fix(deps): upgrade pip to 26.1.2 for uv audit (PYSEC-2026-196)

Lucia-Poma · Lucia-Poma · commit a3d0a5718f08 · 2026-06-05T17:52:34.000+02:00
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -9,7 +9,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Fixed
 
-- Dependency audit: pin ``uv>=0.11.15`` (GHSA-4gg8-gxpx-9rph).
+- Dependency audit: pin ``uv>=0.11.15`` (GHSA-4gg8-gxpx-9rph); upgrade ``pip`` to
+  26.1.2 (PYSEC-2026-196, Briefcase transitive dep).
 
 ## [0.4.0] - 2026-06-01
 
diff --git a/pyproject.toml b/pyproject.toml
@@ -144,7 +144,7 @@ quiet = false
 
 [tool.uv]
 exclude-newer = "1 week"
-exclude-newer-package = { lxml = false, idna = false }
+exclude-newer-package = { lxml = false, idna = false, pip = false }
 
 [tool.towncrier]
 package = "dbs_annotator"
diff --git a/uv.lock b/uv.lock
