install nox[uv] in linkcheck job too (#13284)

* install nox[uv] in linkcheck job too

* increase linkcheck timeout

We're being rate limited on linkchecks against github.com which is causing the job to timeout. Heavy sigh emoji

* skip github links, sigh

* format fix, remove link to old source of verisign md2 root

we don't care where it came from really, just that it's an md2 root

Author: reaperhulk

.github/workflows/linkcheck.yml

@@ -18,7 +18,7 @@ jobs:
   docs-linkcheck:
     runs-on: ubuntu-latest
     name: "linkcheck"
-    timeout-minutes: 10
+    timeout-minutes: 20
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
@@ -35,7 +35,7 @@ jobs:
           # This creates the same key as the docs job (as long as they have the same
           # python version)
           key: 3.11-${{ steps.setup-python.outputs.python-version }}
-      - run: python -m pip install -c ci-constraints-requirements.txt nox
+      - run: python -m pip install -c ci-constraints-requirements.txt 'nox[uv]'
       - name: Build nox environment
         run: |
             nox -v --install-only -s docs-linkcheck

docs/conf.py

@@ -201,13 +201,12 @@
     r"https://\w+.stackexchange.com",
     r"https://stackoverflow.com",
     r"https://webstore.ansi.org",
-    # GitHub changed how they do page renders so anchor detection
-    # no longer works in source view
-    r"https://github.com/.*/blob/.*#L\d+",
     # Kuleuven struggles with the endless forward march of time
     r"https://www.cosic.esat.kuleuven.be",
     # CMU doesn't know how to send intermediates
     r"https://wiki.sei.cmu.edu",
+    # GitHub has started heavily rate-limiting causing job failures
+    r"https://github.com",
 ]
 
 autosectionlabel_prefix_document = True

docs/development/test-vectors.rst

@@ -352,8 +352,7 @@ X.509
 * ``ecdsa_root.pem`` - `DigiCert Global Root G3`_, a ``secp384r1`` ECDSA root
   certificate.
 * ``verisign-md2-root.pem`` - A legacy Verisign public root signed using the
-  MD2 algorithm. This is a PEM conversion of the `root data`_ in the NSS source
-  tree.
+  MD2 algorithm.
 * ``cryptography.io.pem`` - A leaf certificate issued by RapidSSL for the
   cryptography website.
 * ``cryptography.io.old_header.pem`` - A leaf certificate issued by RapidSSL
@@ -1238,7 +1237,6 @@ header format (substituting the correct information):
 .. _`NIST PKI Testing`: https://csrc.nist.gov/Projects/PKI-Testing
 .. _`testx509.pem`: https://github.com/openssl/openssl/blob/master/test/testx509.pem
 .. _`DigiCert Global Root G3`: http://cacerts.digicert.com/DigiCertGlobalRootG3.crt
-.. _`root data`: https://hg.mozilla.org/projects/nss/file/25b2922cc564/security/nss/lib/ckfw/builtins/certdata.txt#l2053
 .. _`asymmetric/public/PKCS1/dsa.pub.pem`: https://github.com/ruby/ruby/blob/4ccb387f3bc436a08fc6d72c4931994f5de95110/test/openssl/test_pkey_dsa.rb#L53
 .. _`Mozilla bug`: https://bugzilla.mozilla.org/show_bug.cgi?id=233586
 .. _`Russian CA`: https://e-trust.gosuslugi.ru/