The official source reports this update: v1.4.40. Security: eMudhra intermediate CA compromise `certifi>=2026.10.19` is now required. It drops trust in the compromised eMudhra/emSign CAs. Generated Dockerfiles and local `bentoml build` install `uv==0.13.4` with `--require-hashes` whenever uv is missing or older (uv #5757 ) Action for users: run `bentoml build` again with 1.4.40, then redeploy, so your bento image picks up the fixed certifi and uv.
Canonical AI event
BentoML 1.4.40 drops trust in compromised eMudhra/emSign CAs.
BentoML v1.4.40 enforces `certifi>=2026.10.19` to address eMudhra CA compromise. It also updates `uv` to 0.13.4 during builds.
23 Oct 20261 verified claims1 sources1 observations
This official update documents a development concerning v1.4.40. Its practical significance depends on the scope and evidence stated by the source.
Read the official source update and verify its stated scope, evidence and timing before acting on it.
Connected knowledge
Entities affected by this event
Evidence trail
Sources behind the event
Editorial presentation
Open story