Changelog v1.74.2

Features

[metrics-storage] Add graph for LVM stats in Node dashboard #16795
[prometheus] Replace PrometheusRules with ClusterObservabilityMetricsRulesGroups or ClusterObservabilityPropagatedMetricsRulesGroups when deployed using helm_lib_prometheus_rules helper and the observability module is enabled #17329

[candi] Remove duplicate additional_disks_hashes definition in static-node Terraform module. #17441
[candi] Updated the bashible step to include Linux kernel versions that address CVE-2025-37999 #17300
[candi] Allow manually stopping DVP node VirtualMachines in nested clusters by using runPolicy AlwaysOnUnlessStoppedManually. #17110
[cloud-provider-azure] fixed cve #16839
[cloud-provider-dvp] this PR gives a lot more informational errors and messages to user #17165
[cloud-provider-openstack] fix cve #17082
[common] Latest CVEs are fixed. #17222
All pods running kube-rbac-proxy will be restarted.
[deckhouse] Fix module installer cleanup. #17301
[deckhouse-controller] Exclude all service accounts from d8- namespaces in d8ms-prefix ValidatingAdmissionPolicy. #17440
[ingress-nginx] Latest CVEs are fixed. #17222
All pods running kube-rbac-proxy will be restarted.
[registry] Omitted the auth field in DockerConfig when credentials (username and password) are empty. #17333

For more information, see the changelog and minor version release changes.