[AlexWaygood]

The eMudhra incident compromised intermediate CA keys that could be used to impersonate HTTPS sites.

Update rustls-webpki to 0.103.16, which rejects certificate chains containing the corresponding intermediate public keys.

Codex prepared this update.

[codspeed]

Merging this PR will improve performance by 16.2%

⚠️ 1 benchmark measured no execution time

Nothing ran under measurement, usually because the compiler removed the code under test. This result is not comparable, so it counts as unchanged.

Preventing compiler optimizations

• imbibe_marker_no_conflicts[0]

⚠️ 8 benchmarks spent significant time in system calls

System calls cannot be consistently instrumented, so they are not included in the measure, which understates the real cost. Please switch to the Walltime instrument to accurately measure system calls.

Measurement and system calls

• install_wheel_many_files
• unpack_sdist_many_files
• resolve_warm_jupyter_universal
• resolve_warm_jupyter
• discover_workspace_from_all_members
• resolve_warm_airflow
• run_python_version_synthetic_workspace
• discover_workspace_from_all_members_with_excludes

⚠️ Different runtime environments detected

Some benchmarks with significant performance changes were compared across different runtime environments,
which may affect the accuracy of the results.

Open the report in CodSpeed to investigate

⚡ 1 improved benchmark
✅ 118 untouched benchmarks
⏩ 54 skipped benchmarks¹

Performance Changes

	Mode	Benchmark	BASE	HEAD	Efficiency
⚡	CPU Simulation	imbibe_marker_no_conflicts[0]	398.5 ns	343 ns	+16.2%

Tip

Curious why performance improved? Comment @codspeedbot explain why performance improved on this PR, or directly use the CodSpeed MCP with your agent.

---

_{Comparing alex/emudhra-security (6b119ca) with main (aaac466)}

Footnotes

1. 54 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

[woodruffw]

Cool, that's a nice defense-in-depth.