---
title: "LiteLLM v1.106.3, v1.105.4 and v1.103.8 change the image-signing key and drop the eMudhra root CA"
url: "/release_notes/v1.105.4/v1-105-4"
canonical_url: "https://docs.litellm.ai/release_notes/v1.105.4/v1-105-4"
type: "release-notes"
last_updated: "2026-10-27"
summary: "Images and Helm charts are signed with a new cosign key, and every certificate bundle drops the eMudhra root CA."
related:
  - "/release_notes/v1.105.5/v1-105-5"
  - "/release_notes/v1.105.3/v1-105-3"
---
# LiteLLM v1.106.3, v1.105.4 and v1.103.8 change the image-signing key and drop the eMudhra root CA

> Index of all LiteLLM docs: https://docs.litellm.ai/llms.txt

## Deploy this version

**Docker**

```bash
docker run \
-e LITELLM_MASTER_KEY=sk-<paste-a-long-random-key> \
-e DATABASE_URL=postgresql://<user>:<password>@<host>:5432/<dbname> \
-e STORE_MODEL_IN_DB=True \
-p 4000:4000 \
docker.litellm.ai/berriai/litellm:1.105.4
```

**Pip**

```bash
pip install litellm==1.105.4
```

This release is published as [`ghcr.io/berriai/litellm:v1.105.4`](https://github.com/BerriAI/litellm/pkgs/container/litellm). See the [GitHub release](https://github.com/BerriAI/litellm/releases/tag/v1.105.4) and the full [releases page](https://github.com/BerriAI/litellm/releases)

`v1.105.4` is a patch release on top of [`v1.105.3`](/release_notes/v1.105.3/v1-105-3). It moves image signing to a new cosign key and removes the eMudhra root CA from every certificate bundle on `stable/1.105.x`. There are no new database migrations. The `v1.105.4` tag points at [`a3b1add`](https://github.com/BerriAI/litellm/commit/a3b1add96d5f2fc89fe3cda9d3f803f0d6ab685c)

:::warning The image-signing key has changed

Starting with this release, every Docker image and Helm chart is signed with the cosign key from commit [`e82a3c6`](https://github.com/BerriAI/litellm/commit/e82a3c646908ba0a6ee0beddc4310d7a6cac4065). Verifying with the previous key from commit `0112e53` fails. Update anything that pins the old `cosign.pub`, such as `cosign verify` scripts, CI checks and admission policies.

```bash
cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/e82a3c646908ba0a6ee0beddc4310d7a6cac4065/cosign.pub \
  ghcr.io/berriai/litellm:v1.105.4
```

:::

### What's Changed

- Every certificate bundle the SDK, proxy and Docker images trust no longer includes the eMudhra root CA - [PR #47670](https://github.com/BerriAI/litellm/pull/47670), [PR #47969](https://github.com/BerriAI/litellm/pull/47969)
- Docker images and Helm charts are signed with the cosign key from commit `e82a3c6`. The previous key from commit `0112e53` no longer verifies them - [PR #48103](https://github.com/BerriAI/litellm/pull/48103)

These changes and the version bump are backported in [PR #48077](https://github.com/BerriAI/litellm/pull/48077)

## Full Changelog

https://github.com/BerriAI/litellm/compare/v1.105.3...v1.105.4

## Related pages

- [v1.105.5](https://docs.litellm.ai/release_notes/v1.105.5/v1-105-5.md)
- [v1.105.3](https://docs.litellm.ai/release_notes/v1.105.3/v1-105-3.md)