This is a security and maintenance release.
- eMudhra CA compromise. The 5.5.1 container image ships with updated CA trust stores: Debian
ca-certificates20250419+deb13u1and Pythoncertifi2026.10.23. These no longer trust the compromised eMudhra intermediate CAs (Mozilla bug 2083709). yente uses these trust stores when it downloads data and when it connects to the index. All users of the 5.5.0 image should upgrade.
As usual, this release also updates dependencies across the whole stack: followthemoney 4.9.2 → 4.11.2, nomenklatura 4.10.0 → 4.17.5, rigour 2.1.2 → 2.6.1, fastapi to 0.146.0, uvicorn to 0.54.0 and cryptography 49 → 50.
Full Changelog: v5.5.0...v5.5.1