5.12.5
(chore): Patch Python SDK generator container CVEs flagged in the AWS ECR / grype
scan. Patch npm’s bundled picomatch@4.0.3 -> 4.0.4
(GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p) and
brace-expansion@5.0.4 -> 5.0.5 (CVE-2026-33750) via tarball replacement
so the published image no longer ships the vulnerable bundled JS
dependencies that grype flags.