v0.10.0

Changes since v0.9.0

⚠️ Breaking Changes

• Bump Kubernetes api, controller-runtime and decouple webhooks from api (#2390)
• Only accept HTTPHeadersRef in same namespace GHSA-c98h-7hp9-v9hq
• Remove keepalived from BMO repository (#2228)

✨ New Features

• Use standard GetVirtualMedia API for checking dataImage status (#2336)
• Add support for Disablepoweroff (#2229)
• add support for locally built ironic in e2e test (#2167)

🐛 Bug Fixes

• Fix few errors when making beta release notes (#2381)
• Handle dataImage before reboot annotation to prevent annotation removal before all actions are complete (#2333)
• fix broken release process (#2325)
• Define some IPA (downloader) related variables (#2264)
• bump x/net, x/crypto and x/oauth2 (#2316)
• update rescue iso used for e2e tests (#2315)
• Add BMH OwnerReference for DataImage right after its creation (#2249)
• Set ownerReference for dataImage during BMH Reconcile (#2238)
• Do not create HFC for non-redfish BMH (#2227)
• Add validation against cross-namespace secret references (#2190)
• Adding empty checksumType checks on BMH to automatically detect hashing algorithm (#2174)
• Fix BMO optional test by not checking metrics service (#2170)
• Fix metrics service validation (#2165)

🌱 Others

• Bump CAPI to v1.10.0 (#2416)
• bump golang to 1.23.6 (#2243)
• Set e2e timeout to 1.5h (#2191)
• Bump github.com/prometheus/client_golang from 1.21.1 to 1.22.0 (#2411)
• Bump golang.org/x/crypto from 0.36.0 to 0.37.0 in /hack/tools (#2412)
• Bump golang.org/x/crypto from 0.36.0 to 0.37.0 in /test (#2414)
• Bump github.com/onsi/ginkgo/v2 from 2.23.3 to 2.23.4 in /test (#2413)
• Refactoring: move ./controllers to ./internal/controller (#2405)
• Makefile: do not explicit include ./internal/ (#2404)
• Add Adil and Peppi-lotta as reviewers (#2407)
• Bump the kubernetes group across 2 directories with 1 update (#2400)
• Bump go.etcd.io/etcd/client/pkg/v3 from 3.5.19 to 3.5.21 (#2367)
• Minor fix release workflow (#2403)
• Enable intrange linter in golangci-lint (#2393)
• Bump github.com/onsi/gomega from 1.36.3 to 1.37.0 in /test (#2388)
• make osv-scanner scan run daily (#2389)
• add labels to Dockerfile (#2384)
• Enable testifylint linter in golangci-lint (#2383)
• Bump golang.org/x/oauth2 from 0.27.0 to 0.29.0 in /hack/tools (#2387)
• Bump github.com/onsi/gomega from 1.36.3 to 1.37.0 (#2386)
• bump golang to v1.23.8 and x/net to v0.38.0 (#2374)
• Enable usetesting linter in golangci-lint (#2380)
• cleanup build/ and obsolete publishing-images.md (#2379)
• Bump the github-actions group with 5 updates (#2378)
• do not bump major version of github actions (#2373)
• Minor logging improvements (#2370)
• Bump sigs.k8s.io/kind from 0.26.0 to 0.27.0 in /test (#2327)
• E2E: Avoid net-booting VMs unintentionally (#2266)
• update the used linters list (#2350)
• Bump golangci-lint to v1.64.7 (#2335)
• update osv-scanner to v2.0.0 (#2339)
• bump tj-actions/changed-files to v46.0.1 (#2331)
• Reduce logging noise from status reconstruction (#2330)
• Move @mquhuy to emeritus reviewers (#2329)
• group all github action bumps into single PR (#2326)
• Remove periodic upgrade tests from release branches (#2306)
• Bump the kubernetes group to v0.31.7 (#2308)
• Replace deprecated pkg/errors with stdlib in provisioner/ironic (#2303)
• Bump golang.org/x/net from 0.34.0 to 0.36.0 in /hack/tools (#2305)
• fix dependabot testing issues by re-adding "edited" (#2304)
• Bump github.com/gophercloud/gophercloud/v2 from 2.5.0 to 2.6.0 (#2289)
• bump local hack scripts to basic-checks:golang-1.23 (#2296)
• E2E: Fix ironic overlays for 25.0 and 26.0 (#2295)
• Bump sigs.k8s.io/controller-runtime from 0.19.6 to 0.19.7 (#2293)
• E2E: Remove ensure_kind.sh script (#2277)
• e2e: Revert temporary pinning of Ironic (#2113)
• Bump actions/cache from 4.2.0 to 4.2.2 (#2272)
• Bump actions/upload-artifact from 4.6.0 to 4.6.1 (#2271)
• Bump github/codeql-action from 3.28.8 to 3.28.10 (#2270)
• E2E: Bump cert-manager to v1.17.1 (#2268)
• E2E vbmctl and ssh boot check refactor (#2223)
• pin osv-scanner image in verify-release.sh (#2244)
• workflows: sync pull_request trigger types (#2242)
• Bump libvirt.org/go/libvirt from 1.10009.1 to 1.11001.0 in /test (#2237)
• Bump actions/setup-go from 5.2.0 to 5.3.0 (#2231)
• Bump softprops/action-gh-release from 2.2.0 to 2.2.1 (#2230)
• Bump github.com/cert-manager/cert-manager from 1.16.2 to 1.16.3 in /test (#2236)
• Fix ensure_kind.sh filename (#2221)
• Refactor and rename ValidateManagementAccess (#2154)
• Bump the k8s.io/* deps to v0.31.5 (#2203)
• Switch e2e to kind (#2209)
• Bump sigs.k8s.io/kustomize/api from 0.18.0 to 0.19.0 in /test (#2197)
• Bump sigs.k8s.io/kustomize/kustomize/v5 from 5.5.0 to 5.6.0 in /hack/tools (#2196)
• Take new release workflow into use (#2171)
• bump x/net to v0.34.0 (#2185)
• bump kubeconform to v0.6.7 (#2176)
• increase 1 timeout in external-inspection test (#2166)
• Add intervals while checking metrics service (#2161)
• Bump google/osv-scanner from 1.9.1 to 1.9.2 (#2163)
• Bump the capi group across 2 directories with 2 updates (#2156)
• Fix BMO fixture-release-0.8 tag names (#2144)
• update dependabot config for release-0.9 (#2135)
• Add release 0.9 e2e tests and branch release-0.9 to README (#2134)

♻️ Superseded or Reverted

• #2274, #2211, #2397, #2391, #2239, #2240, #2182, #2184, #2232. #2138, #2140, #2143, #2142. #2139, #2150, #2164, #2342, #2343, #2157, #2155, #2259, #2148, #2310, #2169, #2149, #2181, #2214, #2261, #2193, #2212, #2292, #2269, #2233, #2235, #2234, #2275, #2290, #2282, #2258, #2406, #2224

The image for this release is: v0.10.0

Thanks to all our contributors! 😊