Merge pull request 'fix(deps): update dependency certifi to v2026.6.17' (#24) from renovate/certifi-2026.x into main

Reviewed-on: https://bitfreedom.net/code/code/nomyo-ai/nomyo/pulls/24

.forgejo/workflows/nyx-scan.yml

@@ -0,0 +1,32 @@
+name: NYX Security Scan
+
+on:
+  pull_request:
+    branches: [main, master]
+
+jobs:
+  nyx-scan:
+    runs-on: docker-amd64
+
+    steps:
+      - name: Checkout PR
+        run: |
+          git clone --depth=1 \
+            "https://oauth2:${{ github.token }}@bitfreedom.net/code/${{ github.repository }}.git" \
+            .
+          git fetch --depth=1 origin ${{ github.sha }}
+          git checkout ${{ github.sha }}
+
+      - name: Fetch action source
+        run: |
+          git clone --depth=1 --branch master \
+            "https://oauth2:${{ github.token }}@bitfreedom.net/code/nomyo-ai/actions.git" \
+            ./.nyx-action
+
+      - uses: ./.nyx-action/nyx-scan
+        with:
+          forgejo_push_token: ${{ secrets.FORGEJO_PUSH_TOKEN }}
+          repository: ${{ github.repository }}
+          pr_number: ${{ github.event.pull_request.number }}
+          sha: ${{ github.sha }}
+          fail_on: HIGH

pyproject.toml

@@ -27,15 +27,15 @@ classifiers = [
 ]
 requires-python = ">=3.10"
 dependencies = [
-    "anyio==4.13.0",
+    "anyio==4.14.0",
-    "certifi==2026.4.22",
+    "certifi==2026.6.17",
     "cffi==2.0.0",
-    "cryptography==48.0.0",
+    "cryptography==49.0.0",
     "exceptiongroup==1.3.1",
     "h11==0.16.0",
     "httpcore==1.0.9",
     "httpx==0.28.1",
-    "idna==3.14",
+    "idna==3.18",
     "pycparser==3.0",
     "typing_extensions==4.15.0",
 ]

requirements.txt

@@ -1,11 +1,11 @@
-anyio==4.13.0
+anyio==4.14.0
-certifi==2026.4.22
+certifi==2026.6.17
 cffi==2.0.0
-cryptography==48.0.0
+cryptography==49.0.0
 exceptiongroup==1.3.1
 h11==0.16.0
 httpcore==1.0.9
 httpx==0.28.1
-idna==3.14
+idna==3.18
 pycparser==3.0
 typing_extensions==4.15.0