Description

notatallshaw

opened on Oct 20, 2026

Issue body actions

Feature or enhancement

Update ensurepip’s bundled pip from 26.2.1 to 26.2.2.

pip 26.2.2 updates its bundled certifi trust bundle to 2026.10.19. This removes emSign Root CA - G3 following the revocation of affected G3 intermediates for CA compromise, while retaining the unaffected emSign roots.

• pip release: https://pypi.org/project/pip/26.2.2/
• pip changelog: https://pip.pypa.io/en/stable/news/#v26-2-2
• certifi update details: Why was emSign removed? certifi/python-certifi#439 (comment)

Has this already been discussed elsewhere?

This is a minor feature, which does not need previous discussion elsewhere

Links to previous discussion of this feature:

#155196
#155196

Linked PRs

• gh-159894: Upgrade bundled pip to 26.2.2 #159910
• [3.15] gh-159894: Upgrade bundled pip to 26.2.2 (GH-159910) #159941
• [3.14] gh-159894: Upgrade bundled pip to 26.2.2 (GH-159910) #159942
• [3.13] gh-159894: Upgrade bundled pip to 26.2.2 (GH-159910) #159943

Activity

1. notatallshaw

   added

   type-featureA feature request or enhancementA feature request or enhancement

   on Oct 20, 2026
2. StanFromIreland

   added

   stdlibStandard Library Python modules in the Lib/ directoryStandard Library Python modules in the Lib/ directory

   topic-ensurepip

   type-securityA security issueA security issue

   and removed

   type-featureA feature request or enhancementA feature request or enhancement

   on Oct 20, 2026
3. notatallshaw

   added a commit that references this issue on Oct 20, 2026

   pythongh-159894: Upgrade bundled pip to 26.2.2

   bee6e7d
4. StanFromIreland

   added a commit that references this issue on Oct 20, 2026

   gh-159894: Upgrade bundled pip to 26.2.2 (#159910)

   39d7c0f
5. hugovk

   added 2 commits that reference this issue on Oct 20, 2026

   [3.14] gh-159894: Upgrade bundled pip to 26.2.2 (GH-159910) (#159942)

   ce7dafd

   [3.15] gh-159894: Upgrade bundled pip to 26.2.2 (GH-159910) (#159941)

   576b233
6. Yhg1s

   added a commit that references this issue on Oct 21, 2026

   [3.13] gh-159894: Upgrade bundled pip to 26.2.2 (GH-159910) (#159943)

   d811ad4
7. StanFromIreland

   closed this as completedon Oct 21, 2026
8. mayeut commented on Oct 21, 2026

   

   mayeut

   on Oct 21, 2026

   Contributor

   More actions

   Given this is a security related upgrade rather than a regular pip upgrade, shouldn't this be back ported to 3.11 & 3.12 as well ?

   Reacted by clayg
9. StanFromIreland commented on Oct 21, 2026

   

   StanFromIreland

   on Oct 21, 2026

   Member

   More actions

   As noted in the announcement, we don't update pip for those versions, 3.13 was an exception.
10. icanhasmath

    added a commit that references this issue on Oct 28, 2026

    pythongh-159894: Upgrade bundled pip to 26.2.2 (3.10.22.x)

    005744b

Issue actions