v3.1.0-rc1

What's Changed

• Update matching text for latest systemd tests by @mauromorales in #2633
• Update softprops/action-gh-release action to v2.0.6 by @renovate in #2636
• Add OpenSSF best practices badge by @mauromorales in #2639
• Add clomonitor badge by @mauromorales in #2640
• Create scorecards.yaml by @mauromorales in #2641
• 🤖 test sysextension on uki by @Itxaka in #2617
• 🤖 Improve renovate by @Itxaka in #2644
• Pin dependencies by @renovate in #2646
• Get digests from earthfile by @Itxaka in #2648
• Fix dangerous workflow by @mauromorales in #2649
• Link to GH Security Draft Advisory form by @mauromorales in #2650
• Update actions/checkout action to v4.1.7 by @renovate in #2642
• Update github/codeql-action action to v3.25.10 by @renovate in #2643
• Remove sha from docker images by @Itxaka in #2655
• Remove leftover by @Itxaka in #2656
• 🔧 : Update to use new osbuilder by @Itxaka in #2645
• 🔧 Bump osbuilder by @Itxaka in #2672
• Add .snyk config by @mauromorales in #2673
• Bump framework to 2.9.0 to get newer dependencies by @jimmykarily in #2671

Full Changelog: v3.1.0-alpha1...v3.1.0-rc1

v3.0.14

Security

• 🔒 Rebuild of kcrypt-discovery-challenger and luet with newer Golang version to address CVE-2024-24790

Full Changelog: v3.0.13...v3.0.14

v3.1.0-alpha1

What's Changed

• fix(nvidia): do not ship nohang in nvidia-arm builds by @mudler in #2433
• Add security scan link to release checklist by @mauromorales in #2436
• Bump fedora from 38 to 39 by @mauromorales in #2446
• Bump framework by @Itxaka in #2448
• fix(deps): update module github.com/kairos-io/kairos-sdk to v0.0.29 by @renovate in #2450
• chore(deps): update dependency kairos-io/kairos-framework to v2.7.27 by @renovate in #2459
• Symlink any /boot/Image* to /boot/vmlinuz by @mauromorales in #2463
• chore(deps): update quay.io/kairos/osbuilder-tools docker tag to v0.200.10 by @renovate in #2453
• chore(deps): update dependency kairos-io/kairos-framework to v2.7.28 by @renovate in #2465
• chore(deps): update quay.io/kairos/osbuilder-tools docker tag to v0.200.11 by @renovate in #2466
• Allow https protocol in ipxe by @jimmykarily in #2468
• Add test for custom partioning by @jimmykarily in #2291
• Add Ubuntu 24.04 to pipelines by @mauromorales in #2447
• Produce 24.04 uki master artifact by @mauromorales in #2470
• Push master ARM images to quay by @mauromorales in #2477
• fix(orin): disable ISCSI in the initramfs generation by @mudler in #2474
• [WIP] reusable nvidia by @mauromorales in #2478
• 📖 chore: fix typos by @xiaoxianBoy in #2441
• Add ubuntu 24.04 arm generic by @mauromorales in #2480
• chore(deps): update tj-actions/changed-files action to v44 by @renovate in #2392
• fix(deps): update module github.com/kairos-io/kairos-sdk to v0.1.0 by @renovate in #2471
• chore(deps): update earthly/earthly docker tag to v0.8.8 by @renovate in #2485
• chore(deps): update robinraju/release-downloader action to v1.10 by @renovate in #2460
• chore(deps): update dependency kairos-io/kairos-framework to v2.8.1 by @renovate in #2472
• fix(deps): update module github.com/kairos-io/kairos-sdk to v0.1.1 by @renovate in #2487
• readme: add links to project governance by @mudler in #2498
• chore(deps): update actions/download-artifact action to v4.1.5 by @renovate in #2490
• chore(deps): update quay.io/kairos/osbuilder-tools docker tag to v0.200.12 by @renovate in #2494
• chore(deps): update quay.io/luet/base docker tag to v0.35.2 by @renovate in #2499
• chore(deps): update actions/download-artifact action to v4.1.6 by @renovate in #2500
• 🐛 Move nfs-utils to common build target in opensuse flavor by @kaiehrhardt in #2495
• Update LICENSE by @mudler in #2503
• 🐧 Bump to Fedora 40 by @Itxaka in #2502
• chore(deps): update aquasec/trivy docker tag to v0.50.2 by @renovate in #2501
• chore(deps): update actions/download-artifact action to v4.1.7 by @renovate in #2507
• chore(deps): update aquasec/trivy docker tag to v0.50.4 by @renovate in #2508
• chore(deps): update earthly/earthly docker tag to v0.8.9 by @renovate in #2509
• Remove 23.10 from the test pipelines by @mauromorales in #2512
• More options for enki outputs by @Itxaka in #2515
• chore(deps): update dependency kairos-io/kairos-framework to v2.8.2 by @renovate in #2530
• 🤖 Fix reusable uki master test by @Itxaka in #2536
• 🤖 Drop profile-build by @Itxaka in #2537
• Remove double brackets from Earthly by @mauromorales in #2541
• refactor debian dockerfile to build arm by @mauromorales in #2542
• bump framework to v2.8.3 by @mauromorales in #2543
• chore(deps): update slackapi/slack-github-action action to v1.26.0 by @renovate in #2491
• chore(deps): update aquasec/trivy docker tag to v0.51.1 by @renovate in #2532
• bump framework to v2.8.4 by @mauromorales in #2546
• Bump action-gh-release to v2.0.5 by @mauromorales in #2544
• Bump osbuilder by @Itxaka in #2551
• 🤖 Do not auto reboot on uki tests by @Itxaka in #2549
• Update earthly/earthly Docker tag to v0.8.10 by @renovate in #2562
• Update earthly/earthly Docker tag to v0.8.12 by @renovate in #2567
• Update aquasec/trivy Docker tag to v0.51.2 by @renovate in #2576
• Update aquasec/trivy Docker tag to v0.51.4 by @renovate in #2590
• Update earthly/earthly Docker tag to v0.8.13 by @renovate in #2600
• Build ubuntu 22 arm rpi on cncf runners by @mauromorales in #2607
• Install limited amount of modules for UKI Ubuntu by @mauromorales in #2566
• Add systemd-continaers to ubuntu by @Itxaka in #2614
• Update earthly/earthly Docker tag to v0.8.14 by @renovate in #2618
• Bump opensuse Leap to 15.6 by @mauromorales in #2623
• 🐧 Add selinux packages to ubuntu 24.04 by @Itxaka in #2625
• Bump framework to v2.8.5 by @mauromorales in #2627

New Contributors

• @xiaoxianBoy made their first contribution in #2441

Full Changelog: v3.0.4...v3.1.0-alpha1

v3.0.13

⚠️ Known issues

Since v3.0.5 we introduced the 🐛 #2624 this is related to our backporting mechanism, which we will address starting in v3.1.x

🐛 Bug fixes

• #2488

Full Changelog: v3.0.12...v3.0.13

v3.0.12

⚠️ Known issues

Since v3.0.5 we introduced the 🐛 #2624 this is related to our backporting mechanism, which we will address starting in v3.1.x

What's Changed

• Add more space on v3.0 releases by @mauromorales in #2564

Full Changelog: v3.0.11...v3.0.12

v3.0.11

⚠️ Known issues

Since v3.0.5 we introduced the 🐛 #2624 this is related to our backporting mechanism, which we will address starting in v3.1.x

Full Changelog: v3.0.10...v3.0.11

v3.0.10

⚠️ Known issues

Since v3.0.5 we introduced the 🐛 #2624 this is related to our backporting mechanism, which we will address starting in v3.1.x

Updated

• Bumps framework to v2.7.32
• Bumps kairos-agent to v2.8.14 (part of the framework)

Fixes

• Prevent unwanted yaml fields to be marshalled: Fixes some step duplication when triggering the install via events like providers do
• Avoid adding an extra line to os-release output: We were adding an extra line at the end of the os-release file, which some software had problems dealing with

Improvements

• kairos-agent state will now show SecureBoot state of the node (on/off)
• kairos-agent state will now show the common name of the EFI certificates in the node if any
• kairos-agent state will now show a list of encrypted partitions by label and by device if any

Full Changelog: v3.0.9...v3.0.10

v3.0.9

⚠️ Known issues

Since v3.0.5 we introduced the 🐛 #2624 this is related to our backporting mechanism, which we will address starting in v3.1.x

Fixes

• 🐛 Fix broken pipeline for arm rpi Tumbleweed (caused by Python package being much bigger) by @mauromorales f1aa0ac
• 🐛 Move nfs-utils to common build target in opensuse flavor by @kaiehrhardt #2495
• 🐛 UKI custom mounts breaking the cos-layout file by @kreeuwijk kairos-io/packages#839 (actual fix) release fix (c95475c)
• ✨ Ubuntu 24.04 artifacts by @mauromorales #2527

Full Changelog: v3.0.8...v3.0.9

v3.0.8

⚠️ Known issues

Since v3.0.5 we introduced the 🐛 #2624 this is related to our backporting mechanism, which we will address starting in v3.1.x

Backported fixes for agent:

• Bumps yip for duplicated name of steps (was causing unexpected issues with users sometimes) Issue: #2488

Updated packages

Category	Name	Old version	New Version
fips	kairos-agent	v2.8.12	v2.8.13
system	kairos-agent	v2.8.12	v2.8.13

---

Full Changelog: v3.0.7...v3.0.8

v3.0.7

⚠️ Known issues

Since v3.0.5 we introduced the 🐛 #2624 this is related to our backporting mechanism, which we will address starting in v3.1.x

Backported fixes for agent and immucore:

• Bumps yip for user id reuse
• Adds sync calls before and after mounting
• [UKI] Fixes hooks in uki install
• [UKI] Fixes mounting oem before running rootfs stage under uki

Updated packages

Category	Name	Old version	New Version
fips	kairos-agent	v2.8.11	v2.8.12
system	kairos-agent	v2.8.11	v2.8.12
system	immucore	v0.1.25	v0.1.26
fips	immucore	v0.1.25	v0.1.26

---

Full Changelog: v3.0.6...v3.0.7