Skip to content

Upgrade pip to 26.2.2 - #299

Merged
joverlee521 merged 1 commit into
masterfrom
upgrade-pip
Oct 21, 2026
Merged

joverlee521 merged 1 commit into
masterfrom
upgrade-pip

Conversation

@joverlee521

@joverlee521 joverlee521 commented Oct 21, 2026 •

Copy link
Copy Markdown
Contributor

Description of proposed changes

Minimum version for CA certificate compromise
https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576

Related issue(s)

Part of https://github.com/nextstrain/private/issues/258

Checklist

  • Checks pass
  • Update changelog

@joverlee521
joverlee521 merged commit d19d0e7 into master Oct 21, 2026
74 checks passed
@joverlee521
joverlee521 deleted the upgrade-pip branch October 21, 2026 21:07
Comment thread Dockerfile

# Upgrade pip to 26.2.2, minimum version for CA certificate compromise
# <https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576>
RUN python -m pip install "pip @ https://files.pythonhosted.org/packages/3f/06/3e4420302363fbb71be3c7f35ce042f54bfca330e3e66b3a2e3c4cca579f/pip-26.2.2-py3-none-any.whl#sha256=fd7f4dfa8190e014013b9f08f3e973f4e4c26ffd179a204895533a7254813a70"

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This was done in the builder-target-platform stage. Verified that it's properly copied into the final image:

docker pull nextstrain/base:branch-upgrade-pip
nextstrain shell --image nextstrain/base:branch-upgrade-pip . -c 'pip --version'
# pip 26.2.2 from /usr/local/lib/python3.11/site-packages/pip (python 3.11)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants