Release stellar-cli 25.2.0

[github-actions]

What

Stage a new release for stellar-cli 25.2.0. builds.json is updated with the rust base pins auto-picked from the current last two minor stable releases on rust-lang/rust; each pin resolves the upstream base image digest at append time (<label>@sha256:<digest>).

Why

Triggered by @fnando in https://github.com/stellar/stellar-cli-docker/actions/runs/30120817913.

What is next

See RELEASE.md for the full release process.

Push any further changes to the release/v25.2.0 branch that are needed in this release (for example, adjusting the paired rust_versions if the auto-pick isn't right for this iteration).

When this PR is reviewed and merged, create a GitHub Release by going to:

https://github.com/stellar/stellar-cli-docker/releases/new?tag=v25.2.0&title=25.2.0&target=main

The publish workflow fires on the release-published event and:

• Builds and pushes per-arch images for every declared (cli, rust base) pair; tags are mutable, so an existing tag is overwritten in place
• Generates SLSA build provenance + SPDX SBOM attestations on each built image (buildx-native + GitHub-native chains)
• Re-points the :25.2.0 and (if newest) :latest aliases
• Attaches the SBOM and provenance files to the new GitHub Release, with per-arch digests in the body

[Copilot]

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Adds a new build matrix entry to builds.json for version 25.2.0, pinning Rust Docker image digests for reproducible builds.

Changes:

• Added a new builds.json entry for version: 25.2.0
• Configured two pinned Rust toolchain images (1.96.1 and 1.97.1) via sha256 digests

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.