UPDATECLI: Update cdi

[didactikbot]

Update cdi npins.

---

cdi Update

cdi npins update v1.65.0

ran shell command "set -e\nnix run nixpkgs#npins -- add --name containerized-data-importer github kubevirt containerized-data-importer --at v1.65.0\nnix-shell shell.nix --run \"buildCdi 'v1.65.0'\"\n"

v1.65.0

This release follows v1.64.0 and consists of 45 changes, contributed by
17 people, leading to 1421 files changed.

The source code and selected binaries are available for download at:
<https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.65.0>.

Pre-built CDI containers are published on Quay.io and can be viewed at:
<https://quay.io/repository/kubevirt/cdi-controller/>
<https://quay.io/repository/kubevirt/cdi-importer/>
<https://quay.io/repository/kubevirt/cdi-cloner/>
<https://quay.io/repository/kubevirt/cdi-uploadproxy/>
<https://quay.io/repository/kubevirt/cdi-apiserver/>
<https://quay.io/repository/kubevirt/cdi-uploadserver/>
<https://quay.io/repository/kubevirt/cdi-operator/>


Notable changes
---------------

- [PR #4010] Add hash validation for DataVolume HTTP/HTTPS import sources.
- [PR #4054] Inherit Storage Class for Scratch Space PVCs instead of using default sc
- [PR #4061] Snapshot clone no longer gets permanently stuck in CloneFromSnapshotSourceInProgress when the snapshot is not immediately ReadyToUse
- [PR #4032] RWX Capability for HPP Overlay
- [PR #4067] Set EnableServiceLinks=false on CDI worker pods to prevent "argument list too long" failures in namespaces with many Services.
- [PR #4056] CDI importer and uploader pods can now use a custom ServiceAccount by setting the annotation cdi.kubevirt.io/storage.pod.serviceAccountName on the DataVolume or PVC. Clone flows are not affected.
- [PR #4058] GCE persistent disk StorageProfile now supports RWO Filesystem.
- [PR #4052] Enhancement: use headless service for upload server
- [PR #4044] Add StorageProfile "Recognized" status condition, explaining if the provisioner or the storage class parameters are not recognized by CDI
- [PR #4033] fix: cdi-operator and cdi-deployment metrics-server now correctly inherit TLS options from the CDI TLSSecrutiyProfile.
- [PR #4039] Fix cert collection to include pem certs
- [PR #4046] BugFix: Use an uncached client for webhooks, cache only PVs with transform
- [PR #4040] Reduce DataVolume status update conflicts when multiple controllers act on the same resource by using patch instead of update
- [PR #4038] kubevirt_cdi_clone_pods_high_restart, kubevirt_cdi_import_pods_high_restart, kubevirt_cdi_upload_pods_high_restart and kubevirt_cdi_operator_up are deprecated in favor of cluster:kubevirt_cdi_clone_pods_high_restart:count, cluster:kubevirt_cdi_import_pods_high_restart:count, cluster:kubevirt_cdi_upload_pods_high_restart:count and cluster:kubevirt_cdi_operator_up:sum, in order to comply with the recording rules naming conventions.
- [PR #3991] Add provisioner-aware VolumeSnapshotClass selection and RWO access mode for DataImportCron
- [PR #4008] Enhancement: Expose advised restore size for cron snapshot sources cdi.kubevirt.io/storage.import.advisedRestoreSize
- [PR #4004] Maintenance: release-note tool refactored bash->go with added functionality
- [PR #4005] Refactor metrics docs
- [PR #4009] VDDK: Correctly check snapshot parent backing info for VirtualDiskFlatVer2BackingInfo and VirtualDiskRawDiskMappingVer1BackingInfo types.
- [PR #3841] BugFix: unset namespace selector on webhooks to allow cloud provider mutation
- [PR #3993] Build CDI with Bazel 6.5.0 and Go 1.24.0


Other changes
-------------

- [PR #4047] Update kubevirtci, 1.35 lanes
- [PR #4053] report failure earlier for node pull imports
- [PR #4075] tests/cloner_test: use patch instead of update to override minimumSupportedPvcSize annotation
- [PR #4071] Run go run ./robots/uploader -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../containerized-data-importer/WORKSPACE -dry-run=false
- [PR #4035] Enable go multi-module workspace
- [PR #4048] Bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 in /tools/release-notes
- [PR #4012] tests: stop using /dev/pvc hack
- [PR #4051] Update controller-gen to 0.17.2 in cdi builder container
- [PR #4049] Run go run ./robots/uploader -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../containerized-data-importer/WORKSPACE -dry-run=false
- [PR #4042] Update HPP-wffc manifest URL
- [PR #3883] Adjust test helper-images push according to arch compatibility
- [PR #4036] VDDK: wrap errors from TransferFile instead of just logging them
- [PR #4026] Set nosniff header on API calls to CDI API server
- [PR #4020] Run go run ./robots/uploader -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../containerized-data-importer/WORKSPACE -dry-run=false
- [PR #4016] Use random storageclass names in datavolume_test.go (#4015)
- [PR #4013] ci: fix cluster-sync don't fresh local image cache for kind provider
- [PR #3999] build: use gzip compression on pkg_tar
- [PR #3998] build: update to use PUSH_TARGETS to generate list of images for hack/push-container-manifest.sh
- [PR #3997] bazel-builder: add skopeo
- [PR #3994] keystore_test: fix flaky RSA key comparison by replacing DeepEqual
- [PR #3992] Run go run ./robots/cmd/uploader -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../containerized-data-importer/WORKSPACE -dry-run=false
- [PR #3990] Build: bump builder Bazel version to 6.5.0 and go version to 1.24.9
- [PR #3937] Bazel: move from rules_docker to rules_oci
- [PR #3980] Fix metric names linter to handle recording rules separately

Contributors
------------

17 people contributed to this release:

    1	Adam Litke <alitke@redhat.com>
    10	Adi Aloni <105346241+Acedus@users.noreply.github.com>
    8	Alex Kalenyuk <akalenyu@redhat.com>
    3	Alexander Wels <awels@redhat.com>
    1	Arnon Gilboa <agilboa@redhat.com>
    2	Aviv Litman <64130977+avlitman@users.noreply.github.com>
    3	Danny Sanatar <dsanatar@redhat.com>
    1	Elad Hazan <33450275+Hazanel@users.noreply.github.com>
    1	Howard Gao <hgao@redhat.com>
    1	Jeffrey Holm <jholm117@gmail.com>
    2	Matthew Arnold <5075485+mrnold@users.noreply.github.com>
    2	Noam Assouline <nassouli@redhat.com>
    1	Roni Rabinovitz <rrabinov@redhat.com>
    2	Thomas-David Griedel <griedel911@gmail.com>
    1	dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    2	halfcrazy <hackzhuyan@gmail.com>
    4	kubevirt-bot <kubevirtbot@redhat.com>

Additional Resources
--------------------
- Mailing list: <https://groups.google.com/forum/#!forum/kubevirt-dev>
- [How to contribute][contributing]
- [License][license]

[contributing]: https://github.com/kubevirt/containerized-data-importer/blob/main/hack/README.md
[license]: https://github.com/kubevirt/containerized-data-importer/blob/main/LICENSE

GitHub Action workflow link

---

Created automatically by Updatecli Options: Most of Updatecli configuration is done via its manifest(s). If you close this pull request, Updatecli will automatically reopen it, the next time it runs. If you close this pull request and delete the base branch, Updatecli will automatically recreate it, erasing all previous commits made. Feel free to report any issues at github.com/updatecli/updatecli. If you find this tool useful, do not hesitate to star our GitHub repository as a sign of appreciation, and/or to tell us directly on our chat!