v0.8.0

[utkuozdemir]

omni-infra-provider-bare-metal 0.8.0 (2026-02-05)

Welcome to the v0.8.0 release of omni-infra-provider-bare-metal!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni-infra-provider-bare-metal/issues.

Contributors

• Andrey Smirnov
• Noel Georgi
• Mateusz Urbanek
• Amarachi Iheanacho
• Dmitrii Sharshakov
• Orzelius
• Laura Brehm
• Oguz Kilcan
• Justin Garrison
• Utku Ozdemir
• Bryan Lee
• George Gaál
• 459below
• Adrian L Lange
• Aleksandr Gamzin
• Alp Celik
• Andrew Longwill
• Artem Chernyshev
• Chris Sanders
• Christopher Puschmann
• Dmitry
• Edward Sammut Alessi
• Febrian
• Florian Grignon
• Giau. Tran Minh
• Grzegorz Rozniecki
• Jonas Lammler
• Lennard Klein
• Markus Freitag
• Max Makarov
• Michael Smith
• Mike Beaumont
• Misha Aksenov
• MrMrRubic
• Olivier Doucet
• Pranav
• Serge Logvinov
• Skye Soss
• Skyler Mäntysaari
• SuitDeer
• Tom
• aurh1l
• frozenprocess
• frozensprocess
• kassad
• leppeK
• samoreno
• theschles
• winnie

Changes

2 commits

• 96eabb6 release(v0.8.0): prepare release
• 3cf79cc test: set required Omni SQLite storage path flag to integration test

Changes from siderolabs/image-factory

16 commits

• fa266e0 release(v0.9.0): prepare release
• 6799661 feat: show booter command in final wizard
• fb22bce feat: support selecting bootloader
• e881e4b feat: bump deps
• d1bec57 feat: implement schematic GET API
• f1dad9d feat: better test matrix
• bc4f959 fix: remove secureboot talosctl preset
• db5e4dc feat: add a prompt about using talosctl cluster create qemu
• 2c5037c chore: bump deps
• 1559666 feat: replace hardcoded artifact image constants with CLI-configurable values
• c27ee27 fix: return 400 when an invalid image name is requested
• 58125d4 feat: support proxying external installer registry
• d782950 feat: support serving TLS froom Image Factory
• 743fe7f feat: support disable cosign signature verification
• 3a20123 chore: rekres with parallel jobs
• 241963f chore(ci): use runner groups

Changes from siderolabs/talos

388 commits

• 54e5b438d release(v1.12.2): prepare release
• 30da0bc19 fix: oracle platform file format
• 7ddb37b1f fix: make OOM expression a bit less sensitive
• e438ec23e fix: marshal of FailOverMac property
• 717ed7265 fix: check if the device is not mounted when wiping
• c95c9fd06 fix: wipe the first/last 1MiB in addition to wiping by signatures
• 52bed358d fix: add talos version to Hetzner Cloud client user agent
• 0e447a431 fix: make OOM controller more precise by considering separate cgroup PSI
• 3b974b99e fix: sort mirrors and tls configs when generating the machine config
• 8b16fe50b feat: add VLAN support to OpenStack platform
• eb8480c4c fix: panic in configpatcher when the whole section is missing
• 4d44306dd fix: wipe disk by signatures
• cca4cd269 feat: add it87 hwmon module
• d9480eef2 fix: resolve SideroLink Wireguard endpoint on reconnect
• e16c2d5bb fix: handle correctly incomplete RegistryTLSConfig
• dedd273df fix: bond config via platform
• f527cff23 fix: allow HostnameConfig to be used with incomplete machine config
• 10918136c fix: lock down etcd listen address to IPv4 localhost
• 9f8d938db fix: print talosctl images to release notes
• 95433c167 fix: update VIP config example
• 919394fee feat: update Go to 1.25.6
• 7ea2ef7cf release(v1.12.1): prepare release
• 78a785604 chore: run rekres and update dependencies
• c31067173 fix: disable swap for system services
• a7e8426cf test: skip the source bundle on exact tag
• 943984167 fix: probe small images correctly
• 42df71637 fix: invalid versions check in talos-bundle
• a3e90e445 fix: make upgrade work with SELinux enforcing=1
• ac91ade2c release(v1.12.0): prepare release
• 82553b2a1 fix: mount volume mount/unmount race
• 33f6e22ec fix: bond setting change detection
• d5be50ac5 docs: split talosctl commands into groups
• 70d3ab9ac feat: update Kubernetes to 1.35.0
• 101814d88 feat: update etcd 3.6.7, CoreDNS 1.13.2
• ce286825a fix: drop the Omni API URL check on IP address
• 96f724adc feat: enable Powercap and Intel RAPL
• e195427c1 docs: fix the talosctl cluster create help output
• e025355b7 feat(talosctl): support running qemu x86 on Mac
• 21a914a1d fix: exclude new Virtual IPs configured with new config
• ca645777d fix: provide json support in nft binary
• 6dd0558a3 feat: sync pkgs
• c931847cc feat: update containerd to v2.1.6
• a2a77004d release(v1.12.0-rc.1): prepare release
• 47198780b fix: bond configuration with new settings
• 03a424bdf fix: disable kexec on arm64
• 688fb789b feat: add Secure Boot to CloudStack platform config
• 66e67fd13 fix: discard better klog message from Kubernetes client
• d8403498c fix: disable kexec in talosctl cluster create on arm64
• 5ced4258c fix: do not override DNS on MacOS
• fabf3f0e7 fix: selection of boot entry
• 93cec4b9d fix: update CNI plugins to 1.9.0
• 964098d96 fix: update KubeSpan MSS clamping
• bce04084d feat: rename image default and source bundle
• d1abc0f84 chore: update pkgs
• 061307687 release(v1.12.0-rc.0): prepare release
• bc4de5b79 fix: constants file
• 4a15763a9 docs: update release notes
• 297336549 fix: correct condition to use UKI cmdline in GRUB
• 0ac58929d docs: drop machine.network example
• 184a45c40 test: bird2 extension
• 8eac9f37d docs: add omni join token example to create qemu command
• e79a94d57 fix: adapt SELinuxSuite.TestNoPtrace to new strace version
• 7a1bb4c26 fix: mark secureboot as supported for metal
• 5c6ee6ace fix: clear provisioning data on SideroLink config change
• 2e6fe4684 feat: update Linux to 6.18.0
• 473bc17c1 feat: update Kubernetes to 1.35.0-rc.0
• 6dc8e82b3 fix: add a timeout for DNS resolving for NTP
• a7dbbbd4d fix: don't disable LACP by default
• 3ca342c09 chore: fix longhorn test
• 364ebb6ba fix: selection of boot entry
• aa286d3f6 feat: update Kubernetes to 1.35.0-beta.0
• f4891eebb feat: implement logs persistence
• c9a4f95b4 release(v1.12.0-beta.1): prepare release
• d321d7da0 chore: correct condition for running k8s integration tests
• 736f32a80 chore: disable k8s integration tests for 1GiB worker nodes
• d9de616c4 chore(ci): skip multipath extension tests
• 57d6683cd chore: update pkgs and tools version
• 949323ab5 feat: present kernel log as talosctl logs kernel
• 7531fcbc7 test: fix flaky LinkSpec/Wireguard test
• 1dbc64d69 fix: simplify OOM expression
• 0ffb1d857 fix: trim trailing dots from certificate SANs
• 9a2f6d9c9 fix: support specifying patch file without '@' symbol
• 582b0feab fix: assign value of multicast setting properly
• 16aa6ac47 feat: update etcd to 3.6.6
• 4396f09c8 docs: add API Server Cipher Suites changelog
• fdf6fe8e6 feat: update TLS cipher suites for API server
• 139cce3b4 fix: add CA subject to generated certificate
• 9b294af22 feat: generate mirrors patch
• 15465f0c5 fix: add more resilient move
• b4147e3a1 feat: extend flags of cache-cert-gen
• 72d3d1c9f chore: remove spammy 'clean up unused volumes' logs
• d6c78de84 feat: support TALOS_HOME env var
• 4040e0814 feat: implement multicast setting
• eb636dc1f feat: add multicast to linkconfig
• e34e458c4 feat: update dependencies
• 36152d278 fix: add riscv64 talosctl to release artifacts
• aebbbaf27 feat: support relative voume size
• 3d997d742 release(v1.12.0-beta.0): prepare release
• e62384ba3 fix: re-creating STATE after partition drop
• 6919d232a docs: update kernel args size
• 887b296dc test: randomize MAC addresses used in the unit-tests
• 6063fbf91 feat: update dependencies
• 542a67a06 feat: add riscv64 build of talosctl
• 68560b53a fix: split volume/disk locators
• 2c3d30e94 docs: fix image-cache-path flag description
• 93f2e87c2 feat: shorthand for generating secrets to stdout
• 5e1de0035 feat: implement time and resolvers multi-doc configuration
• 399240be3 feat: drop partitions on reset with system partitions wipe
• 5cca96655 feat: add new rockchip sbcs
• 00fe50d86 fix: uefi bootorder setting
• 3a881184b chore: improve error handling for system disk reset
• 859194e67 chore: extract system+user volume config transformers, test
• 308c6bc41 feat: add full disk volumes
• 82ac1119e feat: implement new registry configuration
• 106f45799 feat: update Linux kernel with userfaultfd/VDPA
• 721a1e0d7 chore: rename+improve client.ErrEventNotSupported
• 43f4e317f fix: race between VolumeConfigController and UserVolumeConfigController
• 66c01a706 chore: deprecate interactive installer mode
• 957770f65 feat(machined): add panic/force mode reboot
• 60be0daf8 feat: implement multi-doc Wireguard config
• cf014cb5d fix: only set default bootloader if none is set
• e9b016f80 fix: use strict platform match when pulling images
• fafab391b feat: update Kubernetes to 1.35.0-alpha.3
• 7bf3aaca9 feat: allow glibc aarch64 so files in extensions
• c8561ee2d feat: implement bridge multi-document config
• f4ad3077b feat: implement bond multi-doc configuration
• 75fe47582 fix: stop attaching to tearing down mount parents
• c93a9c6b4 fix: improve OOM controller stability and make test strict on false positives
• 021bbfefb feat: update Go 1.25.4, containerd 2.1.5
• e25db484f test: disable parallelism in Longhorn tests
• 54b93aff0 feat: update Linux 6.17.7, runc 1.3.3
• 2af69ff35 fix: provide minimal platform metadata always
• 92eeaa482 fix: update YAML library
• aa24da9aa fix: bump kubelet credendial provider config to v1
• 335f91761 feat: add short -c flag for --cluster
• 4c095281b fix: set a timeout for SideroLink provision API call
• 75e4c4a59 fix: log duplication on log senders
• e3cbc92c0 fix: add video kernel module to arm
• d69305a67 fix: userspace wireguard handling
• ee5fee7c8 fix: image-signer commands
• be028b67a feat: add support for multi-doc VLAN config
• f3df0f80b feat: add directory backed UserVolumes
• 0327e7790 feat: add support for dashboard custom console parameter
• fed948b8a release(v1.12.0-alpha.2): prepare release
• fb4bfe851 chore: fix LVM test
• f4ee0d112 chore: disable VIP operator test
• 288f63872 feat: bump deps
• b66482c52 feat: allow disabling injection of extra cmdline in cluster create
• 704b5f99e feat: update Kubernetes to 1.35.0-alpha.2
• 1dffa5d99 feat: implement virtual IP operator config
• 43b1d7537 fix: validate provisioner when destroying local clusters
• b494c54c8 fix: talos import on non-linux
• 61e95cb4b feat: support bootloader option for ISO
• d11072726 fix: provide offset for partitions in discovered volumes
• 39eeae963 feat: update dependencies
• 9890a9a31 test: fix OOM test
• c0772b8ed feat: add airgapped mode to QEMU backed talos
• ac60a9e27 fix: update test for PCI driver rebind/IOMMU
• 6c98f4cdb feat: implement new DHCP network configuration
• da92a756d fix: drop 'ro' falg from defaults
• 28fd2390c fix: imager build on arm64
• 4e12df8c5 test: integration test for OOM controller
• 7e498faba feat: use image signer
• eccb21dd3 feat: add presets to the 'cluster create qemu' command
• ec0a813fa feat: unify cmdline handling GRUB/systemd-boot
• 37e4c40c6 fix: skip module signature tests on docker provisioner only
• 8124efb42 fix: cache e2e
• 4adcda0f5 fix: reserve the apid and trustd ports from the ephemeral port range
• ced57b047 feat: support optionally disabling module sig verification
• 1e5c4ed64 fix: build talosctl image cache-serve non-linux
• dbdd2b237 feat: add static registry to talosctl
• 77d8cc7c5 chore: push latest tag only on main
• 59d9b1c75 feat: update dependencies
• bf6ad5171 feat: add back install script
• da451c5ba chore: drop documentation except for fresh reference
• 2f23fedeb fix: file leak in reading cgroups
• b412ffdbc docs: update README.md for docs link
• 8dc51bae7 feat: add drm_gpuvm and drm_gpusvm_helper modules
• 4ca58aeb8 fix: make Akamai platform usable
• 061f8e76f feat: bump pkgs
• a9fa852da feat: update uefi image to talos linux logo
• 04753ba69 feat: update go to 1.25.2
• 9a42b05bd feat: implement link aliasing
• d732bd0be chore(ci): run only nvidia tests for NVIDIA workflows
• 8d1468209 fix: stop populating apiserver cert SANs
• 02473244c fix: wait for mount status to be proper mode
• 825622d90 fix: resource proto definitions
• 2c6003e79 docs: add Project Calico installation in two mode
• 4fb4c8678 feat: add disk.EnableUUID to generated ova
• 33fb48f8f fix: add dashboard spinner
• 053fd0bd4 feat: update Linux to 6.17
• 34e107e1b docs: fix broken link
• dfbece56b docs: update the kubespan docs
• 8b041a72c docs: update scaleway.md
• 435dcbf82 fix: provide nocloud metadata with missing network config
• ec3bd878f refactor: remove the go-blockdevice v1 completely
• 33544bde9 fix: minor improvements to fs
• fd2eebf7f feat: create merge patch from diff of two machine configs
• eadbdda94 fix: uefi boot order setting
• cd9fb2743 fix: support secure HTTP proxy with gRPC dial
• adf87b4b9 feat: update Flannel to v0.27.4
• 5dfb7e1fe feat: serve etcd image from registry.k8s.io
• 5ca841804 fix: nftables flaky test
• a940e45a7 feat: generate list of images required to build talos
• 3472d6e79 fix: revert "chore: use new mount/v3 package in efivarfs"
• 42c0bdbf3 feat: add provisioner flag to images default command
• 6bc0b1bcf feat: drop and lock deprecated features
• 362a8e63b fix: change the compression format
• 6e58f58aa fix: mkdir artifacts path
• 3165a2b84 release(v1.12.0-alpha.1): prepare release
• e455c7ea9 chore: use testing/synctest in tests
• 7f048e962 feat: update dependencies
• fe36b3d32 fix: stop returning EINVAL on remount of detached mounts
• c6279e04c chore: use new mount/v3 package in efivarfs
• d5197effb feat: update etcd 3.6.5, CoreDNS 1.12.4
• 33714b715 feat: release cloud image using factory
• d10a2747e docs: deprecate JSON6902 patches and interactive installer
• 1e604cbf5 fix: don't set broadcast for /31 and /32 addresses
• 65a66097a refactor: split cluster create logic into smaller parts
• ab847310e fix: provide refreshing CA pool (resolvers)
• d63c3ed7d docs: update secureboot docs
• 493f7ed9d feat: support embedded config
• 251df70f6 feat: add a userspace OOM controller
• 7bae5b40b feat: implement link configuration
• 724857dec fix(ci): skip netbird extension for tests
• e06a08698 fix: default gateway as string
• 7ed07412e fix: uefi boot entry handling logic
• ea4ed165a refactor: efivarfs mock and tests
• 1fca111e2 feat: support setting wake-on-lan for Ethernet
• 94f78dbe7 docs: add a documentation for running Talos in KVM
• 46902f8fd docs: add TrueFullstaq to adopters
• a28e5cbd5 chore: update pkgs and tools
• 7cf403db8 docs: step-by-step scaleway documentation to get an image
• 687285fa2 docs: remove 'curl' in wget command
• 9db6dc06c feat: stop mounting state partition
• 53ce93aae test: try to clear connection refused more aggressively
• 51db5279c fix: bump trustd memory limit
• 25204dc8a fix(machined): change constants.MinimumGOAMD64Level using build tag
• 9cd2d794d feat: ship nft binary with Talos rootfs
• b1416c9fe feat: record last log the failed service
• 0b129f9ef feat: enforce more KSPP and hardening sysctls
• 11872643c chore: drop docs folder
• d30fdcd88 chore: pass in github token to imager
• b88f27d80 chore: make reset test code a bit better
• 1cde53d01 test: fix several issues with tests
• 16cd127a0 docs: add docs on updating image cache
• c3ae92b14 fix: build kernel checks only on linux
• 2120904ec feat: create detached tmpfs
• 6bbee6de5 docs: remove 'ceph-data' from volume examples/docs
• 07acb3bd2 fix: use correct order to determine SideroV1 keys directory path
• 2d57fa002 fix: trim zero bytes in the DHCP host & domain response
• 451cb5f78 docs: clarify disk partition confusion
• a2122ee5c feat: implement HostConfig multi-doc
• 69ab076b4 fix: re-create cgroups when restarting runners
• 297b5cc28 docs: add docs on node labels
• e168512dd fix: apply 'ro' flag to iso9660 filesystems
• 7f7acfbb9 docs: fix typo in doc
• d57882b18 feat: update Kubernetes to 1.34.1
• f85f82f32 test: fix flakiness in RawVolumes test
• 82569e319 feat: update Linux 6.16.6
• 2fd2ab4e4 fix: remove CoreDNS cpu limit
• ce9bc32a0 chore(ci): rekres to use new runner groups
• 8b64f68f6 test: improve test stability
• 272cb860d chore: drop the --input-dir flag from the cluster create command
• 1b6533675 docs: add note about ca-signed certs for secureboot
• d3f88f50c docs: document talos vip failover behavior
• 005fc8bd5 docs: add docs on syncing configs after a kube upgrade
• 4d876d9af feat: update Go to 1.25.1
• 2b556cd22 feat: implement multi-doc StaticHostConfig
• a7b776842 docs: replace Raspberry Pi 5 links with Talos builder
• a349b20ed docs: clarify that talos does not support intermediate ca
• 895133de9 feat: support configuring PCR states to bind disk encryption
• c1360103b docs: fix command for uploading image on Hetzner
• 43b5b9d89 fix: correctly handle status-code 204
• feeb0d312 feat: update runc to 1.3.1
• 421634a14 docs: add docs on multihoming
• 41af2d230 refactor: clean up internal cluster creation code
• 3000d9e43 fix: don't bootstrap talos cluster if there's no config present
• 79cb871d0 feat: use the id of the volume in the mapped luks2 name
• 6c322710d chore: refactor mount package
• ced7186e2 refactor: update COSI to 1.11.0
• de2e24fcd docs: clarify that install-cni image is deprecated
• bef8ef509 docs: add docs on cilium's compatibility with kubespan
• e5acb10fc feat: update pkgs
• c4c1daf0e docs: add info about br_netfilter
• 5c52ecac3 docs: clarify interactive dashboard resolution control
• 15ecb02a4 feat: update Linux kernel (memcg_v1, ublk)
• 53f18c2f6 fix: enable support for VMWare arm64
• 3bbe1c0da docs: add docs on grow flag
• b9fb09dcd release(v1.12.0-alpha.0): prepare release
• 6a389cad3 chore: update dependencies
• 9d98c2e89 feat: add a cgroup preset for PSI and --skip-cri-resolve
• 072f77b16 chore: prepare for future Talos 1.12-alpha.0 release
• 96f41ce88 docs: update qemu and docker docs
• a751cd6b7 docs: activate Talos v1.11 docs by default
• e8f1ec1c5 docs: fix broken create qemu command v1.11 docs
• 639f0dfdd feat: update Linux to 6.16.4
• 8aa7b3933 fix: bring back linux/armv7 build and update xz
• 9cae7ba6b feat: update CoreDNS to 1.12.3
• cfef3ad45 fix: drop linux/armv7 build
• 42ea2ac50 fix: update xz module (security)
• 4fcfd35b9 docs: fix module name example
• 50824599a chore: update some tools
• bcd297490 feat: allow Ed25119 in FIPS mode
• 5992138bb test: ignore one leaking goroutine
• d155326c1 docs: add sbc unofficial ports docs
• 285fa7d22 docs: add the deploy application docs
• 527791f09 feat: update Kubernetes to 1.34.0
• a1c0e237d feat: update Linux to 6.15.11, Go to 1.25
• 4d7fc25f8 docs: switch order of wipe disk command
• 7368a994d feat: add SOCKS5 proxy support to dynamic proxy dialer
• d63591069 chore: silence linter warnings
• 07eb4d7ec fix: set default ram unit to MiB instead of MB
• 6b732adc4 feat: update Linux to 6.12.43
• b6410914f feat: add human readable byte size cli flags
• ec70cef99 feat: update NVIDIA drivers and kernel
• 0879efa69 feat: update Kubernetes default to v1.34.0-rc.2
• f504639df feat: add a user-facing create qemu command
• 558e0b09a test: fix the Image Factory PXE boot test
• d73f0a2e5 docs: make readme badges consistent
• f1369af98 chore: use new filesystem api on STATE partition
• 366cedbe7 docs: link to kubernetes linux swap tuning
• 2f5a16f5e fix: make --with-uuid-hostnames functionality available to qemu provider
• 70612c1f9 refactor: split the PlatformConfigController
• 511748339 docs: add system extension tier documentation
• 009fb1540 test: don't run nvidia tests on integration/aws
• 99674ef20 docs: apply fixes for what is new
• 92db677b5 fix: image cache lockup on a missing volume
• 9c97ed886 fix: version contract parsing in encryption keys handling
• 1fc670a08 fix: dial with proxy
• 18447d0af feat: update Linux to 6.12.41
• f65f39b78 fix: provide mitigation CVE-1999-0524
• 8817cc60c fix: actually use SIDEROV1_KEYS_DIR env var if it's provided
• b08b20a10 feat: use key provider with fallback option for auth type SideroV1
• 7a52d7489 fix: kubernetes upgrade options for kubelet
• ea8289f55 feat: add a user facing docker command
• 54ad64765 chore: re-enable vulncheck
• 26bbddea9 fix: darwin build
• b5d5ef79e fix: set secs field in DHCPv4 packets
• c07911933 chore: refactor how tools are being installed
• 34f25815c docs: fork docs for v1.12
• b66b995d3 feat: update default Kubernetes to v1.34.0-rc.1
• b967c587d docs: fix clone URL to include .git
• b72c68398 docs: edit the insecure, etcd-metrics, inline and extramanifests
• e5b9c1fff docs: remov RAS Syndrome
• 701fe774b docs: fix cilium links and bump to 1.18.0
• d306713a1 feat: update Go to 1.24.6
• 721595a00 chore: add deadcode elimination linter
• dc4865915 refactor: stop using text/template in machined code paths
• 545be55ed feat: add a pause function to dashboard
• 06a6c0fe3 refactor: fix deadcode elimination with godbus
• 2dce8f8d4 refactor: replace containerd/containerd/v2 module for proper DCE
• 9b11d8608 chore: rekres to configure slack notify workflow for CI failures
• 5ce6a660f docs: augment the pod security docs
• ada51ff69 fix: unmarshal encryption STATE from META
• b9e9b2e07 docs: add what is new notes for 1.11
• 53055bdf4 docs: fix typo in kubevirt page
• 8d12db480 fix: one more attempt to fix volume mount race on restart
• 34d37a268 chore: rekres to use correct slack channel for slack-notify
• 326a00538 feat: implement talos.config.early command line arg
• a5f3000f2 feat: implement encryption locking to STATE
• c1e65a342 docs: remove talos API flags from mgmt commands
• 181d0bbf5 feat: bootedentry resource
• 7ad439ac3 fix: enforce minimum size on user volumes if not set explicitly
• 50e37aefd fix: live reload of TLS client config for discovery client
• 87efd75ef feat: update containerd to 2.1.4
• 724b9de6d feat: add F71808E watchdog driver
• 8af96f7af docs: add ETCD downgrade documentation
• 44edd205d docs: add remark about 'exclude-from-external-load-balancers' label
• 727101926 fix(ci): use a random suffix for ami names
• d621ce372 fix: grype scan
• d62e255c2 fix: issues with reading GPT
• 5d0883e14 feat: update PCI DB module to v0.3.2
• 3751c8ccf test: wait for service account test job longer
• a592eb9f9 feat: update Linux to 6.12.40
• 4c40e6d3f feat: update etcd to 3.6.4
• 2bc37bd2c docs: fix error in kernel module guide
• bfc57fb86 chore: tag aws snapshots created via ci with the image name
• 06ef7108a fix: issue with volume remount on service restart
• 03efbff18 docs: add SBOM documentation
• af8a2869d fix: do not download artifacts for cron Grype scan
• 5f442159b feat: unify disk encryption configuration
• 38e176e59 chore(ci): fix datasource versioning
• 85d6b9198 feat: update etcd to v3.5.22
• dd7bd2dab docs: rewrite the getting started and prod docs for v1.10 and v1.11
• 136a899aa chore: regenerate release step with signing fixes
• 450b30d5a chore(ci): add more nvidia test matrix
• 451c2c4c3 test: add talosctl:latest to the image cache

Dependency Changes

• github.com/bougou/go-ipmi v0.7.8 -> v0.8.1
• github.com/cosi-project/runtime v1.12.0 -> v1.13.0
• github.com/klauspost/compress v1.18.1 -> v1.18.3
• github.com/planetscale/vtprotobuf 79df5c4772f2 -> ba97887b0a25
• github.com/siderolabs/image-factory v0.8.4 -> v0.9.0
• github.com/siderolabs/omni/client v1.3.2 -> v1.4.7
• github.com/siderolabs/talos v1.11.5 -> v1.12.2
• github.com/siderolabs/talos/pkg/machinery v1.12.0-beta.0 -> v1.13.0-alpha.0
• github.com/spf13/cobra v1.10.1 -> v1.10.2
• go.uber.org/zap v1.27.0 -> v1.27.1
• golang.org/x/net v0.47.0 -> v0.49.0
• golang.org/x/sync v0.18.0 -> v0.19.0
• google.golang.org/grpc v1.76.0 -> v1.78.0
• google.golang.org/protobuf v1.36.10 -> v1.36.11

Previous release can be found at v0.7.1

---

This discussion was created from the release v0.8.0.