build(deps): bump github.com/siderolabs/image-factory from 1.3.2 to 1.4.0

[dependabot]

Bumps github.com/siderolabs/image-factory from 1.3.2 to 1.4.0.

Release notes

Sourced from github.com/siderolabs/image-factory's releases.

v1.4.0

image-factory 1.4.0 (2026-07-20)

Welcome to the v1.4.0 release of image-factory!

Please try out the release binaries and report any issues at https://github.com/siderolabs/image-factory/issues.

Audit Logging

Image Factory now supports audit logging via a configurable sink. Two sinks are available: file and log. By default, no sink is configured. File sink writes audit log as JSON lines to a file configured via audit.file.path and rotates the log file based on the size. Log sink writes audit log to the standard log output.

Core Artifacts Namespace

Image Factory now supports setting namespace for core artifacts - an optional repository path prefix prepended to every image pulled from the core registry: the component images as well as the extension and overlay images discovered via the manifests. Previously only the registry host could be overridden, so pull-through caches which prefix the upstream repository path (e.g. a Harbor proxy-cache project) could not be used.

The prefix only affects pull references; extension identities (matched against schematics, the UI, and the meta API) are unchanged.

Disk Images

Image Factory now supports generating disk images with 4096 byte sector size (custom size), set via schematic customization.

Extra Extensions (enterprise only)

Image factory can now be configured with an extra extensions manifest image allowing to easily add custom extensions in addition to the official Sidero extensions.

Embedded Machine Configuration

Image Factory now supports embedding machine configuration into generated images starting with Talos version 1.2.0 onwards.

Secure Boot Disk Images

Image Factory now generates disk images with Secure Boot supporting automatically enrolling keys (with if-safe setting, enabled for VMs in setup mode).

... (truncated)

Changelog

Sourced from github.com/siderolabs/image-factory's changelog.

image-factory 1.4.0 (2026-07-20)

Welcome to the v1.4.0 release of image-factory!

Please try out the release binaries and report any issues at https://github.com/siderolabs/image-factory/issues.

Audit Logging

Image Factory now supports audit logging via a configurable sink. Two sinks are available: file and log. By default, no sink is configured. File sink writes audit log as JSON lines to a file configured via audit.file.path and rotates the log file based on the size. Log sink writes audit log to the standard log output.

Core Artifacts Namespace

Image Factory now supports setting namespace for core artifacts - an optional repository path prefix prepended to every image pulled from the core registry: the component images as well as the extension and overlay images discovered via the manifests. Previously only the registry host could be overridden, so pull-through caches which prefix the upstream repository path (e.g. a Harbor proxy-cache project) could not be used.

The prefix only affects pull references; extension identities (matched against schematics, the UI, and the meta API) are unchanged.

Disk Images

Image Factory now supports generating disk images with 4096 byte sector size (custom size), set via schematic customization.

Extra Extensions (enterprise only)

Image factory can now be configured with an extra extensions manifest image allowing to easily add custom extensions in addition to the official Sidero extensions.

Embedded Machine Configuration

Image Factory now supports embedding machine configuration into generated images starting with Talos version 1.2.0 onwards.

Secure Boot Disk Images

Image Factory now generates disk images with Secure Boot supporting automatically enrolling keys (with if-safe setting, enabled for VMs in setup mode).

... (truncated)

Commits

• efab38f release(v1.4.0): prepare release
• 9c64235 feat: add schematic owner validation
• ca87d23 fix: add single-flight around schematic factory
• d45b5ac docs: link to Image Factory Enterprise docs page
• 490a993 chore: bump pkgs revision to match talos v1.14.0-alpha.2
• f9ff935 chore: bump go pkgs
• 12cd647 feat: add llms.txt for better LLM usage
• f65960f fix: audit file defaults
• f26e5e2 feat: add audit log for authenticated requests
• beff6e2 feat: support registry namespace prefix for core artifacts
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: go. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.