v0.13.17

What's Changed

• Restrict cross-namespace kubeConfigSecret references to Secrets labeled fleet.cattle.io/kubeconfig-referenceable-from by @thardeck in #5972
• Bind ClusterRegistration ClientID to its registration token by @thardeck in #5949
• Allow Helm valuesFiles to reference files within the repository checkout root (#5842) by @thardeck in #5868
• Warn when helmRepoURLRegex strips credentials from a non-matching chart URL (#5793) by @thardeck in #5822
• Add Helm chart image HIP-0015 annotations by @thardeck in #5855
• Update Go to v1.26.10 (CVE-2026-111943) by renovate in #5987
• Update golang.org/x/net to v0.60.0, golang.org/x/crypto to v0.57.0, golang.org/x/mod to v0.41.0, golang.org/x/sync to v0.23.0, golang.org/x/sys to v0.48.0, golang.org/x/term to v0.46.0, and golang.org/x/text to v0.42.0 (CVE-2026-78659, CVE-2026-78660, CVE-2026-78669, CVE-2026-78663, CVE-2026-97032) by renovate in #5921
• Update module github.com/containerd/containerd to v1.7.36 (GHSA-pg57-6jwg-q645) by renovate in #5839
• Update module go.opentelemetry.io/otel/sdk to v1.45.0 (GHSA-8wmf-6v46-5gfg) by renovate in #5805

Full Changelog: v0.13.16...v0.13.17