v1.18.0

What's Changed

🛠 Breaking changes

• kuberesource: mount /contrast read-only by @burgerdev in #2244

🎁 New features

• coordinator: allow atomic manifest updates by @davidweisse in #2189
• kata.kernel-uvm: add AML sandbox by @katexochen in #2231
• treewide: auto-set GPU runtime class on pods requiring GPUs by @charludo in #2225
• cli/verify: recover coordinator configmapstore by @davidweisse in #2223

🐛 Bug fixes

• kuberesource: add memory limit for service-mesh by @burgerdev in #2220
• kata: ignore non-VFIO devices when creating annotations by @burgerdev in #2215
• imagestore: fix volatile store due to multiple possibly concurrent mounts by @charludo in #2222

🔧 Other changes

• cli/verify: expose latest transition on verify by @davidweisse in #2187
• kata.runtime: 3.26.0 -> 3.27.0 by @charludo in #2245

📖 Documentation

• docs: add node setup requirements by @burgerdev in #2234
• docs: explain cert lifetime and rotation by @burgerdev in #2237
• docs: add incident response doc by @burgerdev in #2235
• docs: warn about TDX module compatibility by @burgerdev in #2257
• docs: establishing trust into Contrast deployments by @burgerdev in #2246
• docs: add info about license by @thomasten in #2259

Full Changelog: v1.17.0...v1.18.0