Merge remote-tracking branch 'goog/jb-mr2-zeroday-release' into HEAD