14.5.4-lts

What's changed

• [14.5-stable] Fix device config props handling in maybeRetryBoot. by @OhmSpectator (#5537) (backport of #5533)
• [14.5-stable] Configure USB priority in VM boot order by @OhmSpectator (#5546) (backport of #5507)
• [14.5-stable] Fix QMP flooding on VM restart. by @OhmSpectator (#5563) (backport of #5548)
• [14.5-stable] Fix IPv4-only mode for static IPv4 configuration by @milan-zededa (#5567) (backport of #5565)
• [14.5-stable] Load TLS root CA directly from /config instead of /persist/certs by @shjala (#5579) (backport of #5553)
• [14.5-stable] pillar: make URL joins use url.JoinPath by @europaul (#5595) (backport of #5588)
• [14.5-stable] pkg/grub: get source from git instead of tar.gz by @europaul (#5597) (backport of #5589)
• [14.5-stable] Get go from go.dev instead of alpine's edge/community mirror by @europaul (#5602) (backport of #5184)
• [14.5-stable] Get go from go.dev instead of alpine's edge/community mirror - part 2 by @europaul (#5616)
• [14.5-stable] SR-IOV: Fix API logic and add I350 NIC support by @uncleDecart (#5633) (backport of #5604)
• [14.5-stable] pkg/storage-init: Fix CONFIG partition tmpfs size by @rene (#5674) (backport of #5668)
• [14.5-stable] readthedocs.yaml: Bump Ubuntu and Python versions by @rene (#5722) (backport of #5718)
• [14.5-stable] Backport CI improvements by @europaul (#5726) (backport of #5534 #5551 #5583 #5593 #5657 #5662 #5665 #5700 #5702 #5709 #5713 #5714)
• [14.5-stable] Simplify/remove /persist/status/zedagent/* by @eriknordmark (#5753) (backport of #5584 #5754 #5775)
• [14.5-stable] mmdbus: improve eSIM detection using EID and handle missing slot paths by @milan-zededa (#5771) (backport of #5697)
• [14.5-stable] Backport vTPM fixes by @shjala (#5797) (backport of #5398 #5591 #5838)
• [14.5-stable] downloader: fix SAS token corruption in constructDatastoreContext by @jsfakian (#5802) (backport of #5715)
• [14.5-stable] Fix regression causing potential panic in triggerPublishAllInfo by @eriknordmark (#5837) (backport of #5833)
• [14.5-stable] pkg/debug: fix COM port detection by @christoph-zededa (#5890) (backport of #5876)
• [14.5-stable] backport dockerfile consistency improvements by @christoph-zededa (#5892) (backport of #4876 #5011 #5680)
• [14.5-stable] Backport #5906 by @eriknordmark (#5911) (backport of #5906)
• [14.5-stable] kernel: update kernel commits to patch CVE-2026-31431 by @shjala (#5940)
• [14.5-stable] device-steps: disable mdev hotplug by @christoph-zededa (#5944) (backport of #5924)
• [14.5-stable] upgrade dnsmasq by @christoph-zededa (#5985) (backport of #5948)
• [14.5-stable] newlog: sanitize non-Latin-1 chars in gzip header by @eriknordmark (#5987) (backport of #5977)
• [14.5-stable] assets.yml: harden release-asset publishing by @europaul (#6006)

Full Changelog: 14.5.3-lts...14.5.4-lts