v0.17.0

Deprecation Notices

• We plan to drop support for the experimental Secure Comms mode in the next release.
• We plan to drop support for the vSphere provider in the next release.
• We are moving away from building guest images with packer in favor of mkosi. Support for packer images will be dropped in some future release.

If you require any of these features, please let the upstream community know immediately.

What's Changed

• release: 0.16.0 post release tasks by @stevenhorsman in #2605
• build(deps): bump github/codeql-action from 3.30.3 to 3.30.5 by @dependabot[bot] in #2591
• build(deps): bump actions/cache from 4.2.4 to 4.3.0 by @dependabot[bot] in #2592
• workflows: trigger AWS on 'schedule' event by @wainersm in #2603
• build(deps): bump github.com/klauspost/cpuid/v2 from 2.2.9 to 2.3.0 in /src/cloud-api-adaptor by @dependabot[bot] in #2595
• build(deps): bump actions/stale from 10.0.0 to 10.1.0 by @dependabot[bot] in #2612
• build(deps): bump docker/login-action from 3.5.0 to 3.6.0 by @dependabot[bot] in #2611
• build(deps): bump github/codeql-action from 3.30.5 to 3.30.6 by @dependabot[bot] in #2610
• build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by @dependabot[bot] in #2613
• build(deps): bump github.com/vishvananda/netlink from 1.3.1-0.20250303224720-0e7078ed04c8 to 1.3.1 in /src/cloud-api-adaptor by @dependabot[bot] in #2614
• Bump protobuf 1.36.9 by @stevenhorsman in #2601
• build(deps): bump aws-actions/configure-aws-credentials from 4.2.1 to 5.1.0 by @dependabot[bot] in #2623
• build(deps): bump github/codeql-action from 3.30.6 to 4.30.7 by @dependabot[bot] in #2622
• build(deps): bump the protobuf group across 2 directories with 1 update by @dependabot[bot] in #2624
• build(deps): bump github.com/Azure/go-autorest/autorest from 0.11.27 to 0.11.30 in /src/cloud-api-adaptor by @dependabot[bot] in #2615
• build(deps): bump github/codeql-action from 4.30.7 to 4.30.8 by @dependabot[bot] in #2626
• azure: automatically generate ssh keys if missing by @esposem in #2621
• versions: Pin setup-envtest to last release by @stevenhorsman in #2632
• azure: clean SSHKeyPath only if it isn't empty by @esposem in #2630
• e2e: readd tdx to azure e2e tests by @mkulke in #2633
• e2e: remove ssh key from azure e2e-test provisioner by @mkulke in #2631
• build(deps): bump the x-crypto group across 2 directories with 1 update by @dependabot[bot] in #2627
• CI: promote libvirt CRI-O jobs to stable but secure_comms unstable by @wainersm in #2636
• byom: extend VM_POOL_IPS to handle range of IPs by @Amulyam24 in #2620
• build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.18.2 to 1.19.1 in /src/cloud-api-adaptor by @dependabot[bot] in #2638
• e2e-test: get podvm name from CAA pod by @PrakashMuddana in #2629
• Introduce CI for AWS - part 3 by @wainersm in #2607
• build(deps): bump github/codeql-action from 4.30.8 to 4.30.9 by @dependabot[bot] in #2642
• azure: use Standard SSD for CVM storage by @snir911 in #2646
• Introduce CI for AWS - part 4 by @wainersm in #2645
• workflows: do not persist credentials on checkout by @wainersm in #2643
• e2e-test: address zizmor complaints in azure workflows by @mkulke in #2644
• build(deps): bump the x-extensions group across 2 directories with 2 updates by @dependabot[bot] in #2637
• test/e2e: fix panic in getCaaPodLogForPod() by @wainersm in #2647
• build(deps): bump actions/download-artifact from 5.0.0 to 6.0.0 by @dependabot[bot] in #2650
• build(deps): bump github/codeql-action from 4.30.9 to 4.31.0 by @dependabot[bot] in #2649
• build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by @ldoktor in #2655
• fix(gcp): Parse project ID from image path for cross-project support by @mateo-moon in #2654
• build(deps): bump the aws-sdk-go-v2 group across 2 directories with 8 updates by @dependabot[bot] in #2617
• build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.18.2 to 1.19.1 in /src/cloud-providers by @dependabot[bot] in #2639
• versions: Bump golang to 1.24.9 by @gkurz in #2667
• build(deps): bump github/codeql-action from 4.31.0 to 4.31.2 by @dependabot[bot] in #2665
• versions: Use new golang 1.24.9 image by @gkurz in #2671
• build(deps): bump lycheeverse/lychee-action from 2.6.1 to 2.7.0 by @dependabot[bot] in #2660
• CI: fix latest unstability on AWS job by @wainersm in #2664
• workflows: Switch CAA arch build to use ibm cloud runners by @stevenhorsman in #2673
• Use local go modules by @gkurz in #2659
• docs: SEV deprecation by @arvindskumar99 in #2606
• workflows: Set the ppc64le arch explicitly in setup-go by @stevenhorsman in #2677
• build(deps): bump docker/setup-qemu-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #2679
• podvm-mkosi: Add mention of TEE_PLATFORM env variable by @bpradipt in #2678
• build(deps): bump github/codeql-action from 4.31.2 to 4.31.3 by @dependabot[bot] in #2683
• podvm: fix IMDS setup timeout by @snir911 in #2685
• ibmcloud: introduce custom tag list for peer pods by @Pacho20 in #2618
• Add GCP subnetwork support with flexible format handling by @mateo-moon in #2672
• versions: Bump kata runtime to 3.23.0 ~pre-~release by @stevenhorsman in #2682
• build(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 in /src/cloud-providers by @dependabot[bot] in #2690
• Operator pin 0.17.0 by @stevenhorsman in #2692
• Release/0.17.0 by @stevenhorsman in #2693

New Contributors

• @mateo-moon made their first contribution in #2654
• @gkurz made their first contribution in #2667
• @arvindskumar99 made their first contribution in #2606

Full Changelog: v0.16.0...v0.17.0