Security: the Vertex images no longer trust emSign ECC Root CA - G3 or AAA Certificate Services, the roots of the compromised eMudhra intermediate certificates. If a server the Vertex connects to over TLS (such as your Relay Server or rule server) presents a certificate that chains only to one of these roots, replace that certificate before you upgrade.
The images are based on Debian 13.
The AWS Nitro Enclaves image uses enclaver 2.0.2.
Azure ACI images (vertex-aci) are published again, signed by Sodot. The Azure Terraform module pins them by digest.
