---
title: "LiteLLM v1.106.3, v1.105.4 and v1.103.8 change the image-signing key and drop the eMudhra root CA"
url: "/release_notes/v1.106.3/v1-106-3"
canonical_url: "https://docs.litellm.ai/release_notes/v1.106.3/v1-106-3"
type: "release-notes"
last_updated: "2026-10-27"
summary: "Images and Helm charts are signed with a new cosign key, and every certificate bundle drops the eMudhra root CA."
related:
  - "/release_notes/v1.106.4/v1-106-4"
  - "/release_notes/v1.106.2/v1-106-2"
---
# LiteLLM v1.106.3, v1.105.4 and v1.103.8 change the image-signing key and drop the eMudhra root CA

> Index of all LiteLLM docs: https://docs.litellm.ai/llms.txt

## Deploy this version

**Docker**

```bash
docker run \
-e LITELLM_MASTER_KEY=sk-<paste-a-long-random-key> \
-e DATABASE_URL=postgresql://<user>:<password>@<host>:5432/<dbname> \
-e STORE_MODEL_IN_DB=True \
-p 4000:4000 \
docker.litellm.ai/berriai/litellm:1.106.3
```

**Pip**

```bash
pip install litellm==1.106.3
```

This release is published as [`ghcr.io/berriai/litellm:v1.106.3`](https://github.com/BerriAI/litellm/pkgs/container/litellm). See the [GitHub release](https://github.com/BerriAI/litellm/releases/tag/v1.106.3) and the full [releases page](https://github.com/BerriAI/litellm/releases)

`v1.106.3` is a patch release on top of [`v1.106.2`](/release_notes/v1.106.2/v1-106-2). It moves image signing to a new cosign key and removes the eMudhra root CA from every certificate bundle on `stable/1.106.x`. There are no new database migrations. The `v1.106.3` tag points at [`4fa8bf1`](https://github.com/BerriAI/litellm/commit/4fa8bf1ff5515e2cb98908c62ba84c87ef938620)

:::warning The image-signing key has changed

Starting with this release, every Docker image and Helm chart is signed with the cosign key from commit [`e82a3c6`](https://github.com/BerriAI/litellm/commit/e82a3c646908ba0a6ee0beddc4310d7a6cac4065). Verifying with the previous key from commit `0112e53` fails. Update anything that pins the old `cosign.pub`, such as `cosign verify` scripts, CI checks and admission policies.

```bash
cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/e82a3c646908ba0a6ee0beddc4310d7a6cac4065/cosign.pub \
  ghcr.io/berriai/litellm:v1.106.3
```

:::

### What's Changed

- Every certificate bundle the SDK, proxy and Docker images trust no longer includes the eMudhra root CA - [PR #47670](https://github.com/BerriAI/litellm/pull/47670), [PR #47969](https://github.com/BerriAI/litellm/pull/47969), [PR #48139](https://github.com/BerriAI/litellm/pull/48139)
- Docker images and Helm charts are signed with the cosign key from commit `e82a3c6`. The previous key from commit `0112e53` no longer verifies them - [PR #48103](https://github.com/BerriAI/litellm/pull/48103)

These changes and the version bump are backported in [PR #48078](https://github.com/BerriAI/litellm/pull/48078) and [PR #48142](https://github.com/BerriAI/litellm/pull/48142)

## Full Changelog

https://github.com/BerriAI/litellm/compare/v1.106.2...v1.106.3

## Related pages

- [v1.106.4](https://docs.litellm.ai/release_notes/v1.106.4/v1-106-4.md)
- [v1.106.2](https://docs.litellm.ai/release_notes/v1.106.2/v1-106-2.md)