chore: release 0.9.17

[github-actions]

🚀 Release ${version}

0.9.17 (2026-08-12)

Features

• chart: foreman.crs.namespace — render the CRS ConfigMap where kube-state-metrics can mount it (#1492) (5bb8c19)
• fetch_pull_request: include check-run output (title/summary/text) for failed runs (#1481) (#1505) (e323f32)

Bug Fixes

• chart: heartbeat alert uses time(), not the nonexistent time_seconds() (#1494) (bf8c1a0)
• detect the scheduler's other wording for an unusable cache volume (#1513) (64ee9d7)
• EnsurePR treats a closed unmerged PR as satisfied — retried work ends with no PR (#1476) (#1507) (82baff8)
• foreman: bound grep match lines so one minified file cannot end a run (#1488) (952f8af)
• foreman: one tool list, so a tool cannot ship unusable again (#1486) (e77d7cf)
• foreman: reviewers review the change, not the base branch (+ cross-project remote guard) (#1490) (0f3fa83)
• foreman: route all three consumers through the provider seams (#1510) (79448fc)
• modelpool: guard the nil HTTPClient that panics every swap (#1485) (dc3fa50)
• name the cause when a model cache PV can never bind (#1511) (772c99d)
• normalizeContainers strips operator-owned SecurityContext fields before drift comparison (#1462) (#1506) (8d291ca)
• operator: apply nodeSelector and tolerations to non-GPU services (#1504) (dc3bac3)
• surface the unbindable-cache diagnosis instead of dropping it (#1512) (03c0f17)

Documentation

• foreman: refresh model compatibility from what the fleet has proven (#1483) (8ccdbee)
• how to recognise a cache volume the provisioner never stamped (#1514) (12d59c2)
• operations: document ModelPool in the GPU-sharing guide (#1508) (c2c3a84)

---

This PR was generated with Release Please. See documentation.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!