bump certifi dep

Author: blink1073

.evergreen/generated_configs/tasks.yml

@@ -87,7 +87,7 @@ tasks:
           SUB_TEST_NAME: web-identity
           PYTHON_VERSION: "3.14"
     tags: [auth-aws, auth-aws-web-identity]
-  - name: test-auth-aws-rapid-web-identity-session-name-python3.9-min-deps
+  - name: test-auth-aws-rapid-web-identity-session-name-python3.14
     commands:
       - func: run server
         vars:
@@ -99,8 +99,7 @@ tasks:
           TEST_NAME: auth_aws
           SUB_TEST_NAME: web-identity
           AWS_ROLE_SESSION_NAME: test
-          PYTHON_VERSION: "3.9"
-          TEST_MIN_DEPS: true
+          PYTHON_VERSION: "3.14"
     tags: [auth-aws, auth-aws-web-identity]
   - name: test-auth-aws-latest-ecs-python3.9
     commands:

.evergreen/scripts/generate_config.py

@@ -630,7 +630,7 @@ def create_test_non_standard_tasks():
 
 
 def create_min_deps_tasks():
-    # TODO: create two tasks for testing min deps here and use them in encryption variants.
+    """For variants that support testing with minimum dependencies."""
     tasks = []
     for topology in TOPOLOGIES:
         auth, ssl = get_standard_auth_ssl(topology)
@@ -743,16 +743,12 @@ def create_aws_tasks():
 
         if test_type == "web-identity":
             tags = [*base_tags, "auth-aws-web-identity"]
-            python = CPYTHONS[0]  # noqa: PLW2901
-            name = get_task_name(
-                f"{base_name}-web-identity-session-name", python=python, test_min_deps=True
-            )
+            name = get_task_name(f"{base_name}-web-identity-session-name", python=python)
             test_vars = dict(
                 TEST_NAME="auth_aws",
                 SUB_TEST_NAME="web-identity",
                 AWS_ROLE_SESSION_NAME="test",
                 PYTHON_VERSION=python,
-                TEST_MIN_DEPS=True,
             )
             test_func = FunctionCall(func="run tests", vars=test_vars)
             funcs = [server_func, assume_func, test_func]

pyproject.toml

@@ -123,8 +123,6 @@ filterwarnings = [
     "module:please use dns.resolver.Resolver.resolve:DeprecationWarning",
     # https://github.com/dateutil/dateutil/issues/1314
     "module:datetime.datetime.utc:DeprecationWarning",
-    # TODO: remove in XXXX
-    "module:pkg_resources is deprecated as an API:UserWarning",
 ]
 markers = [
     "auth_aws: tests that rely on pymongo-auth-aws",

requirements/encryption.txt

@@ -1,3 +1,3 @@
 pymongo-auth-aws>=1.1.0,<2.0.0
 pymongocrypt>=1.13.0,<2.0.0
-certifi>=2020.4.5;os.name=='nt' or sys_platform=='darwin'
+certifi>=2023.7.22;os.name=='nt' or sys_platform=='darwin'

requirements/ocsp.txt

@@ -5,7 +5,7 @@
 # Fallback to certifi on Windows if we can't load CA certs from the system
 # store and just use certifi on macOS.
 # https://www.pyopenssl.org/en/stable/api/ssl.html#OpenSSL.SSL.Context.set_default_verify_paths
-certifi;os.name=='nt' or sys_platform=='darwin'
+certifi>=2023.7.22;os.name=='nt' or sys_platform=='darwin'
 pyopenssl>=17.2.0
 requests<3.0.0
 cryptography>=2.5