From 12df6baf72275d0c2b2f6fcc4072408e6cda3e41 Mon Sep 17 00:00:00 2001
From: Michele Sorcinelli <michele.sorcinelli@citizensadvice.org.uk>
Date: Fri, 23 Oct 2026 11:40:37 +0100
Subject: [PATCH] Require uv >= 0.13.5 (eMudhra CA distrust)

uv 0.13.4 updated its bundled CA roots in response to the eMudhra intermediate CA key compromise. Older uv versions keep trusting the compromised chains.
---
 pyproject.toml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pyproject.toml b/pyproject.toml
index e05b222..01bb8e2 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -22,7 +22,7 @@ module-name = "python_project_template"
 module-root = "."
 
 [tool.uv]
-required-version = ">=0.8.4"
+required-version = ">=0.13.5"
 
 [tool.ruff]
 target-version = 'py313'