Skip to content

Update vendored Pip's CA cert bundle.#3202

Merged
jsirois merged 3 commits into
pex-tool:mainfrom
jsirois:certifi/update
Jul 11, 2026
Merged

Update vendored Pip's CA cert bundle.#3202
jsirois merged 3 commits into
pex-tool:mainfrom
jsirois:certifi/update

Conversation

@jsirois

@jsirois jsirois commented Jul 10, 2026

Copy link
Copy Markdown
Member

Update to cacert.pem from certifi 2026.6.17.
See: pex-tool/pip#29

jsirois added 2 commits July 10, 2026 15:20
Update to cacert.pem from certifi 2026.6.17.
See: pex-tool/pip#29
For PEX builds to reproducible under 3.15+, the fix in
pypa/pip#14033 is needed and that will be
available only in Pip 26.2.
Comment thread tests/integration/test_reproducible.py Outdated
Comment on lines +119 to +124
if sys.version_info[:2] >= (3, 15) and pip_version is not PipVersion.ADHOC and pip_version <= PipVersion.v26_1_2:
pytest.skip(
"Pex under Python>=3.15 requires the Pip fix in "
"https://github.com/pypa/pip/commit/7456712c30e7bd8944f6d92fba60b7fcfe62017b which "
"will be included in Pip 26.2 to maintain proper build isolation."
)

@jsirois jsirois Jul 11, 2026

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

3 tests started failing, effectively catching the bug @ichard26 fixed in pypa/pip#14033.
Running this IT with uvrc tests-py315-pip:adhoc-integration, which picks up the fix, works.

@jsirois jsirois merged commit 098d3d0 into pex-tool:main Jul 11, 2026
97 of 108 checks passed
@jsirois jsirois deleted the certifi/update branch July 11, 2026 23:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant