- Updated Envoy Docker images and Envoy Mobile root bundle to drop compromised eMudhra intermediate CAs
- Refreshed webpki roots in the Hickory DNS resolver, removing trust for compromised CAs for DoT/DoH
- Applied upstream security patches to mitigate the eMudhra intermediate CA key compromise