1.24.1

What's Changed

• chore(deps): update dekaf to 1.24.0 by @thomhurst in #3570
• chore(deps): update opentelemetry to 1.20.0 by @thomhurst in #3571
• chore(deps): update anthropics/claude-code-action digest to 374f254 by @thomhurst in #3572
• chore(deps): update dependency verify.tunit to 33.3.4 by @thomhurst in #3573
• chore(deps): update dependency alibabacloud.sdk.kms20160120 to 2.2.2 by @thomhurst in #3574
• chore(deps): update anthropics/claude-code-action digest to f27be6b by @thomhurst in #3575
• chore: add Anthropic OSS Scanner build image and threat model by @thomhurst in #3576
• docs: add security contact email to SECURITY.md by @thomhurst in #3577
• chore(deps): update ubuntu docker tag to v26 by @thomhurst in #3578
• chore(deps): update anthropics/claude-code-action digest to 5eb090f by @thomhurst in #3580
• chore(deps): update anthropics/claude-code-action digest to db77d4d by @thomhurst in #3581
• fix(producer): restore caller Activity.Current after starting send span by @thomhurst in #3583
• feat(outbox): continue the enqueuing request's trace through the relay by @thomhurst in #3584
• fix(producer): leave send span status unset on success by @thomhurst in #3587
• fix(hosting): restart share poll after recoverable acknowledgement failure by @thomhurst in #3588
• test(consumer): advance the offsets high watermark when a failover read misses commits by @thomhurst in #3589
• test(admin): wait for the controller's metadata.version before controller-bootstrap tests by @thomhurst in #3591
• test(outbox): make relay backoff and relay-span trace tests deterministic by @thomhurst in #3590
• fix(share-consumer): skip fetch-truncated last batch; deflake share tests by @thomhurst in #3593
• fix(hosting): keep share service running when an acknowledgement hits a retired connection by @thomhurst in #3595
• fix(share-consumer): resume a cancelled poll's in-flight ShareFetch by @thomhurst in #3594

Full Changelog: v1.24.0...v1.24.1