davsclaus opened a new pull request, #29770: URL: https://github.com/apache/camel/pull/29770
Bumps `certifi` from 2026.10.19 to 2026.10.23 in `.github/actions/check-container-upgrade/requirements.txt`, the helper of the container-upgrade check workflow. Camel itself does not use it. Dependabot alert #226 (GHSA-6q48-6c7w-9gw2, certifi bundles root CAs with compromised intermediate keys) is open for this file, although 2026.10.19 (from #28235) is already past the fixed version 2026.10.18. Moving to the latest release makes Dependabot scan the manifest again, which should close the alert. The two hashes are the sdist and the wheel published on PyPI for 2026.10.23; `pip download --require-hashes` accepts them. _Claude Code on behalf of davsclaus_ 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_016Y4dDiMc7mxmdVoQiGSMh8 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
