KofTwentyTwo/nuncio
2
0 Fork 0
Code Issues 73 Pull Requests 12 Actions Packages Projects Releases Wiki Activity

build(deps): bump webpki-roots from 0.26.11 to 1.0.9 #92

Merged
dependabot[bot] merged 1 commits from dependabot/cargo/webpki-roots-1.0.9 into main 2026-07-23 20:31:56 +00:00
Conversation 0 Commits 1 Files Changed 2
+5 -57
dependabot[bot] commented 2026-07-23 20:29:34 +00:00 (Migrated from github.com)
Copy link
Copy source

Bumps webpki-roots from 0.26.11 to 1.0.9.

Release notes

Sourced from webpki-roots's releases.

1.0.9

Changes:

What's Changed

New Contributors

Full Changelog: https://github.com/rustls/webpki-roots/compare/v/1.0.8...v/1.0.9

1.0.8

What's Changed

Full Changelog: https://github.com/rustls/webpki-roots/compare/v/1.0.7...v/1.0.8

1.0.7

For their April 2026 root store changes, Mozilla has made more changes than usual:

These changes are part of Mozilla’s ongoing root store maintenance under the Mozilla Root Store Policy (MRSP), including §7.4 (Root CA Lifecycles) and §7.5.3 (Transition Plans). They reflect a combination of lifecycle-based transitions, CA operator requests, and alignment with intended certificate usage, including retiring older or less suitable root certificates, enforcing clear separation of trust purposes (e.g., TLS vs. S/MIME), and reducing unnecessary trust surface in the Web PKI ecosystem. Collectively, these actions help to ensure that root certificates are relied upon only for their intended and actively maintained use cases, or are retired in accordance with established distrust timelines.

This removes:

  • CN=Certigna O=Dhimyotis
  • CN=COMODO Certification Authority O=COMODO CA Limited
  • CN=DigiCert Assured ID Root CA O=DigiCert Inc OU=www.digicert.com
  • CN=DigiCert Global Root CA O=DigiCert Inc OU=www.digicert.com
  • CN=DigiCert High Assurance EV Root CA O=DigiCert Inc OU=www.digicert.com
  • CN=FIRMAPROFESIONAL CA ROOT-A WEB O=Firmaprofesional SA
  • CN=GTS Root R2 O=Google Trust Services LLC
  • CN=QuoVadis Root CA 2 O=QuoVadis Limited
  • CN=QuoVadis Root CA 3 O=QuoVadis Limited
  • CN=Secure Global CA O=SecureTrust Corporation
  • CN=SecureTrust CA O=SecureTrust Corporation
  • CN=SwissSign Gold CA - G2 O=SwissSign AG
  • CN=TeliaSonera Root CA v1 O=TeliaSonera
  • CN=Trustwave Global Certification Authority O=Trustwave Holdings, Inc.
  • CN=Trustwave Global ECC P256 Certification Authority O=Trustwave Holdings, Inc.
  • CN=Trustwave Global ECC P384 Certification Authority O=Trustwave Holdings, Inc.

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps [webpki-roots](https://github.com/rustls/webpki-roots) from 0.26.11 to 1.0.9. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/rustls/webpki-roots/releases">webpki-roots's releases</a>.</em></p> <blockquote> <h2>1.0.9</h2> <p><strong>Changes:</strong></p> <ul> <li>Add &quot;Telia EC TLS Root CA v3&quot; and &quot;Telia RSA TLS Root CA v3&quot; - <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=2047804">https://bugzilla.mozilla.org/show_bug.cgi?id=2047804</a></li> <li>Add &quot;SECOM TLS ECC Root CA 2024&quot; and &quot;SECOM TLS RSA Root CA 2024&quot; - <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=1943001">https://bugzilla.mozilla.org/show_bug.cgi?id=1943001</a></li> <li>Remove &quot;Atos TrustedRoot 2011&quot; - <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=2017374">https://bugzilla.mozilla.org/show_bug.cgi?id=2017374</a></li> </ul> <h2>What's Changed</h2> <ul> <li>Take webpki-root-certs lockfile update by <a href="https://github.com/weifanglab"><code>@​weifanglab</code></a> in <a href="https://redirect.github.com/rustls/webpki-roots/pull/125">rustls/webpki-roots#125</a></li> <li>1.0.9: upstream updates by <a href="https://github.com/ctz"><code>@​ctz</code></a> in <a href="https://redirect.github.com/rustls/webpki-roots/pull/126">rustls/webpki-roots#126</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/weifanglab"><code>@​weifanglab</code></a> made their first contribution in <a href="https://redirect.github.com/rustls/webpki-roots/pull/125">rustls/webpki-roots#125</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/rustls/webpki-roots/compare/v/1.0.8...v/1.0.9">https://github.com/rustls/webpki-roots/compare/v/1.0.8...v/1.0.9</a></p> <h2>1.0.8</h2> <ul> <li>Remove <code>SecureSign Root CA12</code> root; see <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=2031105">https://bugzilla.mozilla.org/show_bug.cgi?id=2031105</a></li> </ul> <h2>What's Changed</h2> <ul> <li>Test MSRV with 1.70 by <a href="https://github.com/ctz"><code>@​ctz</code></a> in <a href="https://redirect.github.com/rustls/webpki-roots/pull/122">rustls/webpki-roots#122</a></li> <li>Take semver-compatible dependency updates by <a href="https://github.com/djc"><code>@​djc</code></a> in <a href="https://redirect.github.com/rustls/webpki-roots/pull/123">rustls/webpki-roots#123</a></li> <li>1.0.8: remove <code>SecureSign Root CA12</code> root by <a href="https://github.com/ctz"><code>@​ctz</code></a> in <a href="https://redirect.github.com/rustls/webpki-roots/pull/124">rustls/webpki-roots#124</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/rustls/webpki-roots/compare/v/1.0.7...v/1.0.8">https://github.com/rustls/webpki-roots/compare/v/1.0.7...v/1.0.8</a></p> <h2>1.0.7</h2> <p>For their April 2026 root store changes, Mozilla has made more changes than usual:</p> <blockquote> <p>These changes are part of Mozilla’s ongoing root store maintenance under the Mozilla Root Store Policy (MRSP), including <a href="https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/#74-root-ca-lifecycles">§7.4</a> (Root CA Lifecycles) and <a href="https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/#753-transition-plan-for-existing-roots">§7.5.3</a> (Transition Plans). They reflect a combination of lifecycle-based transitions, CA operator requests, and alignment with intended certificate usage, including retiring older or less suitable root certificates, enforcing clear separation of trust purposes (e.g., TLS vs. S/MIME), and reducing unnecessary trust surface in the Web PKI ecosystem. Collectively, these actions help to ensure that root certificates are relied upon only for their intended and actively maintained use cases, or are retired in accordance with established distrust timelines.</p> </blockquote> <p>This removes:</p> <ul> <li>CN=Certigna O=Dhimyotis</li> <li>CN=COMODO Certification Authority O=COMODO CA Limited</li> <li>CN=DigiCert Assured ID Root CA O=DigiCert Inc OU=www.digicert.com</li> <li>CN=DigiCert Global Root CA O=DigiCert Inc OU=www.digicert.com</li> <li>CN=DigiCert High Assurance EV Root CA O=DigiCert Inc OU=www.digicert.com</li> <li>CN=FIRMAPROFESIONAL CA ROOT-A WEB O=Firmaprofesional SA</li> <li>CN=GTS Root R2 O=Google Trust Services LLC</li> <li>CN=QuoVadis Root CA 2 O=QuoVadis Limited</li> <li>CN=QuoVadis Root CA 3 O=QuoVadis Limited</li> <li>CN=Secure Global CA O=SecureTrust Corporation</li> <li>CN=SecureTrust CA O=SecureTrust Corporation</li> <li>CN=SwissSign Gold CA - G2 O=SwissSign AG</li> <li>CN=TeliaSonera Root CA v1 O=TeliaSonera</li> <li>CN=Trustwave Global Certification Authority O=Trustwave Holdings, Inc.</li> <li>CN=Trustwave Global ECC P256 Certification Authority O=Trustwave Holdings, Inc.</li> <li>CN=Trustwave Global ECC P384 Certification Authority O=Trustwave Holdings, Inc.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/rustls/webpki-roots/commit/0a553dbc8b3f18ea05c4f881cffa3f2d005d0d30"><code>0a553db</code></a> 1.0.9: upstream updates (<a href="https://redirect.github.com/rustls/webpki-roots/issues/126">#126</a>)</li> <li><a href="https://github.com/rustls/webpki-roots/commit/1ce667b5cd8fbcb45166021a5722f46599ab8fad"><code>1ce667b</code></a> Take webpki-root-certs lockfile update (<a href="https://redirect.github.com/rustls/webpki-roots/issues/125">#125</a>)</li> <li><a href="https://github.com/rustls/webpki-roots/commit/50729cd212ccd332be193856258fa93da2876d6a"><code>50729cd</code></a> 1.0.8: remove <code>SecureSign Root CA12</code> root (<a href="https://redirect.github.com/rustls/webpki-roots/issues/124">#124</a>)</li> <li><a href="https://github.com/rustls/webpki-roots/commit/c965c541f62aff7436b709f6ec14ab545cb670f0"><code>c965c54</code></a> Take semver-compatible dependency updates (<a href="https://redirect.github.com/rustls/webpki-roots/issues/123">#123</a>)</li> <li><a href="https://github.com/rustls/webpki-roots/commit/a83a3c9e689f00c84183ca10d96256a2c0bb3f6d"><code>a83a3c9</code></a> Move MSRV to 1.70 (<a href="https://redirect.github.com/rustls/webpki-roots/issues/122">#122</a>)</li> <li><a href="https://github.com/rustls/webpki-roots/commit/be948464fd5907af6227213a066743a161221688"><code>be94846</code></a> Update dependencies (<a href="https://redirect.github.com/rustls/webpki-roots/issues/119">#119</a>)</li> <li><a href="https://github.com/rustls/webpki-roots/commit/76476f91c903fa034b51d5eaa22e3f7a40c04176"><code>76476f9</code></a> Prepare 1.0.7 (<a href="https://redirect.github.com/rustls/webpki-roots/issues/120">#120</a>)</li> <li><a href="https://github.com/rustls/webpki-roots/commit/ed392f437cc8ffbe286226a6588e80f5f0da2ce6"><code>ed392f4</code></a> Take semver-compatible updates (<a href="https://redirect.github.com/rustls/webpki-roots/issues/118">#118</a>)</li> <li><a href="https://github.com/rustls/webpki-roots/commit/ec8b744a63fa01c7d3ea2e87bb694dca330f9770"><code>ec8b744</code></a> Take semver-compatible dependency updates (<a href="https://redirect.github.com/rustls/webpki-roots/issues/117">#117</a>)</li> <li><a href="https://github.com/rustls/webpki-roots/commit/84a0c23ef25cfe07b65ac9e31892f001fbdaf0c0"><code>84a0c23</code></a> Take semver-compatible dependency updates (<a href="https://redirect.github.com/rustls/webpki-roots/issues/116">#116</a>)</li> <li>Additional commits viewable in <a href="https://github.com/rustls/webpki-roots/compare/v/0.26.11...v/1.0.9">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=webpki-roots&package-manager=cargo&previous-version=0.26.11&new-version=1.0.9)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
area-ci
CI / quality gates
 area-cli
nuncio-cli reference client
 area-docs
Documentation
 area-grpc
gRPC API layer
 area-mail
Mail protocols
 area-release
Release / packaging
 area-security
Security
 area-store
Storage / SQLite
 bug
Something isn't working
 deferred
Backlog, off the critical path; re-justify before scheduling
 dependencies
Pull requests that update a dependency file
 documentation
Improvements or additions to documentation
 duplicate
This issue or pull request already exists
 enhancement
New feature or request
 github_actions
Pull requests that update GitHub Actions code
 good first issue
Good for newcomers
 help wanted
Extra attention is needed
 invalid
This doesn't seem right
 javascript
Pull requests that update javascript code
 phase-0
Roadmap Phase 0
 phase-1
Roadmap Phase 1
 phase-2
Roadmap Phase 2
 phase-3
Roadmap Phase 3
 phase-4
Roadmap Phase 4
 phase-5
Roadmap Phase 5
 question
Further information is requested
 rust
Pull requests that update rust code
 story
Roadmap story: full LLM-ready spec, done via engine+proto+CLI+E2E
 wontfix
This will not be worked on
No labels dependencies rust
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
forge-recovery (Forge Recovery) james.maes (James Maes)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: KofTwentyTwo/nuncio#92