chore(release): prepare v3.17.2

Author: liuyuran02

CHANGELOG.md

@@ -9,6 +9,25 @@ For per-release detailed notes, see the sections below.
 
 ---
 
+## v3.17.2 — Public Launch Polish (2026-06-12)
+
+### Added
+- CodeQL code scanning for Python, JavaScript/TypeScript, and Go.
+- OpenSSF Scorecard workflow with SARIF upload and published scorecard results.
+- `SUPPORT.md`, `CITATION.cff`, and expanded English contributor guidance for public collaboration.
+
+### Changed
+- README badges now show live release, CI, CodeQL, docs, Docker, license, and OpenSSF Scorecard status.
+- Development extras now include MkDocs dependencies so `make docs` works after `pip install -e ".[dev]"`.
+- Root and Node SDK license files now use the full Apache License 2.0 text, enabling GitHub SPDX detection.
+- Security policy links now point directly to private vulnerability reporting and the published security model.
+
+### Fixed
+- Runtime UTC timestamp generation now uses timezone-aware `datetime.now(timezone.utc)`.
+- Identity documentation examples now avoid deprecated `datetime.utcnow()`.
+
+---
+
 ## v3.17.1 — Public Release Readiness (2026-06-12)
 
 ### Added

CITATION.cff

@@ -7,7 +7,7 @@ authors:
 repository-code: "https://github.com/Kickflip73/agent-communication-protocol"
 url: "https://kickflip73.github.io/agent-communication-protocol/"
 license: "Apache-2.0"
-version: "3.17.1"
+version: "3.17.2"
 date-released: "2026-06-12"
 abstract: "A peer-to-peer protocol and relay implementation for direct agent-to-agent communication."
 keywords:

Dockerfile

@@ -43,7 +43,7 @@ ARG EXTRAS=base
 
 LABEL org.opencontainers.image.title="ACP Relay" \
       org.opencontainers.image.description="ACP P2P Agent Communication Protocol relay" \
-      org.opencontainers.image.version="3.17.1" \
+      org.opencontainers.image.version="3.17.2" \
       org.opencontainers.image.source="https://github.com/Kickflip73/agent-communication-protocol" \
       org.opencontainers.image.licenses="Apache-2.0"
 

docs/CHANGELOG.md

@@ -7,6 +7,25 @@ Dates: Asia/Shanghai (UTC+8)
 
 ---
 
+## v3.17.2 — Public Launch Polish (2026-06-12)
+
+### Added
+- CodeQL code scanning for Python, JavaScript/TypeScript, and Go.
+- OpenSSF Scorecard workflow with SARIF upload and published scorecard results.
+- `SUPPORT.md`, `CITATION.cff`, and expanded English contributor guidance for public collaboration.
+
+### Changed
+- README badges now show live release, CI, CodeQL, docs, Docker, license, and OpenSSF Scorecard status.
+- Development extras now include MkDocs dependencies so `make docs` works after `pip install -e ".[dev]"`.
+- Root and Node SDK license files now use the full Apache License 2.0 text, enabling GitHub SPDX detection.
+- Security policy links now point directly to private vulnerability reporting and the published security model.
+
+### Fixed
+- Runtime UTC timestamp generation now uses timezone-aware `datetime.now(timezone.utc)`.
+- Identity documentation examples now avoid deprecated `datetime.utcnow()`.
+
+---
+
 ## v3.17.1 — Public Release Readiness (2026-06-12)
 
 ### Added

docs/README.zh-CN.md

@@ -7,7 +7,7 @@
 
 <p>
   <a href="https://github.com/Kickflip73/agent-communication-protocol/releases">
-    <img src="https://img.shields.io/badge/版本-v3.17.1-blue?style=flat-square" alt="Version">
+    <img src="https://img.shields.io/badge/版本-v3.17.2-blue?style=flat-square" alt="Version">
   </a>
   <a href="https://github.com/Kickflip73/agent-communication-protocol/blob/main/LICENSE">
     <img src="https://img.shields.io/badge/协议-Apache_2.0-green?style=flat-square" alt="License">

docs/index.md

@@ -6,9 +6,9 @@
 
 *Send a URL. Get a link. Two agents talk. That's it.*
 
-[![Version](https://img.shields.io/badge/version-v3.17.1-blue?style=flat-square)](https://github.com/Kickflip73/agent-communication-protocol/releases)
+[![Version](https://img.shields.io/badge/version-v3.17.2-blue?style=flat-square)](https://github.com/Kickflip73/agent-communication-protocol/releases)
 [![License](https://img.shields.io/badge/license-Apache_2.0-green?style=flat-square)](https://github.com/Kickflip73/agent-communication-protocol/blob/main/LICENSE)
-[![Python](https://img.shields.io/badge/python-3.9%2B-blue?style=flat-square)](https://www.python.org/)
+[![Python](https://img.shields.io/badge/python-3.10%2B-blue?style=flat-square)](https://www.python.org/)
 [![Tests](https://img.shields.io/badge/tested-330%2B_PASS-success?style=flat-square)](https://github.com/Kickflip73/agent-communication-protocol/actions)
 
 </div>
@@ -159,5 +159,5 @@ curl http://localhost:7901/stream
 
 ## Version
 
-Current stable: **v3.17.1** — `POST /messages:stream` WebSocket streaming inlet with release hardening for CI, packaging, docs, and Docker publishing; see [CHANGELOG](CHANGELOG.md) for full history.
+Current stable: **v3.17.2** — `POST /messages:stream` WebSocket streaming inlet with public launch hardening for CI, packaging, docs, Docker publishing, CodeQL, OpenSSF Scorecard, and standard Apache-2.0 license detection; see [CHANGELOG](CHANGELOG.md) for full history.
 See [What's New](whats-new.md) · [Compatibility Matrix](compatibility-matrix.md) · [Roadmap](ROADMAP.md).

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "acp-relay"
-version = "3.17.1"
+version = "3.17.2"
 description = "Agent Communication Protocol (ACP) — P2P relay for Agent-to-Agent communication"
 readme = "README.md"
 license = "Apache-2.0"

relay/acp_relay.py

@@ -163,7 +163,7 @@
 logging.basicConfig(level=logging.INFO, format="%(asctime)s [acp] %(message)s", datefmt="%H:%M:%S")
 log = logging.getLogger("acp-p2p")
 
-VERSION = "3.17.1"  # v3.17: POST /messages:stream WebSocket streaming inlet — persistent WS; per-frame routing; {ok,message_id,server_seq} ack; ERR_PEER_NOT_FOUND; invalid JSON handled; completes reliable-messaging trio (batch v3.15 + ACK v3.16 + stream v3.17); capabilities.messages_stream=true
+VERSION = "3.17.2"  # v3.17: POST /messages:stream WebSocket streaming inlet — persistent WS; per-frame routing; {ok,message_id,server_seq} ack; ERR_PEER_NOT_FOUND; invalid JSON handled; completes reliable-messaging trio (batch v3.15 + ACK v3.16 + stream v3.17); capabilities.messages_stream=true
 
 _heartbeat_period_ms = None   # v2.80: optional heartbeat period in ms declared in AgentCard