From dc3e6b12b588903e0cedfdc8ea9a058021363906 Mon Sep 17 00:00:00 2001
From: Michal Fiedorowicz <mfiedorowicz@netboxlabs.com>
Date: Wed, 21 Oct 2026 18:16:46 +0200
Subject: [PATCH] fix(deps): require certifi 2026.10.19 or later

The SDK verifies gRPC and HTTPS peers against the certifi bundle.
certifi 2026.10.19 follows Mozilla in dropping the emSign ECC Root CA - G3,
the root behind the compromised eMudhra intermediate CAs, so older bundles
must not be resolvable.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
---
 pyproject.toml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pyproject.toml b/pyproject.toml
index 0be928c..62a4350 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -24,7 +24,7 @@ classifiers = [  # Optional
 ]
 
 dependencies = [
-    "certifi>=2024.7.4",
+    "certifi>=2026.10.19",
     "grpcio>=1.68.1",
     "grpcio-status>=1.68.1",
     "requests>=2.33.0",