{"repo":"NousResearch/hermes-agent","public_id":"137255","display_label":"Stale certifi CA bundle path after install-environment rotation","summary":"The members describe one problem: after an install-environment rotation, TLS clients keep using a certifi CA bundle path that points to a deleted directory. One bug report and two pull requests with identical titles propose re-resolving the path; the members do not show whether any fix was merged or works.","subsystem":"agent","counts":{"members":4,"open_issues":0,"open_issues_distinct":0,"open_prs":0,"closed_issues":1,"merged_prs":1,"attempt_prs":2},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":140376,"merged_at":"2026-10-18T00:34:38+00:00"},"resolution":{"state":"resolved","by":"pr-140376"},"freshness":{"state":"verified","last_verified_at":"2026-10-18T00:34:38+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":1.0},"fix_edges":[{"issue_number":137255,"pr_number":140376,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-10-18T00:34:38+00:00"}],"members":[{"kind":"issue","number":137255,"title":"[Bug]: TLS clients die after an install-environment rotation — certifi's CA bundle path stays in the deleted directory","url":null,"state":"closed"},{"kind":"pr","number":137256,"title":"fix(ssl): re-resolve certifi's CA bundle path after an install-environment rotation","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"7cc3fb8cb5","number":0}],"category":"uncategorized","implication":"needs_llm"},"merged":false},{"kind":"pr","number":137341,"title":"fix(ssl): re-resolve certifi's CA bundle path after an install-environment rotation","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"17724f1f33","number":0},{"kind":"pr","value":"#140376","number":140376},{"kind":"pr","value":"#137341","number":137341}],"category":"duplicate_of","implication":"duplicate"},"merged":false},{"kind":"pr","number":140376,"title":"fix(ssl): keep TLS working after an install-environment rotation (salvage #137341)","url":null,"state":"merged","close_reason":{"category":"merged"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["agent/ssl_verify.py","contributors/emails/[redacted:email]","hermes_cli/auth_device_flow.py","plugins/browser/_common.py","plugins/model-providers/actual/__init__.py","plugins/platforms/wecom/adapter.py","plugins/platforms/weixin/adapter.py","plugins/web/keenable/provider.py","tests/agent/test_ssl_verify.py","tests/hermes_cli/test_auth_nous_provider.py"]}],"trust":{"default_tier":"verified","includes_suggested":false}}