Bazel releases addressing the eMudhra CA compromise

The Bazel team has published new releases of Bazel and Bazelisk to address the recent disclosure of the eMudhra intermediate CA private key compromise . The following Bazel releases remove the distrusted eMudhra and Sectigo AAA root CA certificates from the bundled JDK: 7.7.2 8.8.2 9.3.1 10.0.0rc2 If you cannot immediately upgrade to one of the patched releases above (or are using an older, unsupported Bazel release), you can work around the issue by passing –host_jvm_args=-Djavax.net.ssl.trustStore= to point Bazel’s JVM at an updated trust store that excludes the distrusted roots. We have al