Release 11.4.0

What's Changed

• GitHub actions: switch to buildjet native arm runners for build.yml by @uncleDecart in #3589
• github/workflows : fail test_suite_pr if PR images are not pushed yet by @shjala in #3572
• bump linuxkit to version that supports sbom; disable for now by @deitch in #3592
• .github/workflows/eden.yml: remove report_pr_publish job by @shjala in #3594
• pillar/volumemgr: Kick watchdog inside for loops by @rene in #3596
• Estimating Memory Overhead Before Domain Creation by @OhmSpectator in #3588
• usbmanager: fix read usb address for network cards by @christoph-zededa in #3597
• In Pillar, add new Makefile targets for Docker dev builds and shell access. by @OhmSpectator in #3575
• bump linuxkit version to include publishing packages by @deitch in #3604
• pillar/go.mod,go.sum,vendor: update eve-libs to latest by @rouming in #3605
• document a stage in the eve build process by @deitch in #3608
• Use same runners between jobs in build.yml for cache to work by @uncleDecart in #3609
• noop comments to force rebuilding of packages and get sboms by @deitch in #3595
• Disable k3s embedded containerd process, start k3s-containerd binary as external process by @andrewd-zededa in #3548
• makefile with manifest sbom by @deitch in #3613
• Create TPM eventlog entries from measure-config measurements by @shjala in #3607
• Disable split lock detection by @rene in #3611
• pillar: drop pillar-patches and switch to the lf-edge/go-qemu repo by @rouming in #3582
• pillar's Makefile: Improvements + allow multi-architecutre builds from host by @rene in #3600
• Add iucode_tool in preparation for CPU microcode integration by @rucoder in #3623
• Patch envelopes store pe usage by @uncleDecart in #3610
• apparmor: add apparmor profile for guacd by @shjala in #3586
• newlogd: Kick watchdog inside doMoveCompressFile() by @rene in #3615
• Fix yetus errors and remove deprecated documentation by @rene in #3622
• Stop trying to move config from read-only config partition by @milan-zededa in #3625
• Usbmanager spec.sh by @christoph-zededa in #3555
• Switch to swtpm for running TPM tests by @shjala in #3624
• Add x86 CPU microcode initrd for early loading by @rucoder in #3626
• Add Milan Lenco as maintainer by @eriknordmark in #3633
• add workflow to manually rebuild and push packages and eve by @deitch in #3634
• Spec.sh readd modems by @christoph-zededa in #3632
• update on-demand build by @deitch in #3638
• on-demand build workflow should use reusable workflows and include registry login by @deitch in #3640
• Remove DownloaderStatus Pending flags by @milan-zededa in #3627
• Improves logging for the chroot2 utility and introduces EVE_CONTAINER_NO_POWEROFF mode by @rouming in #3628
• refer to the latest release of the eden tests by @yash-zededa in #3636
• hypervisor/kvm: Add multidevs=remap option to 9P share by @rene in #3635
• Cleanup BaseOsConfig if controller removes it by @eriknordmark in #3637
• Add missing gnu-tar for Apple M series by @andrewd-zededa in #3642

Full Changelog: 11.3.0...11.4.0