OpenConceptLab/ocl_online#559 | Updating certifi and pip for eMudhra emSign CA incident

Author: snyaggarwal

Dockerfile

@@ -6,7 +6,7 @@ RUN apt-get update && apt-get upgrade -y && \
     apt-get install -y --no-install-recommends \
     bash git gcc libssl-dev libffi-dev libpq-dev python3-dev build-essential cargo
 
-RUN pip install --upgrade pip
+RUN pip install --upgrade "pip>=26.2.2"
 
 RUN mkdir /code
 WORKDIR /code
@@ -34,7 +34,7 @@ RUN apt-get update && apt-get upgrade -y && \
     libpq-dev bash curl && \
     apt-get clean && rm -rf /var/lib/apt/lists/*
 
-RUN pip install --upgrade pip
+RUN pip install --upgrade "pip>=26.2.2"
 
 COPY --from=builder /code/wheels /wheels
 COPY --from=builder /code/requirements.txt .

requirements.txt

@@ -11,6 +11,7 @@ colour_runner==0.1.1
 boto3==1.36.10
 moto==5.0.27
 python-dateutil==2.8.2
+certifi==2026.10.19
 requests==2.33.0
 factory_boy==3.3.0
 # Celery