From a90a910a76c7eabbf3dabdb82bd18c6d5d24602c Mon Sep 17 00:00:00 2001 From: Raymond Weitekamp Date: Wed, 21 Oct 2026 18:12:39 -0400 Subject: [PATCH] fix(deps): bump shipped certifi, fast-uri and rustls for 2026-10-21 advisories - harnesses/agents-sdk/requirements-build.txt: certifi 2026.7.22 -> 2026.10.18 (frozen prose-agents-sdk CA bundle; removes all emSign roots, GHSA-6q48-6c7w-9gw2). 2026.10.19 is inside the 72h cooldown. - cli/bun/bun.lock: fast-uri 3.1.6 -> 3.1.8 (via ajv; GHSA-58mr-gqgx-xq4g, GHSA-hrr3-gc8f-f4qj, GHSA-qw65-cvwx-89v3). - cli/rust/Cargo.lock: rustls 0.23.45 -> 0.23.46 (RUSTSEC-2026-0346..0349). rustls-webpki 0.103.16 / webpki-roots 1.0.10 and cryptography >=49 are deferred (cooldown; darwin-x64 wheel loss). Co-Authored-By: Claude Opus 5.5 --- cli/bun/bun.lock | 2 +- cli/rust/Cargo.lock | 4 ++-- harnesses/agents-sdk/requirements-build.txt | 6 +++--- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/cli/bun/bun.lock b/cli/bun/bun.lock index dc71f073..da40b42e 100644 --- a/cli/bun/bun.lock +++ b/cli/bun/bun.lock @@ -28,7 +28,7 @@ "fast-deep-equal": ["fast-deep-equal@3.1.3", "", {}, "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q=="], - "fast-uri": ["fast-uri@3.1.6", "", {}, "sha512-7Ical1vFEMr0onbVzEDIreM22I4khW+fzyQPwvAFWBp1iwdshSZRsL4jjRvPG9JP1uiqMHRto+YU6R2/CzDz5Q=="], + "fast-uri": ["fast-uri@3.1.8", "", {}, "sha512-GZMtZUTNRpOVIECoXwLNZS5xUGE+mVNbTB8h/7Rwh2TFWcBQiPzTgyZi05BF9UMZKkLJv8XBRJTlU7zg8+ZfMg=="], "json-schema-traverse": ["json-schema-traverse@1.0.0", "", {}, "sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug=="], diff --git a/cli/rust/Cargo.lock b/cli/rust/Cargo.lock index 1ee205ff..228309ed 100644 --- a/cli/rust/Cargo.lock +++ b/cli/rust/Cargo.lock @@ -531,9 +531,9 @@ dependencies = [ [[package]] name = "rustls" -version = "0.23.45" +version = "0.23.46" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "0d41d731c7d2f962d1ccc364cec258de3c0e93b38c2fb3ba97ac74513048d634" +checksum = "48e13bd8c0e9365c43cfa5c9e8f9ad49d3c8444926c9aac819e0e4dc503c8fdf" dependencies = [ "log", "once_cell", diff --git a/harnesses/agents-sdk/requirements-build.txt b/harnesses/agents-sdk/requirements-build.txt index 955c8187..76441152 100644 --- a/harnesses/agents-sdk/requirements-build.txt +++ b/harnesses/agents-sdk/requirements-build.txt @@ -19,9 +19,9 @@ anyio==4.15.1 \ attrs==26.1.0 \ --hash=sha256:c647aa4a12dfbad9333ca4e71fe62ddc36f4e63b2d260a37a8b83d2f043ac309 -# certifi-2026.7.22-py3-none-any.whl -certifi==2026.7.22 \ - --hash=sha256:62f22742b58a1a33014a2b6b706588a8d7e2a88ae7bd1a6ebe8c992928483775 +# certifi-2026.10.18-py3-none-any.whl +certifi==2026.10.18 \ + --hash=sha256:73191c47aaa79da394e8fee2dbc2ec827432cab56311122c9e47abf79e390f62 # cffi-2.1.1-cp310-cp310-macosx_10_15_x86_64.whl # cffi-2.1.1-cp310-cp310-macosx_11_0_arm64.whl