v1.26.0

What's Changed

🛠 Breaking changes

• imagepuller: reject config with unnormalized domain keys by @burgerdev in #2683

🎁 New features

• imagepuller: support client certificates by @burgerdev in #2712

🔧 Other changes

• coordinator: set explicit http server timeouts by @davidweisse in #2699
• kata: update to 4.2.0 by @burgerdev in #2721
• overlays/nixpkgs: blacklist compromised eMudhra certs by @charludo in #2726
• OVMF-TDX: bound guest memory by the shared bit instead of 256GB by @sespiros in #2747
• license: add SDK use as Additional Use Grant by @thomasten in #2759

📖 Documentation

• docs: add reminder for HWID/PIID config by @burgerdev in #2524
• docs: backport HWID/PIID reminder to 1.25 by @sespiros in #2717
• docs: fix registry wildcard precedence in 1.25 docs by @sespiros in #2702
• docs: authenticate the imagepuller to the k3s mirror by @sespiros in #2722

Full Changelog: v1.25.0...v1.26.0