[dirkkul]

No description provided.

[orca-security-eu]

Orca Security Scan Summary

Status	Check	Issues by priority
Passed	Infrastructure as Code	0   0   0   0	View in Orca
Passed	SAST	0   0   0   0	View in Orca
Passed	Secrets	0   0   0   0	View in Orca
Passed	Vulnerabilities	0   0   0   0	View in Orca

[Copilot]

🟢 Approval recommended

The focused changes preserve credential overrides and cover the new behavior, with no identified blocking issues.

No open issues 🎉

What changed in this PR

Updates secure gRPC channels to trust certifi’s CA bundle, aligning default trust with REST connections.

Changes:

• Uses certifi roots while preserving explicit credentials and environment overrides.
• Adds a minimum certifi dependency and documents default trust behavior.
• Tests certifi defaults and environment overrides.

File	Description
weaviate/​connect/​base.py	Loads certifi roots for default secure gRPC credentials.
weaviate/​config.py	Documents default roots and environment overrides.
setup.cfg	Requires certifi 2026.10.19 or newer.
mock_tests/​test_grpc_config.py	Tests default roots and environment override behavior.

_{Review effort: Balanced}

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 89.02%. Comparing base (74eed97) to head (194a87f).
⚠️ Report is 50 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #2218      +/-   ##
==========================================
+ Coverage   88.98%   89.02%   +0.03%     
==========================================
  Files         308      309       +1     
  Lines       24396    24546     +150     
==========================================
+ Hits        21709    21852     +143     
- Misses       2687     2694       +7     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.