16.0.1-lts

What's changed

• [16.0-stable] Fix device config props handling in maybeRetryBoot. by @OhmSpectator (#5536) (backport of #5533)
• [16.0] Add missing Intel AX210 (TY) firmware required by iwlwifi by @jsfakian (#5542) (backport of #5503)
• [16.0-stable] Configure USB priority in VM boot order by @OhmSpectator (#5547) (backport of #5507)
• [16.0-stable] Revert "Add null key verification to detect TPM reset attacks" by @shjala (#5552) (backport of #5214 #5550)
• [16.0-stable] Revert automatic lkt hashes by @christoph-zededa (#5557) (backport of #5554)
• [16.0-stable] Fix QMP flooding on VM restart. by @OhmSpectator (#5562) (backport of #5548)
• [16.0-stable] Fix IPv4-only mode for static IPv4 configuration by @milan-zededa (#5566) (backport of #5565)
• [16.0-stable] usbmanager use ghw by @christoph-zededa (#5577) (backport of #5535 #5568)
• [16.0-stable ] Load TLS root CA directly from /config instead of /persist/certs by @shjala (#5578) (backport of #5553)
• [16.0-stable] pkg/pillar: update zededa/ghw library by @christoph-zededa (#5621) (backport of #5617)
• [16.0-stable] SR-IOV: Fix API logic and add I350 NIC support by @uncleDecart (#5632) (backport of #5604)
• [16.0-stable] pkg/storage-init: Fix CONFIG partition tmpfs size by @rene (#5692) (backport of #5668)
• [16-stable] Bump eve pillar by @shjala (#5701)
• [16.0-stable] readthedocs.yaml: Bump Ubuntu and Python versions by @rene (#5723) (backport of #5718)
• [16.0-stable] Backport CI improvements by @europaul (#5724) (backport of #5534 #5551 #5583 #5657 #5662 #5665 #5700 #5702 #5709 #5713 #5714)
• [16.0-stable] Simplify/remove /persist/status/zedagent/* by @eriknordmark (#5750) (backport of #5584 #5775)
• [16.0-stable] spec.sh: : fix invalid JSON when ioMemberList is empty by @christoph-zededa (#5759) (backport of #5593)
• [16.0-stable] Refactor and fix network tracing integration in controllerconn by @milan-zededa (#5769) (backport of #5648)
• [16.0-stable] mmdbus: improve eSIM detection using EID and handle missing slot paths by @milan-zededa (#5770) (backport of #5697)
• [16.0-stable] Add dynamic PCR policy support for disk key sealing by @shjala (#5794) (backport of #5398 #5591)
• [16.0-stable] Fix an issue of edge-node clustering interface using logical-label by @naiming-zededa (#5795) (backport of #5720)
• [16.0-stable] Backport URL join fixes and SAS token fix by @europaul (#5801) (backport of #5588 #5715)
• [16.0-stable] Fix broken leader election in Kubernetes cluster by @milan-zededa (#5821) (backport of #5773)
• [16.0-stable] Fix a race condition when eve-k app restart app lost IP address by @naiming-zededa (#5825) (backport of #5706)
• [16.0-stable] Fix DevicePortConfig.MostlyEqual ignoring L2 (VLAN/bond) config changes by @milan-zededa (#5828) (backport of #5820)
• [16.0-stable] pkg/pillar: Disable vmx for FML virtualization mode by @rene (#5829) (backport of #5824)
• [16.0-stable] Fix regression causing potential panic in triggerPublishAllInfo by @eriknordmark (#5836) (backport of #5833)
• [16.0-stable] Fix bond link monitoring by @milan-zededa (#5858) (backport of #5809)
• [16.0-stable] Publish bond adapter status and metrics by @milan-zededa (#5859) (backport of #5834)
• [16-0-stable] edgeview: fix wwan0 excluded from websocket interface list by @naiming-zededa (#5884) (backport of #5832)
• [16.0-stable] HW inventory fixes by @christoph-zededa (#5888) (backport of #5861)
• [16.0-stable] pkg/debug: fix COM port detection by @christoph-zededa (#5889) (backport of #5876)
• [16.0-stable] Backport #5906 by @eriknordmark (#5910) (backport of #5906)
• [16.0-stable] kernel: update kernel commits to patch CVE-2026-31431 by @shjala (#5918)
• [16.0-stable] Backport vTPM fixes by @shjala (#5919) (backport of #5838)
• [16.0-stable] Force bonds/vlans re-parsing when lower layer changes by @milan-zededa (#5941) (backport of #5902)
• [16.0-stable] device-steps: disable mdev hotplug by @christoph-zededa (#5943) (backport of #5924)
• [16.0-stable] bond: Enable active ARP validation to prevent cross-node interference by @milan-zededa (#5949) (backport of #5939)
• [16.0-stable] LPS Network Endpoint Enhancements and Signaling by @milan-zededa (#5953) (backport of #5904)
• [16.0-stable] pkg/fw: Add .pnvm firmware file for Intel AX210 by @rene (#5968) (backport of #5945)
• [16.0-stable] Makefile: Build eve-fw generic variant for evaluation platform by @europaul (#5972) (backport of #5785)
• [16.0-stable] upgrade dnsmasq by @christoph-zededa (#5984) (backport of #5948)
• [16.0-stable] newlog: sanitize non-Latin-1 chars in gzip header by @eriknordmark (#5986) (backport of #5977)
• [16.0-stable] vtpm: fix unseal failure when SHA256 PCR bank is disabled by @shjala (#6002) (backport of #5975)
• [16.0-stable] GHA: fix release-asset publishing on 16.0-stable by @europaul (#6005)
• [16.0-stable] bump eve-libs by @christoph-zededa (#6026) (backport of #6030 #6031)
• [16.0-stable] newlog: cache log levels to apply them from boot by @europaul (#6042) (backport of #6031)

Full Changelog: 16.0.0-lts...16.0.1-lts