[jdx]

Moves the locked tools in mise.lock to releases that bundle the patched rustls-webpki 0.103.16 and webpki-root-certs 1.0.10. Those updates stop the compromised eMudhra intermediate CA certificates from being trusted by the bundled root lists.

Locked versions: communique 1.6.2.

Only mise.lock changes: the version, download URLs and checksums for the listed tools. The version requests in mise.toml are unchanged.

🤖 Generated with Claude Code

---

Note

Low Risk
Lockfile-only tooling pin with a security-oriented patch bump; no runtime product code is modified.

Overview
Bumps the locked communique dev tool from 1.6.1 to 1.6.2 in mise.lock, updating per-platform download URLs and SHA-256 checksums only. mise.toml still requests latest; no application or workflow code changes.

The newer release pulls in patched rustls-webpki / webpki-root-certs so the bundled binary no longer trusts the compromised eMudhra intermediate CAs.

^{Reviewed by Cursor Bugbot for commit c411541. Bugbot is set up for automated code reviews on this repo. Configure here.}

[greptile-apps]

No reviewable files after applying ignore patterns.

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters: 1

• mise.lock is excluded by !**/*.lock

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

• Configuration used: Central YAML (base), Organization UI (inherited)
• Review profile: CHILL
• Plan: Advanced
• Run ID: 5a124d57-97fd-4c81-86a7-b8377441cb3f

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit c411541. Configure here.}

[cursor]

Lockfile pins unpublished communique version

High Severity

The lockfile pins communique to 1.6.2, but GitHub Releases, tags, and the packslip index still list 1.6.1 as latest. mise installs via mise-action would fail to download those artifacts and would break the release workflows that depend on this tool.

 

^{Reviewed by Cursor Bugbot for commit c411541. Configure here.}