From f66a0ce497a2bc8d6b601a47a3be565cac9c94fb Mon Sep 17 00:00:00 2001
From: Jover Lee <joverlee521@gmail.com>
Date: Wed, 21 Oct 2026 11:49:28 -0700
Subject: [PATCH] Upgrade pip to 26.2.2

Minimum version for CA certificate compromise
<https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576>
---
 Dockerfile | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/Dockerfile b/Dockerfile
index b44f660..9f2f233 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -264,6 +264,9 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
         make \
         jq
 
+# Upgrade pip to 26.2.2, minimum version for CA certificate compromise
+# <https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576>
+RUN python -m pip install "pip @ https://files.pythonhosted.org/packages/3f/06/3e4420302363fbb71be3c7f35ce042f54bfca330e3e66b3a2e3c4cca579f/pip-26.2.2-py3-none-any.whl#sha256=fd7f4dfa8190e014013b9f08f3e973f4e4c26ffd179a204895533a7254813a70"
 
 # 1. Install programs via pip