnZ+VQ8rfoNXbFKdr6xWZ4uniKRdImR 7Idecrk8CblhpW36GL+NG+Z3injfIoMYL1UBvCbOVTbACudYPaBBEoLFZdIEQcUW 6Bddig92OxKzjT1LqjqjjhZ4FHDHaMiNy4mvQCoq9QB41HxL2c97C9GMqMzCoktn 5nHkvQ5I2hkPzj4XoZ82EQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; t=1792752615; x=1792839015; bh=Q I3GVYqPFloiff8Dqiu2rCtnK10istKDiQ38PMp74kM=; b=dZjXcmXNQObSZkVDo gPXkEGpKgiOQlothVsQmAnoliT3TjZTh1GS4/rbdoCW3qLtlWGzTl7+El5L8/IEa HHOIY2LATzAaijypAcumEw0vL8U1uIrLl7wGYVn/dbDw8W4HYECXSqaXRy9icVHF b19Omkx75gkUkQ128V7xKbEl+S1FkXWescVOCkKF+Gy984AeDZOGaGzcsWzDqtuq 0Di+O/VM0imwFHwzI5smF912uE5+iVrzueMzsOFsb+Q3NKJRA69BA+UX/TOGpvhu GMI4IiGx0V3649VzH3WPhchCX9kOATXGXKx+fhof8gU6UroS4eJakFPLYtphgG/2 Ce/eQ== X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=sign d=pbarker.dev a=rsa-sha256; DKIM2-Signature: i=1; m=1; t=1792752615; d=pbarker.dev; mf=PHBhdWxAcGJhcmtlci5kZXY+; rt=PG9wZW5lbWJlZGRlZC1jb3JlQGxpc3RzLm9wZW5lbWJlZGRlZC5vcmc+; s=fm1:rsa-sha256:sITNPygnhOF7f9jLOr8+8oCg6GtNORDIAVxtc3l8GazxmWd CqXu7LSDgxbf9/lLQNNPFDUoRn8EX+q7VRmVGWnV/do7xFDXDf1qLW4kD+bCyA1x 3n9uh0FF1yIlWRtirDCeRZMHDnRBYrYKo0YUGDai5JPxo5owG9+h66zUx5WT+Kel bPhqN3Egb5xH+ptJ4f9feukLmFvipkMTjjncL/t8KO877bQNLKLzW0i3RMpRz65k mlClhrCkUq0khcCudLPCkjfcdYjJhReABMlHxAUbxFqYEbcpgNk+yL9wCauIl3kK KI/5Bwc3BHNYr3l+sp2/tp7TEbRu4iXup24sfew==; X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=mi-m=1; hc=11; hn=content-transfer-encoding,content-type,date,feedback-id,from, in-reply-to,message-id,mime-version,references,subject,to; Message-Instance: m=1; h=sha256:jiBJ1HX9N0NgO9gOZVWpg0JJ/2icEQ8787Mpks3gD9w=:h4zXhGN952yN8UjKPkExmqMNYFZ64VYH5rxMx7fZJqw=; X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: dmFkZTEYL66LKxuu5HVY++NlSHw9z/QngGMigoi5osVdPoW9fgdtTzhDgRBe/YMIIHEqGU MYuwYmkQk0E1JIjfm7z8ADHQi61jADv0FEajF/3/DJ+x5Y0VWzMkdk52wPDfghXkSWFZ5i z6EAyo2YjSJDDZwtfXJXqKAkUjY6BFCDFGqPWbNohqV1ejfsNU4u7U3khETapy0mckVQ0H Qq2gjYgSV/u8qm2Yg+88Ke8ow5PuL8fReHLrvV8DROAwiZEwtB/Nd0Vvcrx97fDfCwEziB ASTo7oYoVQk6oddkEdgPUYOiL1KYTOvGkI8UliMDh6zmTg5khkPWPJMszG+DpboL4jYpUA 1123AbXa71h4u0USXXVyoJLYlPzA0XEiXqeRCdI1wK5VE2Sny8ncCB526rQFJRB3XrMI2M gchBum8wwutesqD+TFvbw7vE56F+fzOrK1ZxBF7Jng8/QTE517HtM2Tj0LtdOr7pUfQf/X gtuM+vgUTcHzRmaRcONoYKi+X7dmPMgRaHLqJkHziMlyjZF1a4/hr2gwu+KfRL7xYuzVpC k5e1Fj+juzIzsQ5E8JlC75zqaSYS2oh1mmIletGPtw+4v+QG9r93nAxSXEw3NzCPXMbRFJ MsFEYknqWCGbUbZXPIQ7kcv7FsIsjyGf/YjiP+5vLKUsvBxKim/rlUq5VT2Q X-ME-Proxy: Feedback-ID: i51494658:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Fri, 23 Oct 2026 06:50:15 -0400 (EDT) From: Paul Barker Date: Fri, 23 Oct 2026 11:50:12 +0100 Subject: [PATCH scarthgap 11/19] python3-certifi: upgrade 2025.7.9 -> 2025.8.3 MIME-Version: 1.0 Message-Id: <20261023-certs-scarthgap-v1-11-0ba436174193@pbarker.dev> References: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> In-Reply-To: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> To: openembedded-core@lists.openembedded.org X-Mailer: b4 0.16.0 X-Developer-Signature: v=1; a=openssh-sha256; t=1792752608; l=1732; i=paul@pbarker.dev; s=id_piv_33200296; h=from:subject:message-id; bh=BZIugiB6XItvDVnVpC9djOPfz0e/qEmR5jheFqGTt04=; b=U1NIU0lHAAAAAQAAAGgAAAATZWNkc2Etc2hhMi1uaXN0cDI1NgAAAAhuaXN0cDI1NgAAAEEEQ dOfZ4fCf9WdA7cHWnYqW4P6zifYTwJ18a3l28hvdGt3M0CTKu/FWpwoh+x5E487TvYA9iW0goTM GGtdemFzVgAAAAZwYXRhdHQAAAAAAAAABnNoYTUxMgAAAGUAAAATZWNkc2Etc2hhMi1uaXN0cDI 1NgAAAEoAAAAhAKX4em+w/bi18Vr+bl0dxXSVvuGwJKC+AF0dPQW34F0wAAAAIQDJJ3daPNiHWp R7O5vM9d9cHewHA8qv8IIMYpfv3yU1JA== X-Developer-Key: i=paul@pbarker.dev; a=openssh; fpr=SHA256:IlqExt9TPtGqXrqYg/YPMlsWlOGC6AVubz/PwuYw6KY List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Fri, 23 Oct 2026 10:50:20 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248528 From: Tim Orling 2025.08.03: https://github.com/certifi/python-certifi/pull/362 https://github.com/certifi/python-certifi/pull/362/commits/4c1bfa53ef5aad0339d9ae7bbcefc32872a95f6d 2025.07.14: https://github.com/certifi/python-certifi/pull/359 https://github.com/certifi/python-certifi/pull/359/commits/1c50d2bb6a10403300c0f1c17cff1b6277cb88d1 Comparing changes: https://github.com/certifi/python-certifi/compare/2025.07.09...2025.08.03 Signed-off-by: Tim Orling Signed-off-by: Mathieu Dubois-Briand (cherry picked from commit 6067498b14ca5d90640169384e51aa9cf5c1b8e2) These two releases (2025.07.14 & 2025.08.03) are just cacert.pem updates. Signed-off-by: Paul Barker --- .../python/{python3-certifi_2025.7.9.bb => python3-certifi_2025.8.3.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/python/python3-certifi_2025.7.9.bb b/meta/recipes-devtools/python/python3-certifi_2025.8.3.bb similarity index 87% rename from meta/recipes-devtools/python/python3-certifi_2025.7.9.bb rename to meta/recipes-devtools/python/python3-certifi_2025.8.3.bb index f6607dee0a48..22cb0778cb9c 100644 --- a/meta/recipes-devtools/python/python3-certifi_2025.7.9.bb +++ b/meta/recipes-devtools/python/python3-certifi_2025.8.3.bb @@ -7,7 +7,7 @@ HOMEPAGE = "http://certifi.io/" LICENSE = "ISC" LIC_FILES_CHKSUM = "file://LICENSE;md5=11618cb6a975948679286b1211bd573c" -SRC_URI[sha256sum] = "c1d2ec05395148ee10cf672ffc28cd37ea0ab0d99f9cc74c43e588cbd111b079" +SRC_URI[sha256sum] = "e564105f78ded564e3ae7c923924435e1daa7463faeab5bb932bc53ffae63407" CVE_PRODUCT = "certifi:certifi" From patchwork Fri Oct 23 10:50:13 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Paul Barker X-Patchwork-Id: 101799 Received: from fhigh-a3-smtp.messagingengine.com (fhigh-a3-smtp.messagingengine.com [103.168.172.154]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.4440.1792752616661493610 for ; Fri, 23 Oct 2026 03:50:16 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@pbarker.dev header.s=fm1 header.b=EMthUF2X; dkim=pass header.i=@messagingengine.com header.s=fm2 header.b=pZuyYR+6; spf=pass (domain: pbarker.dev, ip: 103.168.172.154, mailfrom: paul@pbarker.dev) Received: from phl-compute-06.internal (phl-compute-06.internal [10.202.2.46]) by mailfhigh.phl.internal (Postfix) with ESMTP id 074EA1400163 for ; Fri, 23 Oct 2026 06:50:16 -0400 (EDT) Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-06.internal (MEProxy); Fri, 23 Oct 2026 06:50:16 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pbarker.dev; h= cc:content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1792752616; x=1792839016; bh=uNK4pCiVPzKa3KzdksMwLfIxQG/nO9nzwq39l+C3q1o=; b= EMthUF2XVPX0ev6lUbry+aHWos6e24+FIkus3s510XlD66mvlmwritvgypU4IvcB 3WROCMkC1XDphmD34+R7d8AExjNUR5vAoK1K2ZQU+/3B9Y/ExC/DrhUkUu1qR3Ax Iq5rzOntHbNJnKvWCSlC1MhbYbWv9vhhEYKKt+QbKYevx0JLhH48Ol55eDWdh3zJ J10DiZwoU6tIqiEaPoCKr8CjusYnyqAQhu5RjtDc+E1RzFudCM8RnVYF9C+2dHTk hZB4MwdXUvlIXJ3VhD5Vltis1ZqhM4VaSV0BPV8pB+By1YdzCqq7fYPZZgitlI1C lI18e8jq/sxrp/bpNfRnGw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; t=1792752616; x=1792839016; bh=u NK4pCiVPzKa3KzdksMwLfIxQG/nO9nzwq39l+C3q1o=; b=pZuyYR+6GUd965cxP 8uFH950IjB84PhQYPjhREpVYe/uLABgtcSfEP77eAt6o+b3/Ez9NSgFHqEjebelK WQzefEb3e7wR9yu/9kvNJvgz/HxTGf4hEYlMsPVKdngTM6YjmGsJa5lMiMyW/KsR EnRxEW49MZKe0ZRZ/GB5ugiwyy0mSDdXA+a6l1rEDr2zXLdIhwY24TWFlEKGgpm3 A7DukR5H1IP/STDyenbHMngQkmB0YCgWTElkJFT+9ybDgmRWNNjCLElnifw4mAjX Y8xBh1eHSgN5+3HPx8TF4fat9l9m1b9wRvlItHZMoMe7md4CbVRkugm1HJ41bvAk nqMcA== X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=sign d=pbarker.dev a=rsa-sha256; DKIM2-Signature: i=1; m=1; t=1792752616; d=pbarker.dev; mf=PHBhdWxAcGJhcmtlci5kZXY+; rt=PG9wZW5lbWJlZGRlZC1jb3JlQGxpc3RzLm9wZW5lbWJlZGRlZC5vcmc+; s=fm1:rsa-sha256:GmROSiBMQfFmfQXzEtOkWVcdYPmMY1+LqmUwY1FHQbPyUkn kfJuUyKSYiD2ftiepe8ByyTXzKRnjviZYrE8J9W+wAt27CYG+cwlzwVd1Mun6HPs ENn4gZ2CJf6qJyMBaQLr7YrR+/+pwe1EZqCUGiEXvroH9WNfAIleq1qtyahDtv4q A0VfLOlC4bEUjW1yRGB+0V0wHJHHV5tcWTLG9kCiNO0zKLFY9QrBivM+dMlamZLD aCbMWy3bBLxCYCqDRBmBFiS/26g8ZtRkT29+ew+L+G+VxKFxqFRlII/A2hJFp8JA bE4/5fB5UGTnpxmBTD38B7+eZPy9KthtIwFxPdw==; X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=mi-m=1; hc=11; hn=content-transfer-encoding,content-type,date,feedback-id,from, in-reply-to,message-id,mime-version,references,subject,to; Message-Instance: m=1; h=sha256:tb2x0vx05ypZdq7Yy31KJ+r7tBumfCSADNCQYkT8Mh0=:ojaY0zKdICeEzTeA8F4Mb6XQrP+T4QLqXRnfdKnenxQ=; X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: dmFkZTGTN+mLSiTF+ri5KUlfQAaLV+dGMhxbATVdNpgXrfgaFmBoF6og03/WuDCbZe94dG LYuvr1Du4ppmhBJwvArW81qArDNsBFZQ8Afly7JtqqzxFM49MAK7uiaxNpuUzEKE4lPBnW sLzwTuDMmkNbNH/qvFH0F54mwYdEwcfW6vTJ6CKAG5dxC1bTnxLZhS8KMDXV54sDQFl9C7 /vpHTEftuZm+Hb7fvW+b8C3HuTDFywtAdHrzEqfZKF9QJoThiL0/iQL73hjNmpUXzCNCK7 blaV/rHK1dGHDlCuiLuV0joj1j2CBCjP6KHWXXbqSLSb7+EurxOLkavjX3zINWT6DZB3s8 pw7EFtHfEncGahD89Ngx3AWfGx64Doa2lPsFdD/yfSK2KgdCDfDYUYSYEY2s2Kh5YLTSdV qdFcqwkuIixkaNooeVqtBp77AT2n+QM8rrUeSVnN1vFrJVlTmJ1sMdEswvCwVGG33DpIUN w5nKdCoCpqHVZvIgQNcTppvgpjx+zHc3YTg0IkctsRFEFKiZrdXUqm/kHTkpg63Fupo8RS hdb7llocaKofcDMsacn/f+O1EEwVJ/yU5OF0uS9/AX6Qq0hJALnokpFwZcHqXT3fQu+9dQ 1n0eGM+BPeeort0W+fLowQ2riYNr9GJ3DnmAPQ1RycpC0Qp2t03DLrmTsR0w X-ME-Proxy: Feedback-ID: i51494658:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Fri, 23 Oct 2026 06:50:15 -0400 (EDT) From: Paul Barker Date: Fri, 23 Oct 2026 11:50:13 +0100 Subject: [PATCH scarthgap 12/19] python3-certifi: upgrade 2025.8.3 -> 2025.11.12 MIME-Version: 1.0 Message-Id: <20261023-certs-scarthgap-v1-12-0ba436174193@pbarker.dev> References: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> In-Reply-To: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> To: openembedded-core@lists.openembedded.org X-Mailer: b4 0.16.0 X-Developer-Signature: v=1; a=openssh-sha256; t=1792752608; l=1700; i=paul@pbarker.dev; s=id_piv_33200296; h=from:subject:message-id; bh=h/U40LMMse3GYdDhrelcaoMH41KRaLjEMuZmnl+sCbM=; b=U1NIU0lHAAAAAQAAAGgAAAATZWNkc2Etc2hhMi1uaXN0cDI1NgAAAAhuaXN0cDI1NgAAAEEEQ dOfZ4fCf9WdA7cHWnYqW4P6zifYTwJ18a3l28hvdGt3M0CTKu/FWpwoh+x5E487TvYA9iW0goTM GGtdemFzVgAAAAZwYXRhdHQAAAAAAAAABnNoYTUxMgAAAGQAAAATZWNkc2Etc2hhMi1uaXN0cDI 1NgAAAEkAAAAhAPzeoIFwPk9EnKXtfCueQJqvxvrQwd85Gu1YKRJPGw3fAAAAICzh+A654k1AzA JSqG6Ec8+N84ZU6kW3l7mhT8AGOW1p X-Developer-Key: i=paul@pbarker.dev; a=openssh; fpr=SHA256:IlqExt9TPtGqXrqYg/YPMlsWlOGC6AVubz/PwuYw6KY List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Fri, 23 Oct 2026 10:50:18 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248529 From: Alexander Kanavin Signed-off-by: Alexander Kanavin Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie (cherry picked from commit 3cfca11c5d5a7fec9ea06aff400ac5a41e7aae47) There are two releases here (2025.10.05 & 2025.11.12). Both include the usual GitHub Actions workflow changes and cacert.pem updates. The 2025.10.05 release also added a classifier for Python 3.14 which is safe to do on the stable branch. See https://github.com/certifi/python-certifi/compare/2025.08.03...2025.10.05 https://github.com/certifi/python-certifi/compare/2025.10.05...2025.11.12 Signed-off-by: Paul Barker --- .../{python3-certifi_2025.8.3.bb => python3-certifi_2025.11.12.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/python/python3-certifi_2025.8.3.bb b/meta/recipes-devtools/python/python3-certifi_2025.11.12.bb similarity index 87% rename from meta/recipes-devtools/python/python3-certifi_2025.8.3.bb rename to meta/recipes-devtools/python/python3-certifi_2025.11.12.bb index 22cb0778cb9c..cbda3ee9e0a0 100644 --- a/meta/recipes-devtools/python/python3-certifi_2025.8.3.bb +++ b/meta/recipes-devtools/python/python3-certifi_2025.11.12.bb @@ -7,7 +7,7 @@ HOMEPAGE = "http://certifi.io/" LICENSE = "ISC" LIC_FILES_CHKSUM = "file://LICENSE;md5=11618cb6a975948679286b1211bd573c" -SRC_URI[sha256sum] = "e564105f78ded564e3ae7c923924435e1daa7463faeab5bb932bc53ffae63407" +SRC_URI[sha256sum] = "d8ab5478f2ecd78af242878415affce761ca6bc54a22a27e026d7c25357c3316" CVE_PRODUCT = "certifi:certifi" From patchwork Fri Oct 23 10:50:14 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Paul Barker X-Patchwork-Id: 101810 Received: from fout-a3-smtp.messagingengine.com (fout-a3-smtp.messagingengine.com [103.168.172.146]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.4478.1792752617155581833 for ; Fri, 23 Oct 2026 03:50:17 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@pbarker.dev header.s=fm1 header.b=WuaHtJa9; dkim=pass header.i=@messagingengine.com header.s=fm2 header.b=tui8O0A0; spf=pass (domain: pbarker.dev, ip: 103.168.172.146, mailfrom: paul@pbarker.dev) Received: from phl-compute-04.internal (phl-compute-04.internal [10.202.2.44]) by mailfout.phl.internal (Postfix) with ESMTP id 7F445EC00C1 for ; Fri, 23 Oct 2026 06:50:16 -0400 (EDT) Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-04.internal (MEProxy); Fri, 23 Oct 2026 06:50:16 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pbarker.dev; h= cc:content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1792752616; x=1792839016; bh=iSynnzWbHKA0pEwC956uzcncZ71OkxDXJZERpY6+tJg=; b= WuaHtJa9or9Np+MQaoBZAk1EbLvL61HxwWrYvw8L1ToKEMEiHuD6KiFHgF0g9BPE Pxw6vKJa+ya/YbmkmWrHzR0VcSbuu5aatcsc2vrbg07GsEQNoI5E2Fj6NVBhoBDL sJTokkYjpOOZTRjT7C707EVDSqYXie1+Ht1FLrMP6iP5vWWpg0A+ampgoSQf341y ujeZXQfuMjtrntDhOTTfT4dv3mlvzHGtkDNSr9SdICcNWCG59d6n3WwsFDND0H3L 7+xNd+RItpZt1IOZVF6RqKr6yndFx4SyuJhAxaDlKoGXKfGHmraz3keW5J9E3Bpb /AOkO1+vNC1DNwgZn2NmpA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; t=1792752616; x=1792839016; bh=i SynnzWbHKA0pEwC956uzcncZ71OkxDXJZERpY6+tJg=; b=tui8O0A0Oo/T8Hhtt pG9zKml2nExzfEGdkDkXuQ1WlyOgL+YvMqLtcdHZVMKuDf4kc/CSKHPq1dauUSFD cQGeQqEC5XOoIzMqsnFFx3jMn2PsPOc/CtPZ1IelCjVIBPqqSaE0VwDspomM+f0S XxkV4ovky1TwVNNKzHOgSBr+fRXcvTsDBMrARQmDFvTVZOWeO6Xjtcke6zPstdP1 ayZww/9N7LtGYD8/2kUzCu6t4AIKW36s2dCQOY1NLmrq4nBi3CJAmQsBG0pGulYw kt/ikgryOTbBwPcNEuAHZq9kN5C4yDdQSyD1IMDpQjbdMrP2R72vYAsINIj47p/A 0oAaw== X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=sign d=pbarker.dev a=rsa-sha256; DKIM2-Signature: i=1; m=1; t=1792752616; d=pbarker.dev; mf=PHBhdWxAcGJhcmtlci5kZXY+; rt=PG9wZW5lbWJlZGRlZC1jb3JlQGxpc3RzLm9wZW5lbWJlZGRlZC5vcmc+; s=fm1:rsa-sha256:uuExVL4/fhP2/PiryUPqtq9VaJy9fgAwA6qdhH7nIvc9sCc ApE5yiCCnIKYRuQU8ClTi0asmzWYhWYwo2V3nr5v4KDuVtY7MEN0gQ5zIx7CvHoW ujSRKenznNH/5FdnBvxhkShhuAoJW0s7NghaWgXqtx3kTaD3v4DA030FJK9SynnP r5da1lQlG9nJB77+Rd62QQ4xVfUMsTZaq01b+ewDDzdJvG392E0ueINGYsmzoJkR tyyLD4yw3dsjRgLhwuaZtqHmVVLsqVus0SaE+A1XSqpYpIbTbmsFjRocWuuiKhm8 QVWO7wM2W2CovT9Jhjjwj4rd51jksbpauTP8bOw==; X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=mi-m=1; hc=11; hn=content-transfer-encoding,content-type,date,feedback-id,from, in-reply-to,message-id,mime-version,references,subject,to; Message-Instance: m=1; h=sha256:TweEZ+2dr+cQgoV3/5EaekV6pDv0EsB4gc7dL+vGo7A=:REZ5bJ7yCKVaxunb/8hE77Av7RNz90iifTzeicGap+E=; X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: dmFkZTGyOagm9BfzPb+YtFk66N3nGLsZpb/VPM8XjyvCI6H5ALoAzhuChEVFVvDnkE/SF/ JqM9HdccU5QGXh85+PcHSXfPlinR50XvCANansdfjHdI2y4yWT98LB5sYItFtv/YCkRC+D gCz49oXUOiIA3GSaVy8hQyIFhJVj70/v42lZYRXkC6yDHyO8Mxh8BPFCEOUQWBw2ymS8E7 RnCBWgaoCjRMBc+ufLfygswQfPbZu8I30UCpB32sT/SGJkXdSH8ooLc1ooYQLEosEVguDB nl2tS57Hfyetr9KYXK2lnhEOBFdFfv/pn1dtrEglp90LQOD/J+D0fLXSLeer7z4rPcHWOD byTSWn65qyzMW5bdZBQXi8XM5+4IgeKRa8e6pvWZoPuFbL4s0VsXs3lkycdR5ZXMIP/1Ip bNvT6iERig0mnEf7Nfvy7+legdZsm6LrH1xdHj0jMTiK/kBgFpwvquII/jkuo+7sU5J9ea iilqIq367gG16Z01kG/RA84W3he2LGqmbdp7jz/UH7bLk9eCk/ifiyF4/RrC0hL0JUqYwz bka4ULCohKcK2WRTKL0i895YpVfSux/h+A/z/Ck1zkZDdIEj7erCGDqSSVE3YutZENi3OV JmsLK32bdmpX55s0HOLut1LJemKcbBMuYuk0cPNmE0KD5xaOcnGePiq1sL5Q X-ME-Proxy: Feedback-ID: i51494658:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Fri, 23 Oct 2026 06:50:16 -0400 (EDT) From: Paul Barker Date: Fri, 23 Oct 2026 11:50:14 +0100 Subject: [PATCH scarthgap 13/19] python3-certifi: upgrade 2025.11.12 -> 2026.1.4 MIME-Version: 1.0 Message-Id: <20261023-certs-scarthgap-v1-13-0ba436174193@pbarker.dev> References: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> In-Reply-To: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> To: openembedded-core@lists.openembedded.org X-Mailer: b4 0.16.0 X-Developer-Signature: v=1; a=openssh-sha256; t=1792752608; l=1434; i=paul@pbarker.dev; s=id_piv_33200296; h=from:subject:message-id; bh=Z5cteYQDMY5Bqb4ZYc+VgLtcNu5KerWG3yZ6bnWwMdg=; b=U1NIU0lHAAAAAQAAAGgAAAATZWNkc2Etc2hhMi1uaXN0cDI1NgAAAAhuaXN0cDI1NgAAAEEEQ dOfZ4fCf9WdA7cHWnYqW4P6zifYTwJ18a3l28hvdGt3M0CTKu/FWpwoh+x5E487TvYA9iW0goTM GGtdemFzVgAAAAZwYXRhdHQAAAAAAAAABnNoYTUxMgAAAGMAAAATZWNkc2Etc2hhMi1uaXN0cDI 1NgAAAEgAAAAgeEaTDL6IknSaHSbPZPTDYjlCJVVleW+ZRh3ARNWvnGkAAAAgfFLjUIV0C2ctzJ 5Gfj7s2AugE0geR3KguKEhEe7T9/o= X-Developer-Key: i=paul@pbarker.dev; a=openssh; fpr=SHA256:IlqExt9TPtGqXrqYg/YPMlsWlOGC6AVubz/PwuYw6KY List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Fri, 23 Oct 2026 10:50:21 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248530 From: Wang Mingyu Signed-off-by: Wang Mingyu Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie (cherry picked from commit 3f8b52902a37186d90779565c7e865fa735078be) This only changes GitHub Actions workflows and cacert.pem. See https://github.com/certifi/python-certifi/compare/2025.11.12...2026.01.04 Signed-off-by: Paul Barker --- .../{python3-certifi_2025.11.12.bb => python3-certifi_2026.1.4.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/python/python3-certifi_2025.11.12.bb b/meta/recipes-devtools/python/python3-certifi_2026.1.4.bb similarity index 87% rename from meta/recipes-devtools/python/python3-certifi_2025.11.12.bb rename to meta/recipes-devtools/python/python3-certifi_2026.1.4.bb index cbda3ee9e0a0..ef2d93cbc5cb 100644 --- a/meta/recipes-devtools/python/python3-certifi_2025.11.12.bb +++ b/meta/recipes-devtools/python/python3-certifi_2026.1.4.bb @@ -7,7 +7,7 @@ HOMEPAGE = "http://certifi.io/" LICENSE = "ISC" LIC_FILES_CHKSUM = "file://LICENSE;md5=11618cb6a975948679286b1211bd573c" -SRC_URI[sha256sum] = "d8ab5478f2ecd78af242878415affce761ca6bc54a22a27e026d7c25357c3316" +SRC_URI[sha256sum] = "ac726dd470482006e014ad384921ed6438c457018f4b3d204aea4281258b2120" CVE_PRODUCT = "certifi:certifi" From patchwork Fri Oct 23 10:50:15 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Paul Barker X-Patchwork-Id: 101811 Received: from fout-a3-smtp.messagingengine.com (fout-a3-smtp.messagingengine.com [103.168.172.146]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.4479.1792752617626854285 for ; Fri, 23 Oct 2026 03:50:17 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@pbarker.dev header.s=fm1 header.b=s9wCAwu/; dkim=pass header.i=@messagingengine.com header.s=fm2 header.b=amHcV7fe; spf=pass (domain: pbarker.dev, ip: 103.168.172.146, mailfrom: paul@pbarker.dev) Received: from phl-compute-01.internal (phl-compute-01.internal [10.202.2.41]) by mailfout.phl.internal (Postfix) with ESMTP id EF38AEC0067 for ; Fri, 23 Oct 2026 06:50:16 -0400 (EDT) Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-01.internal (MEProxy); Fri, 23 Oct 2026 06:50:16 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pbarker.dev; h= cc:content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1792752616; x=1792839016; bh=kltt570nuPBzFKIsc1Yz6ywxVUw94JwAlXZhnBmvWEE=; b= s9wCAwu/PpZC/y1iqcvpqszKWDn0sDTbsLPEbYfzwz55suqkbc+Q/WmbLRCEfHn8 oKaTytIaV2Rp6fZoG6X6+TtwVe70ddwm+qJiDYnNYBUoF5Kqd/s0sGFH533tTdX6 BRibR+/e9EcDgbM4uOJKbmpCNIs1lzZpZXBe1i/fDZaf8D7MyJzGiN01s+yoi6ag RLtRcBqyr5v84gb0/38/DdnbdEduYhOdMtBH6zBZgn3x6DwXRLyY+SJolFxxW/0N r3lBtKTy56F+ucgT8sMtLYnwI/tkbUkudCXtgc5XbiVl3oM8zeA0HI535e1TTuv1 Tvb6u+MYqQI2IwE4kxp5TA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; t=1792752616; x=1792839016; bh=k ltt570nuPBzFKIsc1Yz6ywxVUw94JwAlXZhnBmvWEE=; b=amHcV7feB7c8d12LO PNynNb5D7Hv0NhNdiGD6eNSlvz7YouS92umPgRIJa0tP4Mwevy8BjgmhsMrGyDfi 6GmhPEcvF5c+ps4Vw1ri40zvgM8EEqCvqFFtYX3P4ZzGeiWTiTT7yf65On4vbPj5 zmQa/7Fh+bt+sUzASwypD995EkM22c9Nb98aUD3uaGnkvXrVyCipxwNkLXrTcSkp KkDk7O2RncKG0IUi2YgDDqJqDkcsl4dwJW6gGJYvoUcuZ2y9xiXMw5wqSGTOwR05 jRBVQEAIcTXnZBjRp2XQb/ZQTSr0oL+4zEUWfnSd/6y8vYWe1L1d8NApc4hu01XC WAisA== X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=sign d=pbarker.dev a=rsa-sha256; DKIM2-Signature: i=1; m=1; t=1792752616; d=pbarker.dev; mf=PHBhdWxAcGJhcmtlci5kZXY+; rt=PG9wZW5lbWJlZGRlZC1jb3JlQGxpc3RzLm9wZW5lbWJlZGRlZC5vcmc+; s=fm1:rsa-sha256:YLU/WwmX7GlAZL+IGfJc2XhbwcU3Oj5YdiboTWp0jbmo+bX Q0tipnpUjPAdezqj2RObJcucpR5vZVwcogVwXF9ktNPAY7OxqhJK9+qghEQXqrz4 QtJqLgC/MKb90/YYkBGicVUtlsrCKAMzhrSUPYvhCZ13L8Dr83NflfVb73oC21cI 2dK36DWEmJ5kJuKjICPxqNcISu84k7OrsSboR/vgkqABuqaA58Cgfy+asTOVDXCS fPah/ksRBI26p/RQFVix06ZvrIRwBeTf6ukcvgTDzgkbdKkHI5fmHxxmnVSsQ49/ FvoJeU/NH6bvmM5L04pY1NcXtHvYpyTFfl5sfNw==; X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=mi-m=1; hc=11; hn=content-transfer-encoding,content-type,date,feedback-id,from, in-reply-to,message-id,mime-version,references,subject,to; Message-Instance: m=1; h=sha256:L4xiN5Ftgh/PhJ/28M3XierCMKMe4rYcNjsNXLYaF+g=:hmr+a361NK0GL/CcnGVDpzZaWrmoAvRPYqaWRC7pg9M=; X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: dmFkZTGyOagm9BfzPb+YtFk66N3nGLsZpb/VPM8XjyvCI6H5ALoAzhuChEVFVvDnkE/SF/ JqM9HdccU5QGXh85+PcHSXfPlinR50XvCANansdfjHdI2y4yWT98LB5sYItFtv/YCkRC+D gCz49oXUOiIA3GSaVy8hQyIFhJVj70/v42lZYRXkC6yDHyO8Mxh8BPFCEOUQWBw2ymS8E7 RnCBWgaoCjRMBc+ufLfygswQfPbZu8I30UCpB32sT/SGJkXdSH8ooLc1ooYQLEosEVguDB nl2tS57Hfyetr9KYXK2lnhEOBFdFfv/pn1dtrEglp90LQOD/J+D0fLXSLeer7z4rPcHWUz 98tHraJe1EuXLxNWUtf4tYx7Mx+G5OzuZ5O2ZQkcZEg8Ui+exbFeK727Zpv9R3qe2PuGkk 0QoxZNTqpp/3JBujhw49XyZv7asUcXv/e8ZSV+nTzF6jCrtpEM7RHpYJYw7l7QLs8Hwv2U cUNUu3RgRilNr39t06wMVbXIAkWm3ZVkr4kMrwcp+GiAXwxD6mk66iP48L+NDQhFs7ypzg W2PdS/g2SG3VqAz0XqLvo042LJ+baX+8DqzyAfmrm8GOoePKY2gEPU6AhAkeQ0GNkp5jWU PMAwPWyCSjcJFEZvYFo5rmmN79w/GdKAlkLwuCETJmdGEiVVs6p8OiNTfuDw X-ME-Proxy: Feedback-ID: i51494658:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Fri, 23 Oct 2026 06:50:16 -0400 (EDT) From: Paul Barker Date: Fri, 23 Oct 2026 11:50:15 +0100 Subject: [PATCH scarthgap 14/19] python3-certifi: Upgrade 2026.1.4 -> 2026.2.25 MIME-Version: 1.0 Message-Id: <20261023-certs-scarthgap-v1-14-0ba436174193@pbarker.dev> References: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> In-Reply-To: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> To: openembedded-core@lists.openembedded.org X-Mailer: b4 0.16.0 X-Developer-Signature: v=1; a=openssh-sha256; t=1792752608; l=1494; i=paul@pbarker.dev; s=id_piv_33200296; h=from:subject:message-id; bh=46yQtO57S4RiCxXReVtEyGrW90OBvM0oyf8ljyk+Na8=; b=U1NIU0lHAAAAAQAAAGgAAAATZWNkc2Etc2hhMi1uaXN0cDI1NgAAAAhuaXN0cDI1NgAAAEEEQ dOfZ4fCf9WdA7cHWnYqW4P6zifYTwJ18a3l28hvdGt3M0CTKu/FWpwoh+x5E487TvYA9iW0goTM GGtdemFzVgAAAAZwYXRhdHQAAAAAAAAABnNoYTUxMgAAAGMAAAATZWNkc2Etc2hhMi1uaXN0cDI 1NgAAAEgAAAAgBwnrgVY2g883WuhASUAVbvfOUZYSd4QppcMISA6XdqMAAAAgEAUjJ7YsRyoSyK EJSDodRbpA2P5eNdF77wcCOuBSf90= X-Developer-Key: i=paul@pbarker.dev; a=openssh; fpr=SHA256:IlqExt9TPtGqXrqYg/YPMlsWlOGC6AVubz/PwuYw6KY List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Fri, 23 Oct 2026 10:50:21 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248531 From: Leon Anavi Upgrade to release 2026.2.25: - Updated dependencies Signed-off-by: Leon Anavi Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie (cherry picked from commit 117a5139318390c54571246130c06f97cc8c2746) This only changes GitHub Actions workflows and cacert.pem. See https://github.com/certifi/python-certifi/compare/2026.01.04...2026.02.25 Signed-off-by: Paul Barker --- .../{python3-certifi_2026.1.4.bb => python3-certifi_2026.2.25.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/python/python3-certifi_2026.1.4.bb b/meta/recipes-devtools/python/python3-certifi_2026.2.25.bb similarity index 87% rename from meta/recipes-devtools/python/python3-certifi_2026.1.4.bb rename to meta/recipes-devtools/python/python3-certifi_2026.2.25.bb index ef2d93cbc5cb..eff12fe3280b 100644 --- a/meta/recipes-devtools/python/python3-certifi_2026.1.4.bb +++ b/meta/recipes-devtools/python/python3-certifi_2026.2.25.bb @@ -7,7 +7,7 @@ HOMEPAGE = "http://certifi.io/" LICENSE = "ISC" LIC_FILES_CHKSUM = "file://LICENSE;md5=11618cb6a975948679286b1211bd573c" -SRC_URI[sha256sum] = "ac726dd470482006e014ad384921ed6438c457018f4b3d204aea4281258b2120" +SRC_URI[sha256sum] = "e887ab5cee78ea814d3472169153c2d12cd43b14bd03329a39a9c6e2e80bfba7" CVE_PRODUCT = "certifi:certifi" From patchwork Fri Oct 23 10:50:16 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Paul Barker X-Patchwork-Id: 101812 Received: from fout-a3-smtp.messagingengine.com (fout-a3-smtp.messagingengine.com [103.168.172.146]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.4480.1792752618136717087 for ; Fri, 23 Oct 2026 03:50:18 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@pbarker.dev header.s=fm1 header.b=RFEmOsCP; dkim=pass header.i=@messagingengine.com header.s=fm2 header.b=oeQlYh6F; spf=pass (domain: pbarker.dev, ip: 103.168.172.146, mailfrom: paul@pbarker.dev) Received: from phl-compute-02.internal (phl-compute-02.internal [10.202.2.42]) by mailfout.phl.internal (Postfix) with ESMTP id 6FA9BEC00B6 for ; Fri, 23 Oct 2026 06:50:17 -0400 (EDT) Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-02.internal (MEProxy); Fri, 23 Oct 2026 06:50:17 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pbarker.dev; h= cc:content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1792752617; x=1792839017; bh=64EkrVWvkXlbqa+UfJNzXNp8jldQ7t/R1UERLwhH+DY=; b= RFEmOsCPpDtpsPrkXv5bmdzooPNnLWrWs13MItnhrZz5OxLVeMh5l396GwsbycQp XQiuiddU6P0i/XdIMrPKTGIq6mF/RRrHFOPaQYGpGyEBsbd+zZk2YJ4ZYGuv2uS3 dQqHFBomnWXYruKpNtDiQ7V92P5bGLDLIH445wxNf/EyHWetOqnG8SlVYV5mAxlD bvaA2PVHyL3MrzZ0pdqV8DLw8fEhY/F2KUVWulMMdQOiztiADoyYkRI1BKHUQ4Cg cv6ZoHFcRDZ4AgrtnDBakcHpk6NZL7j5K+tC7bVBbHpnUWcTTOGKmTH8twCT5a7P 5RGPcHwqf15WQn0jvuygGA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; t=1792752617; x=1792839017; bh=6 4EkrVWvkXlbqa+UfJNzXNp8jldQ7t/R1UERLwhH+DY=; b=oeQlYh6FlbeM0QTqw M1nuCHmCd6Y5JG5kXGG5/j4X49t3416RAsy3cQyjyFwck0p7CCH07FIuJ40kfuAK fMYtYgxhKDKNLNA6aFMLLhTNkG9dj7SPXcdNqlAcPvTX4Efp3APo7vXvAiAsUjSx DaJ5u/drqclm2sq9dvvBX1ZmRCw0CRA8MJ0ek9XV2I5ddmgVFA8/sVvy23D2kLLw JtAdscZ91AJi8E4teqYHCf+ix836usD6lKWm0NuZUqN/j0L+J2VfyqfuMYAiFagA l6WrWUAekgOrPVz4UJibj0p+9k2A58NAFMiFQi1SaqifZtSU3cxlVEJpz9ZC8g/X KCFPA== X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=sign d=pbarker.dev a=rsa-sha256; DKIM2-Signature: i=1; m=1; t=1792752617; d=pbarker.dev; mf=PHBhdWxAcGJhcmtlci5kZXY+; rt=PG9wZW5lbWJlZGRlZC1jb3JlQGxpc3RzLm9wZW5lbWJlZGRlZC5vcmc+; s=fm1:rsa-sha256:cIZzHHWoSwu7oihCGNB1rbiXC6vM4UwiFO1UdqvUF3elxSc 46rUm1z5qvWaglU5n4w/7c15BqHtyX+wczm/Xd6zOTufJa18LsQ2xr1CgX5slWwN oGTCID4UzHGWXFY9h61YpWYG+J2ttJpaMHcMqPDZaeDBKqkf2sZnuCFXS+LbrnPn Q71T1Aw3D4ah5cs/LkuYeQb8gvJS/97ancRiR6MSOu0AbcncedAym1Nf6uGZtzkv XOMFO6+lquqiTYWzNKcKMyRoh9nS4ou6gu1Ixo8c/E8T4G90gYWzoymotnU+sXxk JxZ5RL0EvUBqzqmLs+PYkGuYldTEK8GbavQVacA==; X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=mi-m=1; hc=11; hn=content-transfer-encoding,content-type,date,feedback-id,from, in-reply-to,message-id,mime-version,references,subject,to; Message-Instance: m=1; h=sha256:T60rfTBFDtOLt0eWs5riKiczP1P+L2L9i0DJk3RSl88=:jkqJzZ0aIw6RYwElCVbNX0Uq6DtxkM6863FElpJzwps=; X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: dmFkZTER2m1YIMQ8eg4MnNIsZi4FBhMIWqS+ZbVhuw44e/27Tf4AY+BIRzUquKEjhnhqTt 0g6mNqv1U4MXkuCVTEXHNpw7k6cApW8LB3Imp3g3tgBd1M7lN1nyNBlZ6ljZ7+w7s0kABJ OV8tzTnnhZsHV87VOCEnnZFbKd0n7dJt7inA1oB89LeOnbhKaS7Zl7E4arQgdppveXVqY+ /ejNy2IbeLlV0yWnZ/3utWpncsMkMtxPfg/jUWMsYZjsi+TmiqBcjObVWshyFBAv3oJQ9F JgGzmA7v5p9VzUuc3bYY1CVs5RvcX5e8N3Cet7kuxRSynSJadNIj13L+qM6pWAHS3btCK3 3wHNX/XKF70VR+sCAo59FWdPaguZ/fDL49QKpGgq/TReQ+dTE1EQ1r06XJeTfRnprkIR7v cMcQwhFYmKWqgfmcNdZliicowyBynzDd8POE7iw7roZteKMPmH7A/szjEDuqTMowzQtJgn axoK/zBa9NTEdFNkCQDFz8DOYhwpxruaps/vOAFPHPE4L0Wjm6uw87sXUzWSvjon9VKfla DFVbX1D+/U5lHQtujtI2mGdUQva8WwWCDw8nmVJMCeZZ2UDgaZp2icuVaT4j3ryo38QQ70 x/du6w6YrN3MjgfP00Ay8O6nee2HKZ5ZbJV0o/g+CBTRtYzz5wu9Czbg00tw X-ME-Proxy: Feedback-ID: i51494658:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Fri, 23 Oct 2026 06:50:17 -0400 (EDT) From: Paul Barker Date: Fri, 23 Oct 2026 11:50:16 +0100 Subject: [PATCH scarthgap 15/19] python3-certifi: upgrade 2026.2.25 -> 2026.4.22 MIME-Version: 1.0 Message-Id: <20261023-certs-scarthgap-v1-15-0ba436174193@pbarker.dev> References: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> In-Reply-To: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> To: openembedded-core@lists.openembedded.org X-Mailer: b4 0.16.0 X-Developer-Signature: v=1; a=openssh-sha256; t=1792752609; l=1318; i=paul@pbarker.dev; s=id_piv_33200296; h=from:subject:message-id; bh=JllA+qKMOihVdn0k+P9ZGLu1VtZTdbVC4C+JgBmr4iQ=; b=U1NIU0lHAAAAAQAAAGgAAAATZWNkc2Etc2hhMi1uaXN0cDI1NgAAAAhuaXN0cDI1NgAAAEEEQ dOfZ4fCf9WdA7cHWnYqW4P6zifYTwJ18a3l28hvdGt3M0CTKu/FWpwoh+x5E487TvYA9iW0goTM GGtdemFzVgAAAAZwYXRhdHQAAAAAAAAABnNoYTUxMgAAAGQAAAATZWNkc2Etc2hhMi1uaXN0cDI 1NgAAAEkAAAAhAP7BMi7mUm/W4tkYFWR05WAMcG0iu2XimtyzPlZbY6kyAAAAIA+ZCHQ/Qj64jh 7YqajsT9RfWh/9hiwlwRT+YGvnDj6X X-Developer-Key: i=paul@pbarker.dev; a=openssh; fpr=SHA256:IlqExt9TPtGqXrqYg/YPMlsWlOGC6AVubz/PwuYw6KY List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Fri, 23 Oct 2026 10:50:21 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248532 From: Richard Purdie Signed-off-by: Richard Purdie (cherry picked from commit cde7975e3e00cdc2803a03dd68aea594b81d43ba) This is just changes to GitHub Actions workflows and cacert.pem. See: https://github.com/certifi/python-certifi/compare/2026.02.25...2026.04.22 Signed-off-by: Paul Barker --- .../{python3-certifi_2026.2.25.bb => python3-certifi_2026.4.22.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/python/python3-certifi_2026.2.25.bb b/meta/recipes-devtools/python/python3-certifi_2026.4.22.bb similarity index 87% rename from meta/recipes-devtools/python/python3-certifi_2026.2.25.bb rename to meta/recipes-devtools/python/python3-certifi_2026.4.22.bb index eff12fe3280b..03cd00d78f4b 100644 --- a/meta/recipes-devtools/python/python3-certifi_2026.2.25.bb +++ b/meta/recipes-devtools/python/python3-certifi_2026.4.22.bb @@ -7,7 +7,7 @@ HOMEPAGE = "http://certifi.io/" LICENSE = "ISC" LIC_FILES_CHKSUM = "file://LICENSE;md5=11618cb6a975948679286b1211bd573c" -SRC_URI[sha256sum] = "e887ab5cee78ea814d3472169153c2d12cd43b14bd03329a39a9c6e2e80bfba7" +SRC_URI[sha256sum] = "8d455352a37b71bf76a79caa83a3d6c25afee4a385d632127b6afb3963f1c580" CVE_PRODUCT = "certifi:certifi" From patchwork Fri Oct 23 10:50:17 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Paul Barker X-Patchwork-Id: 101813 Received: from fhigh-a3-smtp.messagingengine.com (fhigh-a3-smtp.messagingengine.com [103.168.172.154]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.4481.1792752618594081051 for ; Fri, 23 Oct 2026 03:50:18 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@pbarker.dev header.s=fm1 header.b=tVeNStmx; dkim=pass header.i=@messagingengine.com header.s=fm2 header.b=SyQUjJ9Q; spf=pass (domain: pbarker.dev, ip: 103.168.172.154, mailfrom: paul@pbarker.dev) Received: from phl-compute-01.internal (phl-compute-01.internal [10.202.2.41]) by mailfhigh.phl.internal (Postfix) with ESMTP id DF1F71400163 for ; Fri, 23 Oct 2026 06:50:17 -0400 (EDT) Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-01.internal (MEProxy); Fri, 23 Oct 2026 06:50:17 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pbarker.dev; h= cc:content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1792752617; x=1792839017; bh=MuAubjStDp4itAWLptDI8RICbumLwqmmCBxk3xHKf+4=; b= tVeNStmxtNuHymiKxEIbELomJm+6XwIXWkXQBcHvS92sx9rhyQvSDjeR/mLEnel1 M40dpyNBB9UzzR1hSFVjlYo6WRhUU8DSUoWoCIQR7pyREWCQDKs1XSuYwSIEUpea GeSxSysibRO7Ic1Aovg+VAwmJMR6AvJNfaajw85D6VBR/4fuDd2GOWTnOnk4YwNu ISH9dcTjLbNcfZ8W/NzSZhBIHsuJcAfaOY4m6waFxWLLnbl5LbV14u/x5Hf7/NSz MawiDD/wKVme0u2j0XD3yPrL69pSVCGAPvEZ7FX/BKquo+WcHB/Tm6mkofa9LknY AjwSfvb8emcC34pU2hR4vA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; t=1792752617; x=1792839017; bh=M uAubjStDp4itAWLptDI8RICbumLwqmmCBxk3xHKf+4=; b=SyQUjJ9QGqaXYIQEN vuQPv9CtyWQ7swzBkp93T6HcZIVyY/7/YuO4j+dAP+Fb99mOk9C8Mhp4uOw5CDrf szmtTemEFAdIxdXql3si/VE6nw7RxW2blDulQ7c8bTZv21oj+CttoNUgn/O2eoPk rZVWBb5MUGCD01hHuV/3qFXvzGoyAYhWS2o7xYfbrSmgal4DUZTztGmqNWj+QS0u PDecwB5ek+AvmsKwSl/ECOd8efLs88b6LqSbeuwdEk4fr27Nw0v4xHZjtuDmY3g3 lGMgVFIcATYUnhqK6D8cl2IBQgebZB3Kn0gG+ULdU/j6SWhGTCgL0YVMSpJnujsX x6Kog== X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=sign d=pbarker.dev a=rsa-sha256; DKIM2-Signature: i=1; m=1; t=1792752617; d=pbarker.dev; mf=PHBhdWxAcGJhcmtlci5kZXY+; rt=PG9wZW5lbWJlZGRlZC1jb3JlQGxpc3RzLm9wZW5lbWJlZGRlZC5vcmc+; s=fm1:rsa-sha256:pG6l6WQ4Ow9NCLuYjjK5cI50EGlVdycHjF/EZkThVy0gTPT XtmML+JGf3DaudLOBvGQwy/jKJbcocxh6sPo0zWPMJP8NPD0qeNBWPMNRRc+j/3B G38oD+ziZTfPKPUx7GTKmD1db42i3LOA9IJ9u3TBfiSk5JCBgxSN6ZjP3OOHjtvb cR5egecAdQQSzpkIthYk+JbZoNtvwaq585xGUY0rhzgMvYRksB/vk0aETY5I7buL JarjGHgD66HxQwLFjJG54U/njncZPfwAxstvpLtNrw22FUC0ZlheXeK/jIxIHUVg GHpSHUoqQHxyB4A1jieT1NZFsC16z+5FzcKmbVw==; X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=mi-m=1; hc=11; hn=content-transfer-encoding,content-type,date,feedback-id,from, in-reply-to,message-id,mime-version,references,subject,to; Message-Instance: m=1; h=sha256:F9E6qWiwg4cvhOhIJtn6kISajLylC7+UvbG145FwMco=:Yo9EZf0k+OOWkIgBqtUmipj3B6Ddp/Y8HE9Ky149mAI=; X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: dmFkZTGyOagm9BfzPb+YtFk66N3nGLsZpb/VPM8XjyvCI6H5ALoAzhuChEVFVvDnkE/SF/ JqM9HdccU5QGXh85+PcHSXfPlinR50XvCANansdfjHdI2y4yWT98LB5sYItFtv/YCkRC+D gCz49oXUOiIA3GSaVy8hQyIFhJVj70/v42lZYRXkC6yDHyO8Mxh8BPFCEOUQWBw2ymS8E7 RnCBWgaoCjRMBc+ufLfygswQfPbZu8I30UCpB32sT/SGJkXdSH8ooLc1ooYQLEosEVguDB nl2tS57Hfyetr9KYXK2lnhEOBFdFfv/pn1dtrEglp90LQOD/J+D0fLXSLeer7z4rPcHWK3 3wHNX/XKF70VR+sCAo59FWdPaguZ/fDL49QKpGgq/TReQ+dTE1EQ1r06XJeTfRnprkIR7v cMcQwhFYmKWqgfmcNdZliicowyBynzDd8POE7iw7roZteKMPmH7A/szjEDuqTMowzQtJgn axoK/zBa9NTEdFNkCQDFz8DOYhwpxruaps/vOAFPHPE4L0Wjm6uw87sXUzWSvjon9VKfla DFVbX1D+/U5lHQtujtI2mGdUQva8WwWCDw8nmVJMCeZZ2UDgaZp2icuVaT4j3ryo38QQ70 x/du6w6YrN3MjgfP00Ay8O6nee2HKZ5ZbJV0o/g+CBTRtYzz5wu9Czbg00tw X-ME-Proxy: Feedback-ID: i51494658:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Fri, 23 Oct 2026 06:50:17 -0400 (EDT) From: Paul Barker Date: Fri, 23 Oct 2026 11:50:17 +0100 Subject: [PATCH scarthgap 16/19] python3-certifi: upgrade 2026.4.22 -> 2026.5.20 MIME-Version: 1.0 Message-Id: <20261023-certs-scarthgap-v1-16-0ba436174193@pbarker.dev> References: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> In-Reply-To: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> To: openembedded-core@lists.openembedded.org X-Mailer: b4 0.16.0 X-Developer-Signature: v=1; a=openssh-sha256; t=1792752609; l=1872; i=paul@pbarker.dev; s=id_piv_33200296; h=from:subject:message-id; bh=6632cn2jajjolmwb1goRsaicnA0CTaeJjsvm7Jr3D+8=; b=U1NIU0lHAAAAAQAAAGgAAAATZWNkc2Etc2hhMi1uaXN0cDI1NgAAAAhuaXN0cDI1NgAAAEEEQ dOfZ4fCf9WdA7cHWnYqW4P6zifYTwJ18a3l28hvdGt3M0CTKu/FWpwoh+x5E487TvYA9iW0goTM GGtdemFzVgAAAAZwYXRhdHQAAAAAAAAABnNoYTUxMgAAAGMAAAATZWNkc2Etc2hhMi1uaXN0cDI 1NgAAAEgAAAAgeRTq74jUmZlooHyjjDThEc6gG5/H6iSqCg6y5HWJ1QsAAAAgOiD4/MXYRXjwDM KS61Y6F8gY3ApwuiIAKvibN5TVpD0= X-Developer-Key: i=paul@pbarker.dev; a=openssh; fpr=SHA256:IlqExt9TPtGqXrqYg/YPMlsWlOGC6AVubz/PwuYw6KY List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Fri, 23 Oct 2026 10:50:21 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248533 From: Tim Orling * Removes [1]: Issuer: O=Chunghwa Telecom Co., Ltd. OU=ePKI Root Certification Authority Subject: O=Chunghwa Telecom Co., Ltd. OU=ePKI Root Certification Authority Label: "ePKI Root Certification Authority" Serial: 28956088682735189655030529057352760477 MD5 Fingerprint: 1b:2e:00:ca:26:06:90:3d:ad:fe:6f:15:68:d3:6b:b3 SHA1 Fingerprint: 67:65:0d:f1:7e:8e:7e:5b:82:40:a4:f4:56:4b:cf:e2:3d:69:c6:f0 SHA256 Fingerprint: c0:a6:f4:dc:63:a2:4b:fd:cf:54:ef:2a:6a:08:2a:0a:72:de:35:80:3e:2f:f5:ff:52:7a:e5:d8:72:06:df:d5 [1] https://github.com/certifi/python-certifi/compare/2026.04.22...2026.05.20 Signed-off-by: Tim Orling Signed-off-by: Richard Purdie (cherry picked from commit bd0530a6fdef3331a60fc669aee05b2c26aa0b14) This only changes cacert.pem. Signed-off-by: Paul Barker --- .../{python3-certifi_2026.4.22.bb => python3-certifi_2026.5.20.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/python/python3-certifi_2026.4.22.bb b/meta/recipes-devtools/python/python3-certifi_2026.5.20.bb similarity index 87% rename from meta/recipes-devtools/python/python3-certifi_2026.4.22.bb rename to meta/recipes-devtools/python/python3-certifi_2026.5.20.bb index 03cd00d78f4b..6794924b1a7f 100644 --- a/meta/recipes-devtools/python/python3-certifi_2026.4.22.bb +++ b/meta/recipes-devtools/python/python3-certifi_2026.5.20.bb @@ -7,7 +7,7 @@ HOMEPAGE = "http://certifi.io/" LICENSE = "ISC" LIC_FILES_CHKSUM = "file://LICENSE;md5=11618cb6a975948679286b1211bd573c" -SRC_URI[sha256sum] = "8d455352a37b71bf76a79caa83a3d6c25afee4a385d632127b6afb3963f1c580" +SRC_URI[sha256sum] = "69dea482ab64caa7b9f6aba1c6bf48bb6a5448d1c0f1b17ab42ad8c763a5344d" CVE_PRODUCT = "certifi:certifi" From patchwork Fri Oct 23 10:50:18 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Paul Barker X-Patchwork-Id: 101815 Received: from fout-a3-smtp.messagingengine.com (fout-a3-smtp.messagingengine.com [103.168.172.146]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.4441.1792752619034958762 for ; Fri, 23 Oct 2026 03:50:19 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@pbarker.dev header.s=fm1 header.b=ByfsNV9w; dkim=pass header.i=@messagingengine.com header.s=fm2 header.b=FBFY8pUh; spf=pass (domain: pbarker.dev, ip: 103.168.172.146, mailfrom: paul@pbarker.dev) Received: from phl-compute-02.internal (phl-compute-02.internal [10.202.2.42]) by mailfout.phl.internal (Postfix) with ESMTP id 621DAEC0067 for ; Fri, 23 Oct 2026 06:50:18 -0400 (EDT) Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-02.internal (MEProxy); Fri, 23 Oct 2026 06:50:18 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pbarker.dev; h= cc:content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1792752618; x=1792839018; bh=pC3KnKjd/ztaVAXYFUYmA6DsSLKV2AzumR8oUDsLY0c=; b= ByfsNV9wWg8YIqX6VuCDPAXHMTP+QaIWr57sFHXCDWDXzC/xMjVgXzuZF9x//s2j a7kLdAaDuFOcymJDgNGmN+Pa7BIhilWDDIZKZjlfEc2cvGGqtYUqDPMOrVItGbDv oyjyET4wewsUZq+JxiK+RBnpNgg+4HeJ6GN+5uw6JECpy2SkPQSoSy7hiLACaMB4 PgpjWQj8BV3yB6XeXlzEAKFV80pqWVoJ5VJVAb74RMM9kzWaZNzC9+PUFoiK1rvo 4B29Hg3zTTfaHpXGMufhsrr6wJLoq3BY3tH3CwuoSTUKvtQ116vC5NP0jKlB8nSM R/YPr2iBw2euBO1jWtAwLQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; t=1792752618; x=1792839018; bh=p C3KnKjd/ztaVAXYFUYmA6DsSLKV2AzumR8oUDsLY0c=; b=FBFY8pUhla2rYAuh3 0B0WRdaSMp2+UoSQxU354nxYc//zKnfjBSTJKMT3EuftWksNP9pAfHv7S2RLhMYL m2gR+7wvly2tguBg0sZrtzO+0Bfg/CCCEI8rz3nv40IbszLAG+CvTfDCUktjROyP aFiVdXvpgu/HeWsEGwJULmbnuYmymHJtGcgcFIuVtLNW0eULVOzwTSHIeHHz9XFz 8ECEUf2oufE+7BS5/YuKXmz5oITpwx2Ga/JwUXrCFKYgyhFhL5ZI/ZDToYc7B/5d 56TpmaODaZ2tOqsGZMvB+eW5zyfNP26F/Vd8i6bnq1B4bPsNn1zxnuA5sQZD6V/r F9Adg== X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=sign d=pbarker.dev a=rsa-sha256; DKIM2-Signature: i=1; m=1; t=1792752618; d=pbarker.dev; mf=PHBhdWxAcGJhcmtlci5kZXY+; rt=PG9wZW5lbWJlZGRlZC1jb3JlQGxpc3RzLm9wZW5lbWJlZGRlZC5vcmc+; s=fm1:rsa-sha256:K9xYaDXZ7fCvwLfERxFonmm31tEgoahyPyjhLJwxuNZFLqE rzlDgtcWuYDrJGAIYVLimAcCKrqJ8G/Hdc/3e4pVR4+NkODLIgPhb2GqfZqQzE4y +pmGqKD4sPikMXF0nc3/eRM6JAcCkRZ+iFanJfMMPUTF05sQEmkR9fX3F8fIH9vL 8jtQ+4RNDVE0MHoL0WlXtDLH2Mqe1ktJbxtuSzZUM1Eao4Aqszb5efL/nIVRGFiE UFSpTfEJPsyZpBQfeAfdzxB3E7sf0ZtXNsbEjc3PuIOKabTbvqGpvEeLLEXpirQa ciiA2YYMei+gTuymB3u23u3IMaYuPwxoVwIgUqQ==; X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=mi-m=1; hc=11; hn=content-transfer-encoding,content-type,date,feedback-id,from, in-reply-to,message-id,mime-version,references,subject,to; Message-Instance: m=1; h=sha256:AiDHmS3KKf5tqXPM0Xx5wgCckMNttgBDOgKCnfyb3Cg=:LskUwH54M5HQpr0Tx5WasGoYAzjjYc/PlAhEvBIgJ54=; X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: dmFkZTER2m1YIMQ8eg4MnNIsZi4FBhMIWqS+ZbVhuw44e/27Tf4AY+BIRzUquKEjhnhqTt 0g6mNqv1U4MXkuCVTEXHNpw7k6cApW8LB3Imp3g3tgBd1M7lN1nyNBlZ6ljZ7+w7s0kABJ OV8tzTnnhZsHV87VOCEnnZFbKd0n7dJt7inA1oB89LeOnbhKaS7Zl7E4arQgdppveXVqY+ /ejNy2IbeLlV0yWnZ/3utWpncsMkMtxPfg/jUWMsYZjsi+TmiqBcjObVWshyFBAv3oJQ9F JgGzmA7v5p9VzUuc3bYY1CVs5RvcX5e8N3Cet7kuxRSynSJadNIj13L+qM6pWAHS3btCmP bz4w38Ne6lfsA58qnAh0csJ9ODNUsBMUxQo0DumBlADWAcNext1nrgp7lOdOpdNnp4jvB9 MLU+ZIQ4s1viMlz/gEqFvKtLi6UW+GQjXmBz+hkLNA1m8a8e5Fkxxo1fJC4DjeIU9e6ePl Qx8WSakwQZMwvakqbuYqR9/RbKCdKEDnYpGMCIn9SThKYpDbGNYgWFij86hY4bCHqC7IJr cFrdGh3JB13F+32tAJT55KLoBzcYPZI0i4Lwqh8VJ+9kJgjfpurQd2gFiXilOMZ5pspYGS Zwd7hS0iu5VkL2XkO5CQbp19lanmAXP3dIyNKn2OSHdGOqy4Wk2RgOqPpTIw X-ME-Proxy: Feedback-ID: i51494658:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Fri, 23 Oct 2026 06:50:18 -0400 (EDT) From: Paul Barker Date: Fri, 23 Oct 2026 11:50:18 +0100 Subject: [PATCH scarthgap 17/19] python3-certifi: upgrade 2026.5.20 -> 2026.6.17 MIME-Version: 1.0 Message-Id: <20261023-certs-scarthgap-v1-17-0ba436174193@pbarker.dev> References: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> In-Reply-To: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> To: openembedded-core@lists.openembedded.org X-Mailer: b4 0.16.0 X-Developer-Signature: v=1; a=openssh-sha256; t=1792752609; l=1673; i=paul@pbarker.dev; s=id_piv_33200296; h=from:subject:message-id; bh=9zIUhsiJao0nezmTeTA4Q+Ys8vQ+fk54Q8a6uEK8DzI=; b=U1NIU0lHAAAAAQAAAGgAAAATZWNkc2Etc2hhMi1uaXN0cDI1NgAAAAhuaXN0cDI1NgAAAEEEQ dOfZ4fCf9WdA7cHWnYqW4P6zifYTwJ18a3l28hvdGt3M0CTKu/FWpwoh+x5E487TvYA9iW0goTM GGtdemFzVgAAAAZwYXRhdHQAAAAAAAAABnNoYTUxMgAAAGQAAAATZWNkc2Etc2hhMi1uaXN0cDI 1NgAAAEkAAAAhAMN9ysFBjiI8NMNcdXdMz93VEfjgoZWbs0iNDiwD3IS4AAAAIBAD/M/E8gx84p hhq6X9TjJ2IGqHuanIOPA17ePllLh5 X-Developer-Key: i=paul@pbarker.dev; a=openssh; fpr=SHA256:IlqExt9TPtGqXrqYg/YPMlsWlOGC6AVubz/PwuYw6KY List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Fri, 23 Oct 2026 10:50:22 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248534 From: Tim Orling d46de62 Bump actions/checkout from 6.0.2 to 6.0.3 (#417) 6c183ec fix: update Requests docs link to canonical URL (#415) 36e3568 Bump dessant/lock-threads from 6.0.0 to 6.0.2 For full comparison of changes, see [2]. [2] https://github.com/certifi/python-certifi/compare/2026.05.20...2026.06.17 Signed-off-by: Tim Orling Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie (cherry picked from commit d3eb9f2ae9e887dcb70cf3bb6e284c0f861546c0) This only changes GitHub Actions workflows, README.rst and cacert.pem. Signed-off-by: Paul Barker --- .../{python3-certifi_2026.5.20.bb => python3-certifi_2026.6.17.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/python/python3-certifi_2026.5.20.bb b/meta/recipes-devtools/python/python3-certifi_2026.6.17.bb similarity index 87% rename from meta/recipes-devtools/python/python3-certifi_2026.5.20.bb rename to meta/recipes-devtools/python/python3-certifi_2026.6.17.bb index 6794924b1a7f..8fc48ae75916 100644 --- a/meta/recipes-devtools/python/python3-certifi_2026.5.20.bb +++ b/meta/recipes-devtools/python/python3-certifi_2026.6.17.bb @@ -7,7 +7,7 @@ HOMEPAGE = "http://certifi.io/" LICENSE = "ISC" LIC_FILES_CHKSUM = "file://LICENSE;md5=11618cb6a975948679286b1211bd573c" -SRC_URI[sha256sum] = "69dea482ab64caa7b9f6aba1c6bf48bb6a5448d1c0f1b17ab42ad8c763a5344d" +SRC_URI[sha256sum] = "024c88eeec92ca068db80f02b8b07c9cef7b9fe261d1d535abfd5abd6f6af432" CVE_PRODUCT = "certifi:certifi" From patchwork Fri Oct 23 10:50:19 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Paul Barker X-Patchwork-Id: 101816 Received: from fhigh-a3-smtp.messagingengine.com (fhigh-a3-smtp.messagingengine.com [103.168.172.154]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.4442.1792752619544732381 for ; Fri, 23 Oct 2026 03:50:19 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@pbarker.dev header.s=fm1 header.b=L3yTe70M; dkim=pass header.i=@messagingengine.com header.s=fm2 header.b=tEp18E8K; spf=pass (domain: pbarker.dev, ip: 103.168.172.154, mailfrom: paul@pbarker.dev) Received: from phl-compute-01.internal (phl-compute-01.internal [10.202.2.41]) by mailfhigh.phl.internal (Postfix) with ESMTP id DEC711400163 for ; Fri, 23 Oct 2026 06:50:18 -0400 (EDT) Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-01.internal (MEProxy); Fri, 23 Oct 2026 06:50:18 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pbarker.dev; h= cc:content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1792752618; x=1792839018; bh=Cz4rS9Ar5W32dv85ULms15GZr1DEMAX7yGzwKiSWBOo=; b= L3yTe70MyVaxMSWt8Tn5rLYTZUUl2EBd2wbantnxjvRAWK2JOsAuxiwABoFCAMgI hyHd2+y7pcX64KWAQJ36ezMIBsiqAajTydkLwN9hA8OEsJO2/jZoLGIaCMXnotum 58xn+X8hU71RLFtlxQn31j2MMYZMd4z9gLs3UeKdfL/fsVbreGToHTSA+o8hXKUK vmUNpqs90DP3QqTJO7nVwKQrBSuo6Wh5+7m3vHcUa8sZdN9pI2ZzWrGlpN7BJMOz 8nbPraZPKr+Bs6R6k93iDfgJXgh1c7aBf2/GYy3HUBRNGitp0gVkGyQ8jIol1+wA 5GAjSU+nWj1IPjmNr4TyZQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; t=1792752618; x=1792839018; bh=C z4rS9Ar5W32dv85ULms15GZr1DEMAX7yGzwKiSWBOo=; b=tEp18E8KPhrv/oryc ulvg8fnG9Lp7PwH62ptAf3oggq67ILQwNrrZ7GQBhL++YT2DFK8d5pEBwJn/frI5 2Vr2zZnKUq3EcS29Xs7re+xne+9Bav79DkBsHtIGVtKP5NPuMSOTih0CjurpaefQ oPwkAF+4eqGBCyOIu/4uaTbHUs1sY8GZN/Sjt7pm8D9HpvuhAPwvQdp/+ucidZ5Q 3Iq3EnwnkkHbifV4wrbb5CKov5aljfuIanaKPABsucF87yXHy2Z+mE2QqMeIHRvo IKXI2qfrdkYfF5oxD9JC2tbHzknUAcj39y60gscTbj7SCpYqcwOxRG5l1eog/vmH HoQ0A== X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=sign d=pbarker.dev a=rsa-sha256; DKIM2-Signature: i=1; m=1; t=1792752618; d=pbarker.dev; mf=PHBhdWxAcGJhcmtlci5kZXY+; rt=PG9wZW5lbWJlZGRlZC1jb3JlQGxpc3RzLm9wZW5lbWJlZGRlZC5vcmc+; s=fm1:rsa-sha256:uH9WkhM1opn+w6DbImtViL+FwFOF2rbMTCGkncwi+5ZvJ9H UvBf5go06hcVJJGhK8aZ7K8+CdhwQewbFpxSsw7rg/NKxj3G799aglbsMo4RRo7a f+3R7Z4OMlp60ZKZyDI3aCXXLiMe4dyaXUSQQs0ZLPMeGynaqJSHXimEiZwjyCLn QMZfo526QyzVErWqBBIlvpkjtXhm2/JesqypuL83rNIwSe8X14qcyaeytivqs7en 232iEwBChlv6gJz6hiEn/+wkYjBQWiOclI+L5Q/i3Fb2zY8dCrnm6Os+tQL4PNap hBv6R/Dx/PhXcAW0VTRadwpPleTis9hOslpJf9w==; X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=mi-m=1; hc=11; hn=content-transfer-encoding,content-type,date,feedback-id,from, in-reply-to,message-id,mime-version,references,subject,to; Message-Instance: m=1; h=sha256:2itYdLfcuMFdbMNr7kwZtdldNH0ODedLlXefvul8L+s=:lDy63itENkSpkf/l5iypejMJL/9rO3OxmybLpr+WaNE=; X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: dmFkZTGyOagm9BfzPb+YtFk66N3nGLsZpb/VPM8XjyvCI6H5ALoAzhuChEVFVvDnkE/SF/ JqM9HdccU5QGXh85+PcHSXfPlinR50XvCANansdfjHdI2y4yWT98LB5sYItFtv/YCkRC+D gCz49oXUOiIA3GSaVy8hQyIFhJVj70/v42lZYRXkC6yDHyO8Mxh8BPFCEOUQWBw2ymS8E7 RnCBWgaoCjRMBc+ufLfygswQfPbZu8I30UCpB32sT/SGJkXdSH8ooLc1ooYQLEosEVguDB nl2tS57Hfyetr9KYXK2lnhEOBFdFfv/pn1dtrEglp90LQOD/J+D0fLXSLeer7z4rPcHWix L/V70TMayneM8BnVGvkCTo+fKv0HoejEfi/MU/gO+xKfmmwf+vreth0mo2sfbuXegReGKW lw0t0syQPphr7EBds4PoGpXzpONOzdxIQYBD7oE8aTbFIbNuJ2jhKO3AokNRErXUVmR44z lvOboaXiEwKYmB9Z222X8eONTDjTqfNVQ2uXWqXOdHkfmhpmCaWt4+X6CnPaNhaW/CTW3E nL6Nfof3H0sC2Cc1PZuD/Snp8MW+dZ0ItQAesM/e5z2Wf8lw6HTcEtJxfZjNZaHoV7Js6Z CxRqiOezGR1DHXMjHT+yB7kQOSmir57qSW5735YSDqizypXOwDNe/nBBdMKw X-ME-Proxy: Feedback-ID: i51494658:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Fri, 23 Oct 2026 06:50:18 -0400 (EDT) From: Paul Barker Date: Fri, 23 Oct 2026 11:50:19 +0100 Subject: [PATCH scarthgap 18/19] python3-certifi: upgrade 2026.6.17 -> 2026.7.22 MIME-Version: 1.0 Message-Id: <20261023-certs-scarthgap-v1-18-0ba436174193@pbarker.dev> References: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> In-Reply-To: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> To: openembedded-core@lists.openembedded.org X-Mailer: b4 0.16.0 X-Developer-Signature: v=1; a=openssh-sha256; t=1792752609; l=1845; i=paul@pbarker.dev; s=id_piv_33200296; h=from:subject:message-id; bh=unmtBA7DTtdAlr5Py6JtmUstJYPlgNOtgrlHyzQAoqw=; b=U1NIU0lHAAAAAQAAAGgAAAATZWNkc2Etc2hhMi1uaXN0cDI1NgAAAAhuaXN0cDI1NgAAAEEEQ dOfZ4fCf9WdA7cHWnYqW4P6zifYTwJ18a3l28hvdGt3M0CTKu/FWpwoh+x5E487TvYA9iW0goTM GGtdemFzVgAAAAZwYXRhdHQAAAAAAAAABnNoYTUxMgAAAGMAAAATZWNkc2Etc2hhMi1uaXN0cDI 1NgAAAEgAAAAgVRzdjm9JWoTPP9+29lT4cU5TFw27a9KkZkGSS8xZzKMAAAAgPhMN2XkGVMHxOa PkGiPURz1GkAdA4rSb0rQUxKgwR0I= X-Developer-Key: i=paul@pbarker.dev; a=openssh; fpr=SHA256:IlqExt9TPtGqXrqYg/YPMlsWlOGC6AVubz/PwuYw6KY List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Fri, 23 Oct 2026 10:50:22 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248535 From: Tim Orling f4bc676 2026.07.22 (#428) 4c91f9c Bump actions/setup-python from 6.3.0 to 7.0.0 (#427) 01a66c5 Bump actions/checkout from 7.0.0 to 7.0.1 (#426) eb355f4 Bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.1 (#425) 474e6fc Include tests in the source distribution (#424) a31ef39 Bump actions/setup-python from 6.2.0 to 6.3.0 (#420) 98eb2c7 Bump actions/checkout from 6.0.3 to 7.0.0 (#419) For full comparison of changes, see: https://github.com/certifi/python-certifi/compare/2026.06.17...2026.07.22 Signed-off-by: Tim Orling Signed-off-by: Richard Purdie (cherry picked from commit 7d7fa3a3c6a5e62ceade6d02d09b909b88b1c6ee) This changes GitHub Actions workflows, MANIFEST.in and cacert.pem. The manifest changes should be harmless. Signed-off-by: Paul Barker --- .../{python3-certifi_2026.6.17.bb => python3-certifi_2026.7.22.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/python/python3-certifi_2026.6.17.bb b/meta/recipes-devtools/python/python3-certifi_2026.7.22.bb similarity index 87% rename from meta/recipes-devtools/python/python3-certifi_2026.6.17.bb rename to meta/recipes-devtools/python/python3-certifi_2026.7.22.bb index 8fc48ae75916..539d8e9003b2 100644 --- a/meta/recipes-devtools/python/python3-certifi_2026.6.17.bb +++ b/meta/recipes-devtools/python/python3-certifi_2026.7.22.bb @@ -7,7 +7,7 @@ HOMEPAGE = "http://certifi.io/" LICENSE = "ISC" LIC_FILES_CHKSUM = "file://LICENSE;md5=11618cb6a975948679286b1211bd573c" -SRC_URI[sha256sum] = "024c88eeec92ca068db80f02b8b07c9cef7b9fe261d1d535abfd5abd6f6af432" +SRC_URI[sha256sum] = "741e2c3b351ddf169a738da9f2c048608ff7f2c5cc02f1ebc6b118bb090d5d55" CVE_PRODUCT = "certifi:certifi" From patchwork Fri Oct 23 10:50:20 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Paul Barker X-Patchwork-Id: 101808 Received: from fout-a3-smtp.messagingengine.com (fout-a3-smtp.messagingengine.com [103.168.172.146]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.4482.1792752620045528996 for ; Fri, 23 Oct 2026 03:50:20 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@pbarker.dev header.s=fm1 header.b=psNP8O2N; dkim=pass header.i=@messagingengine.com header.s=fm2 header.b=kBdlZN9P; spf=pass (domain: pbarker.dev, ip: 103.168.172.146, mailfrom: paul@pbarker.dev) Received: from phl-compute-07.internal (phl-compute-07.internal [10.202.2.47]) by mailfout.phl.internal (Postfix) with ESMTP id 677E2EC0067 for ; Fri, 23 Oct 2026 06:50:19 -0400 (EDT) Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-07.internal (MEProxy); Fri, 23 Oct 2026 06:50:19 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pbarker.dev; h= cc:content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1792752619; x=1792839019; bh=EDSra1Z+xKWdzvIwuYnlJ6alfRMxUUVlxFSeZ1pKbmI=; b= psNP8O2NFiuvNmMc8WWvWBNF1luErhpXty1LFriE0/HFIEaBE6pRol/wdnpuzzIF uZ0OR3/+HgOQ1fv9HSvbEae0buOxvpfaSmAJ3tNJYzNiYdkx33cH3N8CSQhpQk6M 8zR3Z2Uzov0qcU2UcC9GWu18e8Rk4e/SjiQ9sUk0MCBEAuuoKXw2sq1t+VLB4wP1 eXomvRvLApGKIKnKM8g0biZBpQ0If7dBk2yKMljm4eQzPoOYHQWouitEn7ZijFyK f1BRCcfSrA/04x2FyGp8Oo+vRxkoF0Ad87D4UcJGS4ugKF8KONXnULLn4/xv8ua6 2ql0bE2nij9F0R1SS6w4lw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; t=1792752619; x=1792839019; bh=E DSra1Z+xKWdzvIwuYnlJ6alfRMxUUVlxFSeZ1pKbmI=; b=kBdlZN9PcKZBitpQv jU6eV4CNz75MlepdcrW4mlUsPNERYGAgLbmv34XYU7pOf6VHVSEaQjh+QXjonLzm PVbCRDr2TD0DtLFRLWtRoKN2p42YrbWhmIeC8aqAbvrRmxxyaM5TSf8/OmnC7wZI bVmMm7z/saBdzh1Pbr2+lzT4qjTIzxZSRcADmducWAv5/31HbY5a+Ix+LmJinNQI txiY6vPafYKZT7CgLqCtyE8SJc4iY+Zw5bY/sDMVfefLrhymswgDZeyLtEHy0IXE XhIDG5TJtkqBDWFGJpJM3cxABJbVQz1jEhd4O2G/1/QGFptYM0l2qGYTeIyUu2gk osWiA== X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=sign d=pbarker.dev a=rsa-sha256; DKIM2-Signature: i=1; m=1; t=1792752619; d=pbarker.dev; mf=PHBhdWxAcGJhcmtlci5kZXY+; rt=PG9wZW5lbWJlZGRlZC1jb3JlQGxpc3RzLm9wZW5lbWJlZGRlZC5vcmc+; s=fm1:rsa-sha256:aRLCPtqF3RAXby3rrDouibn0YvTboUrrf0YRmLtjWvfQyzV xXIWWK9M2sEPR+iGZ96zG1bVuQFd4fokrssIovBdCb8IHTQlSoKLQ89sxwAusQRw 4GueoyEF8bDy41DWP2DwRBR/yuOms+obJ+xAk7XxugSV55We2EkXaTbGA1xJWzTR SvdIffYAjgHwy7r28vxN/xpFu3k7OTLlVaKkGFgi1Y5HDpkWtqRpMPNmBrF7Ox2p dmuHxQNC2dsA803Fn3WV7jIAt8OdA2ZwoR0UX0WH5vi0hI51po5pteMBPfPTnp4S JgsD59dtw+hm1zaRljbA1tCNffnK6hggH8n+7Qw==; X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-07; repo=github.com/dkim2wg/interop; date=2026-10-18; sw=lmtpprox; action=mi-m=1; hc=11; hn=content-transfer-encoding,content-type,date,feedback-id,from, in-reply-to,message-id,mime-version,references,subject,to; Message-Instance: m=1; h=sha256:ixbUGJCOOW9lGJjGWczhD7zJCQO871eWOTNHqkDixEk=:YmwkaQAx66vjsqKZuk7IJeZfLqKDjoNKRMMGP0AnVB4=; X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: dmFkZTEBELf2CrgbDyOApEgf5rLEo4MhQnIS2lhf36n50viSXIdo92ws2ODPOgHjVFBhP8 rgpLUvCHjW5yIB2bzCGQah/YuatmWBu3TQxqfM+7+zH9ivS0cJQMzksPVZAnEH5RV3Zv9d vOHLa+UQwchSiYYjcVl5sRJCRE6z5x4G4o/K/TL9DIdY4GTtqJoglfj1UJOAeyNBsj3b1W OU713m6DIQDJQ0Mcf0F0zN5bG1Sn7ACha84gflNR5GK+A1tPXYhqQRJ7SX21v3l4/LUQqq IQ7MsQWTwV+M+iOAkyHlVwfnLj6SW/LsYZrKIs1PDWey/VAfG4dElam8+NOJ7qaH3uNDM9 7oEZyZ8Dmbb/Fv5cODcdnTD46F/fqsVQDgdtL1UASGSXvL5isrAdpNBIF1QkkKIgyaJf8w qOWU4xGpL0GZZYOckEBllMIdhuaFVEVS7M66kIkYTc23ROyIC5zmSpxgkAAg5UnopcEli6 mLX+5tiIHJfJK8n7x9kt0TPrC/mOvF7+uwkXw03N8c5VfnLjoXFOxbJFdEHbiBnKJb1VUD b0dpsuZvFxZS2kdQ3uor8Ppld/dbYSS0LAOHNPowVwSRTc620O0KxLv0eOiXV6SDudgsmB AW5ebSY7y7V8SaO4wdI+802iDq1Lqwm1NTj/eaKH5LJhvO65Ek77gXSvjNlQ X-ME-Proxy: Feedback-ID: i51494658:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Fri, 23 Oct 2026 06:50:18 -0400 (EDT) From: Paul Barker Date: Fri, 23 Oct 2026 11:50:20 +0100 Subject: [PATCH scarthgap 19/19] python3-certifi: upgrade 2026.7.22 -> 2026.10.19 MIME-Version: 1.0 Message-Id: <20261023-certs-scarthgap-v1-19-0ba436174193@pbarker.dev> References: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> In-Reply-To: <20261023-certs-scarthgap-v1-0-0ba436174193@pbarker.dev> To: openembedded-core@lists.openembedded.org X-Mailer: b4 0.16.0 X-Developer-Signature: v=1; a=openssh-sha256; t=1792752609; l=1367; i=paul@pbarker.dev; s=id_piv_33200296; h=from:subject:message-id; bh=gtBBZ2AEKR8p0UH8sSKmOF7bPvhdA19YjAevrvkPO5s=; b=U1NIU0lHAAAAAQAAAGgAAAATZWNkc2Etc2hhMi1uaXN0cDI1NgAAAAhuaXN0cDI1NgAAAEEEQ dOfZ4fCf9WdA7cHWnYqW4P6zifYTwJ18a3l28hvdGt3M0CTKu/FWpwoh+x5E487TvYA9iW0goTM GGtdemFzVgAAAAZwYXRhdHQAAAAAAAAABnNoYTUxMgAAAGMAAAATZWNkc2Etc2hhMi1uaXN0cDI 1NgAAAEgAAAAgUAFBuLWM6ZtnwnkqOpoPOad5kjec2ZAYnJG4ktL4jtIAAAAgQiVoihPgQaR7Sc aKUKXm9qs71D81TScLrA5zcyJ61Sw= X-Developer-Key: i=paul@pbarker.dev; a=openssh; fpr=SHA256:IlqExt9TPtGqXrqYg/YPMlsWlOGC6AVubz/PwuYw6KY List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Fri, 23 Oct 2026 10:50:21 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248536 From: Ross Burton This release has just one change: it removes the compromised eMudhra intermediate certificates[1]. [1] https://emudhra.we-have-a-problem.com Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 99c96202a2c9aea84f5ceb267a8c63c0cff58b1e) Signed-off-by: Paul Barker --- .../{python3-certifi_2026.7.22.bb => python3-certifi_2026.10.19.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/python/python3-certifi_2026.7.22.bb b/meta/recipes-devtools/python/python3-certifi_2026.10.19.bb similarity index 87% rename from meta/recipes-devtools/python/python3-certifi_2026.7.22.bb rename to meta/recipes-devtools/python/python3-certifi_2026.10.19.bb index 539d8e9003b2..749894f56ac9 100644 --- a/meta/recipes-devtools/python/python3-certifi_2026.7.22.bb +++ b/meta/recipes-devtools/python/python3-certifi_2026.10.19.bb @@ -7,7 +7,7 @@ HOMEPAGE = "http://certifi.io/" LICENSE = "ISC" LIC_FILES_CHKSUM = "file://LICENSE;md5=11618cb6a975948679286b1211bd573c" -SRC_URI[sha256sum] = "741e2c3b351ddf169a738da9f2c048608ff7f2c5cc02f1ebc6b118bb090d5d55" +SRC_URI[sha256sum] = "035c1e85572b141bf1c3a3eff0e33a8eb74917522f2559075ff8d2fea780a1ae" CVE_PRODUCT = "certifi:certifi"