Remove compromised emSign trust from development and pip tooling

Require certifi 2026.10.19 for development dependencies and bootstrap pip 26.2.2 from its hash-verified official wheel in CI and Docker.

Co-authored-by: Codex <codex@openai.com>
This commit is contained in:
Kirill Markin 2026-10-23 08:44:08 +02:00
parent 9a397eb6ee
commit 8054794c76
No known key found for this signature in database
GPG key ID: 03AB9530E15B9C1C
5 changed files with 11 additions and 17 deletions

View file

@ -22,7 +22,7 @@ jobs:
python-version: '3.14'
- name: Install dependencies
run: |
python -m pip install --upgrade pip
python -m pip install --upgrade "pip @ https://files.pythonhosted.org/packages/3f/06/3e4420302363fbb71be3c7f35ce042f54bfca330e3e66b3a2e3c4cca579f/pip-26.2.2-py3-none-any.whl#sha256=fd7f4dfa8190e014013b9f08f3e973f4e4c26ffd179a204895533a7254813a70"
pip install build
- name: Build package
run: python -m build

View file

@ -26,7 +26,7 @@ jobs:
run: sudo apt-get install -y tree
- name: Install dependencies
run: |
python -m pip install --upgrade pip
python -m pip install --upgrade "pip @ https://files.pythonhosted.org/packages/3f/06/3e4420302363fbb71be3c7f35ce042f54bfca330e3e66b3a2e3c4cca579f/pip-26.2.2-py3-none-any.whl#sha256=fd7f4dfa8190e014013b9f08f3e973f4e4c26ffd179a204895533a7254813a70"
pip install .[dev]
- name: Run pylint
run: |