we've skipped a bunch of upstream releases because they were mostly
targeting the google spanner database backend, debian docker images
that needed updates, or fixes for bugs introduced in any of the two
other things. 0.17.0 ships an update to the cryptograpy module deps
we have anyway due to how our packages are built, but we also don't
want to get picked up by vuln scanners that do not know about this.
