search

googleapis / google-cloud-php

Google Cloud Client Library for PHP
https://cloud.google.com/php/docs/reference
Apache License 2.0
1.08k stars 430 forks source link

chore(deps): update dependency certifi to v2024.7.4 [security] #7505

Closed renovate-bot closed 1 week ago

renovate-bot commented 1 week ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
certifi ==2024.2.2 -> ==2024.7.4 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2024-39689

Certifi 2024.07.04 removes root certificates from "GLOBALTRUST" from the root store. These are in the process of being removed from Mozilla's trust store.

GLOBALTRUST's root certificates are being removed pursuant to an investigation which identified "long-running and unresolved compliance issues". Conclusions of Mozilla's investigation can be found here.

Release Notes

certifi/python-certifi (certifi) ### [`v2024.7.4`](https://togithub.com/certifi/python-certifi/compare/2024.06.02...2024.07.04) [Compare Source](https://togithub.com/certifi/python-certifi/compare/2024.06.02...2024.07.04) ### [`v2024.6.2`](https://togithub.com/certifi/python-certifi/compare/2024.02.02...2024.06.02) [Compare Source](https://togithub.com/certifi/python-certifi/compare/2024.02.02...2024.06.02)

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

This PR has been generated by Mend Renovate. View repository job log here.

bshaffer commented 1 week ago

Closing as a duplicate of https://github.com/googleapis/google-cloud-php/pull/7504

forking-renovate[bot] commented 1 week ago

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (==2024.7.4). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.