1.38.9 (October 26, 2026)

Bug fixes

Changes expected to improve the state of the world and are unlikely to have negative effects

• release: Updated the distroless docker image to use the patched ca-certificates package (20250419~deb12u2) from Debian bookworm, so it no longer trusts the roots of the compromised eMudhra intermediate CAs. The distroless image released in 1.38.8 still shipped the unpatched bundle.