Skip to content

[eMudhra 53119][Python] Floor certifi at 2026.10.19 in the Cloud Functions example - #1601

Open
davidmreed wants to merge 1 commit into
slackapi:mainfrom
davidmreed:emudhra-53119/python
Open

davidmreed wants to merge 1 commit into
slackapi:mainfrom
davidmreed:emudhra-53119/python

Conversation

@davidmreed

@davidmreed davidmreed commented Oct 22, 2026 •

Copy link
Copy Markdown

What changes

  • examples/google_cloud_functions/requirements.txt: adds certifi>=2026.10.19.

Library dependency ranges (pyproject.toml:25) and python_requires are unchanged.

Where it ships

  • This is a user template, not part of the published package (.github/workflows/pypi-release.yml:62,86). The library itself depends only on slack_sdk>=3.38.0,<4 (pyproject.toml:25), which uses the OS trust store.
  • google-cloud-datastore (examples/google_cloud_functions/requirements.txt:3) pulls in google-auth/requests, which verify TLS with certifi.

Not covered by this PR

  • Example Dockerfile base moves are in a separate draft PR (Docker). The App Engine python38 -> python313 runtime move is in a separate draft PR (Python).
  • examples/aws_lambda/aws_lambda_config.yaml:6, lazy_aws_lambda_config.yaml:6 and aws_lambda_oauth_config.yaml:6 use python3.8 on Amazon Linux 2. Amazon Linux has no fixed package to gate on, so the CA fix depends on AWS; moving to python3.13 is an owner follow-up for EOL hygiene.
  • No lockfiles exist in this repo, so there is nothing to relock.

Verification

  • pip install --dry-run --report -r examples/google_cloud_functions/requirements.txt in python:3.13-slim: resolves certifi 2026.10.19 alongside google-cloud-datastore 2.27.0, google-auth 2.62.0, requests 2.34.2.

🤖 Generated with Claude Code
Part of the eMudhra 53119 CA-distrust remediation (CVE-2026-111943).

…tions example

google-cloud-datastore pulls in google-auth/requests, which verify TLS with
certifi. Library dependency ranges and python_requires are unchanged.

Co-Authored-By: Claude <[email protected]>
@davidmreed
davidmreed requested a review from a team as a code owner October 22, 2026 16:59

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant