build(deps): bump github.com/siderolabs/image-factory from 1.3.2 to 1.4.0

[dependabot]

Bumps github.com/siderolabs/image-factory from 1.3.2 to 1.4.0.

Release notes

Sourced from github.com/siderolabs/image-factory's releases.

v1.4.0

image-factory 1.4.0 (2026-07-20)

Welcome to the v1.4.0 release of image-factory!

Please try out the release binaries and report any issues at https://github.com/siderolabs/image-factory/issues.

Audit Logging

Image Factory now supports audit logging via a configurable sink. Two sinks are available: file and log. By default, no sink is configured. File sink writes audit log as JSON lines to a file configured via audit.file.path and rotates the log file based on the size. Log sink writes audit log to the standard log output.

Core Artifacts Namespace

Image Factory now supports setting namespace for core artifacts - an optional repository path prefix prepended to every image pulled from the core registry: the component images as well as the extension and overlay images discovered via the manifests. Previously only the registry host could be overridden, so pull-through caches which prefix the upstream repository path (e.g. a Harbor proxy-cache project) could not be used.

The prefix only affects pull references; extension identities (matched against schematics, the UI, and the meta API) are unchanged.

Disk Images

Image Factory now supports generating disk images with 4096 byte sector size (custom size), set via schematic customization.

Extra Extensions (enterprise only)

Image factory can now be configured with an extra extensions manifest image allowing to easily add custom extensions in addition to the official Sidero extensions.

Embedded Machine Configuration

Image Factory now supports embedding machine configuration into generated images starting with Talos version 1.2.0 onwards.

Secure Boot Disk Images

Image Factory now generates disk images with Secure Boot supporting automatically enrolling keys (with if-safe setting, enabled for VMs in setup mode).

... (truncated)

Changelog

Sourced from github.com/siderolabs/image-factory's changelog.

image-factory 1.4.0 (2026-07-20)

Welcome to the v1.4.0 release of image-factory!

Please try out the release binaries and report any issues at https://github.com/siderolabs/image-factory/issues.

Audit Logging

Image Factory now supports audit logging via a configurable sink. Two sinks are available: file and log. By default, no sink is configured. File sink writes audit log as JSON lines to a file configured via audit.file.path and rotates the log file based on the size. Log sink writes audit log to the standard log output.

Core Artifacts Namespace

Image Factory now supports setting namespace for core artifacts - an optional repository path prefix prepended to every image pulled from the core registry: the component images as well as the extension and overlay images discovered via the manifests. Previously only the registry host could be overridden, so pull-through caches which prefix the upstream repository path (e.g. a Harbor proxy-cache project) could not be used.

The prefix only affects pull references; extension identities (matched against schematics, the UI, and the meta API) are unchanged.

Disk Images

Image Factory now supports generating disk images with 4096 byte sector size (custom size), set via schematic customization.

Extra Extensions (enterprise only)

Image factory can now be configured with an extra extensions manifest image allowing to easily add custom extensions in addition to the official Sidero extensions.

Embedded Machine Configuration

Image Factory now supports embedding machine configuration into generated images starting with Talos version 1.2.0 onwards.

Secure Boot Disk Images

Image Factory now generates disk images with Secure Boot supporting automatically enrolling keys (with if-safe setting, enabled for VMs in setup mode).

... (truncated)

Commits

• efab38f release(v1.4.0): prepare release
• 9c64235 feat: add schematic owner validation
• ca87d23 fix: add single-flight around schematic factory
• d45b5ac docs: link to Image Factory Enterprise docs page
• 490a993 chore: bump pkgs revision to match talos v1.14.0-alpha.2
• f9ff935 chore: bump go pkgs
• 12cd647 feat: add llms.txt for better LLM usage
• f65960f fix: audit file defaults
• f26e5e2 feat: add audit log for authenticated requests
• beff6e2 feat: support registry namespace prefix for core artifacts
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: go. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Superseded by #120.