Add 11.6 release notes

New week. New release

Signed-off-by: Tim Smith <[email protected]>

releases/2024-05-28-mondoo-11.6-is-out.md

@@ -0,0 +1,80 @@
+---
+slug: mondoo-11.6-is-out/
+title: Mondoo 11.6 is out!
+description: Announcing the 11.6 release of Mondoo, with FOO, BAR, BAZ, and more!
+author: Tim Smith
+author_title: Mondoo Core Team
+author_url: https://github.com/tas50
+tags: [release, mondoo]
+---
+
+## 🥳 Mondoo 11.6 is out! This release includes FOO, BAR, BAZ, and more!
+
+Get this release: [Installation Docs](https://mondoo.com/docs/cnspec/) | [Package Downloads](https://releases.mondoo.com/cnspec/) | [Docker Container](https://hub.docker.com/r/mondoo/cnspec)
+
+---
+
+## 🎉 NEW FEATURES
+
+### Fine grained cloud asset scanning
+
+DEETS
+
+### Space wide software vulnerability page
+
+DEETS
+
+## 🧹 IMPROVEMENTS
+
+### CIS Microsoft 365 Foundations Benchmark 3.1.0
+
+DEETS
+
+### Alpine 3.20 support
+
+DEETS
+
+### Fedora 41 CVE detection support
+
+DEETS
+
+### Oracle Unbreakable Enterprise Kernel CVE detection
+
+https://github.com/mondoohq/server/pull/8342
+
+### Improved Arista EOS support
+
+- New resource defaults
+- Expanded asset overview information
+- Grouping under network devices in inventory
+- `asset.runtime` is now `arista`
+
+### Resource improvements
+
+#### aws.eks.cluster
+
+- New `nodeGroups` field
+
+#### aws.eks.nodegroup
+
+- New resource for AWS EKS node groups
+
+#### aws.sqs.queues
+
+- New resource for [Amazon Simple Queue Service (SQS)](https://aws.amazon.com/sqs/) queues
+
+## 🐛 BUG FIXES AND UPDATES
+
+- Prevent the `tls.ciphers` resource from hanging if the server returns a [Hello Retry Request](https://www.rfc-editor.org/rfc/rfc8446#section-4.1.4).
+- Improve reliability of TLS scans by using a secp256r1 curve in the hello, which some servers require.
+- Scan all images in Amazon ECR registries, not just those with tags.
+- Improve rendering of CVEs with short descriptions.
+- Don't show the "Copy Table" button on the Asset Software tab when there is no table shown.
+- Add `asset.kind` value on Arista EOS devices.
+- Ensure HTTP Security do not apply to non-host systems that include a TLS certificate.
+- Group Arista EOS devices under "Network Devices" in the console inventory list.
+- Improve asset overview data for Arista EOS devices.
+- Fix incorrect CVE pagination on assets.
+- Fix display of remote code exploitation risk badges
+- Fix display of tool tips in light mode.
+- Fix sorting of CVEs and Advisories in the Assets pages.