Fixed
- Upgrade b2sdk to v2.13.2
Retry-Afteron 5xx responses and retry 408 upload responses are now honored
Infrastructure
- Upgrade golang.org/x/net to v0.61.0, x/crypto to v0.58.0, x/mod to v0.42.0, x/text to v0.43.0, and the documentation tool's goldmark to v1.8.6, including required transitive updates
- Upgrade the Go toolchain and CI/release builds to Go 1.26.10 to reject compromised eMudhra intermediate certificates (CVE-2026-111943)
- Require certifi 2026.10.23 or newer, including removal of emSign Root CA - C1 and emSign ECC Root CA - C3, and bootstrap pip 26.2.2 from a hash-verified wheel before installing Python dependencies to address the eMudhra CA compromise
- Harden the repository-owned
.sdkharnesschecks: conformance failures against the simulator (auth, unreachable, provider crash) are reported as failures rather than could-not-run, the health check proves the object is deleted directly against the simulator, and resilience checks refuse cleanly when run directly - Retry Intel-Mac acceptance tests after transient DNS-resolution failures, while still failing persistent DNS errors
- Force LF line endings for the
.sdkharnessharness files so the repository-owned contract test passes under git autocrlf on Windows - Make the SDK harness contract test portable to Windows by skipping its POSIX executable-bit assertion while retaining the script existence check
- Make the
.sdkharnessconformance checks report the real exception (for exampleKeyError: 'capabilities') instead of the Terraform resource address