certifi 2026.10.19 Fixes eMudhra Trust Risk

This is a small dependency update with an outsized security impact: certificate bundles are foundational infrastructure, and stale copies can silently undermine HTTPS.

• –Eight eMudhra intermediate CA private keys were compromised, enabling forged certificates for arbitrary domains.
• –Versions before 2026.10.19 may leave Python clients vulnerable when an attacker can intercept network traffic.
• –certifi 2026.10.18 removed every emSign root, while 2026.10.19 restored unaffected roots to reduce compatibility breakage.
• –Developers should upgrade virtual environments, rebuild container images, and audit vendored CA bundles in CI/CD systems.
• –The incident also affects adjacent tooling, including pip, uv, conda, and platform trust stores.