v1.17.2

What changed

See CHANGELOG.md
for this release's entry, written for the person installing it.

Verify what you downloaded

Every artifact below is published with its SHA-256 in a public,
append-only transparency log, a keyless cosign signature, a SLSA
build-provenance attestation, and a CycloneDX SBOM.

• Commands to check all of it: https://pollis.com/artifacts
• Whether this release rebuilt bit-for-bit from source:
  https://pollis.com/assurance

The installers verify automatically — install.sh requires the hash
it downloaded to appear in the transparency log at a different
origin from the CDN, and runs cosign when it is available.

---

What's Changed

• A revoked device is told it was revoked and signs itself out (#1338) by @actuallydan in #1340
• CLI (pollis-tui) rot: render every message shape, message actions, Secret Key at sign-up, --help/--version, verified installer, signed macOS CLI, DS empty-room send-data by @actuallydan in #1341
• Durable outbox: an outgoing message is never silently lost (#1335) by @actuallydan in #1342
• Mobile 1.0.8 (#1343) by @actuallydan in #1344

Full Changelog: v1.17.1...v1.17.2