Upgrade certifi to 2024.2.2

Author: sbidoul

news/certifi.vendor.rst

@@ -0,0 +1 @@
+Upgrade certifi to 2024.2.2

src/pip/_vendor/certifi/LICENSE

@@ -2,7 +2,6 @@ This package contains a modified version of ca-bundle.crt:
 
 ca-bundle.crt -- Bundle of CA Root Certificates
 
-Certificate data from Mozilla as of: Thu Nov  3 19:04:19 2011#
 This is a bundle of X.509 certificates of public Certificate Authorities
 (CA). These were automatically extracted from Mozilla's root certificates
 file (certdata.txt).  This file can be found in the mozilla source tree:

src/pip/_vendor/certifi/__init__.py

@@ -1,4 +1,4 @@
 from .core import contents, where
 
 __all__ = ["contents", "where"]
-__version__ = "2023.07.22"
+__version__ = "2024.02.02"

src/pip/_vendor/certifi/cacert.pem

@@ -5,6 +5,10 @@
 This module returns the installation location of cacert.pem or its contents.
 """
 import sys
+import atexit
+
+def exit_cacert_ctx() -> None:
+    _CACERT_CTX.__exit__(None, None, None)  # type: ignore[union-attr]
 
 
 if sys.version_info >= (3, 11):
@@ -35,6 +39,7 @@ def where() -> str:
             # we will also store that at the global level as well.
             _CACERT_CTX = as_file(files("pip._vendor.certifi").joinpath("cacert.pem"))
             _CACERT_PATH = str(_CACERT_CTX.__enter__())
+            atexit.register(exit_cacert_ctx)
 
         return _CACERT_PATH
 
@@ -70,6 +75,7 @@ def where() -> str:
             # we will also store that at the global level as well.
             _CACERT_CTX = get_path("pip._vendor.certifi", "cacert.pem")
             _CACERT_PATH = str(_CACERT_CTX.__enter__())
+            atexit.register(exit_cacert_ctx)
 
         return _CACERT_PATH
 

src/pip/_vendor/certifi/core.py

@@ -8,7 +8,7 @@ platformdirs==4.2.0
 pyparsing==3.1.0
 pyproject-hooks==1.0.0
 requests==2.31.0
-    certifi==2023.7.22
+    certifi==2024.2.2
     chardet==5.2.0
     idna==3.6
     urllib3==1.26.18

src/pip/_vendor/vendor.txt

@@ -1,14 +1,15 @@
 diff --git a/src/pip/_vendor/certifi/core.py b/src/pip/_vendor/certifi/core.py
-index de028981b..c3e546604 100644
+index 91f538bb1..70e0c3bdb 100644
 --- a/src/pip/_vendor/certifi/core.py
 +++ b/src/pip/_vendor/certifi/core.py
-@@ -33,13 +33,13 @@ def where() -> str:
+@@ -37,14 +37,14 @@ if sys.version_info >= (3, 11):
              # We also have to hold onto the actual context manager, because
              # it will do the cleanup whenever it gets garbage collected, so
              # we will also store that at the global level as well.
 -            _CACERT_CTX = as_file(files("certifi").joinpath("cacert.pem"))
 +            _CACERT_CTX = as_file(files("pip._vendor.certifi").joinpath("cacert.pem"))
              _CACERT_PATH = str(_CACERT_CTX.__enter__())
+             atexit.register(exit_cacert_ctx)
 
          return _CACERT_PATH
 
@@ -18,13 +19,14 @@ index de028981b..c3e546604 100644
 
  elif sys.version_info >= (3, 7):
 
-@@ -68,13 +68,13 @@ def where() -> str:
+@@ -73,14 +73,14 @@ elif sys.version_info >= (3, 7):
              # We also have to hold onto the actual context manager, because
              # it will do the cleanup whenever it gets garbage collected, so
              # we will also store that at the global level as well.
 -            _CACERT_CTX = get_path("certifi", "cacert.pem")
 +            _CACERT_CTX = get_path("pip._vendor.certifi", "cacert.pem")
              _CACERT_PATH = str(_CACERT_CTX.__enter__())
+             atexit.register(exit_cacert_ctx)
 
          return _CACERT_PATH
 
@@ -34,7 +36,7 @@ index de028981b..c3e546604 100644
 
  else:
      import os
-@@ -105,4 +105,4 @@ def where() -> str:
+@@ -111,4 +111,4 @@ else:
          return os.path.join(f, "cacert.pem")
 
      def contents() -> str: