Upstream watch 2026-W31

[github-actions]

Weekly upstream watch. Check items off as they are triaged; record port verdicts in the
porting PRs via Upstream-commit: <sha> ported|skipped — reason trailers.
(Upstream refs are backticked on purpose — listings must not cross-link upstream.)

New upstream commits (10)

• f7da16459 fix(externaldb): report the unwritable path instead of raising NameError (#964) (spoolman) — port / skip?
• fc606ec8f ci: sign the released images with cosign (#963) (.github) — port / skip?
• a0987e063 Add smoke tests in CI for armv7/arm64 targets (.github) — port / skip?
• 5c5e8b44e fix(entrypoint): ignore Kubernetes service-link value in SPOOLMAN_PORT (#961) (entrypoint.sh) — port / skip?
• 129650237 fix(docker): link libstdc++ into the armv7 greenlet extension (#971) (Dockerfile) — port / skip?
• 54b67f53e Bump setuptools from 78.1.1 to 83.0.0 (#970) (pyproject.toml, requirements.txt, uv.lock) — port / skip?
• 007605828 Bump fast-uri from 3.1.3 to 3.1.4 in /client (#972) (client) — port / skip?
• c2c6a8dd8 fix(entrypoint): reject an unusable PUID or PGID (#962) (entrypoint.sh) — port / skip?
• 6e1065009 Bump version to 0.25.0 (client, pyproject.toml, uv.lock) — port / skip?
• eced411a5 ci: bump issue-manager to 0.8.1 and fix waiting delay (.github) — port / skip?

[sherrmann]

Superseded by the consolidated triage in #392, which covers all 363 non-merge upstream commits in 103e029..upstream/master (v0.24.0 -> v0.26.1) in one pass rather than week by week.