[ANNOUNCE] isar-cip-core v1.12

This is the hot summer release of isar-cip-core. We have 36 changesets, 
10 contributors, 66 files changed, 355 insertions(+), 255 deletions(-). 
That's a bit less than for the last release.

https://gitlab.com/cip-project/cip-core/isar-cip-core/-/commits/v1.12?ref_type=tags

The lower activity likely correlates with no major feature addition or 
rework in this release. However, we have quite some useful fixes and 
improvements in the details like more robust TPM enrollment during first 
boot, configurable device identity for the wfx binding, or custom mount 
options for encrypted filesystems. Dependencies were updated as well, of 
course, including support for EFI Boot Guard 0.22 and well as latest 
Isar. First steps have been taken to enable continuous testing of Debian 
sid, though this is going to be fully established only after this 
release. Check out the git history for more details.

Thanks a lot to all the contributors!

Jan


Adithya Balakumar (2):
      security-customizations: Hardening ssh configuration
      doc/README.factory-reset.md: Minor updates related to use cases and relevance to IEC 62443-4-2

Alperen Erdogan (2):
      swupdate-config-wfx: make device identity configurable
      doc: update wfx documentation for configurable device identity

Badrikesh Prusty (1):
      linux-cip: Update to 5.10.254-cip72, 6.1.170-cip55, 6.12.85-cip22

Felix Moessbauer (2):
      chore(factory-reset): make btrfs support optional
      add descriptions for dpkg-raw and initramfs-hook recipes

Gourav Singh (3):
      initramfs-crypt-hook: add configurable mount options for encrypted partitions
      tests: remount /var with exec after login for LAVA test jobs
      linux-cip: Update to 5.10.256-cip73, 6.1.173-cip56, 6.12.88-cip23, 4.19.325-cip130-rt47

Jan Kiszka (13):
      Update to kas 5.2
      linux-cip: Update to 4.19.325-cip131, 4.19.325-cip130-rt47, 5.10.252-cip71, 6.1.167-cip53[-rt29], 6.12.80-cip20
      efibootguard: Update to v0.22
      linux-cip: Update to 4.4.302-cip110, 6.1.169-cip54, 6.12.83-cip21
      Update Isar to 1.1-rc2
      linux-cip: Update cip-kernel-config revision
      linux-cip: Switch to out-of-tree PREEMPT-RT config fragment
      ci: Remove SQUAD support
      linux-cip: Update to 4.19.325-cip132 and 5.10.254-cip72-rt32
      linux-cip: Update to 4.4.302-cip111[-rt61] and 6.12.90-cip24
      linux-cip: Update to 4.4.302-cip112, 4.19.325-cip133, 6.12.92-cip25
      linux-cip: Update to 5.10.258-cip74 and 6.1.175-cip57[-rt30]
      linux-cip: Update to 4.19.325-cip134 and 6.12.94-cip26

Quirin Gylstorff (5):
      swupdate: Remove Debian build profile cross
      Use pipeline id instead of CI_COMMIT_REF_SLUG
      crypt-hook: Check if WATCHDOG_DEV is set and available
      scripts/submit_lava.sh: Add an timeout of 10 seconds to the SQUAD call
      Add missing MACHINE to install swupdate-config*

Sercan Sari (2):
      encrypt_partition: evict stale TPM2 SRK handle before enrollment
      tpm2_functions: verify PCR bank output instead of relying on quiet mode

Shivanand Kunijadar (4):
      Add the default kernel verions in cip-core-common.inc with extra weak
      Enable Debian Sid support
      Enable CI image build and test support for Sid
      Revise README files to reflect the latest changes

srinuvasan (2):
      shtab: mark package as arch-all
      Update Isar revision