- Updated container image CA certificates to distrust compromised roots (emSign ECC Root CA G3, Comodo AAA Services root).
- Rebuilt with Go 1.27.3, addressing vulnerabilities in net/http, net/textproto, crypto/tls, and html/template.
- Upgraded golang.org/x/net to v0.60.0, fixing multiple HTTP/2 security issues (GO‑2026‑6603, ‑6610, ‑6611, ‑6612, ‑6617).