Oliver Kieselbach 0d9ef12f90 chore(backend/security): drop legacy duplicate Intune CA PEMs ...

intune-root-ca.pem and intune-intermediate-ca.pem are bit-for-bit duplicates
of intune-root-2030.pem and intune-intermediate-mdm-2026.pem (matching SHA1
fingerprints A1:97:D6:... and B7:E4:96:...). The post-9af3de15 loader globs
intune-root-*.pem and intune-intermediate-*.pem and dedupes by thumbprint,
so the duplicates were silently de-duped at load. Remove them now to make
the bundle self-explanatory: one PEM per real CA, name encodes its NotAfter.

Verified by running CertificateValidatorTests (8/8 incl. the real-device-cert
happy-path) which loads the bundle via the same glob path the runtime uses.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-08 15:59:41 +02:00

..

Agent

feat(ops/consent): emit ConsentFlowSuccess to close the consent-flow lifecycle

2026-05-08 14:51:54 +02:00

Backend

chore(backend/security): drop legacy duplicate Intune CA PEMs

2026-05-08 15:59:41 +02:00

McpServer

refactor(mcp): align OAuth state signing key with backend convention

2026-05-08 11:30:45 +02:00

Shared

feat(do-telemetry): add MCC + LinkLocal + symmetric breakdown across all layers

2026-05-08 11:37:48 +02:00

Web

feat(ops/consent): emit ConsentFlowSuccess to close the consent-flow lifecycle

2026-05-08 14:51:54 +02:00