crypto: update root-certificates to 3.126 by nodejs-github-bot · Pull Request #65495 · nodejs/node

nodejs-github-bot · 2026-08-23T00:23:58Z

This is an automated update of root-certificates to 3.126.

This is the certdata.txt[0] from NSS 3.126. This is the version of NSS that shipped in Firefox 154.0 on 2026-08-18. Certificates added: - SECOM TLS RSA Root CA 2024 - SECOM TLS ECC Root CA 2024 - Telia EC TLS Root CA v3 - Telia RSA TLS Root CA v3 Certificates removed: - ePKI Root Certification Authority - Atos TrustedRoot 2011 [0] https://raw.githubusercontent.com/nss-dev/nss/refs/tags/NSS_3_126_RTM/lib/ckfw/builtins/certdata.txt

github-actions · 2026-08-23T00:24:06Z

The notable-changePRs with changes that should be highlighted in changelogs. label has been added by @nodejs-github-bot.

Please suggest a text for the release notes if you'd like to include a more detailed summary, then proceed to update the PR description with the text or a link to the notable change suggested text comment. Otherwise, the commit will be placed in the Other Notable Changes section.

codecov · 2026-08-23T02:10:28Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.14%. Comparing base (cc57cb7) to head (9252d27).
⚠️ Report is 33 commits behind head on main.

Additional details and impacted files

@@ Coverage Diff @@## main #65495 +/- ##
==========================================
+ Coverage 90.12% 90.14% +0.02% 
==========================================
Files 751 751 Lines 252536 252536 Branches 47519 47523 +4 ==========================================
+ Hits 227598 227649 +51 + Misses 16250 16196 -54 - Partials 8688 8691 +3

see 31 files with indirect coverage changes

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

nodejs-github-bot · 2026-08-23T02:38:32Z

CI: https://ci.nodejs.org/job/node-test-pull-request/76266/

nodejs-github-bot · 2026-08-23T14:45:53Z

CI: https://ci.nodejs.org/job/node-test-pull-request/76292/

nodejs-github-bot · 2026-08-25T00:49:17Z

Landed in a0abb47

This is the certdata.txt[0] from NSS 3.126. This is the version of NSS that shipped in Firefox 154.0 on 2026-08-18. Certificates added: - SECOM TLS RSA Root CA 2024 - SECOM TLS ECC Root CA 2024 - Telia EC TLS Root CA v3 - Telia RSA TLS Root CA v3 Certificates removed: - ePKI Root Certification Authority - Atos TrustedRoot 2011 [0] https://raw.githubusercontent.com/nss-dev/nss/refs/tags/NSS_3_126_RTM/lib/ckfw/builtins/certdata.txt PR-URL: #65495 Reviewed-By: René <contact.9a5d6388@renegade334.me.uk> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com>

Notable changes: benchmark: * (SEMVER-MINOR) add --analyze mode to compare.js (James M Snell) #65416 crypto: * update root certificates to NSS 3.126 (Node.js GitHub Bot) #65495 * (SEMVER-MINOR) enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #63411 diagnostics_channel: * mark TracingChannel as stable (Abdelrahman Awad) #64525 lib,src: * (SEMVER-MINOR) improve histogram implementation (James M Snell) #65024 net: * (SEMVER-MINOR) improve performance of net.BlockList (James M Snell) #64974 perf_hooks: * (SEMVER-MINOR) add statistical hypothesis testing to histogram (James M Snell) #65416 repl: * add basic syntax highlighting (Aviv Keller) #64591 sqlite: * (SEMVER-MINOR) add StatementSync.prototype.close() (Guilherme Araújo) #64232 * (SEMVER-MINOR) add StatementSync.prototype[Symbol.dispose]() (Guilherme Araújo) #64232 util: * (SEMVER-MINOR) add non-throwing MIMEType.parse (James M Snell) #64965 zlib: * (SEMVER-MINOR) add ZipEntry, ZipFile, and ZipBuffer (Philipp Dunkel) #64339 PR-URL: #65551

This is the certdata.txt[0] from NSS 3.126. This is the version of NSS that shipped in Firefox 154.0 on 2026-08-18. Certificates added: - SECOM TLS RSA Root CA 2024 - SECOM TLS ECC Root CA 2024 - Telia EC TLS Root CA v3 - Telia RSA TLS Root CA v3 Certificates removed: - ePKI Root Certification Authority - Atos TrustedRoot 2011 [0] https://raw.githubusercontent.com/nss-dev/nss/refs/tags/NSS_3_126_RTM/lib/ckfw/builtins/certdata.txt PR-URL: #65495 Reviewed-By: René <contact.9a5d6388@renegade334.me.uk> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com>

nodejs-github-bot · 2026-08-23T00:23:58Z

This is an automated update of root-certificates to 3.126.

This is the certdata.txt[0] from NSS 3.126. This is the version of NSS that shipped in Firefox 154.0 on 2026-08-18. Certificates added: - SECOM TLS RSA Root CA 2024 - SECOM TLS ECC Root CA 2024 - Telia EC TLS Root CA v3 - Telia RSA TLS Root CA v3 Certificates removed: - ePKI Root Certification Authority - Atos TrustedRoot 2011 [0] https://raw.githubusercontent.com/nss-dev/nss/refs/tags/NSS_3_126_RTM/lib/ckfw/builtins/certdata.txt

github-actions · 2026-08-23T00:24:06Z

The notable-changePRs with changes that should be highlighted in changelogs. label has been added by @nodejs-github-bot.

Please suggest a text for the release notes if you'd like to include a more detailed summary, then proceed to update the PR description with the text or a link to the notable change suggested text comment. Otherwise, the commit will be placed in the Other Notable Changes section.

codecov · 2026-08-23T02:10:28Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.14%. Comparing base (cc57cb7) to head (9252d27).
⚠️ Report is 33 commits behind head on main.

Additional details and impacted files

@@ Coverage Diff @@## main #65495 +/- ##
==========================================
+ Coverage 90.12% 90.14% +0.02% 
==========================================
Files 751 751 Lines 252536 252536 Branches 47519 47523 +4 ==========================================
+ Hits 227598 227649 +51 + Misses 16250 16196 -54 - Partials 8688 8691 +3

see 31 files with indirect coverage changes

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

nodejs-github-bot · 2026-08-23T02:38:32Z

CI: https://ci.nodejs.org/job/node-test-pull-request/76266/

nodejs-github-bot · 2026-08-23T14:45:53Z

CI: https://ci.nodejs.org/job/node-test-pull-request/76292/

nodejs-github-bot · 2026-08-25T00:49:17Z

Landed in a0abb47

This is the certdata.txt[0] from NSS 3.126. This is the version of NSS that shipped in Firefox 154.0 on 2026-08-18. Certificates added: - SECOM TLS RSA Root CA 2024 - SECOM TLS ECC Root CA 2024 - Telia EC TLS Root CA v3 - Telia RSA TLS Root CA v3 Certificates removed: - ePKI Root Certification Authority - Atos TrustedRoot 2011 [0] https://raw.githubusercontent.com/nss-dev/nss/refs/tags/NSS_3_126_RTM/lib/ckfw/builtins/certdata.txt PR-URL: #65495 Reviewed-By: René <contact.9a5d6388@renegade334.me.uk> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com>

Notable changes: benchmark: * (SEMVER-MINOR) add --analyze mode to compare.js (James M Snell) #65416 crypto: * update root certificates to NSS 3.126 (Node.js GitHub Bot) #65495 * (SEMVER-MINOR) enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #63411 diagnostics_channel: * mark TracingChannel as stable (Abdelrahman Awad) #64525 lib,src: * (SEMVER-MINOR) improve histogram implementation (James M Snell) #65024 net: * (SEMVER-MINOR) improve performance of net.BlockList (James M Snell) #64974 perf_hooks: * (SEMVER-MINOR) add statistical hypothesis testing to histogram (James M Snell) #65416 repl: * add basic syntax highlighting (Aviv Keller) #64591 sqlite: * (SEMVER-MINOR) add StatementSync.prototype.close() (Guilherme Araújo) #64232 * (SEMVER-MINOR) add StatementSync.prototype[Symbol.dispose]() (Guilherme Araújo) #64232 util: * (SEMVER-MINOR) add non-throwing MIMEType.parse (James M Snell) #64965 zlib: * (SEMVER-MINOR) add ZipEntry, ZipFile, and ZipBuffer (Philipp Dunkel) #64339 PR-URL: #65551

This is the certdata.txt[0] from NSS 3.126. This is the version of NSS that shipped in Firefox 154.0 on 2026-08-18. Certificates added: - SECOM TLS RSA Root CA 2024 - SECOM TLS ECC Root CA 2024 - Telia EC TLS Root CA v3 - Telia RSA TLS Root CA v3 Certificates removed: - ePKI Root Certification Authority - Atos TrustedRoot 2011 [0] https://raw.githubusercontent.com/nss-dev/nss/refs/tags/NSS_3_126_RTM/lib/ckfw/builtins/certdata.txt PR-URL: #65495 Reviewed-By: René <contact.9a5d6388@renegade334.me.uk> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com>

nodejs-github-bot · 2026-08-23T00:23:58Z

This is an automated update of root-certificates to 3.126.

This is the certdata.txt[0] from NSS 3.126. This is the version of NSS that shipped in Firefox 154.0 on 2026-08-18. Certificates added: - SECOM TLS RSA Root CA 2024 - SECOM TLS ECC Root CA 2024 - Telia EC TLS Root CA v3 - Telia RSA TLS Root CA v3 Certificates removed: - ePKI Root Certification Authority - Atos TrustedRoot 2011 [0] https://raw.githubusercontent.com/nss-dev/nss/refs/tags/NSS_3_126_RTM/lib/ckfw/builtins/certdata.txt

github-actions · 2026-08-23T00:24:06Z

The notable-changePRs with changes that should be highlighted in changelogs. label has been added by @nodejs-github-bot.

Please suggest a text for the release notes if you'd like to include a more detailed summary, then proceed to update the PR description with the text or a link to the notable change suggested text comment. Otherwise, the commit will be placed in the Other Notable Changes section.

codecov · 2026-08-23T02:10:28Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.14%. Comparing base (cc57cb7) to head (9252d27).
⚠️ Report is 33 commits behind head on main.

Additional details and impacted files

@@ Coverage Diff @@## main #65495 +/- ##
==========================================
+ Coverage 90.12% 90.14% +0.02% 
==========================================
Files 751 751 Lines 252536 252536 Branches 47519 47523 +4 ==========================================
+ Hits 227598 227649 +51 + Misses 16250 16196 -54 - Partials 8688 8691 +3

see 31 files with indirect coverage changes

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

nodejs-github-bot · 2026-08-23T02:38:32Z

CI: https://ci.nodejs.org/job/node-test-pull-request/76266/

nodejs-github-bot · 2026-08-23T14:45:53Z

CI: https://ci.nodejs.org/job/node-test-pull-request/76292/

nodejs-github-bot · 2026-08-25T00:49:17Z

Landed in a0abb47

This is the certdata.txt[0] from NSS 3.126. This is the version of NSS that shipped in Firefox 154.0 on 2026-08-18. Certificates added: - SECOM TLS RSA Root CA 2024 - SECOM TLS ECC Root CA 2024 - Telia EC TLS Root CA v3 - Telia RSA TLS Root CA v3 Certificates removed: - ePKI Root Certification Authority - Atos TrustedRoot 2011 [0] https://raw.githubusercontent.com/nss-dev/nss/refs/tags/NSS_3_126_RTM/lib/ckfw/builtins/certdata.txt PR-URL: #65495 Reviewed-By: René <contact.9a5d6388@renegade334.me.uk> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com>

Notable changes: benchmark: * (SEMVER-MINOR) add --analyze mode to compare.js (James M Snell) #65416 crypto: * update root certificates to NSS 3.126 (Node.js GitHub Bot) #65495 * (SEMVER-MINOR) enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #63411 diagnostics_channel: * mark TracingChannel as stable (Abdelrahman Awad) #64525 lib,src: * (SEMVER-MINOR) improve histogram implementation (James M Snell) #65024 net: * (SEMVER-MINOR) improve performance of net.BlockList (James M Snell) #64974 perf_hooks: * (SEMVER-MINOR) add statistical hypothesis testing to histogram (James M Snell) #65416 repl: * add basic syntax highlighting (Aviv Keller) #64591 sqlite: * (SEMVER-MINOR) add StatementSync.prototype.close() (Guilherme Araújo) #64232 * (SEMVER-MINOR) add StatementSync.prototype[Symbol.dispose]() (Guilherme Araújo) #64232 util: * (SEMVER-MINOR) add non-throwing MIMEType.parse (James M Snell) #64965 zlib: * (SEMVER-MINOR) add ZipEntry, ZipFile, and ZipBuffer (Philipp Dunkel) #64339 PR-URL: #65551

This is the certdata.txt[0] from NSS 3.126. This is the version of NSS that shipped in Firefox 154.0 on 2026-08-18. Certificates added: - SECOM TLS RSA Root CA 2024 - SECOM TLS ECC Root CA 2024 - Telia EC TLS Root CA v3 - Telia RSA TLS Root CA v3 Certificates removed: - ePKI Root Certification Authority - Atos TrustedRoot 2011 [0] https://raw.githubusercontent.com/nss-dev/nss/refs/tags/NSS_3_126_RTM/lib/ckfw/builtins/certdata.txt PR-URL: #65495 Reviewed-By: René <contact.9a5d6388@renegade334.me.uk> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com>

nodejs-github-bot · 2026-08-23T00:23:58Z

This is an automated update of root-certificates to 3.126.

This is the certdata.txt[0] from NSS 3.126. This is the version of NSS that shipped in Firefox 154.0 on 2026-08-18. Certificates added: - SECOM TLS RSA Root CA 2024 - SECOM TLS ECC Root CA 2024 - Telia EC TLS Root CA v3 - Telia RSA TLS Root CA v3 Certificates removed: - ePKI Root Certification Authority - Atos TrustedRoot 2011 [0] https://raw.githubusercontent.com/nss-dev/nss/refs/tags/NSS_3_126_RTM/lib/ckfw/builtins/certdata.txt

github-actions · 2026-08-23T00:24:06Z

The notable-changePRs with changes that should be highlighted in changelogs. label has been added by @nodejs-github-bot.

Please suggest a text for the release notes if you'd like to include a more detailed summary, then proceed to update the PR description with the text or a link to the notable change suggested text comment. Otherwise, the commit will be placed in the Other Notable Changes section.

codecov · 2026-08-23T02:10:28Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.14%. Comparing base (cc57cb7) to head (9252d27).
⚠️ Report is 33 commits behind head on main.

Additional details and impacted files

@@ Coverage Diff @@## main #65495 +/- ##
==========================================
+ Coverage 90.12% 90.14% +0.02% 
==========================================
Files 751 751 Lines 252536 252536 Branches 47519 47523 +4 ==========================================
+ Hits 227598 227649 +51 + Misses 16250 16196 -54 - Partials 8688 8691 +3

see 31 files with indirect coverage changes

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

nodejs-github-bot · 2026-08-23T02:38:32Z

CI: https://ci.nodejs.org/job/node-test-pull-request/76266/

nodejs-github-bot · 2026-08-23T14:45:53Z

CI: https://ci.nodejs.org/job/node-test-pull-request/76292/

nodejs-github-bot · 2026-08-25T00:49:17Z

Landed in a0abb47

This is the certdata.txt[0] from NSS 3.126. This is the version of NSS that shipped in Firefox 154.0 on 2026-08-18. Certificates added: - SECOM TLS RSA Root CA 2024 - SECOM TLS ECC Root CA 2024 - Telia EC TLS Root CA v3 - Telia RSA TLS Root CA v3 Certificates removed: - ePKI Root Certification Authority - Atos TrustedRoot 2011 [0] https://raw.githubusercontent.com/nss-dev/nss/refs/tags/NSS_3_126_RTM/lib/ckfw/builtins/certdata.txt PR-URL: #65495 Reviewed-By: René <contact.9a5d6388@renegade334.me.uk> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com>

Notable changes: benchmark: * (SEMVER-MINOR) add --analyze mode to compare.js (James M Snell) #65416 crypto: * update root certificates to NSS 3.126 (Node.js GitHub Bot) #65495 * (SEMVER-MINOR) enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #63411 diagnostics_channel: * mark TracingChannel as stable (Abdelrahman Awad) #64525 lib,src: * (SEMVER-MINOR) improve histogram implementation (James M Snell) #65024 net: * (SEMVER-MINOR) improve performance of net.BlockList (James M Snell) #64974 perf_hooks: * (SEMVER-MINOR) add statistical hypothesis testing to histogram (James M Snell) #65416 repl: * add basic syntax highlighting (Aviv Keller) #64591 sqlite: * (SEMVER-MINOR) add StatementSync.prototype.close() (Guilherme Araújo) #64232 * (SEMVER-MINOR) add StatementSync.prototype[Symbol.dispose]() (Guilherme Araújo) #64232 util: * (SEMVER-MINOR) add non-throwing MIMEType.parse (James M Snell) #64965 zlib: * (SEMVER-MINOR) add ZipEntry, ZipFile, and ZipBuffer (Philipp Dunkel) #64339 PR-URL: #65551

This is the certdata.txt[0] from NSS 3.126. This is the version of NSS that shipped in Firefox 154.0 on 2026-08-18. Certificates added: - SECOM TLS RSA Root CA 2024 - SECOM TLS ECC Root CA 2024 - Telia EC TLS Root CA v3 - Telia RSA TLS Root CA v3 Certificates removed: - ePKI Root Certification Authority - Atos TrustedRoot 2011 [0] https://raw.githubusercontent.com/nss-dev/nss/refs/tags/NSS_3_126_RTM/lib/ckfw/builtins/certdata.txt PR-URL: #65495 Reviewed-By: René <contact.9a5d6388@renegade334.me.uk> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com>

nodejs-github-bot · 2026-08-23T00:23:58Z

This is an automated update of root-certificates to 3.126.

This is the certdata.txt[0] from NSS 3.126. This is the version of NSS that shipped in Firefox 154.0 on 2026-08-18. Certificates added: - SECOM TLS RSA Root CA 2024 - SECOM TLS ECC Root CA 2024 - Telia EC TLS Root CA v3 - Telia RSA TLS Root CA v3 Certificates removed: - ePKI Root Certification Authority - Atos TrustedRoot 2011 [0] https://raw.githubusercontent.com/nss-dev/nss/refs/tags/NSS_3_126_RTM/lib/ckfw/builtins/certdata.txt

github-actions · 2026-08-23T00:24:06Z

The notable-changePRs with changes that should be highlighted in changelogs. label has been added by @nodejs-github-bot.

Please suggest a text for the release notes if you'd like to include a more detailed summary, then proceed to update the PR description with the text or a link to the notable change suggested text comment. Otherwise, the commit will be placed in the Other Notable Changes section.

codecov · 2026-08-23T02:10:28Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.14%. Comparing base (cc57cb7) to head (9252d27).
⚠️ Report is 33 commits behind head on main.

Additional details and impacted files

@@ Coverage Diff @@## main #65495 +/- ##
==========================================
+ Coverage 90.12% 90.14% +0.02% 
==========================================
Files 751 751 Lines 252536 252536 Branches 47519 47523 +4 ==========================================
+ Hits 227598 227649 +51 + Misses 16250 16196 -54 - Partials 8688 8691 +3

see 31 files with indirect coverage changes

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

nodejs-github-bot · 2026-08-23T02:38:32Z

CI: https://ci.nodejs.org/job/node-test-pull-request/76266/

nodejs-github-bot · 2026-08-23T14:45:53Z

CI: https://ci.nodejs.org/job/node-test-pull-request/76292/

nodejs-github-bot · 2026-08-25T00:49:17Z

Landed in a0abb47

This is the certdata.txt[0] from NSS 3.126. This is the version of NSS that shipped in Firefox 154.0 on 2026-08-18. Certificates added: - SECOM TLS RSA Root CA 2024 - SECOM TLS ECC Root CA 2024 - Telia EC TLS Root CA v3 - Telia RSA TLS Root CA v3 Certificates removed: - ePKI Root Certification Authority - Atos TrustedRoot 2011 [0] https://raw.githubusercontent.com/nss-dev/nss/refs/tags/NSS_3_126_RTM/lib/ckfw/builtins/certdata.txt PR-URL: #65495 Reviewed-By: René <contact.9a5d6388@renegade334.me.uk> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com>

Notable changes: benchmark: * (SEMVER-MINOR) add --analyze mode to compare.js (James M Snell) #65416 crypto: * update root certificates to NSS 3.126 (Node.js GitHub Bot) #65495 * (SEMVER-MINOR) enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #63411 diagnostics_channel: * mark TracingChannel as stable (Abdelrahman Awad) #64525 lib,src: * (SEMVER-MINOR) improve histogram implementation (James M Snell) #65024 net: * (SEMVER-MINOR) improve performance of net.BlockList (James M Snell) #64974 perf_hooks: * (SEMVER-MINOR) add statistical hypothesis testing to histogram (James M Snell) #65416 repl: * add basic syntax highlighting (Aviv Keller) #64591 sqlite: * (SEMVER-MINOR) add StatementSync.prototype.close() (Guilherme Araújo) #64232 * (SEMVER-MINOR) add StatementSync.prototype[Symbol.dispose]() (Guilherme Araújo) #64232 util: * (SEMVER-MINOR) add non-throwing MIMEType.parse (James M Snell) #64965 zlib: * (SEMVER-MINOR) add ZipEntry, ZipFile, and ZipBuffer (Philipp Dunkel) #64339 PR-URL: #65551

This is the certdata.txt[0] from NSS 3.126. This is the version of NSS that shipped in Firefox 154.0 on 2026-08-18. Certificates added: - SECOM TLS RSA Root CA 2024 - SECOM TLS ECC Root CA 2024 - Telia EC TLS Root CA v3 - Telia RSA TLS Root CA v3 Certificates removed: - ePKI Root Certification Authority - Atos TrustedRoot 2011 [0] https://raw.githubusercontent.com/nss-dev/nss/refs/tags/NSS_3_126_RTM/lib/ckfw/builtins/certdata.txt PR-URL: #65495 Reviewed-By: René <contact.9a5d6388@renegade334.me.uk> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com>

nodejs-github-bot · 2026-08-23T00:23:58Z

This is an automated update of root-certificates to 3.126.

This is the certdata.txt[0] from NSS 3.126. This is the version of NSS that shipped in Firefox 154.0 on 2026-08-18. Certificates added: - SECOM TLS RSA Root CA 2024 - SECOM TLS ECC Root CA 2024 - Telia EC TLS Root CA v3 - Telia RSA TLS Root CA v3 Certificates removed: - ePKI Root Certification Authority - Atos TrustedRoot 2011 [0] https://raw.githubusercontent.com/nss-dev/nss/refs/tags/NSS_3_126_RTM/lib/ckfw/builtins/certdata.txt

github-actions · 2026-08-23T00:24:06Z

The notable-changePRs with changes that should be highlighted in changelogs. label has been added by @nodejs-github-bot.

Please suggest a text for the release notes if you'd like to include a more detailed summary, then proceed to update the PR description with the text or a link to the notable change suggested text comment. Otherwise, the commit will be placed in the Other Notable Changes section.

codecov · 2026-08-23T02:10:28Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.14%. Comparing base (cc57cb7) to head (9252d27).
⚠️ Report is 33 commits behind head on main.

Additional details and impacted files

@@ Coverage Diff @@## main #65495 +/- ##
==========================================
+ Coverage 90.12% 90.14% +0.02% 
==========================================
Files 751 751 Lines 252536 252536 Branches 47519 47523 +4 ==========================================
+ Hits 227598 227649 +51 + Misses 16250 16196 -54 - Partials 8688 8691 +3

see 31 files with indirect coverage changes

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

nodejs-github-bot · 2026-08-23T02:38:32Z

CI: https://ci.nodejs.org/job/node-test-pull-request/76266/

nodejs-github-bot · 2026-08-23T14:45:53Z

CI: https://ci.nodejs.org/job/node-test-pull-request/76292/

nodejs-github-bot · 2026-08-25T00:49:17Z

Landed in a0abb47

This is the certdata.txt[0] from NSS 3.126. This is the version of NSS that shipped in Firefox 154.0 on 2026-08-18. Certificates added: - SECOM TLS RSA Root CA 2024 - SECOM TLS ECC Root CA 2024 - Telia EC TLS Root CA v3 - Telia RSA TLS Root CA v3 Certificates removed: - ePKI Root Certification Authority - Atos TrustedRoot 2011 [0] https://raw.githubusercontent.com/nss-dev/nss/refs/tags/NSS_3_126_RTM/lib/ckfw/builtins/certdata.txt PR-URL: #65495 Reviewed-By: René <contact.9a5d6388@renegade334.me.uk> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com>

Notable changes: benchmark: * (SEMVER-MINOR) add --analyze mode to compare.js (James M Snell) #65416 crypto: * update root certificates to NSS 3.126 (Node.js GitHub Bot) #65495 * (SEMVER-MINOR) enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #63411 diagnostics_channel: * mark TracingChannel as stable (Abdelrahman Awad) #64525 lib,src: * (SEMVER-MINOR) improve histogram implementation (James M Snell) #65024 net: * (SEMVER-MINOR) improve performance of net.BlockList (James M Snell) #64974 perf_hooks: * (SEMVER-MINOR) add statistical hypothesis testing to histogram (James M Snell) #65416 repl: * add basic syntax highlighting (Aviv Keller) #64591 sqlite: * (SEMVER-MINOR) add StatementSync.prototype.close() (Guilherme Araújo) #64232 * (SEMVER-MINOR) add StatementSync.prototype[Symbol.dispose]() (Guilherme Araújo) #64232 util: * (SEMVER-MINOR) add non-throwing MIMEType.parse (James M Snell) #64965 zlib: * (SEMVER-MINOR) add ZipEntry, ZipFile, and ZipBuffer (Philipp Dunkel) #64339 PR-URL: #65551

This is the certdata.txt[0] from NSS 3.126. This is the version of NSS that shipped in Firefox 154.0 on 2026-08-18. Certificates added: - SECOM TLS RSA Root CA 2024 - SECOM TLS ECC Root CA 2024 - Telia EC TLS Root CA v3 - Telia RSA TLS Root CA v3 Certificates removed: - ePKI Root Certification Authority - Atos TrustedRoot 2011 [0] https://raw.githubusercontent.com/nss-dev/nss/refs/tags/NSS_3_126_RTM/lib/ckfw/builtins/certdata.txt PR-URL: #65495 Reviewed-By: René <contact.9a5d6388@renegade334.me.uk> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com>

nodejs-github-bot · 2026-08-23T00:23:58Z

This is an automated update of root-certificates to 3.126.

This is the certdata.txt[0] from NSS 3.126. This is the version of NSS that shipped in Firefox 154.0 on 2026-08-18. Certificates added: - SECOM TLS RSA Root CA 2024 - SECOM TLS ECC Root CA 2024 - Telia EC TLS Root CA v3 - Telia RSA TLS Root CA v3 Certificates removed: - ePKI Root Certification Authority - Atos TrustedRoot 2011 [0] https://raw.githubusercontent.com/nss-dev/nss/refs/tags/NSS_3_126_RTM/lib/ckfw/builtins/certdata.txt

github-actions · 2026-08-23T00:24:06Z

The notable-changePRs with changes that should be highlighted in changelogs. label has been added by @nodejs-github-bot.

Please suggest a text for the release notes if you'd like to include a more detailed summary, then proceed to update the PR description with the text or a link to the notable change suggested text comment. Otherwise, the commit will be placed in the Other Notable Changes section.

codecov · 2026-08-23T02:10:28Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.14%. Comparing base (cc57cb7) to head (9252d27).
⚠️ Report is 33 commits behind head on main.

Additional details and impacted files

@@ Coverage Diff @@## main #65495 +/- ##
==========================================
+ Coverage 90.12% 90.14% +0.02% 
==========================================
Files 751 751 Lines 252536 252536 Branches 47519 47523 +4 ==========================================
+ Hits 227598 227649 +51 + Misses 16250 16196 -54 - Partials 8688 8691 +3

see 31 files with indirect coverage changes

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

nodejs-github-bot · 2026-08-23T02:38:32Z

CI: https://ci.nodejs.org/job/node-test-pull-request/76266/

nodejs-github-bot · 2026-08-23T14:45:53Z

CI: https://ci.nodejs.org/job/node-test-pull-request/76292/

nodejs-github-bot · 2026-08-25T00:49:17Z

Landed in a0abb47

This is the certdata.txt[0] from NSS 3.126. This is the version of NSS that shipped in Firefox 154.0 on 2026-08-18. Certificates added: - SECOM TLS RSA Root CA 2024 - SECOM TLS ECC Root CA 2024 - Telia EC TLS Root CA v3 - Telia RSA TLS Root CA v3 Certificates removed: - ePKI Root Certification Authority - Atos TrustedRoot 2011 [0] https://raw.githubusercontent.com/nss-dev/nss/refs/tags/NSS_3_126_RTM/lib/ckfw/builtins/certdata.txt PR-URL: #65495 Reviewed-By: René <contact.9a5d6388@renegade334.me.uk> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com>

Notable changes: benchmark: * (SEMVER-MINOR) add --analyze mode to compare.js (James M Snell) #65416 crypto: * update root certificates to NSS 3.126 (Node.js GitHub Bot) #65495 * (SEMVER-MINOR) enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #63411 diagnostics_channel: * mark TracingChannel as stable (Abdelrahman Awad) #64525 lib,src: * (SEMVER-MINOR) improve histogram implementation (James M Snell) #65024 net: * (SEMVER-MINOR) improve performance of net.BlockList (James M Snell) #64974 perf_hooks: * (SEMVER-MINOR) add statistical hypothesis testing to histogram (James M Snell) #65416 repl: * add basic syntax highlighting (Aviv Keller) #64591 sqlite: * (SEMVER-MINOR) add StatementSync.prototype.close() (Guilherme Araújo) #64232 * (SEMVER-MINOR) add StatementSync.prototype[Symbol.dispose]() (Guilherme Araújo) #64232 util: * (SEMVER-MINOR) add non-throwing MIMEType.parse (James M Snell) #64965 zlib: * (SEMVER-MINOR) add ZipEntry, ZipFile, and ZipBuffer (Philipp Dunkel) #64339 PR-URL: #65551

This is the certdata.txt[0] from NSS 3.126. This is the version of NSS that shipped in Firefox 154.0 on 2026-08-18. Certificates added: - SECOM TLS RSA Root CA 2024 - SECOM TLS ECC Root CA 2024 - Telia EC TLS Root CA v3 - Telia RSA TLS Root CA v3 Certificates removed: - ePKI Root Certification Authority - Atos TrustedRoot 2011 [0] https://raw.githubusercontent.com/nss-dev/nss/refs/tags/NSS_3_126_RTM/lib/ckfw/builtins/certdata.txt PR-URL: #65495 Reviewed-By: René <contact.9a5d6388@renegade334.me.uk> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com>

nodejs-github-bot · 2026-08-23T00:23:58Z

This is an automated update of root-certificates to 3.126.

This is the certdata.txt[0] from NSS 3.126. This is the version of NSS that shipped in Firefox 154.0 on 2026-08-18. Certificates added: - SECOM TLS RSA Root CA 2024 - SECOM TLS ECC Root CA 2024 - Telia EC TLS Root CA v3 - Telia RSA TLS Root CA v3 Certificates removed: - ePKI Root Certification Authority - Atos TrustedRoot 2011 [0] https://raw.githubusercontent.com/nss-dev/nss/refs/tags/NSS_3_126_RTM/lib/ckfw/builtins/certdata.txt

github-actions · 2026-08-23T00:24:06Z

The notable-changePRs with changes that should be highlighted in changelogs. label has been added by @nodejs-github-bot.

Please suggest a text for the release notes if you'd like to include a more detailed summary, then proceed to update the PR description with the text or a link to the notable change suggested text comment. Otherwise, the commit will be placed in the Other Notable Changes section.

codecov · 2026-08-23T02:10:28Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.14%. Comparing base (cc57cb7) to head (9252d27).
⚠️ Report is 33 commits behind head on main.

Additional details and impacted files

@@ Coverage Diff @@## main #65495 +/- ##
==========================================
+ Coverage 90.12% 90.14% +0.02% 
==========================================
Files 751 751 Lines 252536 252536 Branches 47519 47523 +4 ==========================================
+ Hits 227598 227649 +51 + Misses 16250 16196 -54 - Partials 8688 8691 +3

see 31 files with indirect coverage changes

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

nodejs-github-bot · 2026-08-23T02:38:32Z

CI: https://ci.nodejs.org/job/node-test-pull-request/76266/

nodejs-github-bot · 2026-08-23T14:45:53Z

CI: https://ci.nodejs.org/job/node-test-pull-request/76292/

nodejs-github-bot · 2026-08-25T00:49:17Z

Landed in a0abb47

This is the certdata.txt[0] from NSS 3.126. This is the version of NSS that shipped in Firefox 154.0 on 2026-08-18. Certificates added: - SECOM TLS RSA Root CA 2024 - SECOM TLS ECC Root CA 2024 - Telia EC TLS Root CA v3 - Telia RSA TLS Root CA v3 Certificates removed: - ePKI Root Certification Authority - Atos TrustedRoot 2011 [0] https://raw.githubusercontent.com/nss-dev/nss/refs/tags/NSS_3_126_RTM/lib/ckfw/builtins/certdata.txt PR-URL: #65495 Reviewed-By: René <contact.9a5d6388@renegade334.me.uk> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com>

Notable changes: benchmark: * (SEMVER-MINOR) add --analyze mode to compare.js (James M Snell) #65416 crypto: * update root certificates to NSS 3.126 (Node.js GitHub Bot) #65495 * (SEMVER-MINOR) enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #63411 diagnostics_channel: * mark TracingChannel as stable (Abdelrahman Awad) #64525 lib,src: * (SEMVER-MINOR) improve histogram implementation (James M Snell) #65024 net: * (SEMVER-MINOR) improve performance of net.BlockList (James M Snell) #64974 perf_hooks: * (SEMVER-MINOR) add statistical hypothesis testing to histogram (James M Snell) #65416 repl: * add basic syntax highlighting (Aviv Keller) #64591 sqlite: * (SEMVER-MINOR) add StatementSync.prototype.close() (Guilherme Araújo) #64232 * (SEMVER-MINOR) add StatementSync.prototype[Symbol.dispose]() (Guilherme Araújo) #64232 util: * (SEMVER-MINOR) add non-throwing MIMEType.parse (James M Snell) #64965 zlib: * (SEMVER-MINOR) add ZipEntry, ZipFile, and ZipBuffer (Philipp Dunkel) #64339 PR-URL: #65551

This is the certdata.txt[0] from NSS 3.126. This is the version of NSS that shipped in Firefox 154.0 on 2026-08-18. Certificates added: - SECOM TLS RSA Root CA 2024 - SECOM TLS ECC Root CA 2024 - Telia EC TLS Root CA v3 - Telia RSA TLS Root CA v3 Certificates removed: - ePKI Root Certification Authority - Atos TrustedRoot 2011 [0] https://raw.githubusercontent.com/nss-dev/nss/refs/tags/NSS_3_126_RTM/lib/ckfw/builtins/certdata.txt PR-URL: #65495 Reviewed-By: René <contact.9a5d6388@renegade334.me.uk> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com>

nodejs-github-bot added crypto Issues and PRs related to the crypto subsystem. notable-change PRs with changes that should be highlighted in changelogs. labels Aug 23, 2026

nodejs-github-bot added c++ Issues and PRs that require attention from people who are familiar with C++. lib / src Issues and PRs involving general changes in the lib/ or src/ directories. needs-ci PRs that need a full CI run. labels Aug 23, 2026

Renegade334 approved these changes Aug 23, 2026
View reviewed changes

Renegade334 added author ready PRs with CI started, the required approvals, and no outstanding review comments. request-ci Add this label to start a Jenkins CI on a PR. labels Aug 23, 2026

github-actionsBot removed the request-ci Add this label to start a Jenkins CI on a PR. label Aug 23, 2026

aduh95 added lts-watch-v22.x PRs that may need to be released in v22.x lts-watch-v24.x PRs that may need to be released in v24.x labels Aug 23, 2026

lpinca approved these changes Aug 23, 2026
View reviewed changes

cjihrig approved these changes Aug 23, 2026
View reviewed changes

aduh95 added the commit-queue PRs queued for automated landing through the Commit Queue. label Aug 24, 2026

nodejs-github-bot merged commit a0abb47 into mainAug 25, 2026
114 of 115 checks passed

nodejs-github-bot deleted the actions/tools-update-root-certificates branch August 25, 2026 00:49

nodejs-github-bot removed the commit-queue PRs queued for automated landing through the Commit Queue. label Aug 25, 2026

github-actionsBot mentioned this pull request Aug 25, 2026
2026-08-26, Version 26.8.0 (Current) #65551
Merged