From da03d3a660632a58a9a8f7e4ff909de14ded329b Mon Sep 17 00:00:00 2001
From: Ayush Ranjan <ayushranjan@google.com>
Date: Fri, 5 Jun 2026 11:02:05 -0700
Subject: [PATCH] Remove stale sha256 pin from google_root_pem.

Website builds are failing: https://buildkite.com/gvisor/release/builds/5973

https://pki.goog/roots.pem is a living file that changes whenever Google
rotates its trusted root CAs, so a pinned sha256 inevitably goes stale and
breaks the website build with a checksum mismatch.

The block's own comment states the hash is "omitted here intentionally".
Actually omit it so cert-bundle rotations no longer break the build.

PiperOrigin-RevId: 927383776
---
 MODULE.bazel | 1 -
 1 file changed, 1 deletion(-)

diff --git a/MODULE.bazel b/MODULE.bazel
index 5c28a7b87b8..4204cdc105e 100644
--- a/MODULE.bazel
+++ b/MODULE.bazel
@@ -115,7 +115,6 @@ http_file(
 # used in any part of the build other than as certificates present in images.
 http_file(
     name = "google_root_pem",
-    sha256 = "0d4b15a365e5158c1f9217b7827c5af8a9b86789e8cfbe21480a57c134fe9d01",
     urls = [
         "https://pki.goog/roots.pem",
     ],