* main: (1223 commits)
  Standardize and auto add license headers for SQL files with pre-commit (#12071)
  pre-commit use colored text in the CI for `pass / fail / skipped` (#11977)
  ui(locales): remove duplicates and fix typos (#11872)
  pre-commit: auto add table of contents with `doctoc` (#11679)
  chore: rename workflow `linter.yml` to `pre-commit.yml` (#11647)
  engine-schema: upgrade path for 4.23.0 (#12048)
  Fixes:#7837: Add isolationMethods and vlan to TrafficTypeResponse (#8151)
  Svgs (#12051)
  Update GUI Kubernetes logo (#11895)
  Keeping consistency with other error messages. (#11649)
  enhancement: add instance info as Libvirt metadata (#11061)
  Add empty Provider value in Network/VPC Offering form (#11982)
  merge fix
  Updating pom.xml version numbers for release 4.23.0.0-SNAPSHOT
  Updating pom.xml version numbers for release 4.22.1.0-SNAPSHOT
  UI: fix typo Upload SSL certificate (#11869)
  api/test: fix storage pool update with only id (#11897)
  Updating pom.xml version numbers for release 4.22.0.0
  Handle null mountTimeout in RestoreBackupCommand (#11944)
  Fix the config 'powerflex.connect.on.demand' description (#11926)
  ...

Conflict resolution:
- build.yml, ci.yml, rat.yml, sonar-check.yml, main-sonar-check.yml: keep main's
  reworked concurrency/permissions blocks from the GitHub Actions refactor
  (#12774) and re-add the top-level DEVELOCITY_ACCESS_KEY env, matching main's
  formatting.
- codecov.yml: accept main's deletion; JaCoCo coverage now runs in the
  sonar-check workflows, which carry the env.

Signed-off-by: Gasper Kojek <gkojek@gradle.com>

Signed-off-by: Gasper Kojek <gkojek@gradle.com>

- develocity-maven-extension 1.21.4 -> 2.5.0
- common-custom-user-data-maven-extension 2.0 -> 2.4.0

CCUD 2.4.0 targets develocity-maven-extension 2.5.0, and both are
compatible with the Develocity 2026.2.x server. Verified locally with
`mvn -N validate`: both extensions load and the existing
.mvn/develocity.xml is read and accepted unchanged.

Also drop DEVELOCITY_ACCESS_KEY from ui.yml and pre-commit.yml, which do
not run Maven.

Signed-off-by: Gasper Kojek <gkojek@gradle.com>

Signed-off-by: Gasper Kojek <gkojek@gradle.com>

Signed-off-by: Gasper Kojek <gkojek@gradle.com>

* origin/main: (156 commits)
  Upgrade Netris SDK version to 1.1.0 since 24.0 (#14365)
  feature: instance boot group and readiness rules (#13907)
  dont show unathorized notification for prelogin (#14054)
  .github: Upgrade docker/login-action to fix ASF Allowlist failure (#14276)
  virtual router: Add route-maps to BGP peers for Routed Mode (#9964)
  Add pre-commit hook to validate dependabot.yml (#14107)
  Add the ASF Allowlist check workflow (#14113)
  Revert "VMware to KVM: cold (VDDK) and warm (CBT) migration into Ceph/RBD and Linstor, plus importVm adoption of existing RBD root volumes and Linstor root/data volumes (#13656)"
  VMware to KVM: cold (VDDK) and warm (CBT) migration into Ceph/RBD and Linstor, plus importVm adoption of existing RBD root volumes and Linstor root/data volumes (#13656)
  engine-schema: upgrade path for 24.0.0 (#14033)
  xenserver/xcpng: do not bypass secondary storage when copy volumes between pools (#13750)
  backport: Incremental NAS backup support for KVM (#13074) (#13877)
  storage: KVM - enable RBD/Ceph volume encryption support (#13556)
  backup: remove the powered-off precondition for all backup providers (#14094)
  Nas backup: Fix mount/unmount error handling and timeout in LibvirtRestoreBackupCommandWrapper (#14006)
  kvm: apply rbd_default_data_pool when creating volumes from templates on RBD (#13361)
  server: copy template details to vm instance details when import VM (#12793)
  marvin: use pycryptodome instead of PyCrypt (#13594)
  Packaging: accept normalized Marvin archive names (#13793)
  SharedFS: fix NPE when accessing systemvm templates for unsupported hypervisors (#13930)
  ...