[scttfrdmn]

Release v0.163.2: moves Unreleased to ## [0.163.2] - 2026-11-11. Patch, security. Built with Go 1.26.11 / 1.27.4 for GO-2026-6859 (net/http: an HTTP/1 server crash from a MaxBytesReader header race, published 2026-11-11). No code change.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[github-actions]

Deploy checklist: v0.163.1..v0.163.2

Operated components whose deploy inputs differ between v0.163.1 (b4c55f9) and v0.163.2 (dc13132), from scripts/deploychecklist (#1444). code-only: only compiled inputs changed, so a code update ships it. manual: a script, template, policy or mapping changed; review and apply it by hand. Deploy from a clean checkout of v0.163.2. How to read this: docs/infra-account.md, "Deploy checklist".

Lambdas (0 of 9 need a deploy)

None.

Unchanged, no deploy: lambda/cost-history-collector, lambda/dashboard-api, lambda/dashboard-websocket, lambda/dashboard-websocket-processor, lambda/dns-updater, lambda/pipeline-orchestrator, lambda/scheduler-handler, lambda/sweep-orchestrator, lambda/ttl-reaper.

Other deploy inputs (0 of 26 changed, all manual)

None.

Shipped with the CLI, no deploy

• pkg/reaperdeploy: creates a Lambda from Go inside the spawn CLI (the self-hosted reaper, in the user's own account), so it ships with the CLI release, not as a spore.host deploy