Release notes for sbmlsim 0.10.1

A security release of the dependencies: the CA bundle sbmlsim reaches the network with no longer trusts the emSign root CA whose intermediate keys were compromised. The simulations and the fits are unchanged.

Security

• certifi >= 2026.10.19 (GHSA-6q48-6c7w-9gw2, #348). certifi 2026.10.19 removes the emSign root CA of the compromised intermediate keys. sbmlsim reaches the network through requests (sbmlutils, pymetadata), so certifi>=2026.10.19 is now a direct dependency, for its floor. The lock of the development environment moves certifi to 2026.10.19 and uv to 0.13.4 (GHSA-hq85-5cpj-mr62, the CA store bundled with uv).

Dependencies

• pydantic >= 2.14.1 (#345). pydantic-numpy 9.1.0, which petab-sciml requires through mkstd (the sciml extra), allows a current pydantic, so the lowered floor pydantic>=2.12 of #288 is raised again and pip resolves sbmlsim[sciml] on python 3.14 with a current pydantic.

Development

• The tox environments install pypdf, which the tests of the PDF reports import (#348).