✨ New Features

• Fetch DNS servers from IPPool for CAPI IPAddressClaim path (#3534)
• Bump golang to v1.26 (#3491)

🐛 Bug Fixes

• Fix Metal3DataTemplate racing with clusterctl move (#3603)
• Allow OCI image URLs without checksum (#3522)
• Node reuse: transient error treatment (#3473)
• Fix IsNodeDrained to query workload cluster (#3457)
• Set a consumer reference during node reuse (#3474)
• Fix panic on nil DeletionTimestamp printing (#3445)
• Return error on list API failure (#3378)

📖 Documentation

• Fix minor grammatical issues in readme file. (#3592)
• Use descriptive link text in docs (#3538)
• Fix network_data url in api/docs (#3429)
• Improve Fast track logic in the documentation (#3396)
• Add Fast Track and enhance IP reuse documentation (#3111)

🌱 Others

• Bump IPAM and BMO rc release versions (#3613)
• Bump CAPI to 1.14.0 (#3607)
• Bump checkout action to v7 (#3606)
• Bump the capi group across 4 directories with 3 updates (#3605)
• Pin setup-envtest to go.mod version instead of release branch (#3599)
• Modify image build workflow to utilize container-build-workflow (#3530)
• Drop mariadb from release notes, print full image (#3588)
• Warn against high timeoutSeconds in Metal3Remediation (#3596)
• Bump the capi group from 1.14.0-beta.1 to 1.14.0-rc.0 (#3593)
• Bump github.com/moby/moby/client from 0.5.0 to 0.5.1 in /test (#3594)
• Bump k8s.io/kubectl from 0.36.2 to 0.36.3 in /test in the kubernetes group across 1 directory (#3585)
• Remove MariaDB support from CAPM3 (#3591)
• Require explicit GitHub token for release notes tool (#3546)
• Harden hack scripts against WORKDIR volume mount injection (#3583)
• Bump zizmorcore/zizmor-action from 0.6.0 to 0.6.1 in the github-actions group (#3590)
• Bump IPAM and BMO to 1.14.0-beta.0 and other deps (#3584)
• Bump CAPI to v1.14.0-beta.1 (#3582)
• Add missing conditions to m3c manager and m3m controller (#3531)
• Bump cel-go to v0.29.0 to fix vulnerability (#3581)
• Bump github.com/metal3-io/baremetal-operator/apis from 0.13.1 to 0.13.2 (#3572)
• Bump github.com/metal3-io/baremetal-operator/apis from 0.13.1 to 0.13.2 in /test (#3574)
• Bump github.com/go-logr/logr from 1.4.3 to 1.4.4 in /test (#3575)
• Bump github.com/metal3-io/baremetal-operator/apis from 0.13.1 to 0.13.2 in /hack/fake-apiserver (#3573)
• Bump the github-actions group with 3 updates (#3558)
• Bump golang.org/x/crypto from 0.53.0 to 0.54.0 in /test (#3544)
• Fix serial log collection for CAPI-adopted tests (#3529)
• Bump the capi group across 4 directories with 3 updates (#3559)
• Add 'api' to CAPI patterns in main dependabot configuration (#3557)
• Bump golang.org/x/mod from 0.37.0 to 0.38.0 in /test (#3545)
• Bump helm.sh/helm/v3 from 3.21.2 to 3.21.3 in /test (#3543)
• Align ubuntu kubeadm e2e config with the centos approach that is using vrrp script. (#3537)
• Bump go version to 1.26.5 (#3540)
• test/e2e: fix in-place upgrade rollout on version-managed feature gates (#3536)
• Expand IP-reuse e2e test to check nodes and BMHS (#3450)
• Bump github.com/metal3-io/ironic-standalone-operator/api from 0.9.0 to 0.10.0 in /test (#3533)
• Bump github.com/moby/moby/client from 0.4.1 to 0.5.0 in /test (#3532)
• Bump helm.sh/helm/v3 from 3.21.0 to 3.21.2 in /test (#3511)
• Bump oras-go to v2.6.1 (#3527)
• Bumped Kubernetes versions to latest patches (#3501)
• Bump CAPI to v1.14.0-alpha.0, k8s.io/apimachinery to v0.36.2 and sigsk8s.io/controller-runtime to v0.24.1 (#3489)
• Bump the github-actions group with 3 updates (#3517)
• Bump github.com/onsi/ginkgo/v2 from 2.31.0 to 2.32.0 in /test (#3509)
• Bump github.com/metal3-io/baremetal-operator/apis from 0.13.0 to 0.13.1 in /hack/fake-apiserver (#3508)
• Bump github.com/onsi/ginkgo/v2 from 2.31.0 to 2.32.0 (#3505)
• Bump github.com/metal3-io/baremetal-operator/apis from 0.13.0 to 0.13.1 (#3506)
• Bump github.com/onsi/gomega from 1.42.0 to 1.42.1 in /api (#3507)
• Bump github.com/onsi/gomega from 1.42.0 to 1.42.1 (#3504)
• Bump github.com/onsi/gomega from 1.42.0 to 1.42.1 in /test (#3510)
• Update interface name for leap to enp1s0 from eth0 (#3514)
• Bump github.com/metal3-io/baremetal-operator/apis from 0.13.0 to 0.13.1 in /test (#3512)
• Remove mariadb ref from release notes (#3496)
• Use clusterfilter to make CAPM3 only cache Metal3 based caches (#3438)
• Bump CAPI to 1.13.3 (#3488)
• Bump github.com/onsi/ginkgo/v2 from 2.30.0 to 2.31.0 in /test (#3484)
• Bump github.com/onsi/gomega from 1.41.0 to 1.42.0 in /api (#3483)
• Bump github.com/onsi/gomega from 1.41.0 to 1.42.0 in /test (#3485)
• Bump github.com/onsi/ginkgo/v2 from 2.30.0 to 2.31.0 (#3481)
• Bump github.com/onsi/gomega from 1.41.0 to 1.42.0 (#3482)
• Bump github.com/containerd/containerd from 1.7.32 to 1.7.33 in /test in the go_modules group across 1 directory (#3478)
• fix dependabots build workflop step (#3476)
• Fix context in fkas build image action and add image building PR test (#3472)
• Use proper IPA cache address (#3468)
• Bump github.com/onsi/ginkgo/v2 from 2.29.0 to 2.30.0 (#3461)
• Bump kubernetes to v0.35.6 (#3460)
• Uplift IPAM api to v1.13.0 (#3466)
• Bump github.com/onsi/ginkgo/v2 from 2.29.0 to 2.30.0 in /test (#3463)
• Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group across 1 directory (#3452)
• Removed zizmor inline ignore (#3454)
• Hardened binary download scripts (#3443)
• Set cooldown days to 3 for dependabot (#3439)
• Update FKAS setup to address new CAPI requirements (#3441)
• Bump golang.org/x/crypto from 0.52.0 to 0.53.0 in /test (#3446)
• E2E: Avoid assertion in Describe (#3444)
• Bump golang.org/x/mod from 0.36.0 to 0.37.0 in /test (#3447)
• Bump x/net to v0.55.0 (#3440)
• Bump go to 1.25.11 (#3433)
• Make irso operator version configurable via kustomize (#3424)
• Bump the github-actions group with 2 updates (#3426)
• Add a timeout for Kustomization (#3422)
• Bump golang.org/x/crypto from 0.51.0 to 0.52.0 in /test (#3419)
• Fix capm3, capi and ipam versions for main branch (#3420)
• Bump github.com/onsi/gomega from 1.40.0 to 1.41.0 in /api (#3406)
• Remove ironic 32.0 overlay from e2e tests (#3418)
• Update templates for v1.13 and remove older versions (#3402)
• Optimize md-taints patches using kustomize Component (#3416)
• Bump github.com/onsi/ginkgo/v2 from 2.28.3 to 2.29.0 (#3405)
• Bump github.com/containerd/containerd from 1.7.30 to 1.7.32 (#3417)
• Bump github.com/onsi/gomega from 1.40.0 to 1.41.0 in /test (#3409)
• Bump CAPI to v1.13.2 (#3403)
• Bump helm.sh/helm/v3 from 3.20.2 to 3.21.0 in /test (#3407)
• Bump github.com/onsi/ginkgo/v2 from 2.28.3 to 2.29.0 in /test (#3408)
• Bump github.com/onsi/gomega from 1.40.0 to 1.41.0 (#3404)
• Update E2E tests to use latest BMO 0.13 and IRSO 0.9.0 versions (#3395)
• Bump github.com/metal3-io/baremetal-operator/apis from 0.13.0-rc.0 to 0.13.0 in /test (#3383)
• Bump the kubernetes group to v0.35.5 (#3387)
• Do not delete bootstrap user-data secrets (#3379)
• Bump golang.org/x/crypto from 0.50.0 to 0.51.0 in /test (#3388)
• Update README according to new minor release (#3366)
• Bump github.com/metal3-io/baremetal-operator/apis from 0.12.4 to 0.13.0 in /hack/fake-apiserver (#3381)
• Bump github.com/metal3-io/baremetal-operator/apis from 0.13.0-rc.0 to 0.13.0 (#3380)
• Update dependabot config for release-1.13 branch (#3360)
• Add image validation fuzzing for CAPM3 (#3287)
• Add scheduled fuzz workflow (#3275)
• Bump golang.org/x/mod from 0.35.0 to 0.36.0 in /test (#3384)
• Bump github.com/metal3-io/cluster-api-provider-metal3/api from 1.12.4 to 1.13.0 in /hack/fake-apiserver (#3382)
• Bump Go version to 1.25.10 (#3369)
• Fix k8s upgrade version for node reuse tests (#3365)
• Bump k8s version to v1.36.0 (#3361)
• Patch overlay image (#3358)
• Add v1.14 metadata (#3359)
• Bump the github-actions group across 1 directory with 5 updates (#3357)
• remove obsoleted release action (#3348)
• Bump github.com/metal3-io/ironic-standalone-operator/api from 0.8.1 to 0.9.0 in /test (#3353)
• Bump github.com/onsi/gomega from 1.39.1 to 1.40.0 in /api (#3352)
• Bump github.com/onsi/ginkgo/v2 from 2.28.2 to 2.28.3 (#3350)
• Bump CAPI to v1.13.1 (#3349)
• Bump github.com/onsi/ginkgo/v2 from 2.28.2 to 2.28.3 in /test (#3354)