[fivetran-allisonrochelle]

Description

Update the certifi minimum from 2025.8.3 to 2026.10.19 in both tidb/requirements.txt and the README setup example. Certifi 2026.10.18 removed all emSign roots after eight eMudhra intermediate CA keys were compromised; 2026.10.19 restores unaffected emSign roots while keeping the compromised chain out of the bundle. See GHSA-6q48-6c7w-9gw2.

Validation

• Confirmed both files specify certifi>=2026.10.19.
• git diff --check passes.
• No connector code changed; no fivetran debug run was needed for this repository-maintenance change.

Checklist

• All contributions: Confirmed that the change and validation evidence contain no credentials, personal data, customer information, or other sensitive values.

[cla-assistant]

All committers have signed the CLA.

[cla-assistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[Copilot]

🟢 Approval recommended

The narrowly scoped dependency updates are consistent, with no unresolved findings.

No open issues 🎉

What changed in this PR

Updates the TiDB connector example’s minimum certifi version to address the cited CA-bundle security advisory.

Changes:

• Raises the minimum version from 2025.8.3 to 2026.10.19.
• Keeps the README dependency example aligned; connector code is unchanged.

File	Description
tidb/​requirements.txt	Raises the certifi minimum version.
tidb/​README.md	Updates the documented dependency minimum.

_{Review effort: Balanced}