16.6.0

What's Changed

• Fix device config props handling in maybeRetryBoot. by @OhmSpectator in #5533
• CI: Eden status fix by @europaul in #5534
• installer: align rust package by @christoph-zededa in #5524
• migrate message encryption to AEAD (AES‑GCM) + HKDF by @naiming-zededa in #5530
• Support ClusterType EVE-API for modes by @andrewd-zededa in #5522
• installer: use current debug container by @christoph-zededa in #5549
• pr-gate: increase limit for gh tool by @europaul in #5551
• Convert from bytes.Equal into hmac.Equal by @naiming-zededa in #5540
• Add device bound MAC address for Network Instance by @naiming-zededa in #5545
• Configure USB priority in VM boot order by @OhmSpectator in #5507
• Revert automatic lkt hashes by @christoph-zededa in #5554
• Build yetus image on demand by @rene in #5399
• pillar: use current uefi container by @christoph-zededa in #5558
• github/workflows: Fix image name on buildyetusondemand.yml by @rene in #5560
• Fix QMP flooding on VM restart. by @OhmSpectator in #5548
• Do not check for network connection everytime by @zedi-pramodh in #5559
• Revert "Add null key verification to detect TPM reset attacks" by @shjala in #5550
• Fix IPv4-only mode for static IPv4 configuration by @milan-zededa in #5565
• Fix the issue of eve-k VM logging, got five-five-five-five! by @naiming-zededa in #5555
• Send HW inventory by @europaul in #5535
• continue the migrate message encryption to AEAD PR by @naiming-zededa in #5556
• Enable strict node scheduling for cluster app instances. by @andrewd-zededa in #5508
• Remove noisy logging and remove previous external boot images by @naiming-zededa in #5570
• Fix the issue of eve-k shim/container VMI logging by @naiming-zededa in #5571
• Evaluation EVE: Automatic Partition Testing and Onboarding Control by @rucoder in #5351

Full Changelog: 16.5.0...16.6.0

14.5.3-lts

What's Changed

• [14.5-stable] Expand USB diag log collection by @andrewd-zededa in #5290
• [14.5-stable] Collect-Info: put after post by @christoph-zededa in #5333
• [14.5-stable] spec.sh -v - print valid json by @christoph-zededa in #5317
• [14.5-stable] dom0-ztools: Replace pre-cooked UEFI settings by @rene in #5321
• [14.5-stable] Fix the issue of missing calling resp.Body.Close by @naiming-zededa in #5255
• [14.5-stable] .golangci.yml: Update config to newer versions of golangci-lint by @rene in #5353
• [14.5-stable] Omit empty fields in dpc.go on JSON serialization by @OhmSpectator in #5371
• [14.5-stable] Enable automatic TCP MSS clamping for forwarded app traffic by @milan-zededa in #5388
• [14.5-stable] Interleave DNS servers across interfaces inside resolv.conf to mitigate resolver limit issues by @milan-zededa in #5387
• [14.5-stable] Fix MMIO overhead calculation for unreserved adapters by @OhmSpectator in #5419
• [14.5-stable] Kernel update - [amd64-generic] by @rene in #5416
• [14.5-stable] "tui: update to release 0.6.2" by @rucoder in #5426
• [14.5-stable] Fix rungetty.sh to strip non-numeric suffix from console speed parameter by @rucoder in #5435
• [14.5-stable] bpftrace compiler increase timeout by @christoph-zededa in #5443
• [14.5-stable] pillar container: set proper root overlayfs by @deitch in #5449
• [14.5-stable] runc containerd CVE by @deitch in #5455
• [14.5-stable] tools/collect-sources.sh: Exclude var/lock from tarball extraction by @rene in #5462
• [14.5-stable] "Add udev to installer and implement cold start" by @rucoder in #5465
• [14.5-stable] Fix flaky GoroutinesMonitor Go test by @OhmSpectator in #5468
• [14.5-stable] Unify spec by @christoph-zededa in #5477
• [14.5-stable] Fix VLAN sub-interface dependencies by @milan-zededa in #5499
• [14.5-stable] Non cancelable context by @europaul in #5502
• [14.5-stable] spec.sh json output fix for pkg/debug build. by @rene in #5510
• [14.5-stable] .github/workflows: Change docker login and remove pull_request_target by @rene in #5513
• [14.5-stable] Add Eden version selection based on PR target branch by @europaul in #5518
• [14.5-stable] fix spec.sh usb by @christoph-zededa in #5527
• [14.5-stable] Force rebuild of pkg/debug and pkg/installer by @eriknordmark in #5539

Full Changelog: 14.5.2-lts...14.5.3-lts

14.5.3-rc5

What's Changed

• [14.5-stable] Force rebuild of pkg/debug and pkg/installer by @eriknordmark in #5539

Full Changelog: 14.5.3-rc4...14.5.3-rc5

16.5.0

What's Changed

• Bump k3s version to v1.34.2+k3s1 by @zedi-pramodh in #5483
• bpftrace-compiler: increase overall test timeout by @christoph-zededa in #5481
• Improve robustness of TestSingleDPC by @milan-zededa in #5484
• Updated runc in installer and rootfs by @deitch in #5486
• Use nvidia-container-runtime to load CDI devices through kubernetes by @zedi-pramodh in #5480
• Bump up KUBE_VERSION by @zedi-pramodh in #5489
• Change the Edgeview script expire to human readable time by @naiming-zededa in #5491
• Fix an issue of zedkube EdgeNodeClusterStatus Miss token by @naiming-zededa in #5492
• fix(agentlog): use proper file permissions when appending logs by @shjala in #5487
• Fix VLAN sub-interface dependencies by @milan-zededa in #5493
• Non cancelable context by @europaul in #5497
• pkg: nvidia: Bump nvidia-container-toolkit to 1.16.2 by @rene in #5490
• Add missing Intel AX210 (TY) firmware required by iwlwifi by @jsfakian in #5503
• eve-k: Enable ext4 vault support by @andrewd-zededa in #5373
• Copy nvidia device plugin only on nvidia platform by @zedi-pramodh in #5504
• spec.sh json output fix for pkg/debug build. by @andrewd-zededa in #5506
• Replace MD5 with a cryptographically secure random IV generation by @naiming-zededa in #5505
• .github/workflows: Change docker login and remove pull_request_target by @rene in #5512
• Add Eden version selection based on PR target branch by @europaul in #5402
• pkg/debug: fix spec.sh to print valid json by @christoph-zededa in #5520
• pkg/installer: bump debug package by @christoph-zededa in #5523
• gh/template: add backport branch by @christoph-zededa in #5525
• Fix cluster join: k3s 1.34.0+k3s1 does not set master label. by @andrewd-zededa in #5521
• Makefile: add canbus for qemu by @christoph-zededa in #5529
• Allow k3s config overrides from config property k3s.config.override by @andrewd-zededa in #5495
• Enable edgeview certificate validation by @naiming-zededa in #5532

Full Changelog: 16.4.0...16.5.0

14.5.3-rc4

Release 14.5.3-rc4

16.0.0-lts

What's Changed

• Added check to prevent accidental EVE kvm to EVE-k upgrade by @eriknordmark in #5277
• Tie Breaker Node Support for clustering by @andrewd-zededa in #5257
• Add a flag to recreate multus link by @mrangana in #5280
• Kernel update - [amd64-generic] by @rucoder in #5278
• eve-k + pillar: Fix mount points for Nvidia by @rene in #5284
• Detect and report unpushed Linux kernel tags in update_kernel_commits.py by @rucoder in #5286
• Update Edgeview vendor for pillar/base eve-k change by @naiming-zededa in #5281
• Kernel update: bump arm64 kernel version by @rene in #5285
• fix eve-k arm64 builds by @zedi-pramodh in #5288
• Atomicity and consistency in the resume procedure of the downloader. by @jsfakian in #5254
• docs: add min & max config params values by @europaul in #5297
• eve persist on second disk fix: don't init P3 partition by @andrewd-zededa in #5289
• newlog: get rid of Fatal's in vector.go by @europaul in #5292
• Bump eden version to 1.0.12 by @milan-zededa in #5299
• Stop publishing deprecated ZInfoDevice.Network by @milan-zededa in #5283
• Update monitor TUI to v0.6.1 by @rucoder in #5300
• bump eve-libs: switch EVE to nettrace offload tracing by @kperakis-zededa in #5282
• k3s-base mode should uninstall any remaining longhorn storage classes by @andrewd-zededa in #5294
• newlog: refactor getMemlogMsg and add testing by @europaul in #5293
• Update to MAINTAINERS by @eriknordmark in #5301
• Handle EINVAL when enabling VLAN filtering on Linux 6.12 by @milan-zededa in #5304
• Fix TPM Issues in Kernel 6.12.49 LTS by @shjala in #5303
• Makefile: Fix eve-k build for nvidia-jp6 by @rene in #5308
• Update EVE kernel to 6.12.49 LTS by @rucoder in #5287
• Kernel update - [arm64-generic] by @rene in #5309
• Add tpm eventlog by @shjala in #5275
• tools: update_kernel_commits.py: Add support for next branches by @rucoder in #5295
• Copy manifests after k3s starts so dest dir exists by @andrewd-zededa in #5305
• Kernel update - [amd64-next] by @rucoder in #5310
• Join Bootstrap node and get Cluster-ID for verify by @naiming-zededa in #5306
• [16.0] spec.sh -v - print valid json by @christoph-zededa in #5326
• [16.0] Allow node uuid label to be repleaced in cluster by @naiming-zededa in #5329
• [16.0] Bump eden version to 1.0.13 by @europaul in #5331
• [16.0] eve-k: reduce idle logging, ignore api outage during failover by @andrewd-zededa in #5327
• [16.0] Collect-Info: put after post by @christoph-zededa in #5332
• [16.0] Fix a bug where edgeview tcp/kube set port number incorrectly by @naiming-zededa in #5334
• [16.0] Delete VMPersistentState support for EFI bootloader by @zedi-pramodh in #5344
• [16.0] Remove LiveMigration feature gate by @zedi-pramodh in #5343
• [16.0] Use Pubsub Large to handle large KubeClusterInfo structures. by @andrewd-zededa in #5347
• [16.0] Fixed issue with threshold column in SMART Attributes by @jsfakian in #5346
• [16.0] .golangci.yml: Update config to newer versions of golangci-lint by @rene in #5352
• [16.0] eve-k fixes app delete, tie-breaker failover by @andrewd-zededa in #5355
• [16.0] Omit empty fields in dpc.go on JSON serialization by @OhmSpectator in #5369
• [16.0] Updated eve-libs to support resume for http datastores by @jsfakian in #5381
• [16.0] Interleave DNS servers across interfaces inside resolv.conf to mitigate resolver limit issues by @milan-zededa in #5385
• [16.0] Enable automatic TCP MSS clamping for forwarded app traffic by @milan-zededa in #5386
• [16.0] Add a proper error message when user tries to share a file-based volume between apps by @europaul in #5394
• [16.0] Set unique per-interface route metrics for components not using source-based routing by @milan-zededa in #5383
• [16.0] Harden NI Reconciler to prevent and recover from dnsmasq host file conflicts by @milan-zededa in #5384
• [16.0] Fix issue of zedkube publish Kube Status without token by @naiming-zededa in #5393
• [16.0] eve-k: don't block during kubevirt-operator delete by @andrewd-zededa in #5400
• [16.0] Backport of dependabot PRs by @rene in #5401
• [16.0] Kernel update - [amd64-generic] by @rene in #5411
• [16.0] Convert vtpm Dockerfile to use automatic hashes by @rucoder in #5428
• [16.0] Fix MMIO overhead calculation for unreserved adapters by @OhmSpectator in #5418
• [16.0] tui: update to release 0.6.2 by @rucoder in #5429
• [16.0] Edge apps are not activated after rolling back from a snapshot by @jsfakian in #5408
• [16.0] Fix rungetty.sh to strip non-numeric suffix from console speed parameter by @rucoder in #5436
• [16.0] Fixes newc initrd filename null termination by @sultatos in #5433
• [16.0] eve-k: Increment EFI and rootfs partition size by @rene in #5434
• [16.0] Fix log.Errorf usage by @eriknordmark in #5447
• [16.0] bpftrace-compiler: increase timeout by @christoph-zededa in #5444
• [16.0] pillar container root overlayfs by @deitch in #5450
• [16.0] build(deps): bump golang.org/x/crypto in /pkg/pillar by @eriknordmark in #5446
• [16.0] runc containerd cves by @deitch in #5453
• [16.0] build(deps): bump golang.org/x/crypto in /pkg/vtpm/swtpm-vtpm by @eriknordmark in #5451
• [16.0] tools/collect-sources.sh: Exclude var/lock from tarball extraction by @rene in #5461
• [16.0] "Add udev to installer and implement cold start" by @rucoder in #5464
• [16.0] Fix flaky GoroutinesMonitor Go test by @OhmSpectator in #5469
• [16.0] bpftrace compiler increase test timeout by @christoph-zededa in #5485
• [16.0] Fix VLAN sub-interface dependencies by @milan-zededa in #5498
• [16.0] build: fix LIVE_UPDATE=1 live target for ext4 rootfs by @europaul in #5500
• [16.0] Non cancelable context by @europaul in #5501
• [16.0] spec.sh json output fix for pkg/debug build by @rene in #5509
• [16.0] .github/workflows: Change docker login and remove pull_request_target by @rene in #5516
• [16.0] Add Eden version selection based on PR target branch by @europaul in #5517
• [16.0] fix spec.sh usb by @christoph-zededa in #5528

New Contributors

• @mrangana made their first contribution in #5280

Full Changelog: 15.11.0...16.0.0-lts

16.0.0-rc8

What's Changed

• [16.0] spec.sh json output fix for pkg/debug build by @rene in #5509
• [16.0] .github/workflows: Change docker login and remove pull_request_target by @rene in #5516
• [16.0] Add Eden version selection based on PR target branch by @europaul in #5517

Full Changelog: 16.0.0-rc7...16.0.0-rc8

14.5.3-rc3

What's Changed

• [14.5-stable] spec.sh json output fix for pkg/debug build. by @rene in #5510
• [14.5-stable] .github/workflows: Change docker login and remove pull_request_target by @rene in #5513
• [14.5-stable] Add Eden version selection based on PR target branch by @europaul in #5518

Full Changelog: 14.5.3-rc2...14.5.3-rc3

16.0.0-rc7

What's Changed

• [16.0] Fix flaky GoroutinesMonitor Go test by @OhmSpectator (#5469) (backport of #5467)
• [16.0] bpftrace compiler increase test timeout by @christoph-zededa (#5485) (backport of #5481)
• [16.0] Fix VLAN sub-interface dependencies by @milan-zededa (#5498) (backport of #5493)
• [16.0] build: fix LIVE_UPDATE=1 live target for ext4 rootfs by @europaul (#5500) (backport of #5479)
• [16.0] Non cancelable context by @europaul (#5501) (backport of #5497)

Full Changelog: 16.0.0-rc6...16.0.0-rc7

14.5.3-rc2

What's Changed

• [14.5-stable] Fix flaky GoroutinesMonitor Go test by @OhmSpectator in #5468
• [14.5-stable] Unify spec by @christoph-zededa in #5477
• [14.5-stable] Fix VLAN sub-interface dependencies by @milan-zededa in #5499
• [14.5-stable] Non cancelable context by @europaul in #5502

Full Changelog: 14.5.3-rc1...14.5.3-rc2