What's changed
This maintenance release updates Go, Python, frontend dependencies and runtime images while retaining SDK support for Python 3.9.
- Backport the Go trust-store fix from #15025, including Go 1.27.3 and updated builders, with additional security dependency updates in #15026.
- Fix the proxy and cache-deployer runtime images (#15036).
- Remove frontend server development dependencies from the runtime image (#15040).
- Pin CI pipeline SDK installation to the tested commit (#15041), quote release manifest sources (#15030), and preserve release image publication with read-only workflow defaults (#15027).
Security and compatibility
Qualification of the released commit rebuilt and scanned all 24 image/platform combinations with zero scanner-reported fixable image findings. The four SDK packages passed installation and compilation checks on Python 3.9–3.13.
Security: Release-image scans found no vulnerabilities with available fixes at qualification time. Python 3.9 remains supported with documented dependency exceptions; the tested Python 3.10–3.13 environments had no findings. See the security qualification details and remaining findings.
The latest image tags now point to 2.17.3. Use the explicit 2.17.3 tag to pin deployments to this release. See the SDK release for Python packages.
Full changelog: 2.17.2...2.17.3