✨ New Features

• enable container signing (#2988)
• Implement FromPoolAnnotation (#2902)
• add image SBOM attestation to image builds (#2979)
• Implement CRD migration (#2909)
• Add FailureDomain Support (#2764)
• Conditionally watch M3 IPClaims and CAPI IPAddressClaims (#2763)
• Add v1beta2 conditions for Metal3Cluster (#2742)
• Add v1beta2 conditions for metal3machine (#2713)
• Retrieve gateway from CAPI IPAM IP claims (#2755)
• Add support for e2e tests on suse (#2685)

🐛 Bug Fixes

• Fix clusterctl upgrade test to upgrade to right version and fix conditions after upgrade (#2931)
• Remove invalid kustomizeconfig from config/webhook (#2959)
• Fix nil pointer issue while checking bootstrapReadyCondition (#2957)
• Add missing RBAC permissions for metal3clustertemplates (#2954)
• fix host selection being unreliable with more than 200 hosts in one namespace (#2918)
• Fix hardcoded restconfig user-agent value (#2881)
• Fix for 1.10->1.11 upgrade issue (#2868)
• Avoid "Pool not found in cache" with CAPI IPAM (#2810)
• correct metadata.yaml release-1.11 contract (#2793)

📖 Documentation

• add AGENTS.md (#2917)
• remove release-1-8 references from README (#2914)
• Improve doc on pool references (#2811)
• Add Alpha release in release documentation (#2760)

🌱 Others

• Bump IPAM v1.12.0-rc.0 and BMO v0.12.0-rc.0 (#3007)
• Bump github.com/onsi/gomega from 1.38.2 to 1.38.3 (#2993)
• Bump github.com/onsi/ginkgo/v2 from 2.27.2 to 2.27.3 in /test (#2996)
• Bump golang.org/x/mod from 0.30.0 to 0.31.0 in /test (#2995)
• Bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 in /hack/tools (#2994)
• lint: allow long lines in tables and code fences (#2990)
• Bump github.com/onsi/ginkgo/v2 from 2.27.2 to 2.27.3 (#2992)
• Bump CAPI to v1.12.0-rc.1 (#2989)
• refactor: remove removeFinalizers helper method (#2987)
• Fix capi-md-e2e test to support taint propagation feature (#2981)
• bump golang to 1.24.11 (#2984)
• Feruz returning from emeritus status (#2980)
• Bump CAPI to v1.12.0-rc.0 (#2978)
• Bump the github-actions group with 2 updates (#2977)
• Add yamllint workflow (#2972)
• remove scheduled osv-scanner workflow (#2962)
• Bump golang.org/x/crypto from 0.43.0 to 0.45.0 in /hack/fake-apiserver (#2967)
• Fix go.mod in fake apiserver (#2970)
• Bump CAPI the v1.12.0-beta.1 (#2963)
• Bump go.uber.org/zap from 1.27.0 to 1.27.1 in /hack/fake-apiserver (#2964)
• Add Cilium as an CNI option in tests (#2667)
• Bump golang.org/x/crypto from 0.44.0 to 0.45.0 in /test (#2958)
• bump the kubernetes group to v0.34.2 (#2944)
• Bump github.com/metal3-io/cluster-api-provider-metal3/api from 1.11.1 to 1.11.2 in /hack/fake-apiserver (#2946)
• Bump golang.org/x/crypto from 0.43.0 to 0.44.0 in /test (#2948)
• Bump golang.org/x/mod from 0.29.0 to 0.30.0 in /test (#2947)
• Bump github.com/metal3-io/baremetal-operator/apis from 0.11.1 to 0.11.2 in /hack/fake-apiserver (#2945)
• Bumps BMO v0.12.0-beta.0 and IPAM v1.12.0-beta.0 (#2941)
• Bump CAPI to v1.12.0-beta-0 (#2921)
• Bump sigs.k8s.io/kustomize/kustomize/v5 from 5.7.1 to 5.8.0 in /hack/tools (#2925)
• Bump sigs.k8s.io/kustomize/api from 0.20.1 to 0.21.0 in /test (#2927)
• Bump github.com/docker/docker from 28.5.1+incompatible to 28.5.2+incompatible in /test (#2929)
• Bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 in /hack/tools (#2926)
• Bump sigs.k8s.io/kustomize/kyaml from 0.20.1 to 0.21.0 in /test (#2928)
• Bump CAPI to v1.11.3 (#2919)
• Bump sigs.k8s.io/controller-runtime from 0.22.3 to 0.22.4 in /hack/fake-apiserver (#2913)
• Remove checking m3Data from Associate function (#2874)
• Bump the github-actions group with 2 updates (#2911)
• bump golang to 1.24.9 (#2905)
• Rename ephemeral cluster name to bootstrap cluster (#2904)
• Update Pull Request template (#2901)
• Bump github.com/onsi/ginkgo/v2 from 2.26.0 to 2.27.2 in /test (#2897)
• Remove Ephemeral test instances (#2894)
• Bump github.com/onsi/ginkgo/v2 from 2.26.0 to 2.27.2 (#2896)
• Bump github.com/metal3-io/baremetal-operator/apis from 0.11.0 to 0.11.1 in /hack/fake-apiserver (#2884)
• Bump github.com/metal3-io/baremetal-operator/apis from 0.11.0 to 0.11.1 (#2882)
• Bump github.com/metal3-io/cluster-api-provider-metal3/api from 1.11.0 to 1.11.1 in /hack/fake-apiserver (#2883)
• Bump golang.org/x/crypto from 0.42.0 to 0.43.0 in /test (#2885)
• Bump github.com/metal3-io/baremetal-operator/apis from 0.11.0 to 0.11.1 in /test (#2886)
• Fix PodCIDR replace in Calico manifest (#2878)
• Update supported distros for e2e tests (#2879)
• Fix deployment workflow part related to M3DT and M3DC (#2875)
• Migrate to golangci-lint v2 (#2869)
• Add image pull for md remediation test (#2870)
• Fix CAPI md and conformance tests (#2867)
• Bump sigs.k8s.io/controller-runtime from 0.22.2 to 0.22.3 in /hack/fake-apiserver (#2861)
• Bump golang.org/x/oauth2 from 0.31.0 to 0.32.0 in /hack/tools (#2862)
• Bump github.com/docker/docker from 28.5.0+incompatible to 28.5.1+incompatible in /test (#2864)
• Bump CAPI to v1.11.2 (#2860)
• Bump golang.org/x/mod from 0.28.0 to 0.29.0 in /test (#2863)
• Remove k8s repo from kubeadm config (#2852)
• Remove unnecessary export for SKIP_NODE_IMAGE_PREPULL (#2857)
• Add SKIP_NODE_IMAGE_PREPULL var in ci-e2e.sh (#2853)
• Switch to modern constructs via modernizer (#2849)
• manager: clean up the manager manifest (#2850)
• Pass fkas artifact to reusable image building workflow (#2846)
• Bump golang to v1.24.8 (#2845)
• Bump github.com/docker/docker from 28.4.0+incompatible to 28.5.0+incompatible in /test (#2841)
• Bump github.com/onsi/ginkgo/v2 from 2.25.3 to 2.26.0 in /test (#2842)
• Fix 1.11 cluster templates to use v1beta2 (#2836)
• Bump github.com/onsi/ginkgo/v2 from 2.25.3 to 2.26.0 (#2839)
• Remove message from v1beta2 true conditions (#2838)
• Bump sigs.k8s.io/controller-runtime from 0.22.1 to 0.22.2 in /hack/fake-apiserver (#2840)
• Bump github.com/metal3-io/ironic-standalone-operator/api from 0.5.1 to 0.6.0 in /test (#2843)
• Update comment to have reference to correct folder (#2835)
• Fix scalability tests (#2728)
• Add kustomization for new ironic release-32.0 (#2831)
• Add prep fkas directory -step for fkas-image-build action (#2826)
• Dockerfile: strip out symbol table by default for public images (#2833)
• cmd: strip out symbol table & DWARF debugging info (#2830)
• add specific time to dependabot config (#2829)
• Bump the github-actions group across 1 directory with 4 updates (#2825)
• Add build test in PR checks for FKAS (#2814)
• Fix OSV-Scanner (#2799)
• Enable lint checks for FKAS (#2817)
• Enable testing with CAPI nightly builds (#2737)
• Change interface names to predictable ones for Centos (#2812)
• Update infra metadata in tests (#2805)
• Add logging to releaseAddressFromM3Pool function (#2820)
• Bump github.com/docker/docker from 28.3.3+incompatible to 28.4.0+incompatible in /test (#2808)
• Update clusterctl upgrade tests on main branch (#2804)
• prepare for 1.12 developement cycle (#2802)
• Bump golang to v1.24.7 (#2795)
• Bump github.com/metal3-io/cluster-api-provider-metal3/api from 1.10.1 to 1.10.2 in /hack/fake-apiserver (#2780)
• Bump golang.org/x/mod from 0.27.0 to 0.28.0 in /test (#2784)
• Bump golang.org/x/crypto from 0.41.0 to 0.42.0 in /test (#2783)
• Bump golang.org/x/oauth2 from 0.30.0 to 0.31.0 in /hack/tools (#2781)
• add release-1.11 dependabot config (#2779)
• Bump github.com/metal3-io/cluster-api-provider-metal3 from 1.10.1 to 1.10.2 in /hack/fake-apiserver (#2768)
• Bump github.com/onsi/ginkgo/v2 from 2.25.2 to 2.25.3 (#2766)
• Bump github.com/metal3-io/baremetal-operator/apis from 0.10.2 to 0.10.3 in /hack/fake-apiserver (#2769)
• Bump the kubernetes group to v0.33.5 (#2765)
• Bump github.com/onsi/ginkgo/v2 from 2.25.2 to 2.25.3 in /test (#2771)