Security updates and release cadence

### Topic

security, release

### Relevant information

The last release, Airbyte 2.0, was made in October 2025. The Docker images contain significant numbers of vulnerabilities.

Security updates have been merged in this repository but there has been no new release for coming up to a year.

Has something happened to the release cadence?

Example scan

```
airbyte/server:2.0.1 — headline

165 total vulns
- CRITICAL: 4
- HIGH: 82
- MEDIUM: 70
- LOW: 9

By target: OS (amazon 2) 110 · Java jars 55

All 4 CRITICALs are Java jars: jinjava (×2), opentelemetry-javaagent, dd-java-agent.
```

Start by reviewing the release history around Airbyte 2.0 and the security updates mentioned in the repository, then compare them with the reported Docker image scan. Done means documenting what changed in the release cadence and identifying whether the listed Java and OS vulnerabilities are addressed by a planned release.

由索引模型根據 Issue 內容生成。