From fade649951d71ffd9cfc49f7fa8c8d56f78300a3 Mon Sep 17 00:00:00 2001
From: Nic <qianyong@api7.ai>
Date: Fri, 21 Aug 2026 10:36:37 +0000
Subject: [PATCH] chore: bump APISIX-Runtime to 1.3.17

1.3.17 builds against apisix-nginx-module 1.19.10, which makes
`upstream.set_ssl_trusted_store()` take effect without a client
certificate (api7/apisix-nginx-module#126) - `upstream.tls.ca_certs`
in #13863 depends on it - and picks up ngx_http_ffi_client v0.1.2/v0.1.3.
---
 .requirements                 | 2 +-
 ci/linux-install-openresty.sh | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.requirements b/.requirements
index 215b4f93b283..b484c4955792 100644
--- a/.requirements
+++ b/.requirements
@@ -17,5 +17,5 @@
 
 APISIX_PACKAGE_NAME=apisix
 
-APISIX_RUNTIME=1.3.16
+APISIX_RUNTIME=1.3.17
 APISIX_DASHBOARD_COMMIT=045e3142867e3b7d5d1b8ec40bf8f66a7ce24a64
diff --git a/ci/linux-install-openresty.sh b/ci/linux-install-openresty.sh
index ffdab29ad570..fbc11b2671bd 100755
--- a/ci/linux-install-openresty.sh
+++ b/ci/linux-install-openresty.sh
@@ -61,7 +61,7 @@ else
     sudo apt-get -y update --fix-missing
     sudo apt-get install -y build-essential gcc g++ cpanminus libxml2-dev libxslt-dev
 
-    if [ "$APISIX_RUNTIME" != "1.3.16" ]; then
+    if [ "$APISIX_RUNTIME" != "1.3.17" ]; then
         echo "Please update the apisix-runtime-debug checksum for APISIX_RUNTIME=$APISIX_RUNTIME" >&2
         exit 1
     fi
@@ -69,11 +69,11 @@ else
     case "$ARCH" in
         x86_64|amd64)
             DEB_ARCH="amd64"
-            EXPECTED_SHA256="a56f0adc9bf6f6a491f7548df4f8e45fa3df3dd5e209d4a2ba5341b66eb7e060"
+            EXPECTED_SHA256="d60067ba7a89cab6fca8e70994e4158fa8c414a569406e1692998be2567832a6"
             ;;
         arm64|aarch64)
             DEB_ARCH="arm64"
-            EXPECTED_SHA256="b645ee4f5ea36d26aaacb1b1c8278d89756b0b8448701ec561ab982b4768204a"
+            EXPECTED_SHA256="2db6619c6fa31128e7ea45b2cdcc56dd26d2b11d7b4a68600f4f04746cb34766"
             ;;
         *)
             echo "Unsupported architecture: $ARCH" >&2