With the latest SHIM are there any changes to GRUB/Loaded items needed?

[TBOpen]

The last time I updated it was due to the GRUB bug that required everyone to update.

Does this update and NX requirement extend to needing to update/change GRUB (or any loaded .EFI) again?

Should we be increasing the sbat version of GRUB (loaded .EFI binaries) when we update shim or only if needing to upgrade GRUB (other .EFI binary) as well?

Should we use a new private/public certificate for GRUB (or other loaded .EFI binaries)?

Thanks.