From 350db3d2da270703d775af57a106250eb0c1b18f Mon Sep 17 00:00:00 2001
From: Julien Cristau <jcristau@mozilla.com>
Date: Thu, 5 Mar 2026 17:10:24 +0100
Subject: [PATCH 1/2] Update winsign to 2.3.0

Adds compatibility with osslsigncode 2.6+
---
 uv.lock | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/uv.lock b/uv.lock
index 0023260c8..7b9f90b18 100644
--- a/uv.lock
+++ b/uv.lock
@@ -4543,16 +4543,19 @@ wheels = [
 
 [[package]]
 name = "winsign"
-version = "2.2.4"
+version = "2.3.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
+    { name = "aiohttp" },
     { name = "construct" },
     { name = "cryptography" },
     { name = "pyasn1" },
     { name = "pyasn1-modules" },
+    { name = "rsa" },
 ]
+sdist = { url = "https://files.pythonhosted.org/packages/02/3c/10d2cb98db0799cf84bb8833bf25c7f6d0af0028d8f0a28fc3c2f3597523/winsign-2.3.0.tar.gz", hash = "sha256:d850339143a43888280cf95657b4b068c07e1b5a13ab51e01c9b52be3d7b983e", size = 46708493, upload-time = "2026-02-25T13:46:00.004Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/06/2a/bd80fda66ad7131417a08b7c5c5a5cf9a860eb7bf1d1ab3f7b3d43a42c9e/winsign-2.2.4-py3-none-any.whl", hash = "sha256:54ad848993a10b16a88779845b366e257cf1218ce03be8004ff45846fca6f0aa", size = 27712, upload-time = "2022-05-24T17:05:24.197Z" },
+    { url = "https://files.pythonhosted.org/packages/7d/9a/8c79782d069a6abca9204a62a2779cde43dc1f20d723771b18550df0c50f/winsign-2.3.0-py3-none-any.whl", hash = "sha256:8a86382a6200be0abd7c00f9807aa696e5b5a3f82b64d4c28c74ca9e438dbbec", size = 32842, upload-time = "2026-02-25T13:45:57.977Z" },
 ]
 
 [[package]]

From 2140fa733263204b2c54d2a200035e86440611ef Mon Sep 17 00:00:00 2001
From: Julien Cristau <jcristau@mozilla.com>
Date: Thu, 5 Mar 2026 17:19:23 +0100
Subject: [PATCH 2/2] Bump python3.11 docker images from 3.11.9 to 3.11.15

This also updates the underlying OS from debian 12 to debian 13.
---
 taskcluster/kinds/docker-image/kind.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/taskcluster/kinds/docker-image/kind.yml b/taskcluster/kinds/docker-image/kind.yml
index 2cf5c8535..788c34a52 100644
--- a/taskcluster/kinds/docker-image/kind.yml
+++ b/taskcluster/kinds/docker-image/kind.yml
@@ -11,7 +11,7 @@ transforms:
     - taskgraph.transforms.task:transforms
 
 meta:
-    - &py311 "3.11.9"
+    - &py311 "3.11.15"
     - &py313 "3.13.12"
     - &uv_version "0.7.15"
 
@@ -84,7 +84,7 @@ tasks:
         args:
             SCRIPT_NAME: pushmsixscript
     signingscript:
-        # python:3.11.9 docker image contains osslsigncode 2.5.
+        # python:3.11.15 docker image contains osslsigncode 2.9.
         # if the image changes, verify version of osslsigncode and make sure winsign works as well
         parent: base
     treescript: