[mweibel]

What changed:

• Removed Python release tooling
• Added automated release pipeline with release attestations (SLSA/SBOM)
• Go 1.27.1, updated cloudscale-go-sdk v6 -> v10, refreshed all dependencies
• Makefile similar to CAPCS: Added standard targets (fmt, vet, lint-fix, govulncheck, docker-build), help output, and version metadata injection
• Improved Dockerfile: Multi-stage build with better layer caching and build args.
• Dedicated workflows for lint, test, govulncheck, and workflow validation
• Added docs/releasing.md (release process) and AGENTS.md (AI agent guidance)
• Added helpers/debug-ccm for automatic debug artifact generation when integration tests fail, updated helpers/run-in-test-cluster with some more debug helpers similar to how we did it in the CSI driver

[mweibel]

FYI release flow has been tested with pre-release v1.3.2-beta.1.

[alakae]

Additional changes on top of the original setup:

• Release workflow: restored what helpers/release did: config.yml attached to each release (the README installs from it), the kubectl apply command in the release notes, and moving :latest (highest full release only). Backports and pre-releases no longer become the "Latest" GitHub release.
• Docs: the test install now uses the released image, plus sections on failure recovery and backports.
• API client: back to oauth2.NewClient. The transport copied from CAPCS dropped proxy support. And I don't see a current need to change it.
• Lint: the integration tests are now linted (integration build tag), and the 28 existing findings are fixed.
• Security: Go 1.27.3, dependency bumps, alpine 3.23.7, grpc and etcd. govulncheck is clean.

Rebased onto main (force-pushed).

[alakae]

previous releases in this repo all used bare tags (i.e. 1.2.3 not v1.2.3). I have restored the old behavior, as I don't want to change this in a patch version.