build(deps): bump systemd/mkosi from 26 to 27

[dependabot]

Bumps systemd/mkosi from 26 to 27.

Release notes

Sourced from systemd/mkosi's releases.

mkosi v27

• Debug output (with --debug) will now show the duration of all steps.
• When booting an image it is always registered with user session machined instance.
• gzip compressed outputs have been made reproducible.
• Generate locales configured in /etc/locale.gen.
• PORTABLE_PREFIXES= can be set via Environment=.
• The special value default is now understood for Initrds=, so that it can be used in conjunction with custom initrds.
• Plugins for DNF can be configured via the environment variables MKOSI_DNF_DISABLE_PLUGINS and MKOSI_DNF_ENABLE_PLUGINS. This is meant for advanced use cases and is not supported further.
• A new option MakeScriptsExecutable= has been added to make scripts, that are not executable, executable instead of exiting with an error.
• A new option OutputSize= has been added to resize output images to that size after creation.
• Two new options OciLabels= and OciAnnotations= have been added to support adding custom labels and annotations for images using the OCI output.
• Default initrds are no longer built by default for images using the directory output.
• All cached images are removed when repository metadata will be synced to avoid partial upgrade scenarios.
• When booting images the hostname is no longer set via the kernel command line so as not to overwrite the hostname set via other means in the image.
• Support for using systemd-nsresourced's foreign UID range has been added for directory images via the new ForeignUIDRange=. This is now the only supported way for booting directory images unprivileged. Building images unprivileged without a sufficiently new systemd-nsresourced is still supported.
• If a mkosi/ directory exists and no output location is configured, the .mkosi-private will be put there.
• LocalMirror= can now be set for tools trees.
• A new setting DriveType= has been added to configures the disk type to use for the root disk when booting a virtual machine.
• Four new settings ElTorito=, ElToritoSystem=, ElToritoVolume=, and ElToritoPublisher= for use with systemd-repart's El Torito support have been added.
• mkosi box does not tint the background by itself anymore.
• The GitHub integration tests have been made runnable locally.
• Support for distribution-built UKIs have been fixed and they are picked up as /usr/lib/modules/<kver>/vmlinuz*.efi if a signed bootloader or UnifiedKernelImages=signed is requested.
• The update-grub trigger of APK is disabled for postmarketOS if /etc/update-grub.conf does not exist. If you define the file yourself, you must set disable_trigger=1 yourself, if you pull in the grub package.
• A new option ToolsTreeSnapshot was added, which defaults to the value of the regular Snapshot= setting if the same distribution is used for the image and the tools tree.

Commits

• 4736cd8 Release 27
• d58016c Merge pull request #4431 from behrmann/morenews
• 7bca598 action: support container-based self-hosted runners
• 97f305b action: make shell style consistent
• dd7140c action: only use apk version from API if non-empty
• 2cfe0ce news: update NEWS
• e6ce28d Merge pull request #4375 from behrmann/update-apk
• 08c86a2 action: bump fallback APK version
• cc0fcef action: reduce timeouts and number of API calls
• f33cc45 Add ToolsTreeSnapshot= for pinning the default tools tree
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)