Remove compromised emSign trust from development and pip tooling

Require certifi 2026.10.19 for development dependencies and bootstrap pip 26.2.2 from its hash-verified official wheel in CI and Docker.

Co-authored-by: Codex <codex@openai.com>
This commit is contained in:
Kirill Markin 2026-10-23 08:44:08 +02:00
parent 9a397eb6ee
commit 8054794c76
No known key found for this signature in database
GPG key ID: 03AB9530E15B9C1C
5 changed files with 11 additions and 17 deletions

View file

@ -41,6 +41,7 @@ dev = [
"isort",
"build",
"twine",
"certifi>=2026.10.19",
"pylint",
]