shrey-berri 52166b51a1 fix(security): update bundled CA roots and preserve Prisma image compatibility (#47969) ... * fix(security): bump grpcio and boto3 so their bundled CA files drop the compromised eMudhra roots grpc ignores SSL_CERT_FILE and verifies every channel against its own bundled roots.pem. In 1.78.0 that file still trusts emSign ECC Root CA - G3 and AAA Certificate Services, so Vertex AI, Google KMS, Chirp STT and OTLP gRPC exporters (Arize) accept all 14 advisory chains. 1.84.1 is the first release whose roots.pem drops both roots. botocore uses certifi when it is installed and falls back to its bundled cacert.pem otherwise. Through 1.43.116 that file still trusts AAA Certificate Services. Requiring boto3 1.43.117 pulls in botocore 1.43.117, the first release whose cacert.pem rejects all 14 advisory chains, so the fallback stays safe if certifi is ever absent * fix(docker): provide OpenSSL 3 when generating Prisma engines		2026-10-23 18:44:13 +00:00
..
routes	fix(backend): retain Prometheus metrics during startup (#47129)	2026-10-17 17:10:42 +00:00
Dockerfile	fix(security): update bundled CA roots and preserve Prisma image compatibility (#47969)	2026-10-23 18:44:13 +00:00
main.py	fix(proxy): preserve state through composed lifespans (#44214)	2026-10-02 10:56:52 -07:00