CAPI Scaleway 0.5.0

Features

• The macOS image builder fleet now joins the same CAPI-managed lifecycle as the other macOS fleets. You can scale builders with kubectl scale or helm upgrade instead of manually bootstrapping each host.
• Builder hosts register as Kubernetes Nodes and install a GitHub Actions self-hosted runner agent, so image-bake jobs run directly on the host Tart daemon.
• A new GHActionsRunner spec lets you declare GitHub App credentials via a Kubernetes Secret.
• The default macOS image is now macOS Tahoe 26.3 across all fleet templates, and the Helm chart adds a buildersFleet template (disabled by default).

Bug fixes

• Scaleway SSH key operations now include the project ID, so they work with project-scoped IAM policies.
• Host bootstrapping is more reliable: the bootstrap now manages the firewall anchor atomically, verifies the auto-login password is accepted, and restarts the login window with launchctl kickstart when the process is missing.
• The Tart kubelet now removes the cleanup finalizer from finished pods before treating them as terminal, so completed runner pods no longer get stuck in Terminating.