[johnbillion]

Backports r61669 to the 6.8 branch: applies the Gruntfile.js change, deletes cacert.pem and legacy-1024bit.pem, and regenerates ca-bundle.crt with npm run grunt build:certificates. The resulting ca-bundle.crt is identical to trunk's.

Trac ticket: https://core.trac.wordpress.org/ticket/66423

Use of AI Tools

AI assistance: Yes
Tool(s): Claude Code
Model(s): Claude Opus 5.5
Used for: Applying the backport, regenerating the bundle, and verifying the result; reviewed by me.

---

This Pull Request is for code review only. Please keep all other discussion in the Trac ticket. Do not merge this Pull Request. See GitHub Pull Requests for Code Review in the Core Handbook for more details.

[github-actions]

The following accounts have interacted with this PR and/or linked issues. I will continue to update these lists as activity occurs.

Core Committers: Use this line as a base for the props when committing in SVN:

Props johnbillion, desrosj.

To understand the WordPress project's expectations around crediting contributors, please review the Contributor Attribution page in the Core Handbook.

---

Props Bot commands

You can trigger Props Bot actions by commenting on this PR:

• @propsbot add <username> to give props to a GitHub user. Requires write access.
• @propsbot remove <username> to leave a user out of the props. Requires write access.
• @propsbot refresh to refresh this list. Adding the props-bot label works too.

[desrosj]

It looks like the MacOS jobs are trying to run using macos-14, which has been retired. This is a bit strange because the current version pinned in 6.8 is macos-15.

I believe this PR may have been created from a stale BASE branch, so I've pulled in the changes from 6.8 to double check that works.

[johnbillion]

Committed in https://core.trac.wordpress.org/changeset/65414 . I'll keep an eye on the workflow runs.