From 73eb77cb6e813f9ee715fa840e0d6563f80e87e6 Mon Sep 17 00:00:00 2001
From: Roland Walker <walker@pobox.com>
Date: Sat, 24 Oct 2026 08:02:55 -0400
Subject: [PATCH] update pip LLM dependency to v26.2.2

per security advisory

 * https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576

incidentally removing defunct cooldown excludes
---
 changelog.md   | 1 +
 pyproject.toml | 5 ++---
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/changelog.md b/changelog.md
index 1d17d22a..db191b38 100644
--- a/changelog.md
+++ b/changelog.md
@@ -4,6 +4,7 @@ Upcoming (TBD)
 Internal
 --------
 * Update `pycryptodomex` to v3.24.1.
+* Update `pip` LLM dependency to v26.2.2.
 
 
 v2.30.0 (2026/10/17)
diff --git a/pyproject.toml b/pyproject.toml
index 3a899dc0..aa46a466 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -64,7 +64,7 @@ build-backend = "setuptools.build_meta"
 llm = [
     "llm ~= 0.36",
     "setuptools == 84.*",                   # Required by llm commands to install models
-    "pip ~= 26.2.1",
+    "pip ~= 26.2.2",
 ]
 dataframe = [
     "polars ~= 2.0.0",
@@ -101,8 +101,7 @@ exclude-newer = '1 week'
 
 [tool.uv.exclude-newer-package]
 cli_helpers = false
-sqlglot = false                             # removeme after 2026-10-22
-sqlglotc = false                            # removeme after 2026-10-22
+pip = false                                 # removeme after 2026-10-27
 
 [tool.ruff]
 target-version = 'py311'