From 787c5addef9bc1e8adb2d276887e75d83b62b210 Mon Sep 17 00:00:00 2001
From: Noah Ingwers <98993329+noah-ing@users.noreply.github.com>
Date: Wed, 21 Oct 2026 17:26:58 -0500
Subject: [PATCH] fix(deps): update eMudhra-affected certificate bundles

Signed-off-by: Noah Ingwers <98993329+noah-ing@users.noreply.github.com>
---
 demos/requirements/ci.txt                            |  6 +++---
 .../released_ucp/README.md                           |  2 +-
 .../released_ucp/uv-bootstrap.txt                    | 12 ++++++------
 .../released_ucp/uv.lock                             |  8 ++++----
 .../requirements-presenter.txt                       |  6 +++---
 examples/requirements/smoke-harness.txt              |  6 +++---
 integrations/sentinel/requirements.lock.txt          |  6 +++---
 requirements/provenance.txt                          |  6 +++---
 requirements/release.txt                             |  6 +++---
 requirements/sdk-google-adk.txt                      |  6 +++---
 requirements/sdk-langchain.txt                       |  6 +++---
 requirements/sdk-openai-agents.txt                   |  6 +++---
 requirements/sentinel-fixed.txt                      |  6 +++---
 13 files changed, 41 insertions(+), 41 deletions(-)

diff --git a/demos/requirements/ci.txt b/demos/requirements/ci.txt
index 9e9e80ab..6e76c44b 100644
--- a/demos/requirements/ci.txt
+++ b/demos/requirements/ci.txt
@@ -126,9 +126,9 @@ cedarpy==4.12.1 \
     --hash=sha256:e8ed70991b958f344017663f753f044070cd0e61dfd4ffe408ba05d48c48dea4 \
     --hash=sha256:f164ca11999e1d3a1641548d17755c3c45a5385b2590a642ef3122a1196947ca
     # via cmcp-runtime
-certifi==2026.7.22 \
-    --hash=sha256:62f22742b58a1a33014a2b6b706588a8d7e2a88ae7bd1a6ebe8c992928483775 \
-    --hash=sha256:741e2c3b351ddf169a738da9f2c048608ff7f2c5cc02f1ebc6b118bb090d5d55
+certifi==2026.10.19 \
+    --hash=sha256:035c1e85572b141bf1c3a3eff0e33a8eb74917522f2559075ff8d2fea780a1ae \
+    --hash=sha256:42d35340cc5b9ba78e818ddbff0c5b1c2b779de448a340fd1b989f5fa8670e1b
     # via
     #   httpcore
     #   httpx
diff --git a/examples/agentic-commerce-accountability/released_ucp/README.md b/examples/agentic-commerce-accountability/released_ucp/README.md
index 72b62db6..6e83f47c 100644
--- a/examples/agentic-commerce-accountability/released_ucp/README.md
+++ b/examples/agentic-commerce-accountability/released_ucp/README.md
@@ -37,7 +37,7 @@ mypy, Bandit, and the final line `OFFLINE_SMOKE_PASSED`. A failing stage stops t
 smoke. CI runs this same script as non-root UID/GID `10001:10001`, without network
 access, writable image layers, Linux capabilities, secrets, or publishing steps.
 
-For host development with Python 3.12 and uv 0.12.5:
+For host development with Python 3.12 and uv 0.13.4:
 
 ```sh
 uv sync --frozen
diff --git a/examples/agentic-commerce-accountability/released_ucp/uv-bootstrap.txt b/examples/agentic-commerce-accountability/released_ucp/uv-bootstrap.txt
index 91255f0f..b42f57c5 100644
--- a/examples/agentic-commerce-accountability/released_ucp/uv-bootstrap.txt
+++ b/examples/agentic-commerce-accountability/released_ucp/uv-bootstrap.txt
@@ -1,6 +1,6 @@
-# Official PyPI uv 0.12.5 wheels for Linux amd64 and arm64 only.
-# https://pypi.org/pypi/uv/0.12.5/json
-uv==0.12.5 \
-    --hash=sha256:2d65b7b3bc3fd28678f62aa7fb5d90f106ad9782c1354af60b6cecdf9ea9ecd9 \
-    --hash=sha256:3e195ccf1ed60c8bb24a6447ce306441a4181d54b602407e09bc56e963911c15 \
-    --hash=sha256:58abfb0f658b39a834307a11223bc170294ea214263b4c99ecc7663720d43544
+# Official PyPI uv 0.13.4 wheels for Linux amd64 and arm64 only.
+# https://pypi.org/pypi/uv/0.13.4/json
+uv==0.13.4 \
+    --hash=sha256:05e4332791b4d55b6dde8695b7fa6079b26991519f44760887c5dfbd5ca4fe53 \
+    --hash=sha256:7b3cdf868e5415631fe797b648c0d6945d38d388f23367bdd0b6332e80a1fcb0 \
+    --hash=sha256:e90ab42825587821096cb0d071e387468da38cfa22818c91f9c0b3c0453048e8
diff --git a/examples/agentic-commerce-accountability/released_ucp/uv.lock b/examples/agentic-commerce-accountability/released_ucp/uv.lock
index 958c8c69..8473fc09 100644
--- a/examples/agentic-commerce-accountability/released_ucp/uv.lock
+++ b/examples/agentic-commerce-accountability/released_ucp/uv.lock
@@ -1,5 +1,5 @@
 version = 1
-revision = 3
+revision = 5
 requires-python = "==3.12.*"
 
 [[package]]
@@ -138,11 +138,11 @@ filecache = [
 
 [[package]]
 name = "certifi"
-version = "2026.7.22"
+version = "2026.10.19"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/a3/c2/24167ea9858356b47a87a50d39908bfdb72ceeefe0041586e704e5376b3a/certifi-2026.7.22.tar.gz", hash = "sha256:741e2c3b351ddf169a738da9f2c048608ff7f2c5cc02f1ebc6b118bb090d5d55", size = 138112, upload-time = "2026-07-22T03:35:12.644Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/a6/bd/1436c50cc46699de0230fbaacc1d1de7bfec413176099949e9d5112e88f2/certifi-2026.10.19.tar.gz", hash = "sha256:035c1e85572b141bf1c3a3eff0e33a8eb74917522f2559075ff8d2fea780a1ae", size = 137598, upload-time = "2026-10-20T02:24:16.604Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/0b/a7/71ac2cff56fec219ed242bb11b8efb69fcc4bec75db06fb7bfe35de520e6/certifi-2026.7.22-py3-none-any.whl", hash = "sha256:62f22742b58a1a33014a2b6b706588a8d7e2a88ae7bd1a6ebe8c992928483775", size = 136983, upload-time = "2026-07-22T03:35:11.276Z" },
+    { url = "https://files.pythonhosted.org/packages/c4/51/29046e48f693c54e5b7412216d447a1d8362c9653148d98c02cdf65fa733/certifi-2026.10.19-py3-none-any.whl", hash = "sha256:42d35340cc5b9ba78e818ddbff0c5b1c2b779de448a340fd1b989f5fa8670e1b", size = 136464, upload-time = "2026-10-20T02:24:15.072Z" },
 ]
 
 [[package]]
diff --git a/examples/industrial-embodied-ai/requirements-presenter.txt b/examples/industrial-embodied-ai/requirements-presenter.txt
index c8a592f8..a7ebd7ad 100644
--- a/examples/industrial-embodied-ai/requirements-presenter.txt
+++ b/examples/industrial-embodied-ai/requirements-presenter.txt
@@ -128,9 +128,9 @@ cedarpy==4.12.1 \
     # via
     #   -r requirements.txt
     #   cmcp-runtime
-certifi==2026.7.22 \
-    --hash=sha256:62f22742b58a1a33014a2b6b706588a8d7e2a88ae7bd1a6ebe8c992928483775 \
-    --hash=sha256:741e2c3b351ddf169a738da9f2c048608ff7f2c5cc02f1ebc6b118bb090d5d55
+certifi==2026.10.19 \
+    --hash=sha256:035c1e85572b141bf1c3a3eff0e33a8eb74917522f2559075ff8d2fea780a1ae \
+    --hash=sha256:42d35340cc5b9ba78e818ddbff0c5b1c2b779de448a340fd1b989f5fa8670e1b
     # via
     #   httpcore
     #   httpx
diff --git a/examples/requirements/smoke-harness.txt b/examples/requirements/smoke-harness.txt
index f701bd84..d4635016 100644
--- a/examples/requirements/smoke-harness.txt
+++ b/examples/requirements/smoke-harness.txt
@@ -4,9 +4,9 @@ anyio==4.15.1 \
     --hash=sha256:6152fdbbf9a77fdec97731721bebf7c4c44f7c29b424b0065826173efc7ed101 \
     --hash=sha256:9f28306018cbd6d329e64a36d58256edff76dd996fe423bc957326e578b82a94
     # via httpx
-certifi==2026.7.22 \
-    --hash=sha256:62f22742b58a1a33014a2b6b706588a8d7e2a88ae7bd1a6ebe8c992928483775 \
-    --hash=sha256:741e2c3b351ddf169a738da9f2c048608ff7f2c5cc02f1ebc6b118bb090d5d55
+certifi==2026.10.19 \
+    --hash=sha256:035c1e85572b141bf1c3a3eff0e33a8eb74917522f2559075ff8d2fea780a1ae \
+    --hash=sha256:42d35340cc5b9ba78e818ddbff0c5b1c2b779de448a340fd1b989f5fa8670e1b
     # via
     #   httpcore
     #   httpx
diff --git a/integrations/sentinel/requirements.lock.txt b/integrations/sentinel/requirements.lock.txt
index 823aa49e..0a9eda16 100644
--- a/integrations/sentinel/requirements.lock.txt
+++ b/integrations/sentinel/requirements.lock.txt
@@ -15,9 +15,9 @@ anyio==4.15.1 \
     #   httpx
     #   starlette
     #   watchfiles
-certifi==2026.7.22 \
-    --hash=sha256:62f22742b58a1a33014a2b6b706588a8d7e2a88ae7bd1a6ebe8c992928483775 \
-    --hash=sha256:741e2c3b351ddf169a738da9f2c048608ff7f2c5cc02f1ebc6b118bb090d5d55
+certifi==2026.10.19 \
+    --hash=sha256:035c1e85572b141bf1c3a3eff0e33a8eb74917522f2559075ff8d2fea780a1ae \
+    --hash=sha256:42d35340cc5b9ba78e818ddbff0c5b1c2b779de448a340fd1b989f5fa8670e1b
     # via
     #   httpcore
     #   httpx
diff --git a/requirements/provenance.txt b/requirements/provenance.txt
index 763a0745..cbebd978 100644
--- a/requirements/provenance.txt
+++ b/requirements/provenance.txt
@@ -4,9 +4,9 @@ annotated-types==0.8.0 \
     --hash=sha256:13b2beaad985e05e2d6407ee4c4f35590b11f8d693a258a561055cac8f64cab7 \
     --hash=sha256:f072f4d804ea359e4eaf198b1af7a8b0943881a87f31bb764f8bf219bb9419e0
     # via pydantic
-certifi==2026.7.22 \
-    --hash=sha256:62f22742b58a1a33014a2b6b706588a8d7e2a88ae7bd1a6ebe8c992928483775 \
-    --hash=sha256:741e2c3b351ddf169a738da9f2c048608ff7f2c5cc02f1ebc6b118bb090d5d55
+certifi==2026.10.19 \
+    --hash=sha256:035c1e85572b141bf1c3a3eff0e33a8eb74917522f2559075ff8d2fea780a1ae \
+    --hash=sha256:42d35340cc5b9ba78e818ddbff0c5b1c2b779de448a340fd1b989f5fa8670e1b
     # via requests
 cffi==2.1.1 ; platform_python_implementation != 'PyPy' \
     --hash=sha256:046bfc24911b37851ee1b51aab8bffe713d89c68c6a057b09484ce9fd5f69b4e \
diff --git a/requirements/release.txt b/requirements/release.txt
index 65c4c098..7f5219f0 100644
--- a/requirements/release.txt
+++ b/requirements/release.txt
@@ -8,9 +8,9 @@ build==1.6.1 \
     --hash=sha256:51cc11666391ab6f092070437ac747002ff46f3e4113a3622177ee6b488bfc53 \
     --hash=sha256:ecd351a4be9d35a9eaaba244a7687143c9c7d4aea6ac964e7e7ddab20cbcf4e7
     # via -r requirements/release.in
-certifi==2026.7.22 \
-    --hash=sha256:62f22742b58a1a33014a2b6b706588a8d7e2a88ae7bd1a6ebe8c992928483775 \
-    --hash=sha256:741e2c3b351ddf169a738da9f2c048608ff7f2c5cc02f1ebc6b118bb090d5d55
+certifi==2026.10.19 \
+    --hash=sha256:035c1e85572b141bf1c3a3eff0e33a8eb74917522f2559075ff8d2fea780a1ae \
+    --hash=sha256:42d35340cc5b9ba78e818ddbff0c5b1c2b779de448a340fd1b989f5fa8670e1b
     # via requests
 cffi==2.1.1 ; platform_machine != 'ppc64le' and platform_machine != 's390x' and platform_python_implementation != 'PyPy' and sys_platform == 'linux' \
     --hash=sha256:046bfc24911b37851ee1b51aab8bffe713d89c68c6a057b09484ce9fd5f69b4e \
diff --git a/requirements/sdk-google-adk.txt b/requirements/sdk-google-adk.txt
index 9797da9a..d9f1e9b5 100644
--- a/requirements/sdk-google-adk.txt
+++ b/requirements/sdk-google-adk.txt
@@ -33,9 +33,9 @@ authlib==1.8.0 \
     --hash=sha256:88aebbd9af6757e14e912d5dc007ae1dc1f3e27e3b2152ce7c552ee2c3b3c121 \
     --hash=sha256:f3ecd5f1da737262fb53bf1a4d95c4ea1ad9dd509316587a255c99ab1838a4f0
     # via google-adk
-certifi==2026.7.22 \
-    --hash=sha256:62f22742b58a1a33014a2b6b706588a8d7e2a88ae7bd1a6ebe8c992928483775 \
-    --hash=sha256:741e2c3b351ddf169a738da9f2c048608ff7f2c5cc02f1ebc6b118bb090d5d55
+certifi==2026.10.19 \
+    --hash=sha256:035c1e85572b141bf1c3a3eff0e33a8eb74917522f2559075ff8d2fea780a1ae \
+    --hash=sha256:42d35340cc5b9ba78e818ddbff0c5b1c2b779de448a340fd1b989f5fa8670e1b
     # via
     #   httpcore
     #   httpx
diff --git a/requirements/sdk-langchain.txt b/requirements/sdk-langchain.txt
index 0297982b..ae0e3c88 100644
--- a/requirements/sdk-langchain.txt
+++ b/requirements/sdk-langchain.txt
@@ -11,9 +11,9 @@ anyio==4.15.1 \
     #   httpx
     #   httpx2
     #   langsmith
-certifi==2026.7.22 \
-    --hash=sha256:62f22742b58a1a33014a2b6b706588a8d7e2a88ae7bd1a6ebe8c992928483775 \
-    --hash=sha256:741e2c3b351ddf169a738da9f2c048608ff7f2c5cc02f1ebc6b118bb090d5d55
+certifi==2026.10.19 \
+    --hash=sha256:035c1e85572b141bf1c3a3eff0e33a8eb74917522f2559075ff8d2fea780a1ae \
+    --hash=sha256:42d35340cc5b9ba78e818ddbff0c5b1c2b779de448a340fd1b989f5fa8670e1b
     # via
     #   httpcore
     #   httpx
diff --git a/requirements/sdk-openai-agents.txt b/requirements/sdk-openai-agents.txt
index 57547f2e..a1c210ba 100644
--- a/requirements/sdk-openai-agents.txt
+++ b/requirements/sdk-openai-agents.txt
@@ -19,9 +19,9 @@ attrs==26.1.0 \
     # via
     #   jsonschema
     #   referencing
-certifi==2026.7.22 \
-    --hash=sha256:62f22742b58a1a33014a2b6b706588a8d7e2a88ae7bd1a6ebe8c992928483775 \
-    --hash=sha256:741e2c3b351ddf169a738da9f2c048608ff7f2c5cc02f1ebc6b118bb090d5d55
+certifi==2026.10.19 \
+    --hash=sha256:035c1e85572b141bf1c3a3eff0e33a8eb74917522f2559075ff8d2fea780a1ae \
+    --hash=sha256:42d35340cc5b9ba78e818ddbff0c5b1c2b779de448a340fd1b989f5fa8670e1b
     # via requests
 cffi==2.1.1 \
     --hash=sha256:046bfc24911b37851ee1b51aab8bffe713d89c68c6a057b09484ce9fd5f69b4e \
diff --git a/requirements/sentinel-fixed.txt b/requirements/sentinel-fixed.txt
index 77e00fa6..2c7c883e 100644
--- a/requirements/sentinel-fixed.txt
+++ b/requirements/sentinel-fixed.txt
@@ -25,9 +25,9 @@ attrs==26.1.0 \
     # via
     #   jsonschema
     #   referencing
-certifi==2026.7.22 \
-    --hash=sha256:62f22742b58a1a33014a2b6b706588a8d7e2a88ae7bd1a6ebe8c992928483775 \
-    --hash=sha256:741e2c3b351ddf169a738da9f2c048608ff7f2c5cc02f1ebc6b118bb090d5d55
+certifi==2026.10.19 \
+    --hash=sha256:035c1e85572b141bf1c3a3eff0e33a8eb74917522f2559075ff8d2fea780a1ae \
+    --hash=sha256:42d35340cc5b9ba78e818ddbff0c5b1c2b779de448a340fd1b989f5fa8670e1b
     # via
     #   httpcore
     #   httpx