v0.19.0

Changes by Kind

Feature

• Adds ca-certificates to debian-base image (#4052, @hakman) [SIG Release]
• Configurable cross-platform builds for kube-cross image (#4228, @akhilerm) [SIG Release]
• Feat: add includeLabels option to release-notes (#4089, @jackfrancis) [SIG Release]
• Update cosign image and deps (#3940, @cpanato) [SIG Release]
• Use origin PR info for release notes instead of cherry-pick PRs generated by k8s-infra-cherrypick-robot. (#3971, @IrvingMg) [SIG Release]

Documentation

• Updated cri-tools README.md. (#3988, @saschagrunert) [SIG Release]

Failing Test

• K8s-cloud-builder: pinned docker-ce-cli to version 24.0.x for API 1.43 compatibility (#4183, @saschagrunert) [SIG Release]
• The releng-ci image now ships with ko v0.18.1 goreleaser to v2.13.3 (#4234, @puerco) [SIG Release]

Bug or Regression

• Fix duplicate short hand, remove duplicated flags and mark deprecated the create-website-pr (#4123, @cpanato) [SIG Release]
• Fix release notes to include the revert PR instead of the reverted one. (#3974, @IrvingMg) [SIG Release]
• Images: use GOTOOLCHAIN=auto for automatic version selection (#4215, @BenTheElder) [SIG Release]
• Pin docker-ce-cli to version 24.0.x in k8s-ci-builder image for API 1.43 compatibility with CI DinD environments (#4185, @saschagrunert) [SIG Release]
• Schedule-builder: Use the upcoming_releases dates for building the release schedule (#3982, @xmudrii) [SIG Release]

Other (Cleanup or Flake)

• Bump golangci-lint and allow release-assets.githubusercontent.com (#4079, @cpanato) [SIG Release]
• Bumped go-github to v75 to harmonize with release-sdk (#4169, @puerco) [SIG Release]
• Clean up ci and apply best practices (#4041, @cpanato) [SIG Release]
• Rebuild debian-base to bookworm-v1.0.7 (#4251, @PushkarJ) [SIG Release]
• Remove the dependency on conntrack and conntrack-tools for the kubelet package. (#4106, @travier) [SIG Release]
• Removed usage of deprecated gopkg.in/yaml.v2. (#4105, @saschagrunert) [SIG Release]
• The distroless iptables binary will no longer have conntrack binary (#4223, @aroradaman) [SIG Release]
• The distroless iptables binary will no longer have ebtales binary (#4226, @aroradaman) [SIG Release]
• Update cosign to v2.6.0 (#4132, @cpanato) [SIG Release]
• Update dep-golang github issue template (#4021, @cpanato) [SIG Release]
• Update deprecated cloudbuild field (#4081, @cpanato) [SIG Release]
• Update setcap image to use bookworm-v1.0.7 (#4252, @PushkarJ) [SIG Release]
• Use go1.25 and update golanci-lint (#4133, @cpanato) [SIG Release]
• CIBucketLegacy const has been removed as the bucket is no longer used and has been replaced by gs://k8s-release-dev (#4170, @ameukam) [SIG Release]