v4.0.8

What's Changed

• fix(download): add missing CNI patch image lists by @redscholar in #3239
• feat(cmd): add kk create convert for v3-to-v4 config migration by @redscholar in #3231
• fix(docker): downgrade default docker version to 23.0.5 for k8s 1.26 by @redscholar in #3241
• feat(download): add opt-in static containerd binary download by @pujitha24 in #3245
• feat(native): make OS package list configurable via native.packages by @redscholar in #3243
• fix(dns): raise nodelocaldns memory limit to 400Mi by @redscholar in #3246
• chore(hack): remove unused sync-components.sh by @redscholar in #3250
• fix(version): sync component version sources and pin containerd/runc to docker by @redscholar in #3248
• feat(cri): drop cri.docker.bridge_ip, use cri.docker.daemon.bip for docker0 subnet by @redscholar in #3255
• feat(network): support standard IPv4/IPv6 dual-stack clusters by @redscholar in #3247
• fix(cert): stop SANs of one task from leaking into the next by @redscholar in #3258
• fix(image-registry): share the Harbor token key pair across HA instances by @redscholar in #3256
• fix(cri): read the registry configuration from config_path on containerd v2 by @redscholar in #3257
• fix(dns): resolve registry/NFS domains in-cluster, haproxy on loopback by @redscholar in #3242
• feat(cli): support --tags / --skip-tags to filter precheck categories by @redscholar in #3261
• fix(capkk): download kube binaries from dl.k8s.io by @pujitha24 in #3269
• feat: 支持 define 模板定义，例如自模板include复用减少重复定义计算逻辑. by @mumuhhh in #3184
• build: bump go toolchain to 1.26.0 by @redscholar in #3262
• fix(kubernetes): use config vars for API server endpoint/port by @redscholar in #3272
• feat(precheck): add runtime compatibility checks by @redscholar in #3259
• fix(cri): honor image_registry.auth.plain_http for HTTP registry endpoints by @redscholar in #3273
• feat(iso): add repository ISO build support for more OS distros by @redscholar in #3254
• fix(iso): use archive.debian.org for the Debian 11 repository ISO by @redscholar in #3275
• fix(download): drop calico and cilium image versions no minor references by @redscholar in #3276
• fix(iso): harden the repository ISO build pipeline by @redscholar in #3278
• fix(api): decode Config.Spec.Raw in Config.Value() when Object is unset by @pujitha24 in #3268
• fix(variable): trim whitespace from rendered host selectors by @pujitha24 in #3265
• fix(hack): resolve full dependency closure for offline ISO by @redscholar in #3279
• fix(hack): include nftables and nfs-kernel-server in offline ISO manifest by @redscholar in #3280
• revert: drop ineffective download-pkgs.sh dependency-closure change (#3279) by @redscholar in #3281
• fix(harbor): write a 16 character text secret key so prepare can start by @redscholar in #3282

Full Changelog: v4.0.7...v4.0.8