Stop trusting compromised eMudhra certificates in the 3.x series

Added

• Automatically detect the application's revision from the HEROKU_BUILD_COMMIT environment variable, which is set by Heroku at build time when the runtime-dyno-build-metadata Heroku Labs feature is enabled.

Fixed

• Fix the sanitization of function arguments in SQL statements. Before this release, SQL sanitization of function arguments stripped out parts of the SQL statement after the function argument list.
• Fix issues in the extension that lead to gaps in data reporting.
• Improve handling of the extension internal queue when full.

Security

• Bump the bundled certificates that the agent uses when it can't open the configured CA file. They no longer include the emSign ECC Root CA - G3 and AAA Certificate Services root certificates, which compromised eMudhra intermediate certificates chain to.
• Stop trusting certificates issued under the eMudhra intermediate certificate authorities whose private keys were compromised in October 2026. The bundled CA certificates no longer include the emSign ECC Root CA - G3 root certificate, which those intermediates chain to.

View the Ruby gem v3.13.3 changelog for more information.