v3.2.4

What's Changed

Highlights:

• Bumps kairos-agent to v2.15.5
• Processes datasources in all cases except UKI normal boot to prevent malicious actors from pluging USB sticks with additional configuration after installation (#3035)
• Fixes machine-id in alpine (#3066)
• Bumps k3s patch versions
• Various dependency version bumps (see below)

More:

• ⬆️ Update Update github/codeql-action action to v3.27.4 by @renovate in #3015
• ⬆️ Update Update aquasec/trivy Docker tag to v0.57.1 by @renovate in #3022
• ⬆️ Update Update slackapi/slack-github-action action to v1.27.1 by @renovate in #3016
• 🐧 Enable boot assesment for UKI by @Itxaka in #3034
• ⬆️ Update Update github/codeql-action digest to f09c1c0 by @renovate in #3014
• ⬆️ Update Update github/codeql-action action to v3.27.5 by @renovate in #3030
• ⬆️ Update Update module github.com/onsi/ginkgo/v2 to v2.22.0 by @renovate in #3031
• ⬆️ Update Update anchore/grype Docker tag to v0.85.0 by @renovate in #3033
• ⬆️ Update Update kairos-io/linting-composite-action action to v0.0.10 by @renovate in #3021
• Remove enki references from the Earthfile and pipelines by @jimmykarily in #3042
• ⬆️ Update Update dependency go to v1.23.4 by @renovate in #3047
• ⬆️ Update Update github/codeql-action action to v3.27.6 by @renovate in #3048
• Bump auroraboot to v0.4.0 to fix root permission to 755 by @jimmykarily in #3051
• Bump auroraboot image by @jimmykarily in #3055
• Use cached image again (now that we pushed 1.23) by @jimmykarily in #3058
• ⬆️ Update Update module github.com/mudler/edgevpn to v0.28.4 by @renovate in #3023
• ⬆️ Update Update github/codeql-action action to v3.27.7 by @renovate in #3071
• Add missing package that makes debian:testing unbootable by @jimmykarily in #3074
• Bump framework to 2.14.5 by @jimmykarily in #3075
• Bump framework and auroraboot image by @jimmykarily in #3077
• Downgrade kairos-agent by bumping framework by @jimmykarily in #3082
• Bump framework to downgrade k3s to non-rc versions by @jimmykarily in #3083
• Log files no longer have hardcoded names, use a glob for the test by @jimmykarily in #3078
• Install systemd-cryptsetup only in debian testing by @jimmykarily in #3084
  Full Changelog: v3.2.3...v3.2.4