Changes since v1.11.0

✨ New Features

• enable container signing (#2988)
• Implement FromPoolAnnotation (#2902)
• add image SBOM attestation to image builds (#2979)
• Implement CRD migration (#2909)
• Add FailureDomain Support (#2764)
• Conditionally watch M3 IPClaims and CAPI IPAddressClaims (#2763)
• Add v1beta2 conditions for Metal3Cluster (#2742)
• Add v1beta2 conditions for metal3machine (#2713)
• Retrieve gateway from CAPI IPAM IP claims (#2755)
• Add support for e2e tests on suse (#2685)

🐛 Bug Fixes

• remove limits from client.List calls (#3033)
• Fix clusterctl upgrade test to upgrade to right version and fix conditions after upgrade (#2931)
• Remove invalid kustomizeconfig from config/webhook (#2959)
• Fix nil pointer issue while checking bootstrapReadyCondition (#2957)
• Add missing RBAC permissions for metal3clustertemplates (#2954)
• fix host selection being unreliable with more than 200 hosts in one namespace (#2918)
• Fix hardcoded restconfig user-agent value (#2881)
• Fix for 1.10->1.11 upgrade issue (#2868)
• Avoid "Pool not found in cache" with CAPI IPAM (#2810)
• correct metadata.yaml release-1.11 contract (#2793)

📖 Documentation

• add AGENTS.md (#2917)
• remove release-1-8 references from README (#2914)
• Improve doc on pool references (#2811)
• Add Alpha release in release documentation (#2760)

🌱 Others

• Bump CAPI to v1.12.1, IPAM v1.12.0 and BMO v0.12.0 (#3038)
• Bump github.com/metal3-io/ironic-standalone-operator/api from 0.6.0 to 0.6.1 in /test (#3027)
• Bump the kubernetes group across 4 directories with 7 updates (#3024)
• Bump github.com/onsi/gomega from 1.38.2 to 1.38.3 (#2993)
• Bump github.com/onsi/ginkgo/v2 from 2.27.2 to 2.27.3 in /test (#2996)
• Bump golang.org/x/mod from 0.30.0 to 0.31.0 in /test (#2995)
• Bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 in /hack/tools (#2994)
• lint: allow long lines in tables and code fences (#2990)
• Bump github.com/onsi/ginkgo/v2 from 2.27.2 to 2.27.3 (#2992)
• refactor: remove removeFinalizers helper method (#2987)
• Fix capi-md-e2e test to support taint propagation feature (#2981)
• bump golang to 1.24.11 (#2984)
• Feruz returning from emeritus status (#2980)
• Bump the github-actions group with 2 updates (#2977)
• Add yamllint workflow (#2972)
• remove scheduled osv-scanner workflow (#2962)
• Bump golang.org/x/crypto from 0.43.0 to 0.45.0 in /hack/fake-apiserver (#2967)
• Fix go.mod in fake apiserver (#2970)
• Bump go.uber.org/zap from 1.27.0 to 1.27.1 in /hack/fake-apiserver (#2964)
• Add Cilium as an CNI option in tests (#2667)
• Bump golang.org/x/crypto from 0.44.0 to 0.45.0 in /test (#2958)
• Bump github.com/metal3-io/cluster-api-provider-metal3/api from 1.11.1 to 1.11.2 in /hack/fake-apiserver (#2946)
• Bump sigs.k8s.io/kustomize/kustomize/v5 from 5.7.1 to 5.8.0 in /hack/tools (#2925)
• Bump sigs.k8s.io/kustomize/api from 0.20.1 to 0.21.0 in /test (#2927)
• Bump github.com/docker/docker from 28.5.1+incompatible to 28.5.2+incompatible in /test (#2929)
• Bump sigs.k8s.io/kustomize/kyaml from 0.20.1 to 0.21.0 in /test (#2928)
• Bump sigs.k8s.io/controller-runtime from 0.22.3 to 0.22.4 in /hack/fake-apiserver (#2913)
• Remove checking m3Data from Associate function (#2874)
• Bump the github-actions group with 2 updates (#2911)
• Rename ephemeral cluster name to bootstrap cluster (#2904)
• Update Pull Request template (#2901)
• Remove Ephemeral test instances (#2894)
• Fix PodCIDR replace in Calico manifest (#2878)
• Update supported distros for e2e tests (#2879)
• Fix deployment workflow part related to M3DT and M3DC (#2875)
• Migrate to golangci-lint v2 (#2869)
• Add image pull for md remediation test (#2870)
• Fix CAPI md and conformance tests (#2867)
• Remove k8s repo from kubeadm config (#2852)
• Remove unnecessary export for SKIP_NODE_IMAGE_PREPULL (#2857)
• Add SKIP_NODE_IMAGE_PREPULL var in ci-e2e.sh (#2853)
• Switch to modern constructs via modernizer (#2849)
• manager: clean up the manager manifest (#2850)
• Pass fkas artifact to reusable image building workflow (#2846)
• Fix 1.11 cluster templates to use v1beta2 (#2836)
• Remove message from v1beta2 true conditions (#2838)
• Bump sigs.k8s.io/2 from 0.22.1 to 0.22.2 in /hack/fake-apiserver (#2840)
• Update comment to have reference to correct folder (#2835)
• Fix scalability tests (#2728)
• Add kustomization for new ironic release-32.0 (#2831)
• Add prep fkas directory -step for fkas-image-build action (#2826)
• Dockerfile: strip out symbol table by default for public images (#2833)
• cmd: strip out symbol table & DWARF debugging info (#2830)
• add specific time to dependabot config (#2829)
• Bump the github-actions group across 1 directory with 4 updates (#2825)
• Add build test in PR checks for FKAS (#2814)
• Fix OSV-Scanner (#2799)
• Enable lint checks for FKAS (#2817)
• Enable testing with CAPI nightly builds (#2737)
• Change interface names to predictable ones for Centos (#2812)
• Update infra metadata in tests (#2805)
• Add logging to releaseAddressFromM3Pool function (#2820)
• Update clusterctl upgrade tests on main branch (#2804)
• prepare for 1.12 developement cycle (#2802)
• add release-1.11 dependabot config (#2779)

♻️ Superseded or Reverted

• #2771, #2765, #2766, #2768, #2769, #2780, #2781, #2783, #2784, #2795, #2808,
  #2839, #2841, #2842, #2843, #2845, #2860, #2861, #2862, #2864, #2863, #2882,
  #2883, #2884, #2885, #2886, #2896, #2897, #2905, #2921, #2919, #2926, #2941,
  #2944, #2945, #2947, #2948, #2963, #2978, #2989, #3007, #3025, #3026, #3028

The image for this release is: v1.12.0
Mariadb image tag is: capm3-v1.12.0

Thanks to all our contributors! 😊