mirror of
https://github.com/onyx-dot-app/onyx.git
synced 2026-10-23 03:42:59 -05:00
claude[bot]andClaude
52edd0986e
<!-- claude-slack-attribution -->
_Requested by **Nikolas Garza** · [Slack
thread](https://onyx-company.slack.com/archives/C0C5SMAM4TT/p1792538621965719?thread_ts=1792538621.965719&cid=C0C5SMAM4TT)_
## Description
Before: `initial-requirements.txt` pins `certifi==2026.6.17`, which has
Dependabot alert GHSA-6q48-6c7w-9gw2.
After: `initial-requirements.txt` pins `certifi==2026.10.19`, the fixed
version. It matches `uv.lock`.
This changes one line in the sandbox image requirements.
How: The CVE bot cannot edit this uv-pip-compile file, so #16337 missed
it. This fixes the remaining certifi pin flagged by GHSA-6q48-6c7w-9gw2.
Only the certifi line changes. Other pins stay the same.
Linear: none
## How Has This Been Tested?
Checked that certifi 2026.10.19 exists on PyPI and that `uv.lock` uses
it. The file has no hashes, and no other pin caps certifi.
## Additional Options
- [ ] [Optional] Please cherry-pick this PR to the latest release
version.
---
_Generated by [Claude
Code](https://claude.ai/code/session_01E2K27DFf4J3iAGXYpe4xtR)_
<!-- This is an auto-generated description by cubic. -->
---
## Summary by cubic
Fixes the Dependabot alert GHSA-6q48-6c7w-9gw2 by bumping `certifi` from
2026.6.17 to 2026.10.19 in the sandbox image `initial-requirements.txt`.
The new pin matches `uv.lock` and only the `certifi` line changes.
<sup>Written for commit 35108a0665.
Summary will update on new commits.</sup>
<a
href="https://cubic.dev/pr/onyx-dot-app/onyx/pull/16361?utm_source=github"
target="_blank" rel="noopener noreferrer"
data-no-image-dialog="true"><picture><source
media="(prefers-color-scheme: dark)"
srcset="https://www.cubic.dev/buttons/review-in-cubic-dark.svg"><source
media="(prefers-color-scheme: light)"
srcset="https://www.cubic.dev/buttons/review-in-cubic-light.svg"><img
alt="View guided diff"
src="https://www.cubic.dev/buttons/review-in-cubic-light.svg"></picture></a>
<a
href="https://www.cubic.dev/action/auto-fix/pr/onyx-dot-app/onyx/16361?returnTo=https%3A%2F%2Fgithub.com%2Fonyx-dot-app%2Fonyx%2Fpull%2F16361&source=description"
target="_blank" rel="noopener noreferrer"
data-no-image-dialog="true"><picture><source
media="(prefers-color-scheme: dark)"
srcset="https://www.cubic.dev/buttons/turn-on-auto-fix-dark.svg"><source
media="(prefers-color-scheme: light)"
srcset="https://www.cubic.dev/buttons/turn-on-auto-fix-light.svg"><img
alt="Turn on auto-fix"
src="https://www.cubic.dev/buttons/turn-on-auto-fix-light.svg"></picture></a>
<!-- End of auto-generated description by cubic. -->
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
<!-- coderabbit-ai-generated:v1 -->
## Summary by CodeRabbit
* **Bug Fixes**
* Updated the bundled certificate authority package to a newer version,
improving compatibility with current SSL/TLS certificates.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
Co-authored-by: Claude <noreply@anthropic.com>
