1.0.6

"e-Szigno TLS Root CA 2023" added, see https://bugzilla.mozilla.org/show_bug.cgi?id=1873057

What's Changed

• Update dependencies by @djc in #111
• Trigger CI workflow on merge groups by @djc in #113
• webpki-roots: 1.0.6 by @ctz in #115

Full Changelog: v/1.0.5...v/1.0.6

1.0.5

Removes the following trust anchors which have passed their distrust-after-last-issuance dates:

• Entrust Root Certification Authority - EC1
• Entrust Root Certification Authority - G2
• Entrust Root Certification Authority
• AffirmTrust Commercial
• AffirmTrust Networking
• AffirmTrust Premium
• AffirmTrust Premium ECC

What's Changed

• ccadb: add CertificateMetadata::test_website_revoked field by @djc in #110
• webpki-root[s|-certs]: 1.0.4 -> 1.0.5 by @cpu in #112

Full Changelog: v/1.0.4...v/1.0.5

1.0.4

CommScope removal

https://bugzilla.mozilla.org/show_bug.cgi?id=1994866 tracks the voluntary removal of:

• CommScope Public Trust ECC Root-01
• CommScope Public Trust ECC Root-02
• CommScope Public Trust RSA Root-01
• CommScope Public Trust RSA Root-02

What's Changed

• 1.0.4: track removal of CommScope by @ctz in #109

Full Changelog: v/1.0.3...v/1.0.4

1.0.3

Addition of "OISTE Server Root RSA G1" & "OISTE Server Root ECC G1": https://bugzilla.mozilla.org/show_bug.cgi?id=1988913.

What's Changed

• 1.0.3: track October 2025 additions by @ctz in #108

1.0.2

• Add "TrustAsia TLS ECC Root CA" and "TrustAsia TLS RSA Root CA" https://bugzilla.mozilla.org/show_bug.cgi?id=1972384
• Add "SwissSign RSA TLS Root CA 2022 - 1" https://bugzilla.mozilla.org/show_bug.cgi?id=1845047

What's Changed

• Update dependencies by @djc in #102
• 1.0.2: track July 2025 CCADB changes by @ctz in #103

Full Changelog: v/1.0.1...v/1.0.2

1.0.1

Remove Chunghwa Telecom "ePKI Root Certification Authority". See the upstream issue for details.

What's Changed

• 1.0.1: June 2025 updates by @ctz in #101

Full Changelog: v/1.0.0...v/1.0.1

1.0.0

After 51 releases over about nine years, this is the first stable release of the webpki-roots and webpki-root-certs crates.

The 1.0.0 release is functionally equal to the 0.26.10 release. We will make a 0.26.11 release that uses 1.0.0 using the semver trick.

What's Changed

• Refine CI workflow triggers by @djc in #97
• Prepare 1.0.0 by @ctz in #98

Full Changelog: v/0.26.10...v/1.0.0

0.26.11

This is the final 0.26.x release of the webpki-roots and webpki-root-certs crates. It depends upon and re-exports 1.0.0 using the "semver trick", meaning people depending on 0.26.x will nevertheless get future 1.x.y releases.

What's Changed

• Refine CI workflow triggers by @djc in #97
• 0.26.11: Prepare webpki-{roots,root-certs} semver trick by @ctz in #99

Full Changelog: v/0.26.10...v/0.26.11

0.26.10

Incorporates CCADB April updates.

Roots removed due to https://wiki.mozilla.org/CA/Root_CA_Lifecycles / https://bugzilla.mozilla.org/show_bug.cgi?id=1957685:

• "AAA Certificate Services"
• "Baltimore CyberTrust Root"
• "Entrust.net Certification Authority (2048)"
• "GlobalSign Root CA"
• "Go Daddy Class 2 Certification Authority"
• "Starfield Class 2 Certification Authority"
• "XRamp Global Certification Authority"

What's Changed

• 0.26.10: April CCADB updates by @ctz in #96

Full Changelog: v/0.26.9...v/0.26.10

0.26.9

The license of the webpki-roots and webpki-root-certs crates changed from MPL-2.0 to CDLA-Permissive-2.0. Thank you to the CCADB maintainers for enabling us to make this change.

Upstream changes

None

What's Changed

• Adjust license of mechnically-reformed crates by @ctz in #88
• Run CI on ubuntu-latest by @ctz in #91
• Support code-signing trust bit by @ctz in #93
• manual_ok_err clippy fix by @ctz in #94
• webpki-(roots|root-certs): v0.26.8 -> v0.26.9 by @ctz in #95

Full Changelog: v/0.26.8...v/0.26.9