1.40.2 (October 27, 2026)

Bug fixes

Changes expected to improve the state of the world and are unlikely to have negative effects

• release: Updated the distroless docker image base to pick up the patched ca-certificates package (20250419+deb13u1), so it no longer trusts the roots of the compromised eMudhra intermediate CAs. The distroless image released in 1.40.1 still shipped the unpatched bundle.