crypto: update root-certificates to 3.125

[nodejs-github-bot]

This is an automated update of root-certificates to 3.125.

[github-actions]

The notable-change PRs with changes that should be highlighted in changelogs. label has been added by @nodejs-github-bot.

Please suggest a text for the release notes if you'd like to include a more detailed summary, then proceed to update the PR description with the text or a link to the notable change suggested text comment. Otherwise, the commit will be placed in the Other Notable Changes section.

[github-actions]

The notable-change PRs with changes that should be highlighted in changelogs. label has been added by @nodejs-github-bot.

Please suggest a text for the release notes if you'd like to include a more detailed summary, then proceed to update the PR description with the text or a link to the notable change suggested text comment. Otherwise, the commit will be placed in the Other Notable Changes section.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.29%. Comparing base (bb76938) to head (6a34fdf).

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #64746      +/-   ##
==========================================
+ Coverage   90.28%   90.29%   +0.01%     
==========================================
  Files         760      760              
  Lines      247137   247137              
  Branches    46617    46614       -3     
==========================================
+ Hits       223122   223162      +40     
+ Misses      15493    15456      -37     
+ Partials     8522     8519       -3     

see 31 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[nodejs-github-bot]

CI: https://ci.nodejs.org/job/node-test-pull-request/75173/

[nodejs-github-bot]

CI: https://ci.nodejs.org/job/node-test-pull-request/75178/

[nodejs-github-bot]

CI: https://ci.nodejs.org/job/node-test-pull-request/75213/

[nodejs-github-bot]

Commit Queue failed

- Loading data for nodejs/node/pull/64746
✔  Done loading data for nodejs/node/pull/64746
----------------------------------- PR info ------------------------------------
Title      crypto: update root-certificates to 3.125 (#64746)
   ⚠  Could not retrieve the email or name of the PR author's from user's GitHub profile!
Branch     nodejs-github-bot:actions/truetools-update-root-certificates -> nodejs:main
Labels     crypto, c++, lib / src, notable-change, author ready, needs-ci, lts-watch-v22.x
Commits    1
 - crypto: update root certificates to NSS 3.125
Committers 1
 - nodejs-github-bot <18269663+nodejs-github-bot@users.noreply.github.com>
PR-URL: https://github.com/nodejs/node/pull/64746
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
------------------------------ Generated metadata ------------------------------
PR-URL: https://github.com/nodejs/node/pull/64746
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
--------------------------------------------------------------------------------
   ⚠  Commits were pushed since the last approving review:
   ⚠  - crypto: update root certificates to NSS 3.125
   ℹ  This PR was created on Sun, 26 Jul 2026 00:55:02 GMT
   ✔  Approvals: 4
   ✔  - Antoine du Hamel (@aduh95) (TSC): https://github.com/nodejs/node/pull/64746#pullrequestreview-4782127369
   ✔  - Luigi Pinca (@lpinca): https://github.com/nodejs/node/pull/64746#pullrequestreview-4782449057
   ✔  - Yagiz Nizipli (@anonrig) (TSC): https://github.com/nodejs/node/pull/64746#pullrequestreview-4782853221
   ✔  - Colin Ihrig (@cjihrig): https://github.com/nodejs/node/pull/64746#pullrequestreview-4787687566
   ✔  Last GitHub CI successful
   ℹ  Last Full PR CI on 2026-07-27T16:49:24Z: https://ci.nodejs.org/job/node-test-pull-request/75213/
- Querying data for job/node-test-pull-request/75213/
✔  Build data downloaded
   ✔  Last Jenkins CI successful
--------------------------------------------------------------------------------
   ✔  Aborted `git node land` session in /home/runner/work/node/node/.ncu

https://github.com/nodejs/node/actions/runs/30744606301

[aduh95]

Landed in 93b1088