v2.1.17

2.1.17 (2026-10-06)

Bug Fixes

• declare least-privilege CI token permissions (#53) (6a4bea3)
• deps: update dependencies for GA (#63) (792088c)
• honour CULVERT_CRL_DAYS and keep crl.pem 0644 (#59) (d8fd86e)
• install urllib3 2.8.0 in the image for GHSA-8988-9cw3-xx77 and GHSA-vxq7-64xx-v4gw (#55) (151443e)
• move openvpn-auth-oauth2 to 2.2.0 (#54) (5ddfc28)
• regenerate the Helm chart when the release stamps VERSION (#56) (a993680)
• replace our resolver and domain in test fixtures (#51) (88960f8)
• run vulture and coverage on scripts/ now hyperi-ci finds it (#57) (18198b3)
• set up scalo's logger in every culvert entry point (#60) (5709ca0)
• stamp the real version into the image and bound CULVERT_CRL_DAYS (#61) (d5aa744)
• test hygiene and one CRL regeneration path (#58) (91ad85e)

What's Changed

• fix: replace our resolver and domain in test fixtures by @catinspace-au in #51
• fix: declare least-privilege CI token permissions by @catinspace-au in #53
• fix: move openvpn-auth-oauth2 to 2.2.0 by @catinspace-au in #54
• fix: install urllib3 2.8.0 in the image for GHSA-8988-9cw3-xx77 and GHSA-vxq7-64xx-v4gw by @catinspace-au in #55
• fix: regenerate the Helm chart when the release stamps VERSION by @catinspace-au in #56
• fix: run vulture and coverage on scripts/ now hyperi-ci finds it by @catinspace-au in #57
• fix: test hygiene and one CRL regeneration path by @catinspace-au in #58
• fix: honour CULVERT_CRL_DAYS and keep crl.pem 0644 by @catinspace-au in #59
• fix: set up scalo's logger in every culvert entry point by @catinspace-au in #60
• fix: stamp the real version into the image and bound CULVERT_CRL_DAYS by @catinspace-au in #61
• fix(deps): update dependencies for GA by @catinspace-au in #63

Full Changelog: v2.1.16...v2.1.17