v0.8.0

Changes since v0.6.1

🐛 Vulnerabilities fixed

• GHSA-pqfh-xh7w-7h3p aka CVE-2024-43803 via #1929

⚠️ Breaking Changes

• Remove hardware profile from the print columns (#1713)

✨ New Features

• Attach non-bootable iso to BareMetalHost (#1594)

🐛 Bug Fixes

• Disallow fetching secrets from namespaces different from the host's one (#1929)
• Resolve BMC hostname, not address (#1866)
• Fix libvirt missing in dependabot build wf (#1837)
• Fix HFC Status (#1825)
• Fix HFC to execute updates (#1793)
• fix make install and make uninstall (#1789)
• Fix incorrect htpasswd file generation (#1786)
• fix htpasswd generation in run_local_ironic.sh (#1780)
• fix(redfish): set correct idrac-redfish management interface (#1723)
• Demote frequent routine logging messages to debug level (#1705)
• PreprovisioningImage should not be created on poweroff before delete (#1702)
• Fix Status logic for HostFirmwareComponents (#1695)

📖 Documentation

• Document backporting rules for Go lang minor versions for images (#1798)
• add openssf best practices badge to README (#1794)

🌱 Others

• Pinning ironic image to release-26.0 branch (#1928)
• Bump github.com/prometheus/client_golang from 1.20.0 to 1.20.2 (#1918)
• Bump actions/upload-artifact from 4.3.5 to 4.3.6 (#1914)
• Bump github.com/onsi/gomega from 1.34.1 to 1.34.2 (#1920, #1923)
• Bump github.com/cert-manager/cert-manager from 1.10.0 to 1.10.2 in /test (#1926)
• Bump the k8s.io/* deps to v0.29.8 (#1900)
• Bump libvirt.org/go/libvirt from 1.10003.0 to 1.10006.0 in /test (#1902)
• Bump github.com/onsi/ginkgo/v2 from 2.19.0 to 2.20.0 in /test (#1903)
• Make kustomize apply function not dependent on ginkgo (#1892)
• Uplift controller-runtime v0.17.6 (#1887)
• fix verify-release.sh to understand go directive better (#1888)
• bump and sync go dependencies (#1886)
• bump golang to 1.22.6 (#1885)
• Fix syntax errors in generate.sh and gomod.sh (#1879)
• Bump sigs.k8s.io/cluster-api from 1.7.3 to 1.7.4 in /test (#1876, #1875)
• Bump sigs.k8s.io/kustomize/kustomize/v5 from 5.4.1 to 5.4.3 in /hack/tools (#1874)
• Bump sigs.k8s.io/kustomize/api from 0.13.5-0.20230601165947-6ce0bf390ce3 to 0.17.3 in /test (#1877)
• Make container build only run for metal3.io repo (#1868)
• Move container build to gh runner (#1861)
• Bump kustomize version from v4 to v5 (#1718)
• Do not mark hardwareProfile as required in the status (#1819)
• Bump github.com/docker/docker from 25.0.5+incompatible to 25.0.6+incompatible in /test (#1860)
• Bump actions/setup-go from 5.0.1 to 5.0.2 (#1830)
• Bump go.etcd.io/etcd/client/pkg/v3 from 3.5.14 to 3.5.15 (#1849)
• Bump golangci/golangci-lint-action from 6.0.1 to 6.1.0 (#1829)
• Bump softprops/action-gh-release from 2.0.6 to 2.0.8 (#1832)
• fix dependabot config on api directory location (#1838)
• Use OwnerReference for HostFirmwareComponents (#1821)
• Add new go library to create new bmc and bmh (#1767)
• schedule dependabot on certain day, and add ok-to-test automatically (#1816)
• E2E: Remove gomega in LoadBMCConfig() (#1806)
• Use basic-checks image in generate and gomod tests (#1795)
• Optimize the dependabot configuration and add release branch configurations (#1797)
• Bump actions/checkout from 4.1.6 to 4.1.7 (#1799)
• Bump github.com/gophercloud/gophercloud/v2 from 2.0.0-rc.2 to 2.0.0 (#1802)
• Refactoring: split update_opts.go and updateopts_test.go (#1717)
• fix hack scripts to run locally again (#1796)
• Always upload test artifacts, even if the tests fail (#1791)
• Bump github.com/go-logr/logr from 1.4.1 to 1.4.2 (#1750)
• limit running BMO e2e periodics to metal3-io repo (#1790)
• Mount ironic credentials as plain-text volumes instead of the ironic htpasswd environment variable (#1685)
• Add unit test for LoadAuth funciton in auth.go (#1774)
• Workflow pipeline with unit tests (#1770)
• Add periodic jobs for optional tests and release branches (#1765)
• E2E: Run as github workflow (#1728)
• shellcheck only files (#1754)
• added make lint-fix (#1748)
• Upload artifacts from fixture tests (#1746)
• remove kubesec workflow (#1747)
• Add unit test on pkg/provisioner/ironic/client.go (#1606)
• explicitly drop pr approver workflow permissions (#1745)
• Add issue templates for flaky/failing tests (#1744)
• refactor TLS config (#1737)
• Link to the user guide for supported hardware (#1740)
• Export BuildKustomizeManifest and GetKubeconfigPath functions in E2E (#1738)
• add OWNERS_ALIASES support (#1730)
• Add more ctrl options flags (#1725)
• E2E: Increase timeouts to stabilize CI (#1724)
• Refactoring: introduce inspecthardware.go (#1716)
• Add mquhuy as a reviewer (#1726)
• set webhook min TLS version to 1.3 (#1721)
• Bump github/codeql-action from 3.24.9 to 3.25.3 (#1710)
• E2E Upgrade: Add new tests for new BMO and Ironic releases (#1692)
• chore(deps): bump kube-rbac-proxy to v0.16.0 (#1701)
• Refactoring: introduce capabilities.go (#1708)
• Enabled last batch of linters (#1642)
• bump minikube to v1.33.0 (#1703)
• enable gci linter and fix go imports (#1704)
• Update to the Gophercloud beta.4+commits (#1696)
• Add Slack notification for image build workflow failure (#1687)
• improve hack/verify-release.sh script (#1691)
• Update CI triggers after migrating to prow jenkins operator (#1688)
• Remove redundant Provisioner from HostFirmwareSettings tests (#1684)
• Fix mismatched versions between imported and cli ginkgo (#1680)
• Remove capm3_e2e dependency from bmo E2E (#1681)

♻️ Superseded or Reverted

• #1805, #1782, #1671, #1720, #1761, #1784, #1760, #1839, #1901, #1727, #1854, #1847, #1719, #1690, #1844, #1855, #1851, #1852, #1800, #1758, #1762, #1757, #1711, #1801, #1756, #1755, #1709

The image for this release is: v0.8.0

Thanks to all our contributors! 😊