[thomasrockhu-codecov]

Summary

• Require certifi>=2026.10.23 and bump only certifi in uv.lock (2024.12.14 → 2026.10.23).
• requests and sentry-sdk verify TLS against this bundle, and PyInstaller bundles it into the release binaries. 2026.10.23 drops the roots that cross-signed the compromised eMudhra intermediates (emSign Root TLS CA - G3 and Comodo AAA Certificate Services).
• Covers CVE-2026-114406 for the CLI's own TLS verification. CVE-2026-111943 (Go) and CVE-2026-91403 (Java) do not apply; the CLI has no Go or Java code.

Test plan

• uv run pytest — 720 passed
• make command_dump produces no changes

[codecov]

❌ 1 Tests Failed:

Tests completed	Failed	Passed	Skipped
723	1	722	1

View the full list of 1 ❄️ flaky test(s)

api.temp.calculator.test_calculator::test_divide

Flake rate in main: 100.00% (Passed 0 times, Failed 1726 times)

Stack Traces | 0.001s run time

def
                test_divide():
                > assert Calculator.divide(1, 2) == 0.5
                E assert 1.0 == 0.5
                E + where 1.0 = <function Calculator.divide at 0x104c9eb90>(1, 2)
                E + where <function Calculator.divide at 0x104c9eb90> = Calculator.divide
                .../temp/calculator/test_calculator.py:30: AssertionError

To view more test analytics, go to the Test Analytics Dashboard
_{📋 Got 3 mins? Take this short survey to help us improve Test Analytics.}