run update-ca-certificates only once
Merge branch 'master' into release/main