Releases · lf-edge/eve

@naiming-zededa

What's changed?

zedkube/dpcmanager: detect LB CIDR conflicts and fix VIP filtering by @naiming-zededa (#5827)
kube: restart standalone containerd if it dies by @mrangana (#5864)
kube: fix cluster-init stuck loop after basek3s conversion by @naiming-zededa (#5869)
github/workflows: Add codecov to publish workflow by @rene (#5871)
zedkube/edgeview: fix stale vmiVNC.run blocking new VNC sessions by @naiming-zededa (#5875)
build(deps): bump go.opentelemetry.io/otel from 1.40.0 to 1.41.0 in /pkg/wwan/mmagent by @dependabot[bot] (#5881)
pillar: tear down VMIRS on purge and restart in eve-k by @naiming-zededa (#5882)
Makefile: Signing-Off setting server to prod commit by @rene (#5883)
pkg/eve: Fix image sizes for the new partition layout by @rene (#5886)
Pull in newest lf-edge/edge-containers by @eriknordmark (#5887)
Kernel update - [arm64-nvidia-jp5, arm64-nvidia-jp6, arm64-generic, a… by @rucoder (https://github.com//pull/5893)
fix(volumemgr): floor deferContentDelete ticker at 1 second by @akaouris (#5894)
Update CODEOWNERS and MAINTAINERS.md files by @rouming (#5895)
hypervisor/kubevirt: fix CPU metrics always reporting zero by @naiming-zededa (#5896)
tests/types: improve unit test coverage to 83% by @eriknordmark (#5897)
zedagent: extend docs with internals and startup sequence unit tests by @eriknordmark (#5898)
docs: add microservice classification by @eriknordmark (#5899)
docs: fix broken links and add inventory_win by @eriknordmark (#5900)
Force bonds/vlans re-parsing when lower layer changes by @milan-zededa (#5902)
pillar: bump otel/sdk to v1.41.0 by @eriknordmark (#5903)
zedmanager: fix ENC app reporting race and ActivateInprogress stuck failback by @naiming-zededa (#5905)
Make sure SenderStatusCertMiss is not overwritten by @eriknordmark (#5906) (backport of #5584)
Fix CSR attribute ordering for SCEP enrollment by @milan-zededa (#5909)
build(deps): bump gitpython from 3.1.47 to 3.1.49 in /tools/check-commit-messages by @dependabot[bot] (#5912)

Full Changelog: 16.13.0...16.14.0

@milan-zededa

What's changed

[16.0-stable] Fix bond link monitoring by @milan-zededa (#5858) (backport of #5809)
[16.0-stable] Publish bond adapter status and metrics by @milan-zededa (#5859) (backport of #5834)
[16-0-stable] edgeview: fix wwan0 excluded from websocket interface list by @naiming-zededa (#5884) (backport of #5832)

Full Changelog: 16.0.1-rc1...16.0.1-rc2

@eriknordmark

What's changed?

Remove /config/v2tlsbaseroot-certificates.pem - use root CAs from rootfs by @eriknordmark (#5561)
Add SCEP certificate enrollment and 802.1x port-based network access control (PNAC) by @milan-zededa (#5691)
Add salted HMAC session with AES-128-CFB parameter encryption for TPM seal/unseal by @shjala (#5711)
installer: create EFI NVRAM boot entry for EVE-OS after installation by @rucoder (#5712)
pkg: exclude Dockerfile from COPY in all packages by @christoph-zededa (#5732)
Unify partition layout: 2GB (EFI) + 4GB (rootfs) by @rene (#5735)
Move kube-save-var-lib under vault by @andrewd-zededa (#5745)
hypervisor/kubevirt: use purge counter in VMI ReplicaSet name to fix purge collisions by @zedi-pramodh (#5748)
pkg/pillar: fix arm64→amd64 cross-compilation for Alpine 3.22 / GCC 14 by @zedi-pramodh (#5755)
Introduces NVIDIA Jetpack 7.1 by @rene (#5768)
Delete cpu_manager_state file on every reboot by @zedi-pramodh (#5781)
ci: refactor PR build into two-stage pipeline with reusable workflow by @rucoder (#5782)
pkg/kube: symlink host-local into PATH for k3s v1.34+ compatibility by @mrangana (#5788)
pkg/alpine: update zlib to 1.3.2-r0 from Alpine main and add efibootmanager package by @eriknordmark (#5793)
cross-compilers: ignore pkg hash inconsistencies by @christoph-zededa (#5798)
refactor(kubeapi): introduce WaitForKubernetesOptions to control optional waits by @andrewd-zededa (#5799)
eve-k: fix cluster delete regression by @andrewd-zededa (#5800)
alpine 3.22: fix bpftrace by @christoph-zededa (#5803)
eve-k: skip pod eviction when cluster-wide simultaneous drain is detected by @andrewd-zededa (#5804)
Fix SCEPClient after removal of EVE V1 API support by @milan-zededa (#5805)
ci: replace build-eve reusable workflow with composite action by @eriknordmark (#5807)
coverage: add Go basic-block coverage support for unit and E2E tests by @eriknordmark (#5808)
Fix bond link monitoring by @milan-zededa (#5809)
monitor: bump monitor-rs to v0.6.3 by @rucoder (#5810)
Fix Go package cross-compilation and add parallel builds by @rucoder (#5811)
ci: bump guyarb/golang-test-annotations to v0.9.0 by @rucoder (#5812)
github/workflows: Fix build.yml workflow by @rene (#5813)
ci: switch actionlint reporter to github-check by @rucoder (#5814)
build(deps): bump github.com/moby/spdystream from 0.5.0 to 0.5.1 in /pkg/pillar by @dependabot[bot] (#5815)
zedkube: bound k8s API calls with context timeout to prevent watchdog by @naiming-zededa (#5816)
Disable app logs and set Firmware UUID by @zedi-pramodh (#5817)
Tune iscsid.conf for better performance by @zedi-pramodh (#5818)
stagger k3s startup using persisted control-plane rank by @naiming-zededa (#5819)
Fix DevicePortConfig.MostlyEqual ignoring L2 (VLAN/bond) config changes by @milan-zededa (#5820)
pkg/uefi: upgrade EDK2 to edk2-stable202508.01 by @rucoder (#5822)
Publish ZInfoKubeCluster for single-node eve-k deployments by @milan-zededa (#5823)
pkg/pillar: Disable vmx for FML virtualization mode by @rene (#5824)
bpftrace-compiler: skip nvidia kernels in tests by @christoph-zededa (#5831)
edgeview: fix wwan0 excluded from websocket interface list by @naiming-zededa (#5832)
Fix regression causing potential panic in triggerPublishAllInfo by @eriknordmark (#5833)
Publish bond adapter status and metrics by @milan-zededa (#5834)
bpftrace-compiler: Remove full path from qemu command by @rene (#5835)
Add log rotation for swtpm by @shjala (#5838) (backport of #5796 #5797)
Introduces the optee-client package by @rene (#5839)
Increase the size of CONFIG partition from 1MB to 5MB by @rene (#5840)
eve-k: set Longhorn node disk reserved space via global config by @andrewd-zededa (#5841)
vtpm,vector: fix cross-compilation and runtime issues by @rucoder (#5842)
installer: Add option to skip device certificate generation by @rene (#5843)
pkg/storage-init: Copy fTPM provision data by @rene (#5844)
Fix SCEP CA trust anchor certs being silently skipped by @milan-zededa (#5845)
zedkube: fix ECDH cert missed during WaitForKubernetes blocking k3s by @naiming-zededa (#5847)
fix yetus golangci --out-format by @christoph-zededa (#5848)
pkg: enable riscv64 builds for vector, monitor, installer by @rucoder (#5849)
pkg/pillar: Remove lk-build-arg-COVER (fixes broken publish workflow) by @rene (#5850)
Fix lost NTP telemetry by @OhmSpectator (#5851)
fix missed LonghornDiskReservedGB in global_test.go by @andrewd-zededa (#5852)
pillar: trust cluster recovery for kubevirt apps and add stuck-Pending VMI handler by @naiming-zededa (#5853)
Simplify Longhorn_is_ready log gate flag, tmp file not needed. by @andrewd-zededa (#5854)
eden-trusted: use eden master for EVE master CI by @eriknordmark (#5855)
pillar: remove executor, command, execlib, and exectypes by @eriknordmark (#5856)
kube: move k3s-stop flag to /run/kube so reboot clears it by @mrangana (#5857)
dpcmanager: increase PNAC DHCP reacquire timeout to avoid flaky tests by @rene (#5860)
HW inventory fixes by @christoph-zededa (#5861)
Make DIRSYNC for persist/vault configurable via grub option by @milan-zededa (#5862)
build(deps): bump go.opentelemetry.io/otel from 1.40.0 to 1.41.0 in /pkg/pillar by @dependabot[bot] (#5863)
eve-k: update to kubevirt 1.7.3 by @andrewd-zededa (#5865)
edgeview: fix build after ServerSigningCertFileName removal by @eriknordmark (#5866)
zedmanager: report app status from DNID when no pod in cluster by @naiming-zededa (#5867)
build(deps): bump gitpython from 3.1.43 to 3.1.47 in /tools/check-commit-messages by @dependabot[bot] (#5868)
github/workflows: Fix yetus workflow for large patches by @rene (#5870)
Enable auto compact of etcd database by @zedi-pramodh (#5872)
build(deps): bump go.opentelemetry.io/otel from 1.40.0 to 1.41.0 in /pkg/newlog by @dependabot[bot] (#5873)
Fix the removal of edgeview singing cert file by @naiming-zededa (#5874)
pkg/debug: fix COM port detection by @christoph-zededa (#5876)
bpftrace-compiler: add vendoring by @christoph-zededa (#5877)
github/workflows: Fix yetus when no patch-*-result.txt files are present by @rene (#5878)
Install kubevirt 1.7.3 with patched env for virt-operator daemonset by @andrewd-zededa (#5879)
Remove patch file leftover from 161360e by @rene (#5880)

Full Changelog: 16.12.0...16.13.0

@OhmSpectator

What's changed?

[16.0-stable] Fix device config props handling in maybeRetryBoot. by @OhmSpectator (#5536) (backport of #5533)
[16.0] Add missing Intel AX210 (TY) firmware required by iwlwifi by @jsfakian (#5542) (backport of #5503)
[16.0-stable] Configure USB priority in VM boot order by @OhmSpectator (#5547) (backport of #5507)
[16.0-stable] Revert "Add null key verification to detect TPM reset attacks" by @shjala (#5552) (backport of #5214 #5550)
[16.0-stable] Revert automatic lkt hashes by @christoph-zededa (#5557) (backport of #5554)
[16.0-stable] Fix QMP flooding on VM restart. by @OhmSpectator (#5562) (backport of #5548)
[16.0-stable] Fix IPv4-only mode for static IPv4 configuration by @milan-zededa (#5566) (backport of #5565)
[16.0-stable] usbmanager use ghw by @christoph-zededa (#5577) (backport of #5535 #5568)
[16.0-stable ] Load TLS root CA directly from /config instead of /persist/certs by @shjala (#5578) (backport of #5553)
[16.0-stable] pkg/pillar: update zededa/ghw library by @christoph-zededa (#5621) (backport of #5617)
[16.0-stable] SR-IOV: Fix API logic and add I350 NIC support by @uncleDecart (#5632) (backport of #5604)
[16.0-stable] pkg/storage-init: Fix CONFIG partition tmpfs size by @rene (#5692) (backport of #5668)
[16-stable] Bump eve pillar by @shjala (#5701)
[16.0-stable] readthedocs.yaml: Bump Ubuntu and Python versions by @rene (#5723) (backport of #5718)
[16.0-stable] Backport CI improvements by @europaul (#5724) (backport of #5534 #5551 #5583 #5657 #5662 #5665 #5700 #5702 #5709 #5713 #5714)
[16.0-stable] Simplify/remove /persist/status/zedagent/* by @eriknordmark (#5750) (backport of #5584 #5775)
[16.0-stable] spec.sh: : fix invalid JSON when ioMemberList is empty by @christoph-zededa (#5759) (backport of #5593)
[16.0-stable] Refactor and fix network tracing integration in controllerconn by @milan-zededa (#5769) (backport of #5648)
[16.0-stable] mmdbus: improve eSIM detection using EID and handle missing slot paths by @milan-zededa (#5770) (backport of #5697)
[16.0-stable] Add dynamic PCR policy support for disk key sealing by @shjala (#5794) (backport of #5398 #5591)
[16.0-stable] Fix an issue of edge-node clustering interface using logical-label by @naiming-zededa (#5795) (backport of #5720)
[16.0-stable] Backport URL join fixes and SAS token fix by @europaul (#5801) (backport of #5588 #5715)
[16.0-stable] Fix broken leader election in Kubernetes cluster by @milan-zededa (#5821) (backport of #5773)
[16.0-stable] Fix a race condition when eve-k app restart app lost IP address by @naiming-zededa (#5825) (backport of #5706)
[16.0-stable] Fix DevicePortConfig.MostlyEqual ignoring L2 (VLAN/bond) config changes by @milan-zededa (#5828) (backport of #5820)
[16.0-stable] pkg/pillar: Disable vmx for FML virtualization mode by @rene (#5829) (backport of #5824)
[16.0-stable] Fix regression causing potential panic in triggerPublishAllInfo by @eriknordmark (#5836) (backport of #5833)

Full Changelog: 16.0.0-lts...16.0.1-rc1

@eriknordmark

What's changed?

Simplify/remove /persist/status/zedagent/* by @eriknordmark (#5584)
Update vTPM to work with latest evetpm changes by @shjala (#5591)
Bump alpine 3.22 by @christoph-zededa (#5650)
build.yml: fix eve job cache handling by @europaul (#5665)
Fix: remove stale flannel.1 before restart k3s by @naiming-zededa (#5672)
hypervisor/kubevirt: implement CPU pinning for HV=k (KubeVirt) by @zedi-pramodh (#5676)
Improve logging in cpuallocator by @zedi-pramodh (#5677)
tools: add little helper to bump Dockerfiles by @christoph-zededa (#5680)
Fix Eden version bump: keep 16.0-stable on 1.0.13 by @europaul (#5682)
add controller-driven kube-vip load balancer for K3S_BASE clusters by @naiming-zededa (#5683)
dom0-ztools: bump ZFS to 2.3.6 by @rucoder (#5684)
build(deps): bump google.golang.org/grpc from 1.75.0 to 1.79.3 in /pkg/pillar by @dependabot[bot] (#5685)
build(deps): bump google.golang.org/grpc from 1.73.0 to 1.79.3 in /tools/dockerfile-from-checker by @dependabot[bot] (#5687)
build(deps): bump google.golang.org/grpc from 1.75.0 to 1.79.3 in /eve-tools/bpftrace-compiler by @dependabot[bot] (#5688)
build(deps): bump google.golang.org/grpc from 1.75.1 to 1.79.3 in /tools/get-deps by @dependabot[bot] (#5689)
build(deps): bump google.golang.org/grpc from 1.75.0 to 1.79.3 in /pkg/wwan/mmagent by @dependabot[bot] (#5690)
Provide manual k3s stop and start option by @mrangana (#5694)
build(deps): bump google.golang.org/grpc from 1.75.0 to 1.79.3 in /pkg/newlog by @dependabot[bot] (#5695)
build(deps): bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 in /pkg/pillar by @dependabot[bot] (#5696)
mmdbus: improve eSIM detection using EID and handle missing slot paths by @milan-zededa (#5697)
bump_eve_pillar to update pkg/edgeview, pkg/vtpm, and pkg/wan by @eriknordmark (#5698)
Makefile: use linuxkit env vars for org and builder config by @europaul (#5700)
build: add HV=k package build to PR workflow by @europaul (#5702)
build(deps): bump github.com/moby/buildkit from 0.23.1 to 0.28.1 in /tools/dockerfile-from-checker by @dependabot[bot] (#5704)
build(deps): bump github.com/moby/buildkit from 0.23.2 to 0.28.1 in /eve-tools/bpftrace-compiler by @dependabot[bot] (#5705)
Fix a race condition when eve-k app restart app lost IP address by @naiming-zededa (#5706)
pkg/grub: include EFI status code in "unknown TPM error" message by @rucoder (#5708)
update linuxkit by @europaul (#5709)
pkg/grub: migrate to GRUB 2.12 by @rucoder (#5710)
ci: update GitHub Actions to Node.js 24 compatible versions by @rucoder (#5713)
build: stop exporting GOOS=linux globally by @rucoder (#5714)
downloader: fix SAS token corruption in constructDatastoreContext by @jsfakian (#5715)
ci: reduce unit test CI time by running fuzz tests in a separate job by @shjala (#5716)
Revert "build(deps): bump github.com/moby/buildkit" by @rene (#5717)
readthedocs.yaml: Bump Ubuntu and Python versions by @rene (#5718)
zedagent: report EtcdSnapshot optional capability by @zedi-pramodh (#5719)
Fix an issue of edge-node clustering interface using logical-label by @naiming-zededa (#5720)
ci: use Eden workflow from 1.0.15 tag by @europaul (#5727)
.github: run cvewatch after build by @christoph-zededa (#5729)
nvidia: Improve CDI and .deb package processing by @rene (#5731)
mkdocs.yml: Fix broken links in documentation by @rene (#5733)
eden: Use backport branches instead of tagged releases by @europaul (#5736)
ci: cancel stale Go Tests runs on force-push by @rucoder (#5738)
build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 in /pkg/pillar by @dependabot[bot] (#5739)
Update go-jose to v4.1.4 by @eriknordmark (#5740)
build: add workflow to bootstrap eve-alpine-base on demand by @rucoder (#5741)
zedmanager: fix purge stuck when app was never activated by @eriknordmark (#5742)
rust: bump time to 0.3.47 in pkg/installer (fix CVE-2026-25727) and update rustc to 1.93.1 by @eriknordmark (#5744)
build: use unique hash for alpine-base bootstrap to avoid cache collisions by @rucoder (#5747)
Update eve-alpine hash by @eriknordmark (#5749)
build: add musl-cross-make cross-compiler build infrastructure by @rucoder (#5752)
Avoid issues when upgrading to checkpointed controllercerts by @eriknordmark (#5754)
Disable github actions to choose jumbo runners / increase build timeout by @christoph-zededa (#5756)
ci: fix empty with: block in cross-compilers workflow by @rucoder (#5757)
ci: add actionlint check for workflow files by @rucoder (#5758)
tests/eden: use EDEN_HOME for config isolation by @shjala (#5760)
pkg/uefi: enable parallel builds with -j/-n $(nproc) by @rucoder (#5761)
Fix an issue of cluster loadbalancing using logical-lable by @naiming-zededa (#5763)
alpine 3.22: Only update hash in pkg/recovertpm/Dockerfile by @eriknordmark (#5764)
eve-k pillar: upgrade longhorn-manager to v1.9.1 and fix BackupTargetName on failover by @andrewd-zededa (#5765)
build(deps): bump github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream from 1.6.10 to 1.7.8 in /pkg/pillar by @dependabot[bot] (#5766)
build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.80.0 to 1.97.3 in /pkg/pillar by @dependabot[bot] (#5767)
Fix and simplify broken leader election in Kubernetes cluster by @milan-zededa (#5773)
Update more alpine hashes and temporarily increase/jumbo build timeout by @eriknordmark (#5774)
Fix bootstrap config failing on missing ECDH cert by @milan-zededa (#5775)
build(deps): bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 in /eve-tools/bpftrace-compiler by @dependabot[bot] (#5776)
build(deps): bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 in /tools/get-deps by @dependabot[bot] (#5777)
Makefile: save QEMU PID to file by @shjala (#5779)
Makefile: Build eve-fw generic variant for evaluation platform by @europaul (#5785)
build(deps): bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 in /tools/dockerfile-from-checker by @dependabot[bot] (#5787)
Fix boot measurement on grub 2.12 by @rene (#5789)
pkg/gpt-tools: fix cgpt static build for riscv64 by @christoph-zededa (#5790)

Full Changelog: 16.11.0...16.12.0

@rene

What's Changed

Use Yetus container from lfedge/eve-yetus by @rene (#5397)
eve-k: Enable local-path storage for CLUSTER_TYPE_K3S_BASE by @andrewd-zededa (#5622)
eve-k: fix node delete if replicas list encounters crd get error by @andrewd-zededa (#5637)
github/workflows: Build x86 + arm64 Yetus images at once by @rene (#5646)
Fix: the issue of kubevirt feature backwards compatibity by @naiming-zededa (#5647)
Refactor and fix network tracing integration in controllerconn by @milan-zededa (#5648)
remove deitch from CODEOWNERS by @deitch (#5649)
pkg/fw: add Intel Wi-Fi 6E AX211 firmware for ASUS-NUC14SRK by @rucoder (#5651)
build(deps): bump github.com/docker/cli from 28.4.0+incompatible to 29.2.0+incompatible in /tools/get-deps by @dependabot[bot] (#5653)
build(deps): bump github.com/docker/cli from 28.3.3+incompatible to 29.2.0+incompatible in /eve-tools/bpftrace-compiler by @dependabot[bot] (#5655)
build(deps): bump github.com/docker/cli from 28.3.0+incompatible to 29.2.0+incompatible in /tools/dockerfile-from-checker by @dependabot[bot] (#5656)
go-tests.yml: remove pull request target by @europaul (#5657)
pkg/pillar: remove unsupported linuxkit build.yml fields by @rucoder (#5662)
Fix: cluster-ip should not be part of the source ip for SendOnIntf by @naiming-zededa (#5663)
README: update Onlogic FR201 installation and boot configuration by @sultatos (#5664)
pkg/fw: add Intel Wi-Fi 6E AX1690i/AX211 gf4 firmware for NUC12SNKi7 by @rucoder (#5666)
Makefile: let docker hash check ignore eden by @christoph-zededa (#5667)
pkg/storage-init: Fix CONFIG partition tmpfs size by @rene (#5668)
Update Eden to version 1.0.14 by @eriknordmark (#5671)
mini-yetus: fix Docker image tag to match CI by @rucoder (#5679)

Full Changelog: 16.10.0...16.11.0

@rucoder

What's Changed

build(deps): bump go.opentelemetry.io/otel/sdk from 1.38.0 to 1.40.0 in /tools/get-deps by @dependabot[bot] in #5642
eve: add "app" subcommands for user application management by @rucoder in #5629
build(deps): bump go.opentelemetry.io/otel/sdk from 1.38.0 to 1.40.0 in /eve-tools/bpftrace-compiler by @dependabot[bot] in #5643
pkg/xen-tools: remove unused firmware by @christoph-zededa in #5645
Support Remote-console and Edgeview-UI VNC for eve-k by @naiming-zededa in #5598

Full Changelog: 16.9.0...16.10.0

@andrewd-zededa

What's Changed

eve-k: set longhorn node-down-pod-deletion-policy by @andrewd-zededa (#5603)
SR-IOV: Fix API logic and add I350 NIC support by @uncleDecart (#5604)
Tune kube-controller-arg and kube-controller-manager-arg for cpu/net availability by @andrewd-zededa (#5605)
Fix for code scanning alert 1496: Use of a broken or weak cryptographic hashing algorithm on sensitive data by @eriknordmark (#5609)
edgeview: Fixed appearance of being able to open arbitrary files by @eriknordmark (#5610)
Fix for code scanning alert no. 75: Clear-text logging of sensitive information by @eriknordmark (#5612)
Fix 'Incorrect conversion between integer types' from CodeQL by @eriknordmark (#5613)
Disable LED disk enforcement by @rene (#5614)
mock all inventory commands in evalmgr tests by @rucoder (#5615)
pkg/pillar: update zededa/ghw library by @christoph-zededa (#5617)
zedmanager: drive purge state machine to completion in doUpdate by @rucoder (#5618)
Redact debug logging in execRawCmd to QMP by @eriknordmark (#5619)
pillar: nireconciler: fix "already connected" error on app re-activation by @rucoder (#5620)
Support kvm use virtio-vga device for higher resolution VNC console by @naiming-zededa (#5623) (backport of #5638)
pillar: NOHYPE direct-attach network interface passthrough by @rucoder (#5624)
grub: increase kernel ring buffer size to 2MB by @rucoder (#5627)
gpt-tools: support multiple sector sizes by @rene (#5628)
update kubevirt api kubevirt.io/api and client-go to v1.6.0 by @naiming-zededa (#5630)
010-eve-cgroup: skip soft_limit_in_bytes writes on RT kernels by @rucoder (#5635)
Fix "Incorrect conversion between integer types" for nCPUs by @eriknordmark (#5636)
kubevirt: Support kubevirt use virtio device by @naiming-zededa (#5638)
remove acrn hypervisor support by @christoph-zededa (#5640)
build(deps): bump go.opentelemetry.io/otel/sdk from 1.37.0 to 1.40.0 in /tools/dockerfile-from-checker by @dependabot[bot] (#5641)

Full Changelog: 16.8.0...16.9.0

@jsfakian

What's Changed

Improve or refine the Error statement in EVE installation logs by @jsfakian (#5585)
pkg/grub: get source from git instead of tar.gz by @europaul (#5589)
Makefile: Fail for unsupported hypervisor by @rene (#5592)
CI: Add automated CVE scanning gate for PRs by @shjala (#5593)
docs: update supported versions in SECURITY.md by @shjala (#5594)
newlog: fix ANSI escape code stripping by @europaul (#5596)
docs: Add comprehensive kernel documentation by @rucoder (#5599)
pkg/apparmor: bump to v4.1.3 by @christoph-zededa (#5601)
Fix linter warnings in shell scripts and Dockerfile syntax by @rucoder (#5607)
Kernel update - [amd64-generic] - Introduce NUMA support by @rucoder (#5608)

Full Changelog: 16.7.0...16.8.0

@europaul

What's Changed

fix: clean log w/o removing non-standard fields by @europaul in #5574
docs : update link to security architecture document in CONFIG.md by @shjala in #5576
Move wpa_supplicant into pillar and remove wlan container by @milan-zededa in #5575
pillar/usbmanager: use ghw library by @christoph-zededa in #5568
Fix edgeview encryption change issue from previous PR 5556 by @naiming-zededa in #5573
Load TLS root CA directly from /config instead of /persist/certs by @shjala in #5553
Do not download contenttree on all nodes by @zedi-pramodh in #5572
pkg/pillar: skip TestPciLongExists in unit tests by @shjala in #5583
eve-k: Handle k3s restarts in k3s components update path. by @andrewd-zededa in #5544
pkg/kvm-tools: delete by @christoph-zededa in #5586
eve-k: Accept an override k3s version for upgrades by @andrewd-zededa in #5531
pillar: make URL joins use url.JoinPath by @europaul in #5588
Makefile: add eden target for running Eden tests by @shjala in #5587
Add dynamic PCR policy support for disk key sealing by @shjala in #5398

Full Changelog: 16.6.0...16.7.0

Releases: lf-edge/eve

16.14.0

What's changed?

Contributors

Uh oh!

16.0.1-rc2

What's changed

Contributors

Uh oh!

16.13.0

What's changed?

Contributors

Uh oh!

16.0.1-rc1

What's changed?

Contributors

Uh oh!

16.12.0

What's changed?

Contributors

Uh oh!

16.11.0

What's Changed

Contributors

Uh oh!

16.10.0

What's Changed

Contributors

Uh oh!

16.9.0

What's Changed

Contributors

Uh oh!

16.8.0

What's Changed

Contributors

Uh oh!

16.7.0

What's Changed

Contributors

Uh oh!