fix(security): refresh client trust and adopt corrected upstream SearXNG (#6791)

mirror of https://github.com/pewdiepie-archdaemon/odysseus.git synced 2026-10-25 15:22:24 +01:00

Select the official immutable SearXNG release with corrected system and certifi stores in all Compose deployments. Retain native offline, actual-entrypoint and Compose/live regression checks while removing the custom trust-repair image and registry publication path. Reuse the canonical CA inventory checker.

Include released Python, certifi, grpcio, uv and Docker CLI trust updates and strict fourteen-chain validation. Keep unreleased CPython verifier and native-helper fixes separate from claims about shipped artifacts.

Part of #6784 and #6790.

Co-authored-by: Léo <leograndcontact@gmail.com>

This commit is contained in:

RaresKeY

2026-10-24 17:26:21 +02:00

committed by

GitHub

co-authored by

Léo

parent f8e043e8ca

commit ed78beee1b

21 changed files with 622 additions and 33 deletions

									
										docker/searxng/Dockerfile.dockerignore
									
		+10
		
												View File
												
				@@ -0,0 +1,10 @@

				**

				!scripts/

				!scripts/check_ca_trust.py

				!docker/

				!docker/searxng/

				!docker/searxng/**

				!tests/

				!tests/fixtures/

				!tests/fixtures/ca-trust/

				!tests/fixtures/ca-trust/incident.json