Bump version to 3.x series for code signing certificate update

- Update version.txt from 2.0.90 to 3.0.0
- Update boot_version from 2.x to 3.x in defaults/main.yml
- Update hardcoded version references in script/build_release
- Update example in user_overrides.yml
- Add 3.0.0 changelog entry with breaking change notice
- Users with 2.x bootloaders will auto-upgrade to 3.x on boot

IMPORTANT: Updated binaries should be downloaded to pull latest
netboot.xyz with updated code signing certificates embedded for
image signature verification.

CHANGELOG.md

@@ -3,7 +3,15 @@
 
 All notable changes to this project will be documented in this file.
 
-## [2.0.90] - Unreleased
+## [3.0.0] - Unreleased
+
+### Changed
+
+- **BREAKING**: Updated embedded certificates used for image signature verification in iPXE bootloaders
+- Users with 2.x bootloaders will be automatically upgraded to 3.x on first boot
+- Bumped major version to 3.x series due to code signing certificate updates requiring bootloader update
+
+## [2.0.90] - 2025-01-24
 
 ## [2.0.89] - 2025-11-08
 

roles/netbootxyz/defaults/main.yml

@@ -1,6 +1,6 @@
 boot_domain: boot.netboot.xyz
 boot_timeout: 300000
-boot_version: 2.x
+boot_version: 3.x
 bootloader_disks:
 - netboot.xyz
 bootloader_http_enabled: true

script/build_release

@@ -2,8 +2,8 @@
 set -e
 
 TYPE=$1
-HARD_RELEASE="2.x"
-HARD_RC="2.x-RC"
+HARD_RELEASE="3.x"
+HARD_RC="3.x-RC"
 DEV_URL="dev.boot.netboot.xyz"
 STAGING_URL="staging.boot.netboot.xyz"
 PROD_URL="boot.netboot.xyz"
@@ -24,7 +24,7 @@ elif [[ "${TYPE}" == "release" ]]; then
   BOOT_VERSION=$(cat version.txt)
   BOOT_DOMAIN="${PROD_URL}/${BOOT_VERSION}"
 elif [[ "${TYPE}" == "rolling" ]]; then
-  HARD_RELEASE="2.x"
+  HARD_RELEASE="3.x"
   PROD_URL="boot.netboot.xyz"
 fi
 

user_overrides.yml

@@ -14,7 +14,7 @@ make_num_jobs: 1
 # boot_domain: boot.mysitename.com
 
 # set boot version
-# boot_version: "2.x"
+# boot_version: "3.x"
 
 # bootloader_tftp_enabled: false
 # bootloader_https_enabled: true

version.txt

@@ -1 +1 @@
-2.0.90
+3.0.0