shrey-berri 35a88f1f7c fix(security): update bundled CA roots and preserve Prisma image compatibility (#47969) ... * fix(security): bump grpcio and boto3 so their bundled CA files drop the compromised eMudhra roots grpc ignores SSL_CERT_FILE and verifies every channel against its own bundled roots.pem. In 1.78.0 that file still trusts emSign ECC Root CA - G3 and AAA Certificate Services, so Vertex AI, Google KMS, Chirp STT and OTLP gRPC exporters (Arize) accept all 14 advisory chains. 1.84.1 is the first release whose roots.pem drops both roots. botocore uses certifi when it is installed and falls back to its bundled cacert.pem otherwise. Through 1.43.116 that file still trusts AAA Certificate Services. Requiring boto3 1.43.117 pulls in botocore 1.43.117, the first release whose cacert.pem rejects all 14 advisory chains, so the fallback stays safe if certifi is ever absent * fix(docker): provide OpenSSL 3 when generating Prisma engines (cherry picked from commit 52166b51a1)		2026-10-23 11:58:51 -07:00
..
routes	feat(decisions): backport /v1/systemone, OpenAI-format /v1/decisions and the openai Decisions provider to rc/1.105.0 (#44236, #45184, #45214) (#45189)	2026-10-07 22:06:51 -07:00
Dockerfile	fix(security): update bundled CA roots and preserve Prisma image compatibility (#47969)	2026-10-23 11:58:51 -07:00
launch.py	feat(proxy): let the in-container pgbouncer follow rotating RDS IAM and Azure Entra tokens (#40623)	2026-09-10 16:18:00 -07:00
main.py	fix(gateway): keep the Prometheus /metrics Mount in the gateway route trim (#32317)	2026-07-07 18:36:38 +03:00