From 02328dfcd0832f4d690c3a3b2a17da13070282dc Mon Sep 17 00:00:00 2001
From: joshavant <830519+joshavant@users.noreply.github.com>
Date: Wed, 21 Oct 2026 02:44:50 -0500
Subject: [PATCH] fix(security): refresh worker TLS dependencies after CA
 compromise

---
 scripts/security/aig-worker-requirements.txt  | 4 ++--
 scripts/security/install-clawscan-scanners.sh | 2 +-
 scripts/security/install-clawscan.sh          | 2 +-
 specs/security-consumer-model-policy.md       | 4 ++--
 4 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/scripts/security/aig-worker-requirements.txt b/scripts/security/aig-worker-requirements.txt
index 644eb52af7..cee4e8904f 100644
--- a/scripts/security/aig-worker-requirements.txt
+++ b/scripts/security/aig-worker-requirements.txt
@@ -9,8 +9,8 @@ annotated-types==0.8.0 \
   --hash=sha256:f072f4d804ea359e4eaf198b1af7a8b0943881a87f31bb764f8bf219bb9419e0
 anyio==4.15.0 \
   --hash=sha256:7ecd9937369ffce8bba0b5ccb9b3a9507b101b0ed50256aecfbab27e6c2acb99
-certifi==2026.7.22 \
-  --hash=sha256:62f22742b58a1a33014a2b6b706588a8d7e2a88ae7bd1a6ebe8c992928483775
+certifi==2026.10.19 \
+  --hash=sha256:42d35340cc5b9ba78e818ddbff0c5b1c2b779de448a340fd1b989f5fa8670e1b
 chardet==5.2.0 \
   --hash=sha256:e1cf59446890a00105fe7b7912492ea04b6e6f06d4b742b2c788469e34c82970
 distro==1.9.0 \
diff --git a/scripts/security/install-clawscan-scanners.sh b/scripts/security/install-clawscan-scanners.sh
index 0e3d9977ac..df1742cd0a 100644
--- a/scripts/security/install-clawscan-scanners.sh
+++ b/scripts/security/install-clawscan-scanners.sh
@@ -34,7 +34,7 @@ git -C "$source_dir" checkout --quiet --detach FETCH_HEAD
 git -C "$source_dir" apply --check "$runtime_dir/patches/$scanner-responses.patch"
 git -C "$source_dir" apply "$runtime_dir/patches/$scanner-responses.patch"
 # Pin the existing maintained resolver; SkillSpector ships an upstream uv.lock.
-python -m pip install "uv==0.12.5"
+python -m pip install "uv==0.13.4"
 if [ "$scanner" = skillspector ]; then
   uv sync --locked --no-dev --project "$source_dir"
   venv="$source_dir/.venv"
diff --git a/scripts/security/install-clawscan.sh b/scripts/security/install-clawscan.sh
index 4e9fc848a8..f3e9f4a3af 100644
--- a/scripts/security/install-clawscan.sh
+++ b/scripts/security/install-clawscan.sh
@@ -16,7 +16,7 @@ git -C "$source_dir" remote add origin https://github.com/openclaw/clawscan.git
 git -C "$source_dir" fetch --quiet --depth 1 origin "$source_commit"
 git -C "$source_dir" checkout --quiet --detach FETCH_HEAD
 [ "$(git -C "$source_dir" rev-parse HEAD)" = "$source_commit" ]
-export GOTOOLCHAIN=go1.27.2
+export GOTOOLCHAIN=go1.27.3
 bin_dir="$RUNNER_TEMP/clawscan-bin"
 mkdir -p "$bin_dir"
 (cd "$source_dir" && go build -trimpath -o "$bin_dir/clawscan" ./cmd/clawscan)
diff --git a/specs/security-consumer-model-policy.md b/specs/security-consumer-model-policy.md
index 82813c20e6..5de72ca8e9 100644
--- a/specs/security-consumer-model-policy.md
+++ b/specs/security-consumer-model-policy.md
@@ -39,7 +39,7 @@ Sol function/tool calls require Responses rather than Chat Completions.
 `clawscan-source-commit.txt` pins merged ClawScan commit
 `5be7f8e97fa474f0aa9eb443f38d9e3d5f51226b` (upstream PR #68). The
 workflow installer fetches that exact commit, verifies HEAD, builds its Go CLI
-with Go 1.27.2, and retains the matching source tree for host scanner installation.
+with Go 1.27.3, and retains the matching source tree for host scanner installation.
 No mutable `main`, `latest`, or unapproved public ClawScan release is consumed.
 
 Codex 0.160 normalizes its explicit `service_tier="default"` configuration by
@@ -64,7 +64,7 @@ real-adapter tests as that ClawScan revision's runtime image:
 - The source pins are read from the reviewed ClawScan Dockerfile and checked as
   full commit IDs, so host/image implementations cannot silently drift. Patch
   applicability and the real installed adapter tests are mandatory install gates.
-- The maintained resolver is pinned to uv 0.12.5. Pytest 9.0.2 is test-only. Source
+- The maintained resolver is pinned to uv 0.13.4. Pytest 9.0.2 is test-only. Source
   revisions and runtime dependencies are pinned; Python isolated-build backend
   dependencies are not claimed to be fully hash-reproducible. The AIG hash lock
   additionally admits the published macOS arm64 CPython 3.12 wheels for `jiter`