v0.20260908.0

What's Changed

• build(deps): bump github/codeql-action from 4.37.3 to 4.37.8 by @dependabot[bot] in #8995
• bad-key-revoker: earlier check for too many affected certs by @aarongable in #8987
• Associate timestamps with policy blocklist entries. by @ezekiel in #8992
• Update TestStatusCodeLogging to only care about status code by @aarongable in #9005
• trees: Updates for mtpublisher HTTP client and writing checkpoints to tiles by @beautifulentropy in #8970
• dependencies: Update golang.org/x/mod from v0.37.0 to v0.40.0 by @beautifulentropy in #9007
• ci: test and release on Go 1.27.1 by @jsha in #8999
• grpc: clean up old user-agent context key. by @ezekiel in #9008
• trees: Support for SignSubtree by @beautifulentropy in #8988
• mtpublisher: Replace the stub with a tlog-mirror client by @beautifulentropy in #8973
• dependencies: Update grpc-go from v1.82.1 to v1.83.2 by @beautifulentropy in #9011
• Update go-jose to release v4.1.5. by @ezekiel in #9012

Full Changelog: v0.20260901.0...v0.20260908.0