schema: 1

bugzilla:
  product: Core
  component: "Security: PSM"

origin:
  name: NSS
  description: nss
  url: https://hg-edge.mozilla.org/projects/nss

  release: f838792016a8e6958c288d44a6930cae0506837e (2026-03-19T16:58:13Z).
  revision: f838792016a8e6958c288d44a6930cae0506837e

  license: MPL-2.0
  license-file: COPYING

vendoring:
  url: https://github.com/nss-dev/nss
  source-hosting: github
  vendor-directory: security/nss/
  skip-vendoring-steps:
    - update-moz-build
  exclude:
    - .hgignore
    - .hgtags
  keep:
    - TAG-INFO
  update-actions:
    - action: run-script
      cwd: '{topsrcdir}'
      script: '{cwd}/security/manager/tools/regen_root_ca_metadata.py'

updatebot:
  maintainer-phab: "#nss-reviewers"
  maintainer-bz: jschanck@mozilla.com
  fuzzy-paths:
    - netwerk/base
    - security/certverifier
    - security/manager/ssl
  tasks:
    - type: vendoring
      enabled: true
      frequency: 1 week
      blocking: 2018259