Skip to content

Update uv after the eMudhra incident - #810

Merged
JelleZijlstra merged 1 commit into
mainfrom
alex/emudhra-uv
Oct 20, 2026
Merged

JelleZijlstra merged 1 commit into
mainfrom
alex/emudhra-uv

Conversation

@AlexWaygood

Copy link
Copy Markdown
Member

The eMudhra incident compromised intermediate CA keys that could be used to impersonate HTTPS sites. uv 0.13.4 removes the affected emSign root from its bundled trust store.

Update the uv versions and checksums used in GitHub Actions.

Codex prepared this update.

@codecov

codecov Bot commented Oct 20, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.26%. Comparing base (4c46eb3) to head (89d71db).

@@           Coverage Diff           @@
##             main     #810   +/-   ##
=======================================
  Coverage   97.26%   97.26%           
=======================================
  Files           3        3           
  Lines        7859     7859           
=======================================
  Hits         7644     7644           
  Misses        215      215           
Flag Coverage Δ
3.10 88.85% <ø> (ø)
3.10.4 88.85% <ø> (ø)
3.11 88.02% <ø> (ø)
3.11.0 87.27% <ø> (ø)
3.12 87.96% <ø> (ø)
3.12.0 87.94% <ø> (ø)
3.13 83.39% <ø> (ø)
3.13.0 84.09% <ø> (ø)
3.14 79.53% <ø> (ø)
3.9 89.53% <ø> (ø)
3.9.12 89.53% <ø> (ø)
pypy3.10 88.68% <ø> (ø)
pypy3.11 87.88% <ø> (ø)
pypy3.9 89.37% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@AlexWaygood
AlexWaygood marked this pull request as ready for review October 20, 2026 20:29
@AlexWaygood
AlexWaygood marked this pull request as draft October 20, 2026 20:30
@AlexWaygood
AlexWaygood marked this pull request as ready for review October 20, 2026 21:13
@JelleZijlstra
JelleZijlstra merged commit 3710fbc into main Oct 20, 2026
70 checks passed
@JelleZijlstra
JelleZijlstra deleted the alex/emudhra-uv branch October 20, 2026 21:17
@AlexWaygood AlexWaygood added the github_actions Pull requests that update GitHub Actions code label Oct 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants