Security: eMudhra intermediate CA compromise `certifi>=2026.10.19` is now required. It drops trust in the compromised eMudhra/emSign CAs. Generated Dockerfiles and local `bentoml build` install `uv==0.13.4` with `--require-hashes` whenever uv is missing or older (uv < 0.13.4 bundles the compromised CAs). pip 26.2.2 is used where supported. (#5757) Action for users: run `bentoml build` again with 1…
What's Changed ci: pre-commit autoupdate [skip ci] by @pre-commit-ci[bot] in #5593 fix: prevent following symlinks when copying files in BentoStore by @frostming in #5598 fix: add sharing=locked to BuildKit cache mounts for multi-arch builds by @lawrence3699 in #5597 fix: enhance Dockerfile generation by normalizing base image lines and adding tests by @frostming in #5603 fix: defer prometheus_cli…
What's Changed feat: native support for src-layout projects by @VedantMadane in #5555 fix: switch to SandboxedEnvironment and remove unused Jinja2 extensions by @frostming in #5591 fix: use correct NVIDIA CUDA base images for debian distro by @mattmorganpdx in #5590 New Contributors @mattmorganpdx made their first contribution in #5590 Full Changelog: v1.4.37...v1.4.38
What's Changed docs: Update slack to forum link by @Sherlock113 in #5567 fix: correctly load bentoml.models.HuggingFaceModel in container by @nickthegroot in #5582 chore(deps): bump docker/setup-qemu-action from 3 to 4 by @dependabot[bot] in #5564 chore(deps): bump marocchino/sticky-pull-request-comment from 2 to 3 by @dependabot[bot] in #5571 chore(deps): bump docker/setup-buildx-action from 3 to…
What's Changed fix: correct typo 'seperators' to 'separators' by @thecaptain789 in #5546 Reapply "feat: new image API: build_include" (#5531) by @frostming in #5539 fix: resolve AnyIO NoEventLoopError when calling sync API from async API by @paipeline in #5550 fix: Set SQLite busy_timeout and WAL mode to prevent 'database is locked' under concurrency by @VedantMadane in #5551 Fix memory leak in re…
What's Changed fix(client): recreate connector on session refresh to prevent closed session errors by @Wirg in #5541 ci: pre-commit autoupdate [skip ci] by @pre-commit-ci[bot] in #5542 fix: Support importing multiple Bentos with shared models by @frostming in #5543 New Contributors @Wirg made their first contribution in #5541 Full Changelog: v1.4.34...v1.4.35
Fixed a security issue when resolving file paths input by user. Full Changelog: v1.4.33...v1.4.34
What's Changed fix: update installation logic for Python packages in Dockerfile template by @frostming in #5534 Full Changelog: v1.4.32...v1.4.33
What's Changed fix: ensure at least one CPU worker is assigned when CPU resources are zero by @frostming in #5528 fix: update installation path logic for Python packages in Dockerfile template by @frostming in #5529 Revert "feat: new image API: build_include" by @frostming in #5531 ci: pre-commit autoupdate [skip ci] by @pre-commit-ci[bot] in #5530 fix: sanitize filename with path separators in Fi…
What's Changed chore: update pre-commit config and fix lint errors by @frostming in #5511 ci: pre-commit autoupdate [skip ci] by @pre-commit-ci[bot] in #5512 doc(gateway): add gateway documentation by @ssheng in #5513 docs: Add gateway screenshots by @Sherlock113 in #5515 feat: add build time secrets by @jianshen92 in #5514 feat: API token sdk by @jianshen92 in #5516 docs: API token SDK documentat…
What's Changed chore(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in #5505 fix: aiohttp impl of RemoteProxy for dependency call by @frostming in #5502 docs: update AWS CloudFormation template URL to v9 by @sauyon in #5506 fix: improve process termination handling in create_proxy_app by @frostming in #5508 fix: cli deploy to inject deployment env by @jianshen92 in #5507 fix: set def…