Download Latest Version v1.4.40 source code.zip (35.1 MB) Google Add to Preferred Sources
Home / v1.4.40
Name Modified Size InfoDownloads / Week
Parent folder
README.md 2026-10-23 882 Bytes
0
v1.4.40 source code.tar.gz 2026-10-23 34.6 MB
0
v1.4.40 source code.zip 2026-10-23 35.1 MB
0
Totals: 3 Items   69.7 MB 0

Security: eMudhra intermediate CA compromise

  • `certifi>=2026.10.19` is now required. It drops trust in the compromised eMudhra/emSign CAs.
  • Generated Dockerfiles and local `bentoml build` install `uv==0.13.4` with `--require-hashes` whenever uv is missing or older (uv < 0.13.4 bundles the compromised CAs). pip 26.2.2 is used where supported. (#5757)

Action for users: run `bentoml build` again with 1.4.40, then redeploy, so your bento image picks up the fixed certifi and uv.

Also in this release

  • Agent skills for creating BentoML projects and for deploying to Kubernetes and EC2 (#5705, [#5683])
  • Windows tar symlink extraction and fastai CI dependency resolution fix (#5689)
  • Docs and CI updates (#5710, [#5715], [#5741], [#5702], [#5758], [#5759], [#5760])

Full Changelog: https://github.com/bentoml/BentoML/compare/v1.4.39...v1.4.40

Source: README.md, updated 2026-10-23