v1.6.3

Go

Security patch for the module's requirements. golang.org/x/net moves from v0.58.0 to v0.61.0, past the advisories GO-2026-6603 through GO-2026-6617 in its HTTP/2 code. The SDK only uses x/net/html and never reached the affected paths, but go/v1.6.2 still pinned the vulnerable release as a minimum, so a consumer's go get inherited it and manifest scanners pointed here. This tag clears that.

Every patched x/net requires Go 1.26, so the module directive moves from 1.25.0 to 1.26.0. Go 1.25 left the support window when 1.27 shipped. CI now tests 1.26.x and 1.27.x.

Python and Node.js

Unchanged in this release apart from the version, which the three ports keep in step.