From f9343243d555028b573e7c6c39d06a3866556294 Mon Sep 17 00:00:00 2001
From: Bill Taylor <bill@refractionpoint.com>
Date: Tue, 10 Nov 2026 13:48:57 -0700
Subject: [PATCH] build(deps): bump certifi to 2026.10.23

certifi 2026.6.17 is affected by GHSA-6q48-6c7w-9gw2 / PYSEC-2026-4320
(critical Dependabot alert #26, fixed in 2026.10.18). Move the pinned,
hashed lock to the latest release, 2026.10.23, which OSV reports clean.

certifi is a transitive build-time dependency (via requests). The docs
build output is byte-identical before and after (852 files, diff -rq).
---
 requirements.txt | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index f59071d2c..7e7732e9e 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -16,9 +16,9 @@ backrefs==7.0 \
     --hash=sha256:ca42ce6a49ace3d75684dfa9937f3373902a63284ecb385ce36d15e5dcb41c12 \
     --hash=sha256:f2c52955d631b9e1ac4cd56209f0a3a946d592b98e7790e77699339ae01c102a
     # via mkdocs-material
-certifi==2026.6.17 \
-    --hash=sha256:024c88eeec92ca068db80f02b8b07c9cef7b9fe261d1d535abfd5abd6f6af432 \
-    --hash=sha256:2227dcbaafe0d2f59279d1762ddddc37783ed4354594f194ffc31d20f41fc3db
+certifi==2026.10.23 \
+    --hash=sha256:a9895e6e2758b371e0545e321a3a8fd1fcfd9829ada8824a936dfb16aaaf36cd \
+    --hash=sha256:e9b54de76e530bb6cf0ccd036787103acb58fd42ba930ea8bf948ddbaa2f61d1
     # via requests
 charset-normalizer==3.4.9 \
     --hash=sha256:0327fcd59a935777d83410750c50600ee9571af2846f71ce40f25b13da1ef380 \