Merge branch 'main' into fine_william___fine

Author: altendky

.github/workflows/mozilla-ca-cert.yml

@@ -0,0 +1,41 @@
+name: Update Mozilla cert.pem Nightly
+
+on:
+  schedule:
+    - cron: "0 11 * * *"
+  workflow_dispatch:
+
+permissions:
+  contents: write
+  pull-requests: write
+
+concurrency:
+  group: ${{ github.ref }}-${{ github.workflow }}-${{ github.event_name }}
+  cancel-in-progress: true
+
+jobs:
+  update_cert:
+    name: Update Mozilla cert.pem Nightly
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Download latest Mozilla CA cert.pem
+        run: |
+          curl --silent --show-error --location https://curl.se/ca/cacert.pem -o chia/ssl/cacert.pem
+
+      - name: Set up commit signing
+        uses: Chia-Network/actions/commit-sign/gpg@main
+        with:
+          gpg_private_key: ${{ secrets.CHIA_AUTOMATION_PRIVATE_GPG_KEY }}
+          passphrase: ${{ secrets.CHIA_AUTOMATION_PRIVATE_GPG_PASSPHRASE }}
+
+      - name: Create Pull Request if cacert.pem changed
+        uses: peter-evans/create-pull-request@v6
+        with:
+          commit-message: "Update cacert.pem from Mozilla CA bundle"
+          title: "Update cacert.pem from Mozilla CA bundle"
+          body: "Automated update of cacert.pem from https://curl.se/ca/cacert.pem."
+          branch: update-cacert-pem
+          add-paths: chia/ssl/cacert.pem

.github/workflows/update-mozilla-ca-cert.yaml

@@ -2,7 +2,3 @@
 	path = chia-blockchain-gui
 	url = https://github.com/Chia-Network/chia-blockchain-gui.git
 	branch = main
-[submodule "mozilla-ca"]
-	path = mozilla-ca
-	url = https://github.com/Chia-Network/mozilla-ca.git
-        branch = main

.gitmodules

@@ -1,3 +1,4 @@
 var_overrides:
   DEPENDABOT_ACTIONS_REVIEWERS: '["cmmarslender", "altendky"]'
   DEPENDENCY_REVIEW_ALLOW_DEPENDENCIES_LICENSES: pkg:pypi/pyinstaller, pkg:pypi/mypy
+  DEPENDABOT_PIP_PULL_REQUEST_LIMIT: "30"

.repo-content-updater.yml

@@ -37,8 +37,6 @@ if ($null -eq (Get-Command git -ErrorAction SilentlyContinue))
     Exit 1
 }
 
-git submodule update --init mozilla-ca
-
 if ($null -eq (Get-Command py -ErrorAction SilentlyContinue))
 {
     Write-Output "Unable to find py"