Release stellar-cli 27.1.0

[github-actions]

What

Stage a new release for stellar-cli 27.1.0. builds.json is updated with the rust base pins auto-picked from the current last two minor stable releases on rust-lang/rust; each pin resolves the upstream base image digest at append time (<label>@sha256:<digest>).

Why

Triggered by @fnando in https://github.com/stellar/stellar-cli-docker/actions/runs/30640638878.

What is next

See RELEASE.md for the full release process.

Push any further changes to the release/v27.1.0 branch that are needed in this release (for example, adjusting the paired rust_versions if the auto-pick isn't right for this iteration).

When this PR is reviewed and merged, create a GitHub Release by going to:

https://github.com/stellar/stellar-cli-docker/releases/new?tag=v27.1.0&title=27.1.0&target=main

The publish workflow fires on the release-published event and:

• Builds and pushes per-arch images for every declared (cli, rust base) pair; tags are mutable, so an existing tag is overwritten in place
• Generates SLSA build provenance + SPDX SBOM attestations on each built image (buildx-native + GitHub-native chains)
• Re-points the :27.1.0 and (if newest) :latest aliases
• Attaches the SBOM and provenance files to the new GitHub Release, with per-arch digests in the body

[Copilot]

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Adds a new build definition to builds.json to support version 27.1.0 with updated Rust toolchain image pins.

Changes:

• Added a new entry referencing commit 8e402ea... for version 27.1.0
• Introduced new pinned Rust image tags/digests (1.96.1-slim-trixie, 1.97.1-slim-trixie)

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.