From 4744d30afdedff9ef3d397bfa908d88870d7beec Mon Sep 17 00:00:00 2001
From: guzmud <ferdinand.bellissime@filigran.io>
Date: Wed, 21 Oct 2026 15:30:23 +0200
Subject: [PATCH 1/2] ci(client-python): updating pip, uv and certifi (#365)

---
 .circleci/config.yml           | 15 +++++++++++++++
 .github/workflows/coverage.yml |  4 ++++
 .github/workflows/release.yml  |  5 ++++-
 3 files changed, 23 insertions(+), 1 deletion(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 955b6c6b..e628aad5 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -9,6 +9,9 @@ jobs:
     working_directory: ~/repo
     steps:
       - checkout
+      - run:
+          name: update pip
+          command: pip3 install -U pip certifi
       - run:
           name: install dependencies
           command: pip3 install --user .[dev]
@@ -31,6 +34,9 @@ jobs:
     working_directory: ~/repo
     steps:
       - checkout
+      - run:
+          name: update pip
+          command: pip3 install -U pip certifi
       - run:
           name: install dependencies
           command: pip3 install --user '.[dev]'
@@ -44,6 +50,9 @@ jobs:
     steps:
       - checkout
       - run: apk update && apk upgrade && apk --no-cache add bash
+      - run:
+          name: update pip
+          command: pip3 install -U pip certifi
       - run:
           name: flake8
           command: flake8 --ignore=E,W ~/repo
@@ -57,6 +66,9 @@ jobs:
       - image: cimg/python:3.13
     steps:
       - checkout
+      - run:
+          name: update pip
+          command: pip3 install -U pip certifi
       - run:
           name: install dependencies
           command: >
@@ -90,6 +102,9 @@ jobs:
       - checkout
       - attach_workspace:
           at: ~/openaev-client
+      - run:
+          name: update pip
+          command: pip3 install -U pip certifi
       - run:
           name: install dependencies
           command: pip3 install --user .
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index d2944d28..816a93cb 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -22,6 +22,10 @@ jobs:
         with:
           python-version: "3.12"
 
+      - name: update pip and uv
+        run: |
+          pip install -U pip certifi && uv self update
+
       - name: Install dependencies
         run: |
           uv venv && uv pip install -e '.[dev]' coverage
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8aaed09d..1142967b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -37,6 +37,9 @@ jobs:
         uses: actions/setup-python@v6
         with:
           python-version: 3.11
+      - name: update pip
+        run: |
+          pip install -U pip certifi
       - name: Install dependencies
         run: |
           git config --global url."https://x-access-token:${GH_TOKEN}@github.com".insteadOf https://github.com
@@ -46,4 +49,4 @@ jobs:
           GH_TOKEN: ${{ secrets.RELEASE_TOKEN }}
       - name: execute py script # run file
         run: |
-          python scripts/release.py ${{ inputs.branch_client_python }} ${{ inputs.previous_version }} ${{ inputs.new_version }} ${{ secrets.RELEASE_TOKEN }}
\ No newline at end of file
+          python scripts/release.py ${{ inputs.branch_client_python }} ${{ inputs.previous_version }} ${{ inputs.new_version }} ${{ secrets.RELEASE_TOKEN }}

From 072ba6f903c39f0e4c5fb0f19892f55733f0307b Mon Sep 17 00:00:00 2001
From: guzmud <ferdinand.bellissime@filigran.io>
Date: Wed, 21 Oct 2026 15:30:50 +0200
Subject: [PATCH 2/2] fix(client-python): using requirements to propagate
 updated certifi (#365)

---
 .github/workflows/coverage.yml      | 7 ++++---
 .github/workflows/sats-analysis.yml | 2 +-
 pyproject.toml                      | 1 +
 3 files changed, 6 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 816a93cb..f42de510 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -18,13 +18,14 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Setup uv
-        uses: astral-sh/setup-uv@v8.1.0
+        uses: astral-sh/setup-uv@v10.3.0
         with:
+          version: "0.13.4"
           python-version: "3.12"
 
-      - name: update pip and uv
+      - name: update pip
         run: |
-          pip install -U pip certifi && uv self update
+          pip install -U pip certifi
 
       - name: Install dependencies
         run: |
diff --git a/.github/workflows/sats-analysis.yml b/.github/workflows/sats-analysis.yml
index 860bb085..514cb0d2 100644
--- a/.github/workflows/sats-analysis.yml
+++ b/.github/workflows/sats-analysis.yml
@@ -19,7 +19,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Setup uv
-        uses: astral-sh/setup-uv@v8.1.0
+        uses: astral-sh/setup-uv@v10.3.0
         with:
           python-version: "3.14"
 
diff --git a/pyproject.toml b/pyproject.toml
index 5a7bb308..0ce5d8fb 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -25,6 +25,7 @@ classifiers = [
     "Topic :: Software Development :: Libraries :: Python Modules"
 ]
 dependencies = [
+    "certifi (>=2026.10.19)",
     "pika (>=1.4.4,<1.5.0)",
     "python_json_logger (>=3.3.0,<3.4.0)",
     "PyYAML (>=6.0,<6.1)",