Gram 3.4.0 updates bundled webpki-related packages affected by the eMudhra CA incident. Its maintainer urges prompt upgrades or rebuilding older versions with updated dependencies. The release also adds side-by-side Git diffs, commit history and wrapping tabs. Extension-provided language servers and debug adapters now require permission for downloads and use, though the maintainer acknowledges shortcomings in the approval UI. Updating a browser or operating system does not necessarily repair applications that bundle separate certificate stores.