v1.17.3

What changed

See CHANGELOG.md
for this release's entry, written for the person installing it.

Verify what you downloaded

Every artifact below is published with its SHA-256 in a public,
append-only transparency log, a keyless cosign signature, a SLSA
build-provenance attestation, and a CycloneDX SBOM.

• Commands to check all of it: https://pollis.com/artifacts
• Whether this release rebuilt bit-for-bit from source:
  https://pollis.com/assurance

The installers verify automatically — install.sh requires the hash
it downloaded to appear in the transparency log at a different
origin from the CDN, and runs cosign when it is available.

---

What's Changed

• outbox flow: autocorrect-proof text (#1345) by @actuallydan in #1346
• chore: refresh the rebuild ledger through v1.17.2 by @github-actions[bot] in #1339
• Transparency publish: always overwrite unsigned proofs/entries (#1348) by @actuallydan in #1350
• pollis-verify 0.8.2 (#1351) by @actuallydan in #1352
• Release-impact check: live vs main per target, feature parity, /release-check + hooks (#1347) by @actuallydan in #1349
• Org transfer: accept the pollis-app signer, repoint GHCR/OIDC/docs/links (#1265) by @actuallydan in #1356

Full Changelog: v1.17.2...v1.17.3