chore(deps): update dependency certifi to v2024.7.4 [security]

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
certifi	==2024.6.2 -> ==2024.7.4

GitHub Vulnerability Alerts

CVE-2024-39689

Certifi 2024.07.04 removes root certificates from "GLOBALTRUST" from the root store. These are in the process of being removed from Mozilla's trust store.

GLOBALTRUST's root certificates are being removed pursuant to an investigation which identified "long-running and unresolved compliance issues". Conclusions of Mozilla's investigation can be found here.

---

Release Notes

certifi/python-certifi (certifi)

v2024.7.4

Compare Source

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

Trivy image scan report

ghcr.io/miracum/ohdsi-cohort-sync:pr-25 (debian 12.5)

14 known vulnerabilities found (CRITICAL: 0 HIGH: 4 MEDIUM: 10 LOW: 0)

Show detailed table of vulnerabilities

Package	ID	Severity	Installed Version	Fixed Version
libgnutls30	CVE-2024-28834	MEDIUM	3.7.9-2+deb12u2	3.7.9-2+deb12u3
libgnutls30	CVE-2024-28835	MEDIUM	3.7.9-2+deb12u2	3.7.9-2+deb12u3
libssl3	CVE-2023-5678	MEDIUM	3.0.11-1~deb12u2	3.0.13-1~deb12u1
libssl3	CVE-2023-6129	MEDIUM	3.0.11-1~deb12u2	3.0.13-1~deb12u1
libssl3	CVE-2023-6237	MEDIUM	3.0.11-1~deb12u2	3.0.13-1~deb12u1
libssl3	CVE-2024-0727	MEDIUM	3.0.11-1~deb12u2	3.0.13-1~deb12u1
libsystemd0	CVE-2023-50387	HIGH	252.22-1~deb12u1	252.23-1~deb12u1
libsystemd0	CVE-2023-50868	HIGH	252.22-1~deb12u1	252.23-1~deb12u1
libudev1	CVE-2023-50387	HIGH	252.22-1~deb12u1	252.23-1~deb12u1
libudev1	CVE-2023-50868	HIGH	252.22-1~deb12u1	252.23-1~deb12u1
openssl	CVE-2023-5678	MEDIUM	3.0.11-1~deb12u2	3.0.13-1~deb12u1
openssl	CVE-2023-6129	MEDIUM	3.0.11-1~deb12u2	3.0.13-1~deb12u1
openssl	CVE-2023-6237	MEDIUM	3.0.11-1~deb12u2	3.0.13-1~deb12u1
openssl	CVE-2024-0727	MEDIUM	3.0.11-1~deb12u2	3.0.13-1~deb12u1

No Misconfigurations found

Python

No Vulnerabilities found

No Misconfigurations found

[github-actions]

🦙 MegaLinter status: ⚠️ WARNING

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ ACTION	actionlint	4		0	0.03s
✅ DOCKERFILE	hadolint	1		0	0.08s
✅ EDITORCONFIG	editorconfig-checker	22		0	0.06s
✅ JSON	jsonlint	2		0	0.17s
⚠️ JSON	prettier	2		1	0.43s
✅ MARKDOWN	markdownlint	2		0	0.3s
✅ PYTHON	bandit	2		0	0.92s
✅ PYTHON	black	2		0	0.87s
✅ PYTHON	flake8	2		0	0.52s
✅ PYTHON	isort	2		0	0.28s
✅ PYTHON	mypy	2		0	7.7s
✅ PYTHON	ruff	2		0	0.01s
✅ REPOSITORY	checkov	yes		no	11.57s
✅ REPOSITORY	gitleaks	yes		no	0.12s
✅ REPOSITORY	git_diff	yes		no	0.0s
✅ REPOSITORY	grype	yes		no	12.66s
✅ REPOSITORY	kics	yes		no	3.49s
✅ REPOSITORY	secretlint	yes		no	0.73s
✅ REPOSITORY	syft	yes		no	0.49s
✅ REPOSITORY	trivy	yes		no	6.55s
✅ REPOSITORY	trivy-sbom	yes		no	3.71s
✅ REPOSITORY	trufflehog	yes		no	3.2s
✅ YAML	prettier	6		0	0.54s
✅ YAML	yamllint	6		0	0.32s

See detailed report in MegaLinter reports

You could have same capabilities but better runtime performances if you request a new MegaLinter flavor.

• Click here to request the new flavor

MegaLinter is graciously provided by

[miracum-bot]

🎉 This issue has been resolved in version 1.0.7 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀