[aduh95]

This is the certdata.txt¹ from NSS 3.131.1.

Certificates removed:

• emSign ECC Root CA - G3
• emSign Root CA - C1
• emSign ECC Root CA - C3

Refs: https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/vSxZxnOMMvs

This update is not yet available in a Firefox release, so the bot wasn't able to pick it up. I used the following diff to force the script to pick it up:

diff --git a/tools/dep_updaters/update-root-certs.mjs b/tools/dep_updaters/update-root-certs.mjs
index 80b6fb33f74..c185bb5d8e7 100644
--- a/tools/dep_updaters/update-root-certs.mjs
+++ b/tools/dep_updaters/update-root-certs.mjs
@@ -115,9 +115,9 @@ if (values.help) {
   process.exit(0);
 }
 
-const firefoxRelease = await getFirefoxRelease(positionals[0]);
+const firefoxRelease = null;
 // Retrieve metadata for the NSS release being updated to.
-const version = await getNSSVersion(firefoxRelease);
+const version = '3.131.1';
 if (values.verbose) {
   console.log(`Updating to NSS version ${version}`);
 }

Footnotes

1. https://raw.githubusercontent.com/nss-dev/nss/refs/tags/NSS_3_131_1_RTM/lib/ckfw/builtins/certdata.txt a749e413-a6b5-45ca-827d-a943355e84c8 ↩

[nodejs-github-bot]

CI: https://ci.nodejs.org/job/node-test-pull-request/78517/

[github-actions]

Fast-track has been requested by @UlisesGascon. Please 👍 to approve.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.50%. Comparing base (6698675) to head (e51f833).
⚠️ Report is 5 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main   #66877   +/-   ##
=======================================
  Coverage   90.50%   90.50%           
=======================================
  Files         797      797           
  Lines      278256   278256           
  Branches    53472    53464    -8     
=======================================
+ Hits       251822   251848   +26     
+ Misses      16803    16768   -35     
- Partials     9631     9640    +9     

see 28 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[aduh95]

Landed in ae22341