OCPCLOUD-3099: Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.12.0 (2c7ff37) into main

.ci-operator.yaml

@@ -1,4 +1,4 @@
 build_root_image:
   name: release
   namespace: openshift
-  tag: rhel-9-release-golang-1.24-openshift-4.21
+  tag: rhel-9-release-golang-1.24-openshift-4.20

.github/ISSUE_TEMPLATE/add_new_machine_image.md

@@ -0,0 +1,38 @@
+---
+name: Onboard new machine images for latest Kubernetes version
+about: Create an issue to track tasks for onboarding new machine images of latest Kubernetes version 
+title: Onboard new machine images for Kubernetes version v<> 
+
+---
+
+/area provider/ibmcloud
+
+## Tasks
+
+- [ ] Build images using automation in [image-builder](https://github.com/kubernetes-sigs/image-builder) repository
+  - [ ] VPC
+  - [ ] PowerVS
+  - [ ] PowerVS with DHCP support
+
+- Test the images
+  - [ ] VPC
+  - [ ] PowerVS
+  - [ ] PowerVS with DHCP support
+
+- [ ] Update [documentation](https://cluster-api-ibmcloud.sigs.k8s.io/machine-images/)
+
+- [ ] Import the new images to VPC and PowerVS workspaces for CI
+
+- [ ] Update Kubernetes version in E2E [config files](https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud/tree/main/test/e2e/config)
+
+- [ ] Update [E2E script](https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud/blob/main/scripts/ci-e2e.sh) with latest image names
+
+
+**Notes**:
+* The format of the new image name should be as follows:
+  * VPC: capibm-vpc-{os-distribution}-
+  {os-version}-kube-v{k8s-version}
+    * ex: capibm-vpc-ubuntu-2404-kube-v1-32-3
+  * PowerVS: capibm-powervs-{os-distribution}-
+  {os-version}-{k8s-version}
+    * ex: capibm-powervs-centos-streams9-1-32-3

.github/ISSUE_TEMPLATE/cluster_api_version_update.md

@@ -20,7 +20,6 @@ Update cluster-api version
 Update Kubernetes version
 - [ ] [go.mod](https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud/blob/main/go.mod)
 - [ ] [Kubebuilder version](https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud/blob/main/Makefile#L84)
-- [ ] [scripts](https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud/blob/main/fetch_ext_bins.sh#L29)
 
 
 If Go version is bumped, update it in the following files

.github/ISSUE_TEMPLATE/release.md

@@ -15,6 +15,7 @@ After every CAPIBM major version release:
 - [ ] [Update release support data in docs](https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud/blob/main/docs/book/src/developer/release-support-guidelines.md)
 - [ ] [Update docs with reference to latest release](https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud/blob/main/README.md#compatibility-with-cluster-api-and-kubernetes-versions)
 - [ ] Update and add documentation link for new release branch in Netlify
+- [ ] Update capibmadm tool to the latest version after each new release
 - [ ] Add new presubmit job for latest release branch in [kubernetes/test-infra](https://github.com/kubernetes/test-infra/tree/master/config/jobs/kubernetes-sigs/cluster-api-provider-ibmcloud)
     - [ ] Update kubekins-e2e image to relevent Kubernetes version
 - [ ] Add E2E CI jobs for latest release branch in [ppc64le-cloud/test-infra](https://github.com/ppc64le-cloud/test-infra/blob/master/config/jobs/periodic/cluster-api-provider-ibmcloud/test-e2e-capi-ibmcloud-periodics.yaml)

.github/workflows/weekly-security-scan.yaml

@@ -13,19 +13,19 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        branch: [ main, release-0.10, release-0.9 ]
+        branch: [ main, release-0.11, release-0.10 ]
     name: Trivy
     runs-on: ubuntu-24.04
     steps:
     - name: Check out code
-      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag=v4.1.7
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # tag=v4.2.2
       with:
         ref: ${{ matrix.branch }}
     - name: Calculate go version
       id: vars
       run: echo "go_version=$(make go-version)" >> $GITHUB_OUTPUT
     - name: Set up Go
-      uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # tag=v5.0.2
+      uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # tag=v5.5.0
       with:
         go-version: ${{ steps.vars.outputs.go_version }}
     - name: Run verify security target