fix: more patches for gamayun

certification_patches/nghttp2_fetch-ocsp-response.patch

 diff --git a/script/fetch-ocsp-response b/script/fetch-ocsp-response
-index 0ff7461e..2fb75c40 100755
+index 0ff7461e..2f0ac0c2 100755
 --- a/script/fetch-ocsp-response
 +++ b/script/fetch-ocsp-response
+@@ -55,7 +55,7 @@ import os
+ import os.path
+ import re
+ import shutil
+-import subprocess
++import subprocess  # nosec
+ import sys
+ import tempfile
+ 
 @@ -83,7 +83,7 @@ def tempfail(msg):
  def run_openssl(args, allow_tempfail=False):
      buf = io.BytesIO()

certification_patches/tarantool-sys_icu_common_exec.patch

 diff --git a/vendor/icu4c-71_1/source/python/icutools/databuilder/renderers/common_exec.py b/vendor/icu4c-71_1/source/python/icutools/databuilder/renderers/common_exec.py
-index 91c12fdcf..173bd0216 100644
+index 91c12fdcf..53200bfe7 100644
 --- a/vendor/icu4c-71_1/source/python/icutools/databuilder/renderers/common_exec.py
 +++ b/vendor/icu4c-71_1/source/python/icutools/databuilder/renderers/common_exec.py
+@@ -12,7 +12,7 @@ from ..request_types import *
+ 
+ import os
+ import shutil
+-import subprocess
++import subprocess  # nosec
+ import sys
+ 
+ def run(build_dirs, requests, common_vars, verbose=True, **kwargs):
 @@ -68,7 +68,8 @@ def run_helper(request, common_vars, platform, tool_dir, verbose, tool_cfg=None,
          # No-op
          return 0
@@ -22,3 +31,21 @@ index 91c12fdcf..173bd0216 100644
  
  def run_shell_command(command_line, platform, verbose):
      changed_windows_comspec = False
+@@ -138,7 +140,7 @@ def run_shell_command(command_line, platform, verbose):
+         returncode = subprocess.call(
+             command_line,
+             shell = True
+-        )
++        )  # nosec
+     else:
+         # Pipe output to /dev/null in quiet mode
+         with open(os.devnull, "w") as devnull:
+@@ -147,7 +149,7 @@ def run_shell_command(command_line, platform, verbose):
+                 shell = True,
+                 stdout = devnull,
+                 stderr = devnull
+-            )
++            )  # nosec
+     if changed_windows_comspec:
+         os.environ["COMSPEC"] = previous_comspec
+     if returncode != 0:

certification_patches/tarantool-sys_openssl_helper.patch

+diff --git a/vendor/openssl-1.1.1q/fuzz/helper.py b/vendor/openssl-1.1.1q/fuzz/helper.py
+index e83ea00c0..0a6e71f78 100755
+--- a/vendor/openssl-1.1.1q/fuzz/helper.py
++++ b/vendor/openssl-1.1.1q/fuzz/helper.py
+@@ -13,7 +13,7 @@ fuzzer.py <fuzzer> <extra fuzzer arguments>
+ """
+ 
+ import os
+-import subprocess
++import subprocess  # nosec
+ import sys
+ 
+ FUZZER = sys.argv[1]
+@@ -46,7 +46,7 @@ def main():
+     cmd = ([os.path.abspath(os.path.join(THIS_DIR, FUZZER))]  + sys.argv[2:]
+            + ["-artifact_prefix=" + corpora[1] + "/"] + corpora)
+     print(" ".join(cmd))
+-    subprocess.call(cmd)
++    subprocess.call(cmd)  # nosec
+ 
+ if __name__ == "__main__":
+     main()

certification_patches/zstd_primaryDockerfile.patch

+diff --git a/.circleci/images/primary/Dockerfile b/.circleci/images/primary/Dockerfile
+index bfcb6af6..9b744ad1 100644
+--- a/.circleci/images/primary/Dockerfile
++++ b/.circleci/images/primary/Dockerfile
+@@ -1,8 +1,8 @@
+ FROM circleci/buildpack-deps:focal
+ 
+-RUN sudo dpkg --add-architecture i386
+-RUN sudo apt-get -y -qq update
+-RUN sudo apt-get -y install \
++RUN dpkg --add-architecture i386
++RUN apt-get -y -qq update
++RUN apt-get -y install \
+     gcc-multilib-powerpc-linux-gnu gcc-arm-linux-gnueabi \
+     libc6-dev-armel-cross gcc-aarch64-linux-gnu libc6-dev-arm64-cross \
+     libc6-dev-ppc64-powerpc-cross zstd gzip coreutils \

picodata-webui @ d84db9a1

-Subproject commit 25706b6b59718748e1b92efffbf34d44e3d73a8c
+Subproject commit d84db9a127e0c6e4649ab95463e699f0ae922e8a