Skip to content

Commit 1328f12

Browse files
seathatflowsinourveinsclaude
seathatflowsinourveins
and
claude
committed
Bump certifi to 2026.10.19 (GHSA-6q48-6c7w-9gw2)
GHSA-6q48-6c7w-9gw2 (published 2026-10-20 19:35Z): certifi >= 2019.03.09, < 2026.10.19 bundles emSign ECC Root CA - G3, whose intermediates had compromised keys. certifi 2026.10.19 drops that root and keeps the unaffected emSign roots. #1262's required osv-scanner context fails on it across every lock below. Lock delta (certifi only, following #1265's method): - certifi 2026.7.22 -> 2026.10.19 in every lock that pinned it: the adaptive-paper engine lock, the trading-2604 runtime uv.lock, the memory native-qualification uv.lock, the OpenHands worker lock and pins, the adoption SDK lock and constraints, portfolio-risk, catalyst-provenance, sim-crosscheck-hftbacktest, deepagents-omniroute, openhands-native-capabilities, mlx-smoke and the macOS e2e evidence lock. - Hashes from PyPI's JSON for 2026.10.19, each file downloaded and checked: wheel 42d35340cc5b9ba78e818ddbff0c5b1c2b779de448a340fd1b989f5fa8670e1b, sdist 035c1e85572b141bf1c3a3eff0e33a8eb74917522f2559075ff8d2fea780a1ae. No other package line changes in any lock. - adaptive-paper engine lock sha256 645544edbd13e7ff2434d5459e981ec0a2506c944e30d47844b4f3c57f602db8 -> 8e08849c3370b905b7993a75e2f356920d45cdba81d64709a71fa3ff6263cb2d. - trading-2604 runtime lock a1413f20... -> 2df71327...; the published a1413f20 becomes one more recorded migration input in install-trading-2604.sh, as #873 and #1265 did, never acceptance; accept-trading-2604.sh and adaptive-paper/scheduled_trial.sh require the new hash. Bindings refreshed: .github/osv-scanner-lockfiles.json (per-lock sha256 and the retained fixtures as excluded evidence), adaptive-paper/source-hashes.json (scheduled_trial.sh, test_scheduled_trial.py), tests/test_scheduled_trial.py, tests/test_trading_2604_migration.py, runtime-2604/README.md, the convergence records' frozen inputs re-pointed to the retained copies, catalogs/landscape/final-stack.json (sources hash of the trading-2604 lock only), and manifests/evidence.json for every changed and added file. Retained bytes: each pre-bump lock is kept byte-identical (git show da55495) under evidence/artifacts/certifi-2026.10.19-repin-20261020/ historical/ as published-<hash>-<name>, an excluded evidence fixture in the osv inventory (not an install input; the active lock is scanned), with repin.json as the record. Checks (python -B, scratch venv from .github/requirements-ci.txt with --require-hashes): - scripts/validate_convergence.py --all-recorded: 33 records, all valid; - scripts/validate.py: passed; - scripts/evidence_manifest.py --check: passed (12,342 files); - scripts/final_stack.py --check: passed; - unittest of test_trading_2604_lock, test_trading_2604_migration, test_scheduled_trial, test_osv_lockfile_coverage, test_receipt_sha256_key_custody, test_convergence_contract, test_evidence_manifest, test_research_convergence_practice and test_sota_convergence: 310 tests, OK; - git diff --check: clean. osv-scanner was not run locally (not installed); the required context runs it. No install, accept or trial script was run; no host state, broker or paper contact. LIVE remains NO-GO. Co-Authored-By: Claude Opus 5.5 <[email protected]>
1 parent da55495 commit 1328f12

40 files changed

Lines changed: 19331 additions & 103 deletions

File tree

‎.github/osv-scanner-lockfiles.json‎

Lines changed: 87 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -15,12 +15,13 @@
1515
},
1616
{
1717
"path": "examples/deepagents-omniroute/requirements.lock",
18-
"parser": "requirements.txt"
18+
"parser": "requirements.txt",
19+
"sha256": "2b71e8693ddc2ea1219aa31b179596bbcd645d1042f69dce759bddc10efef232"
1920
},
2021
{
2122
"path": "examples/openhands-native-capabilities/requirements.lock",
2223
"parser": "requirements.txt",
23-
"sha256": "40c0ebc98b0492a0c773d77e789ab4695696d77dc3697003d5a5896013ec8db4"
24+
"sha256": "e0c3539df8b0ccacff5853df46b3c8fbfff3569cb73525dfc51bee3c9a19c08e"
2425
},
2526
{
2627
"path": "examples/openhands-native-capabilities/cli-constraints.txt",
@@ -40,15 +41,18 @@
4041
},
4142
{
4243
"path": "blueprints/us-equities/sim-crosscheck-hftbacktest/requirements.lock",
43-
"parser": "requirements.txt"
44+
"parser": "requirements.txt",
45+
"sha256": "fd0eec4f5839985f46a8d1984c55792d0c89136105211b7e44005fa63301f618"
4446
},
4547
{
4648
"path": "adoption/sdk/accepted-constraints.txt",
47-
"parser": "requirements.txt"
49+
"parser": "requirements.txt",
50+
"sha256": "a6859e72b2bbe692b6a3a2c1db3a1ec813ed6cf948b3d0e61607ce71ddda7c98"
4851
},
4952
{
5053
"path": "adoption/sdk/requirements-linux-x86_64-py313.lock",
51-
"parser": "requirements.txt"
54+
"parser": "requirements.txt",
55+
"sha256": "9ee41e37f13a133edb72a4a07c8aedafd6e65270a2ad8fe6d4371305f997a396"
5256
},
5357
{
5458
"path": "blueprints/convergence-practice/application-delivery/pnpm-lock.yaml"
@@ -58,18 +62,19 @@
5862
},
5963
{
6064
"path": "blueprints/memory-stack/native-qualification/uv.lock",
61-
"sha256": "28118b8f56b0d97356477f8120b3e0bab569e2756f30cf442b3cfeeef6000fa0"
65+
"sha256": "cae555dae8482eed12436fdebe65a62c796bd86c57d8f64e4c593130ea0b9526"
6266
},
6367
{
6468
"path": "blueprints/us-equities/runtime-2604/trading-2604-runtime/uv.lock",
65-
"sha256": "a1413f202937aa05625bad34b35d4ad75c9ab637805c3747abc4fb8b0f85634a"
69+
"sha256": "2df713279918415554d7ba23972d3c9b8dc3a8762c52b36cfd31de53e92c22d7"
6670
},
6771
{
6872
"path": "blueprints/us-equities/adaptive-paper/requirements.txt"
6973
},
7074
{
7175
"path": "blueprints/us-equities/catalyst-provenance/requirements.lock",
72-
"parser": "requirements.txt"
76+
"parser": "requirements.txt",
77+
"sha256": "4534537d83bb749e0b7d8f63850348752188e301526aa7e7abbdbd4edc991b4d"
7378
},
7479
{
7580
"path": "blueprints/us-equities/data/requirements.in",
@@ -82,7 +87,7 @@
8287
{
8388
"path": "blueprints/runtime-workers/openhands/requirements.lock",
8489
"parser": "requirements.txt",
85-
"sha256": "6045a575ada4f0ee7d06a741e40eeff3b08ea3fb5a2567eef57d36055ff81577"
90+
"sha256": "096f6255391e56270df7843cb6739d1e373012d6a54e38d7fd7813e0b9e6a96a"
8691
},
8792
{
8893
"path": "blueprints/runtime-workers/openhands/build-requirements.lock",
@@ -175,11 +180,13 @@
175180
},
176181
{
177182
"path": "tools/mlx-smoke/requirements.lock.txt",
178-
"parser": "requirements.txt"
183+
"parser": "requirements.txt",
184+
"sha256": "e8760a529e4fa1a55adb098f092ed999e5b456069dee8e18bcdfae0ef54d8e16"
179185
},
180186
{
181187
"path": "blueprints/gap-wave2-20260923/us-equities__portfolio-risk/requirements-libs.lock",
182-
"parser": "requirements.txt"
188+
"parser": "requirements.txt",
189+
"sha256": "ba1b090b5a868b456614c704cd4d626b2fe381ecd0d228757d5338e91e2deda3"
183190
},
184191
{
185192
"path": "blueprints/us-equities/mover-v3/data-tools/requirements.lock",
@@ -195,7 +202,8 @@
195202
},
196203
{
197204
"path": "evidence/artifacts/macos-syn-e2e-20260924/requirements-macos-arm64-py312.lock",
198-
"parser": "requirements.txt"
205+
"parser": "requirements.txt",
206+
"sha256": "fbb7b0acfebba92e3a76b5e859b9e399303a211fff8537b9dbd2cf41accbcc93"
199207
},
200208
{
201209
"path": "blueprints/us-equities/engine-trials/spy-one-zero-20260926/ml4t-backtest/lockcheck/ml4t.lock",
@@ -207,7 +215,8 @@
207215
},
208216
{
209217
"path": "blueprints/us-equities/adaptive-paper/requirements-linux-x86_64-py312.lock",
210-
"parser": "requirements.txt"
218+
"parser": "requirements.txt",
219+
"sha256": "8e08849c3370b905b7993a75e2f356920d45cdba81d64709a71fa3ff6263cb2d"
211220
},
212221
{
213222
"path": "blueprints/native-skill-practice/p1/requirements-scoring.in",
@@ -323,6 +332,71 @@
323332
"path": "evidence/artifacts/trading-2604-aiohttp-repin-20261020/published-f451-trading-2604-runtime.lock",
324333
"reason": "Retained evidence fixture: the byte-identical October 8 published trading-2604 lock f451ef979cdb1ae3686a30df1c883c257402b32753478c1f9c686c057e9c3989 (aiohttp 3.14.3, affected by GHSA-2g87-pp6c-29x5, GHSA-5wr8-gcqf-gqf3 and GHSA-494j-54xm-rwp3), reproduced with git show 30ab2e3a. It is not an install input. It is kept so the lock digests in the October 8 final-lock and 24/24 acceptance receipts stay checkable against tracked bytes, and as the recorded inverse of the aiohttp 3.14.4 re-pin. The active lock blueprints/us-equities/runtime-2604/trading-2604-runtime/uv.lock (aiohttp 3.14.4) is scanned. Before any restore or new consuming route, relock and restore vulnerability scanning.",
325334
"evidence": "evidence/receipts/runtime-final-native-24-acceptance-20261008.json"
335+
},
336+
{
337+
"path": "evidence/artifacts/certifi-2026.10.19-repin-20261020/historical/examples/deepagents-omniroute/published-3832e6cc-requirements.lock",
338+
"reason": "Retained evidence fixture: byte-identical pre-certifi-bump input at da5549584abb3c95f0c90d7aa0d948b2f72c7876 (certifi 2026.7.22, affected by GHSA-6q48-6c7w-9gw2). Not an install input; the active replacement examples/deepagents-omniroute/requirements.lock is scanned at certifi 2026.10.19. Retained for frozen source/receipt hash custody and inverse history. Before restore or new consumption, relock and restore vulnerability scanning.",
339+
"evidence": "evidence/artifacts/certifi-2026.10.19-repin-20261020/repin.json"
340+
},
341+
{
342+
"path": "evidence/artifacts/certifi-2026.10.19-repin-20261020/historical/examples/openhands-native-capabilities/published-40c0ebc9-requirements.lock",
343+
"reason": "Retained evidence fixture: byte-identical pre-certifi-bump input at da5549584abb3c95f0c90d7aa0d948b2f72c7876 (certifi 2026.7.22, affected by GHSA-6q48-6c7w-9gw2). Not an install input; the active replacement examples/openhands-native-capabilities/requirements.lock is scanned at certifi 2026.10.19. Retained for frozen source/receipt hash custody and inverse history. Before restore or new consumption, relock and restore vulnerability scanning.",
344+
"evidence": "evidence/artifacts/certifi-2026.10.19-repin-20261020/repin.json"
345+
},
346+
{
347+
"path": "evidence/artifacts/certifi-2026.10.19-repin-20261020/historical/blueprints/us-equities/sim-crosscheck-hftbacktest/published-c6a3e11f-requirements.lock",
348+
"reason": "Retained evidence fixture: byte-identical pre-certifi-bump input at da5549584abb3c95f0c90d7aa0d948b2f72c7876 (certifi 2026.7.22, affected by GHSA-6q48-6c7w-9gw2). Not an install input; the active replacement blueprints/us-equities/sim-crosscheck-hftbacktest/requirements.lock is scanned at certifi 2026.10.19. Retained for frozen source/receipt hash custody and inverse history. Before restore or new consumption, relock and restore vulnerability scanning.",
349+
"evidence": "evidence/artifacts/certifi-2026.10.19-repin-20261020/repin.json"
350+
},
351+
{
352+
"path": "evidence/artifacts/certifi-2026.10.19-repin-20261020/historical/adoption/sdk/published-e9ef5be2-accepted-constraints.lock",
353+
"reason": "Retained evidence fixture: byte-identical pre-certifi-bump input at da5549584abb3c95f0c90d7aa0d948b2f72c7876 (certifi 2026.7.22, affected by GHSA-6q48-6c7w-9gw2). Not an install input; the active replacement adoption/sdk/accepted-constraints.txt is scanned at certifi 2026.10.19. Retained for frozen source/receipt hash custody and inverse history. Before restore or new consumption, relock and restore vulnerability scanning.",
354+
"evidence": "evidence/artifacts/certifi-2026.10.19-repin-20261020/repin.json"
355+
},
356+
{
357+
"path": "evidence/artifacts/certifi-2026.10.19-repin-20261020/historical/adoption/sdk/published-3a17fa09-requirements-linux-x86_64-py313.lock",
358+
"reason": "Retained evidence fixture: byte-identical pre-certifi-bump input at da5549584abb3c95f0c90d7aa0d948b2f72c7876 (certifi 2026.7.22, affected by GHSA-6q48-6c7w-9gw2). Not an install input; the active replacement adoption/sdk/requirements-linux-x86_64-py313.lock is scanned at certifi 2026.10.19. Retained for frozen source/receipt hash custody and inverse history. Before restore or new consumption, relock and restore vulnerability scanning.",
359+
"evidence": "evidence/artifacts/certifi-2026.10.19-repin-20261020/repin.json"
360+
},
361+
{
362+
"path": "evidence/artifacts/certifi-2026.10.19-repin-20261020/historical/blueprints/memory-stack/native-qualification/published-28118b8f-uv.lock",
363+
"reason": "Retained evidence fixture: byte-identical pre-certifi-bump input at da5549584abb3c95f0c90d7aa0d948b2f72c7876 (certifi 2026.7.22, affected by GHSA-6q48-6c7w-9gw2). Not an install input; the active replacement blueprints/memory-stack/native-qualification/uv.lock is scanned at certifi 2026.10.19. Retained for frozen source/receipt hash custody and inverse history. Before restore or new consumption, relock and restore vulnerability scanning.",
364+
"evidence": "evidence/artifacts/certifi-2026.10.19-repin-20261020/repin.json"
365+
},
366+
{
367+
"path": "evidence/artifacts/certifi-2026.10.19-repin-20261020/historical/blueprints/us-equities/runtime-2604/trading-2604-runtime/published-a1413f20-uv.lock",
368+
"reason": "Retained evidence fixture: byte-identical pre-certifi-bump input at da5549584abb3c95f0c90d7aa0d948b2f72c7876 (certifi 2026.7.22, affected by GHSA-6q48-6c7w-9gw2). Not an install input; the active replacement blueprints/us-equities/runtime-2604/trading-2604-runtime/uv.lock is scanned at certifi 2026.10.19. Retained for frozen source/receipt hash custody and inverse history. Before restore or new consumption, relock and restore vulnerability scanning.",
369+
"evidence": "evidence/artifacts/certifi-2026.10.19-repin-20261020/repin.json"
370+
},
371+
{
372+
"path": "evidence/artifacts/certifi-2026.10.19-repin-20261020/historical/blueprints/us-equities/catalyst-provenance/published-8249d798-requirements.lock",
373+
"reason": "Retained evidence fixture: byte-identical pre-certifi-bump input at da5549584abb3c95f0c90d7aa0d948b2f72c7876 (certifi 2026.7.22, affected by GHSA-6q48-6c7w-9gw2). Not an install input; the active replacement blueprints/us-equities/catalyst-provenance/requirements.lock is scanned at certifi 2026.10.19. Retained for frozen source/receipt hash custody and inverse history. Before restore or new consumption, relock and restore vulnerability scanning.",
374+
"evidence": "evidence/artifacts/certifi-2026.10.19-repin-20261020/repin.json"
375+
},
376+
{
377+
"path": "evidence/artifacts/certifi-2026.10.19-repin-20261020/historical/blueprints/runtime-workers/openhands/published-6045a575-requirements.lock",
378+
"reason": "Retained evidence fixture: byte-identical pre-certifi-bump input at da5549584abb3c95f0c90d7aa0d948b2f72c7876 (certifi 2025.8.3, affected by GHSA-6q48-6c7w-9gw2). Not an install input; the active replacement blueprints/runtime-workers/openhands/requirements.lock is scanned at certifi 2026.10.19. Retained for frozen source/receipt hash custody and inverse history. Before restore or new consumption, relock and restore vulnerability scanning.",
379+
"evidence": "evidence/artifacts/certifi-2026.10.19-repin-20261020/repin.json"
380+
},
381+
{
382+
"path": "evidence/artifacts/certifi-2026.10.19-repin-20261020/historical/tools/mlx-smoke/published-71b920ce-requirements.lock.lock",
383+
"reason": "Retained evidence fixture: byte-identical pre-certifi-bump input at da5549584abb3c95f0c90d7aa0d948b2f72c7876 (certifi 2026.7.22, affected by GHSA-6q48-6c7w-9gw2). Not an install input; the active replacement tools/mlx-smoke/requirements.lock.txt is scanned at certifi 2026.10.19. Retained for frozen source/receipt hash custody and inverse history. Before restore or new consumption, relock and restore vulnerability scanning.",
384+
"evidence": "evidence/artifacts/certifi-2026.10.19-repin-20261020/repin.json"
385+
},
386+
{
387+
"path": "evidence/artifacts/certifi-2026.10.19-repin-20261020/historical/blueprints/gap-wave2-20260923/us-equities__portfolio-risk/published-19067f82-requirements-libs.lock",
388+
"reason": "Retained evidence fixture: byte-identical pre-certifi-bump input at da5549584abb3c95f0c90d7aa0d948b2f72c7876 (certifi 2026.7.22, affected by GHSA-6q48-6c7w-9gw2). Not an install input; the active replacement blueprints/gap-wave2-20260923/us-equities__portfolio-risk/requirements-libs.lock is scanned at certifi 2026.10.19. Retained for frozen source/receipt hash custody and inverse history. Before restore or new consumption, relock and restore vulnerability scanning.",
389+
"evidence": "evidence/artifacts/certifi-2026.10.19-repin-20261020/repin.json"
390+
},
391+
{
392+
"path": "evidence/artifacts/certifi-2026.10.19-repin-20261020/historical/evidence/artifacts/macos-syn-e2e-20260924/published-d756583b-requirements-macos-arm64-py312.lock",
393+
"reason": "Retained evidence fixture: byte-identical pre-certifi-bump input at da5549584abb3c95f0c90d7aa0d948b2f72c7876 (certifi 2026.7.22, affected by GHSA-6q48-6c7w-9gw2). Not an install input; the active replacement evidence/artifacts/macos-syn-e2e-20260924/requirements-macos-arm64-py312.lock is scanned at certifi 2026.10.19. Retained for frozen source/receipt hash custody and inverse history. Before restore or new consumption, relock and restore vulnerability scanning.",
394+
"evidence": "evidence/artifacts/certifi-2026.10.19-repin-20261020/repin.json"
395+
},
396+
{
397+
"path": "evidence/artifacts/certifi-2026.10.19-repin-20261020/historical/blueprints/us-equities/adaptive-paper/published-645544ed-requirements-linux-x86_64-py312.lock",
398+
"reason": "Retained evidence fixture: byte-identical pre-certifi-bump input at da5549584abb3c95f0c90d7aa0d948b2f72c7876 (certifi 2026.7.22, affected by GHSA-6q48-6c7w-9gw2). Not an install input; the active replacement blueprints/us-equities/adaptive-paper/requirements-linux-x86_64-py312.lock is scanned at certifi 2026.10.19. Retained for frozen source/receipt hash custody and inverse history. Before restore or new consumption, relock and restore vulnerability scanning.",
399+
"evidence": "evidence/artifacts/certifi-2026.10.19-repin-20261020/repin.json"
326400
}
327401
]
328402
}

‎adoption/sdk/accepted-constraints.txt‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@
66
alpaca-py==0.44.0
77
annotated-types==0.8.0
88
anyio==4.15.1
9-
certifi==2026.7.22
9+
certifi==2026.10.19
1010
charset-normalizer==3.5.1
1111
duckdb==1.5.5
1212
exchange-calendars==4.13.2

‎adoption/sdk/requirements-linux-x86_64-py313.lock‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -17,9 +17,9 @@ anyio==4.15.1 \
1717
# -c adoption/sdk/accepted-constraints.txt
1818
# httpx2
1919
# openai
20-
certifi==2026.7.22 \
21-
--hash=sha256:62f22742b58a1a33014a2b6b706588a8d7e2a88ae7bd1a6ebe8c992928483775 \
22-
--hash=sha256:741e2c3b351ddf169a738da9f2c048608ff7f2c5cc02f1ebc6b118bb090d5d55
20+
certifi==2026.10.19 \
21+
--hash=sha256:035c1e85572b141bf1c3a3eff0e33a8eb74917522f2559075ff8d2fea780a1ae \
22+
--hash=sha256:42d35340cc5b9ba78e818ddbff0c5b1c2b779de448a340fd1b989f5fa8670e1b
2323
# via
2424
# -c adoption/sdk/accepted-constraints.txt
2525
# requests

‎blueprints/gap-wave2-20260923/us-equities__portfolio-risk/requirements-libs.lock‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -54,9 +54,9 @@ bottleneck==1.6.0 \
5454
--hash=sha256:fa668efbe4c6b200524ea0ebd537212da9b9801287138016fdf64119d6fcf201 \
5555
--hash=sha256:fc7f09bda980d967f2e9f1a746eda57479f824f66de0b92b9835c431a8c922d4
5656
# via empyrical-reloaded
57-
certifi==2026.7.22 \
58-
--hash=sha256:62f22742b58a1a33014a2b6b706588a8d7e2a88ae7bd1a6ebe8c992928483775 \
59-
--hash=sha256:741e2c3b351ddf169a738da9f2c048608ff7f2c5cc02f1ebc6b118bb090d5d55
57+
certifi==2026.10.19 \
58+
--hash=sha256:035c1e85572b141bf1c3a3eff0e33a8eb74917522f2559075ff8d2fea780a1ae \
59+
--hash=sha256:42d35340cc5b9ba78e818ddbff0c5b1c2b779de448a340fd1b989f5fa8670e1b
6060
# via
6161
# curl-cffi
6262
# requests

‎blueprints/memory-stack/native-qualification/uv.lock‎

Lines changed: 3 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎blueprints/runtime-workers/openhands/pins.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@
4141
"filename": "openhands_tools-1.49.6-py3-none-any.whl"
4242
}
4343
},
44-
"requirements_sha256": "6045a575ada4f0ee7d06a741e40eeff3b08ea3fb5a2567eef57d36055ff81577",
44+
"requirements_sha256": "096f6255391e56270df7843cb6739d1e373012d6a54e38d7fd7813e0b9e6a96a",
4545
"build_requirements_sha256": "32cff7dc47659683a19936944a47123160731a2bdb711aee78a7d63fbab205e2",
4646
"grader": {
4747
"repository": "https://github.com/OpenHands/benchmarks",

‎blueprints/runtime-workers/openhands/requirements.lock‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -92,9 +92,9 @@ caio==0.9.25 ; platform_machine == 'x86_64' and sys_platform == 'linux' \
9292
cdp-use==1.4.4 ; platform_machine == 'x86_64' and sys_platform == 'linux' \
9393
--hash=sha256:330a848b517006eb9ad1dc468aa6434d913cf0c6918610760c36c3fdfdba0fab \
9494
--hash=sha256:e37e80e067db2653d6fdf953d4ff9e5d80d75daa27b7c6d48c0261cccbef73e1
95-
certifi==2025.8.3 ; platform_machine == 'x86_64' and sys_platform == 'linux' \
96-
--hash=sha256:e564105f78ded564e3ae7c923924435e1daa7463faeab5bb932bc53ffae63407 \
97-
--hash=sha256:f6c12493cfb1b06ba2ff328595af9350c65d6644968e5d3a2ffd78699af217a5
95+
certifi==2026.10.19 ; platform_machine == 'x86_64' and sys_platform == 'linux' \
96+
--hash=sha256:035c1e85572b141bf1c3a3eff0e33a8eb74917522f2559075ff8d2fea780a1ae \
97+
--hash=sha256:42d35340cc5b9ba78e818ddbff0c5b1c2b779de448a340fd1b989f5fa8670e1b
9898
cffi==2.0.0 ; platform_machine == 'x86_64' and platform_python_implementation != 'PyPy' and sys_platform == 'linux' \
9999
--hash=sha256:28a3a209b96630bca57cce802da70c266eb08c6e97e5afd61a75611ee6c64592 \
100100
--hash=sha256:2c8f814d84194c9ea681642fd164267891702542f028a15fc97d4674b6206187 \

‎blueprints/us-equities/adaptive-paper/requirements-linux-x86_64-py312.lock‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6,9 +6,9 @@ alpaca-py==0.44.0 \
66
annotated-types==0.8.0 \
77
--hash=sha256:13b2beaad985e05e2d6407ee4c4f35590b11f8d693a258a561055cac8f64cab7 \
88
--hash=sha256:f072f4d804ea359e4eaf198b1af7a8b0943881a87f31bb764f8bf219bb9419e0
9-
certifi==2026.7.22 \
10-
--hash=sha256:62f22742b58a1a33014a2b6b706588a8d7e2a88ae7bd1a6ebe8c992928483775 \
11-
--hash=sha256:741e2c3b351ddf169a738da9f2c048608ff7f2c5cc02f1ebc6b118bb090d5d55
9+
certifi==2026.10.19 \
10+
--hash=sha256:035c1e85572b141bf1c3a3eff0e33a8eb74917522f2559075ff8d2fea780a1ae \
11+
--hash=sha256:42d35340cc5b9ba78e818ddbff0c5b1c2b779de448a340fd1b989f5fa8670e1b
1212
charset-normalizer==3.5.2 \
1313
--hash=sha256:01077390b03f7988f11d700a2194e69b119741a86b1a638b1db88891e3eced8e \
1414
--hash=sha256:01b0c0d2262a9e28e8484a278c7e1b5d650e3ac8cf2683d2967e25899f208bdf \

0 commit comments

Comments
 (0)