Skip to content

fix(deps): update castore after eMudhra CA compromise - #14

Merged
mikehostetler merged 1 commit into
mainfrom
fix/emudhra-castore-20261022
Oct 22, 2026
Merged

mikehostetler merged 1 commit into
mainfrom
fix/emudhra-castore-20261022

Conversation

@mikehostetler

Copy link
Copy Markdown
Collaborator

Summary

  • update transitive castore from 1.0.21 to 1.0.22
  • remove the distrusted eMudhra roots from the bundled CA store
  • keep the update limited to the shared umbrella lock

Verification

  • mix deps.get
  • mix ci
  • confirmed that the castore bundle does not contain emSign ECC Root CA - G3, emSign Root CA - C1, or emSign ECC Root CA - C3

No package changelog was edited. If a distributable application includes this CA bundle, rebuild it after merge.

@mikehostetler
mikehostetler merged commit 8e133b1 into main Oct 22, 2026
1 check passed
@mikehostetler
mikehostetler deleted the fix/emudhra-castore-20261022 branch October 22, 2026 13:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant