Skip to content

Update webpki-roots to 1.0.10 - #179

Merged
mayuki merged 2 commits into
Cysharp:mainfrom
devsisters:feature/UpdateWebpkiRoots
Oct 22, 2026
Merged

mayuki merged 2 commits into
Cysharp:mainfrom
devsisters:feature/UpdateWebpkiRoots

Conversation

@WKBae

@WKBae WKBae commented Oct 21, 2026 •

Copy link
Copy Markdown
Contributor

Refreshes the built-in root CA set (Mozilla root certificates from webpki-roots) by bumping the locked webpki-roots 1.x crate from 1.0.0 to 1.0.10.

webpki-roots 0.26.11 is a shim that re-exports 1.x, so both yaha_native and hyper-rustls pick up the new roots without changes to Cargo.toml. The license is still CDLA-Permissive-2.0, so THIRD-PARTY-NOTICES only needs the version update.

Pre-built native libraries need to be rebuilt for the update to take effect.

Related: rustls/webpki-roots#133

The built-in root CA set comes from Mozilla's root certificates bundled
in webpki-roots. The webpki-roots 0.26.11 dependency only re-exports the
1.x crate, so bumping the locked 1.x version refreshes the trust store
used by both yaha_native and hyper-rustls.
@WKBae
WKBae requested a review from mayuki as a code owner October 21, 2026 10:43
@mayuki

mayuki commented Oct 22, 2026

Copy link
Copy Markdown
Member

Looks good to me. Thanks!

@mayuki
mayuki merged commit fbd06f9 into Cysharp:main Oct 22, 2026
22 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants