[noah-ing]

Summary

• Update certifi from 2026.7.22 to patched 2026.10.19 with published PyPI hashes in ten active requirements locks, including Sentinel runtime.
• Update the released UCP uv bootstrap from 0.12.5 to 0.13.4 with release hashes, regenerate its uv.lock to use certifi 2026.10.19, and align the host-development README.

Validation and current status

• Signed-off commit ea9d4d8cfa9e6472daa820640ef73f6987cb9a14 merges current main, including the separately merged ci(examples): install pyOpenSSL for model-signing 1.1.1 #362 WCM CI repair and fix(catalog): remove unavailable Nobulex source listing #357 catalog link cleanup. The effective PR diff remains the same 13 certificate and uv files (41 insertions, 41 deletions); git diff --check passes.
• All ten changed hash-locked requirements resolve for Linux/Python 3.11 in uv pip install --dry-run --require-hashes. This tests dependency resolution; it does not download every distribution artifact.
• The released UCP lock passes uv lock --check. In an isolated Python 3.11 reproduction on the merged tree, released WCM 0.33.1, model-signing 1.1.1, sigstore 4.5.1 and pyOpenSSL 26.4.0 resolved, and all 13 offline WCM demos plus unit tests passed. The catalog generator tests and generated-file checks also passed.
• The certifi wheel and source hashes were checked against the published PyPI artifacts in the original certificate review. On this head, hosted WCM, documentation links, and maintainer approval checks pass; the remaining hosted jobs must finish before merge.

Scope

This updates the bundled CA copies used by these lockfiles. System CA bundles in pinned Docker base images need separate verification and rebuild before claiming container-wide protection; the WCM image work is in draft agentrust-io/weight-custody-manifest#221.

Public references: GHSA-6q48-6c7w-9gw2 and GHSA-hq85-5cpj-mr62

[dinakarjs]

Reviewed exact head 787c5ad. Checked all changed lock paths: certifi hashes match official PyPI 2026.10.19 metadata; universal markers are retained. The released-UCP uv bootstrap hashes match official uv 0.13.4 Linux wheels; its lock changes only certifi plus the lock revision. Hash-required Python 3.11 Sentinel resolution succeeds. Hosted Sentinel, adapters, released-UCP, validation and lint checks succeed. Overall Examples and documentation checks remain failures; they must be resolved independently rather than treated as green. Overlapping #361 drops cross-version markers and fails Python 3.11, so this is the preferable marker-preserving dependency repair. No blocking source finding.

[carloshvp]

Reviewed exact head 787c5addef9bc1e8adb2d276887e75d83b62b210 in an isolated checkout.

Approving the certificate-bundle updates and corresponding uv bootstrap refresh. All ten changed requirements-style lockfiles preserve their non-certifi pins and universal markers; the new certifi hashes match official PyPI metadata. In the UCP lock, the package delta is confined to certifi, alongside the format revision. The uv 0.13.4 bootstrap hashes also match official PyPI metadata.

Independent macOS/Python 3.12 validation: a fresh hash-locked Sentinel environment passes pip check and all 17 integration tests. uv 0.13.4 accepts the committed UCP lock with lock --check (76 packages). Whitespace checks pass. I did not reproduce the Linux container build or every supported platform locally.

The failed hosted links job identifies the inherited Nobulex 451, and the WCM job reports the inherited missing OpenSSL import; #357 and #362 address those separately. A complete current successful hosted run and normal branch gates remain required. The commit carries DCO sign-off.

Hash sources: https://pypi.org/pypi/certifi/2026.10.19/json and https://pypi.org/pypi/uv/0.13.4/json

Reviewed with OpenAI Codex.

[noah-ing]

Update (October 28): This request referred to head 8403750de81ccd1b9d827c5a374d418da61b8d58 before #357 merged. I have since incorporated #357 into current head ea9d4d8cfa9e6472daa820640ef73f6987cb9a14. The effective 13-file certifi/uv diff is unchanged. All 44 hosted checks now pass, including links and fuzz; GitHub shows the PR as clean and retains the existing approvals. The old-head re-review request and links-failure note are superseded. No additional review is being requested by this comment.