Cluster API is now using Golang 1.26, CR v0.24, CT v0.21
Improve the project security posture and increase its capability to deal with CVEs from direct/indirect dependencies
- Introduced dedicated Golang module for API types (#13762)
  - This new API module ensures consumers of the API types
    - Stronger compatibility guarantees.
    - Considerably smaller and tightly controlled dependency tree, thus reducing exposure to CVEs from dependencies.
- Formalization of policies and rules for Golang version bump, allowing a better response to Golang CVEs.
- See also the wider effort about code organization proposal + (#13910).
Enable safe joining of nodes on older kubernetes versions with kubeadm (#13433)
- This feature removes a constraint preventing scale up, remediation and autoscaling of worker nodes during cluster rollouts,
  thus allowing future improvements like support for independent worker versions in cluster topology.
Improved observability on upgrades, Kubernetes version in-use and runtime extensions errors.
- Surface upgrade plan in cluster status (#13923)
- Surface aggregated machine versions in status (#13341)
- Surface Runtime Extension errors in cluster conditions (#13813)
More work to improve robustness and reliability of controllers
- Improve forward etcd leadership in KCP, allowing the system to better handle partial failures during control plane machine deletion (#13848)
- Tolerate missing InfraTemplates during control plane machine deletion, allowing the system to tolerate accidental resource deletion (#13558)
- Allow KCP remediation of unhealthy machines during intermediate steps of chained upgrades (#13869)
- KCP is now able to cleanup not started etcd members after a machine is remediated (#13685)
- Implement stale controller mitigation in all the relevant controllers (#13720, #13737, #13730)
- Allow remediation of unhealthy Machines managed by old MachineSets during in-place updates (#13886)
- Perform draining and volume detachment once until completion (#11590)
- Use regular patch instead of SSA to patch Cluster in topology controller (#13760)
More work for reducing Cluster API memory footprint and for improving performance at scale
- Introduce options for cache tuning in ClusterCache clients, use those options to better control memory footprint in core CAPI, CABPK and KCP (#13780, #13820)
- Implement managedFields interning (#13807)
Misc:
- Allow patching of metadata.{labels,annotations} through ClusterClass patches (#13924)
- Kubernetes version validation now enforces strict semver compatibility (#13874)
- Several changes to reduce E2E test durations while we keep adding new tests and improving test coverage of the existing ones.
- Add experimental clusterctl convert command (#12843)

Deprecation Warning

Important:

The v1beta1 API version in core Cluster API, CABPK and KCP is on track to be unserved in CAPI v1.16. All the consumers of this API version should migrate to v1beta2 ASAP.
- Utils for the Cluster API v1beta1 condition types (condition helpers, patch helper etc.) will be removed as a next step.
- All the status.deprecated fields existing in v1beta2 types (used for v1beta1 down conversions) types will be removed as a next step.
Support for the Cluster API v1beta1 contract versions is on track to be dropped in CAPI v1.16. Provider should start implementing the v1beta2 contract ASAP.

Removal of Docker* API resources will happen in CAPI v1.15. All the consumers of these API resources should migrate to Dev* API resources ASAP.

NOTE: CAPD is considered a test provider, API deprecation period does not apply

For additional details for providers, please take a look at Cluster API v1.13 compared to v1.14.

Changes since v1.13.0

📈 Overview

258 new commits merged
4 breaking changes ⚠️
28 feature additions ✨
28 bugs fixed 🐛

⚠️ Breaking Changes

CAPD: Mark docker resources as deprecated (#13557)
Dependency: Bump to controller-runtime v0.24 & controller-tools v0.21 (#13651)
Machine/MachinePool/MachineSet/MachineDeployment/Cluster: Fix version validation in webhooks (#13874)
Misc: Fix minor goroutine leak in util/cache after controller shutdown (#13487)

✨ New Features

API: Introduce separate API module (#13762)
API: Move OpenAPI schema out of the api package to avoid direct dependency on kube-openapi in the api module (#13825)
API: Surface aggregated machine versions in status (#13341)
Bootstrap: Write kubeadm control plane version file for workers to use to fetch the matching kubeadm binary (#13433)
CAPD: Introduce per-reconciler concurrency flags in CAPDev (#13740)
CAPD: Migrate ClusterClass changes e2e test from the docker to the in-memory backend (#13764)
CAPD: Migrate templates to use Dev* instead of Docker* (#13741)
CI: Remove YEAR from copyright header boilerplate (#13889)
Cluster: Use regular patch instead of SSA to patch Cluster in topology controller (#13760)
ClusterCache: Expose and use DefaultTransform on CacheOptions (#13780)
ClusterCache: Use DefaultTransform in core CAPI, CABPK and KCP (#13820)
ClusterClass/KCP/MachineSet: Implement stale controller mitigation in KCP / MS / Cluster topology controller (#13737)
ClusterClass: Allow patching of metadata.{labels,annotations} through ClusterClass patches (#13924)
clusterctl: Add cluster-api-provider-kubeswift to the built-in infrastructure provider list (#13946)
clusterctl: Add configuration ExternallyProvisioned for clusterctl (#13739)
clusterctl: Add experimental clusterctl convert command (#12843)
Dependency: Bump Go 1.26 (#13623)
e2e: Migrate ClusterClass rollout e2e test from the docker to the in-memory backend (#13806)
e2e: Migrate ClusterClass upgrade with different NS e2e test from the docker to the in-memory backend (#13885)
e2e: Migrate e2e tests from using Docker* resources to Dev* resources (#13647)
e2e: Migrate test extension to use Dev* instead of Docker* (#13716)
e2e: Update in-place updating a workload cluster e2e test to use in-memory backend (#13895)
e2e: Use in-memory template for clusterctl upgrade tests (#13866)
KCP: Improve forward etcd leadership (#13848)
MachineDeployment/util: Stale controller mitigation in reconcile wrapper & MD controller, enable store & fifo informer metrics (#13720)
Misc: Implement managedFields interning (#13807)
Misc: Implement new code structure (#13894)
Release: Prepare main branch for v1.14 development (#13617)

🐛 Bug Fixes

CAPD: Fix a panic in CAPDev cache.Get() (#13959)
CAPD: Fix CAPD flakes (#13757)
CAPD: Fix E2E host port binding lookup (#13627)
CAPIM: Fix deadlock in in-memory server (#13971)
CI: Fix verify docker images arch (#13922)
ClusterClass: Fix Machine taint propagation in the Cluster topology controller for the v1beta1 contract (#13991)
clusterctl: Detect cert-manager image changes during upgrade (#13850)
clusterctl: Fix v1beta1 describe output stream (#13893)
clusterctl: Raise management cluster client QPS and Burst (#13875)
clusterctl: Reject incomplete GitHub release asset URLs (#13909)
clusterctl: Skip update check for clusterctl completion (#13653)
clusterctl: Trim whitespace in --show-conditions filters (#13897)
Dependency: Fix CVE-2026-39883 (#13571)
Devtools: Fix Grafana deployment (#13998)
Devtools: Fix parallel build of binaries in Tiltfile (#13995)
Devtools: Fix Tilt kube-state-metrics deployment (#13677)
e2e: Fix ClusterClass rollout test with k8s latest (#13881)
e2e: Fix PrettyPrint in WaitForControlPlaneToBeReady (#13843)
e2e: Fix self-hosted test (#13778)
KCP: Fix failing TestKubeadmControlPlaneReconciler_reconcileEtcdMembers (#13717)
KCP: Fix KCP in-place update with InfraMachine webhooks with immutability validation (#13640)
KCP: KCP deletion should tolerate missing InfraTemplates (#13558)
Machine/Bootstrap: Perform draining and volume detachment once until completion (#11590)
MachineDeployment: Fix nil pointer panic when paused with no matching MachineSet (#13827)
MachineSet: Delete unhealthy Machines of old MS during in-place updates (#13886)
MachineSet: Fix retry to remove finalizer in MS topology reconciler (#13993)
Release: Revert unset GOCACHE env var (#13732)
Testing: Fix TestHealthCheckTargets flake (#13860)

🌱 Others

API/Runtime SDK/IPAM/MachinePool/MachineSet/MachineDeployment: Fix typos in generated CRD descriptions (#13641)
API: Adjust IsMachineDeploymentUpgrading to detect in-place upgrades (#13876)
API: Follow-ups for Surface aggregated machine versions in status (#13871)
API: Surface upgrade plan in cluster status (#13923)
Bootstrap: Limit size of files generated from templates (#13927)
CABPK: Prevent CABPK to override controlling ownerRef for bootstrap secrets (#13937)
CABPK: Use ClusterClass with RuntimeSDK in kubeadm join old Node e2e test & fix e2e test failures (#13759)
CAPD: Add support for controller restart to in-memory backend (#13595)
CAPD: Only add finalizer after InfraMachine has owner in CAPDev (#13714)
CAPD: Partially revert fix self-hosted test (#13795)
CAPD: Refactor CAPDev reconciler (#13702)
CI: Add cron buckets to prow generator (#13656)
CI: Add KCP infra adoption test (#13731)
CI: Add stable BuildKit cache mount IDs (#13930)
CI: Cleanup ./scripts folder (#13896)
CI: Cleanup golangci-lint excludes (#13891)
CI: Drop jobs on release-1.11 (#13593)
CI: Fix link in cloudbuild.yaml's (#13793)
CI: Fix linter findings in hack/tools (#13814)
CI: Harden git workflows (#13442)
CI: Make it possible to exclude CVEs with govulncheck (#13669)
CI: Migrate from import boss to depguard (#13873)
CI: Read permissions for pr-verify action (#13687)
CI: Replace deprecated gaurav-nelson/github-action-markdown-link-check with tcort fork (#13572)
CI: Revert "Migrate away from custom GitHub action approval workflow" (#13802)
CI: Stop running make lint-api multiple times in the GitHub action (#13824)
ClusterCache/Misc: Block ExecProvider/AuthProvider in ClusterCache, deprecate remote funcs (#13949)
ClusterCache: Cleanup ClusterCache metrics for deleted Clusters (#13660)
ClusterClass: Increase MD/MS topology reconciler concurrency to 25 (#14008)
clusterctl/Misc: Avoid building if LDFLAGS returns error checking for SemVer (#13418)
clusterctl: Add cloudscale-ch-cloudscale provider (#13544)
clusterctl: Add oxide as an infrastructure provider (#13920)
clusterctl: Bump cert-manager to v1.20.3 (#13847)
clusterctl: Bump cert-manager to v1.21.0 (#13900)
clusterctl: Bump cert-manager to v1.21.1 (#14012)
clusterctl: Bump Cert-manager v1.20.2 (#13583)
clusterctl: Harden clusterctl move (#13928)
clusterctl: Improve clusterctl describe (#13753)
clusterctl: Print help on argument validation errors (#13808)
Control-plane: Add additional test cases for EnsureKubeadmPermissions (#13758)
Control-plane: Align scale validator to upstream (#13925)
Control-plane: Remove unused functions in internal/contract (#13826)
Control-plane: Verify etcd serving certificate against the etcd CA (#13765)
Dependency: 1.26.3 (#13661)
Dependency: Bump cel-go to v0.29.0 and grpc to v1.82.1 to address security advisories (#13976)
Dependency: Bump envtest 1.36 (#13657)
Dependency: Bump go to v1.26.4 (#13788)
Dependency: Bump Go to v1.26.5 (#13902)
Dependency: Bump golang/x/net to 0.55.0 (#13744)
Devtools: Add Headlamp to Tilt dev environment (#13538)
Devtools: Add log dashboard (#13594)
Devtools: Add Log dashboard to grafana (#13972)
Devtools: Bump headlamp CAPI plugin to 0.2.0-beta.0 (#13783)
Devtools: Bump setup-envtest to v0.24.1 (#13948)
Devtools: Enable prealloc linter & fix findings (#13711)
Devtools: Fix gosec lint findings (#13709)
Devtools: Improve metrics config (#13974)
Devtools: Move scripts under hack/scripts (#13877)
Devtools: Upgrade tempo & fix configuration (#13727)
Devtools: Verify mdbook sha (#13926)
e2e: Add options to runtimesdk e2e test (#13750)
e2e: Bump autoscaler version used for testing (#13919)
e2e: Bump Kubernetes version used for testing to v1.37.0-beta.0 (#13912)
e2e: Bump to kind main to fix e2e tests (#13767)
e2e: Bump to kind v0.32.0 (#13781)
e2e: Cleanup of ControlPlaneKubeletLocalMode handling in KCP adoption test (#13695)
e2e: Cleanup unused e2e test templates (#13713)
e2e: Drop syncer from in-memory server (#13992)
e2e: Enable opt-out of OwnerReferencesPermissionEnforcement admission controller & opt-out in clusterctl upgrade tests (#13819)
e2e: Fix E2E chained upgrade (#13618)
e2e: Give resource versions more time to become stable in e2e tests (#13882)
e2e: Improve handling of missing kind versions (#13642)
e2e: Increase clusterctl and e2e test dry-run cluster-template timeouts (#14014)
e2e: Make it easier to debug cert issues in clusterctl upgrade & self-hosted tests (#13966)
e2e: Rename in-memory e2e test flavor to in-memory-scale (#13936)
e2e: Start testing against Kubernetes v1.37 (#13614)
e2e: Start testing with K8s 1.36.0 (#13611)
e2e: Start testing with Kubernetes v1.36.0-rc.0 (#13564)
e2e: Start testing with Kubernetes v1.36.0-rc.1 (#13585)
e2e: Use only 1 worker machine per MD/MP in RuntimeSDK e2e test (#13872)
e2e: Use Runtime SDK for kcp-infra-adoption e2e test (#13809)
KCP: Add kubeadm cluster role (#13664)
KCP: Allow KCP remediation on chained upgrade intermediate steps (#13869)
KCP: KCP cleanup etcd members not started after a machine is remediated (#13685)
KCP: KCP enforce context deadline on connection stream (#13939)
KCP: Remove the check on the errors returned by etcd's status response (#13846)
KCP: Update RemoveEtcdMember to accept a *etcd.Member instead of a member name (#13784)
Machine: Drop KCP specific logic in Machine reconcileDelete (#13829)
Machine: Improve machine controller in-place update unit tests (#13682)
MachineDeployment: Extend stale controller mitigation in MD controller to MS deletion (#13730)
MachinePool: Unit testing to determine if provider allows individual machines to be deleted. (#13832)
MachineSet: Cleanup orphaned BoostrapConfigs / InfraMachines in MS controller (#13812)
MachineSet: Consider MS skip preflight check annotation from BootstrapConfigTemplate (#13938)
Misc: Add finalizer only after we got owner/cluster (#13747)
Misc: Correct typos in comments and error messages (#13756)
Misc: Delete unused nolint directives (#13710)
Misc: Fix static check lint errors (#13708)
Misc: Improve conversion webhook aliasing (#13828)
Misc: Replace reflect.Ptr with reflect.Pointer (#13707)
Misc: Stop setting TypeMeta in typed objects (part II) (#13890)
Misc: Update Kubernetes bump issue template (#13693)
Misc: Use pkgerrors as alias for github.com/pkg/errors & no alias for errors (#13963)
Release: Add Code Freeze date field to provider_issues.go to be used for beta communication (#13915)
Release: Add workaround for generate release notes (#13655)
Release: Optimize go build in make release-binary (#13499)
Release: Report consistency errors in release note draft (#13861)
Runtime SDK: Add 20 MB read limits for Runtime SDK client & server (#13944)
Runtime SDK: Do not follow redirects when calling runtime extensions (#13763)
Runtime SDK: Surface Runtime Extension errors in conditions (#13813)
Security: Updated gitignore (#13799)
Testing/Documentation/e2e: Improve support for OwnerReferencesPermissionEnforcement admission controller (#13805)
Testing: Add a test case to confirm that kcp can safely remove a member when it doesn't have a corresponding machine but it has no alarm (#13772)
Testing: Improve KCP remediation ack signal diagnostics and reset handling (#13736)
Testing: Make the clusterctl upgrade management cluster control plane count configurable (#13766)
Testing: Update version matrix for GitHub workflows for release 1.13 (#13578)
util: Deprecate util/record (#13981)
util: Refactor consistency store to allow defer without previous store registration (#13751)
util: Remove deprecated code (#13749)
util: Switch CRD migrator to use merge patch (#13792)

📖 Additionally, there have been 32 contributions to our documentation and book. (#13419, #13559, #13566, #13568, #13574, #13589, #13592, #13603, #13615, #13620, #13624, #13637, #13645, #13683, #13684, #13696, #13699, #13704, #13718, #13777, #13834, #13859, #13862, #13887, #13903, #13918, #13921, #13947, #13951, #13955, #13969, #14007)

Dependencies

Added

github.com/clipperhouse/displaywidth: v0.10.0
github.com/clipperhouse/stringish: v0.1.1
github.com/clipperhouse/uax29/v2: v2.6.0
k8s.io/streaming: v0.36.3

Changed

github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: v1.31.0 → v1.32.0
github.com/alecthomas/units: b94a6e3 → 0f3dac3
github.com/antlr4-go/antlr/v4: v4.13.0 → v4.13.1
github.com/cncf/xds/go: ee656c7 → dba9d58
github.com/coredns/corefile-migration: v1.0.31 → v1.0.34
github.com/coreos/go-oidc: v2.3.0+incompatible → v2.5.0+incompatible
github.com/coreos/go-systemd/v22: v22.5.0 → v22.7.0
github.com/envoyproxy/go-control-plane/envoy: v1.36.0 → v1.37.0
github.com/envoyproxy/protoc-gen-validate: v1.3.0 → v1.3.3
github.com/go-jose/go-jose/v4: v4.1.3 → v4.1.4
github.com/go-logr/logr: v1.4.3 → v1.4.4
github.com/godbus/dbus/v5: v5.0.4 → v5.1.0
github.com/golang-jwt/jwt/v5: v5.2.2 → v5.3.0
github.com/google/cel-go: v0.26.0 → v0.29.0
github.com/google/pprof: 294ebfa → 545e8a4
github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus: v1.0.1 → v1.1.0
github.com/grpc-ecosystem/go-grpc-middleware/v2: v2.3.0 → v2.3.3
github.com/mattn/go-runewidth: v0.0.16 → v0.0.19
github.com/moby/spdystream: v0.5.0 → v0.5.1
github.com/olekukonko/errors: v1.1.0 → v1.2.0
github.com/olekukonko/ll: v0.1.1 → v0.1.6
github.com/olekukonko/tablewriter: v1.0.9 → v1.1.4
github.com/onsi/ginkgo/v2: v2.28.1 → v2.32.0
github.com/onsi/gomega: v1.39.1 → v1.42.1
github.com/pmezard/go-difflib: v1.0.0 → 5d4384e
github.com/prometheus/common: v0.66.1 → v0.67.5
github.com/prometheus/procfs: v0.16.1 → v0.19.2
go.etcd.io/etcd/api/v3: v3.6.10 → v3.6.14
go.etcd.io/etcd/client/pkg/v3: v3.6.10 → v3.6.14
go.etcd.io/etcd/client/v3: v3.6.10 → v3.6.14
go.etcd.io/etcd/pkg/v3: v3.6.5 → v3.6.8
go.etcd.io/etcd/server/v3: v3.6.5 → v3.6.8
go.opentelemetry.io/contrib/detectors/gcp: v1.39.0 → v1.43.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc: v0.60.0 → v0.65.0
go.uber.org/zap: v1.27.1 → v1.28.0
golang.org/x/crypto: v0.50.0 → v0.53.0
golang.org/x/exp: 8a7402a → 944ab1f
golang.org/x/mod: v0.34.0 → v0.37.0
golang.org/x/net: v0.53.0 → v0.56.0
golang.org/x/sync: v0.20.0 → v0.22.0
golang.org/x/sys: v0.43.0 → v0.46.0
golang.org/x/telemetry: 579e4da → 59b4966
golang.org/x/term: v0.42.0 → v0.44.0
golang.org/x/text: v0.36.0 → v0.40.0
golang.org/x/time: v0.9.0 → v0.14.0
golang.org/x/tools/go/expect: v0.1.0-deprecated → v0.1.1-deprecated
golang.org/x/tools: v0.43.0 → v0.47.0
google.golang.org/genproto/googleapis/api: 9d38bb4 → afd174a
google.golang.org/genproto/googleapis/rpc: 9d38bb4 → afd174a
google.golang.org/grpc: v1.80.0 → v1.82.1
google.golang.org/protobuf: v1.36.11 → f2248ac
k8s.io/api: v0.35.3 → v0.36.3
k8s.io/apiextensions-apiserver: v0.35.3 → v0.36.3
k8s.io/apimachinery: v0.35.3 → v0.36.3
k8s.io/apiserver: v0.35.3 → v0.36.3
k8s.io/client-go: v0.35.3 → v0.36.3
k8s.io/cluster-bootstrap: v0.35.3 → v0.36.3
k8s.io/code-generator: v0.35.3 → v0.36.3
k8s.io/component-base: v0.35.3 → v0.36.3
k8s.io/klog/v2: v2.130.1 → v2.140.0
k8s.io/kms: v0.35.3 → v0.36.3
k8s.io/kube-openapi: 589584f → 43fb72c
k8s.io/utils: bc988d5 → b8788ab
sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.31.2 → v0.34.0
sigs.k8s.io/controller-runtime: v0.23.3 → v0.24.1
sigs.k8s.io/structured-merge-diff/v6: v6.3.2 → v6.4.2

Removed

github.com/cenkalti/backoff/v4: v4.3.0
github.com/gregjones/httpcache: 901d907
github.com/grpc-ecosystem/go-grpc-prometheus: v1.2.0
github.com/rivo/uniseg: v0.4.7

Thanks to all our contributors! 😊

`v1.13.5`

Compare Source

👌 Kubernetes version support

Management Cluster: v1.32.x -> v1.36.x
Workload Cluster: v1.30.x -> v1.36.x

More information about version support can be found here

Changes since v1.13.4

📈 Overview

13 new commits merged
2 bugs fixed 🐛

🐛 Bug Fixes

CAPD: Fix a panic in CAPDev cache.Get() (#13961)
ClusterClass: Fix Machine taint propagation in the Cluster topology controller for the v1beta1 contract (#13985)

🌱 Others

clusterctl: Add oxide as an infrastructure provider (#13934)
clusterctl: Bump cert-manager to v1.21.0 (#13917)
clusterctl: Bump cert-manager to v1.21.1 (#14011)
clusterctl: Harden clusterctl move (#13940)
Dependency: Bump golang.org/x/text to v0.39.0, cel-go to v0.29.0 and grpc to v1.82.1 to address security advisories (#13977)
e2e: Bump autoscaler version used for testing (#13942)
e2e: Bump Kubernetes version used for testing to v1.37.0-beta.0 (#13950)
e2e: Increase clusterctl and e2e test dry-run cluster-template timeouts (#14015)
KCP: Bump corefile-migration to v1.0.34 (#13958)
KCP: KCP enforce context deadline on connection stream (#14001)

📖 Additionally, there has been 1 contribution to our documentation and book. (#13935)

Dependencies

Added

Nothing has changed.

Changed

github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: v1.31.0 → v1.32.0
github.com/antlr4-go/antlr/v4: v4.13.0 → v4.13.1
github.com/cncf/xds/go: ee656c7 → dba9d58
github.com/coredns/corefile-migration: v1.0.32 → v1.0.34
github.com/envoyproxy/go-control-plane/envoy: v1.36.0 → v1.37.0
github.com/envoyproxy/protoc-gen-validate: v1.3.0 → v1.3.3
github.com/go-jose/go-jose/v4: v4.1.3 → v4.1.4
github.com/google/cel-go: v0.26.0 → v0.29.0
go.opentelemetry.io/contrib/detectors/gcp: v1.39.0 → v1.43.0
golang.org/x/exp: 8a7402a → 9b4947d
golang.org/x/mod: v0.36.0 → v0.37.0
golang.org/x/net: v0.55.0 → v0.56.0
golang.org/x/telemetry: 42602be → 59b4966
golang.org/x/text: v0.38.0 → v0.39.0
golang.org/x/tools: v0.45.0 → v0.47.0
google.golang.org/genproto/googleapis/api: 9d38bb4 → afd174a
google.golang.org/genproto/googleapis/rpc: 9d38bb4 → afd174a
google.golang.org/grpc: v1.80.0 → v1.82.1

Removed

Nothing has changed.

Thanks to all our contributors! 😊

`v1.13.4`

Compare Source

👌 Kubernetes version support

Management Cluster: v1.32.x -> v1.36.x
Workload Cluster: v1.30.x -> v1.36.x

More information about version support can be found here

Changes since v1.13.3

📈 Overview

7 new commits merged
4 bugs fixed 🐛

🐛 Bug Fixes

clusterctl: Raise management cluster client QPS and Burst (#13901)
e2e: Bump kind image in clusterctl v1.10 upgrade test to avoid containerd segv (#13854)
e2e: Fix PrettyPrint in WaitForControlPlaneToBeReady (#13844)
MachineSet: Delete unhealthy Machines on old MS during in-place updates (#13888)

🌱 Others

clusterctl: Bump cert-manager to v1.20.3 (#13851)
Dependency: Bump Go version to v1.25.12 (#13906)
Dependency: Bump golang.org/x/crypto version to v0.53.0 (#13864)

Dependencies

Added

Nothing has changed.

Changed

golang.org/x/crypto: v0.51.0 → v0.53.0
golang.org/x/mod: v0.35.0 → v0.36.0
golang.org/x/sync: v0.20.0 → v0.21.0
golang.org/x/sys: v0.45.0 → v0.46.0
golang.org/x/telemetry: be6f6cb → 42602be
golang.org/x/term: v0.43.0 → v0.44.0
golang.org/x/text: v0.37.0 → v0.38.0
golang.org/x/tools: v0.44.0 → v0.45.0

Removed

Nothing has changed.

Thanks to all our contributors! 😊

`v1.13.3`

Compare Source

👌 Kubernetes version support

Management Cluster: v1.32.x -> v1.36.x
Workload Cluster: v1.30.x -> v1.36.x

More information about version support can be found here

Changes since v1.13.2

📈 Overview

14 new commits merged
1 feature addition ✨
3 bugs fixed 🐛

✨ New Features

ClusterCache: Expose DefaultTransform on CacheOptions (#13785)

🐛 Bug Fixes

clusterctl: Skip update check for clusterctl completion (#13697)
KCP: Fix failing TestKubeadmControlPlaneReconciler_reconcileEtcdMembers (#13728)
Security: Grant RBAC to support OwnerReferencesPermissionEnforcement admission controller (#13817)

🌱 Others

CI: Bump gcb-docker-gcloud image (#13794)
Dependency: Bump go to v1.25.11 (#13789)
Dependency: Bump golang/x/net to 0.55.0 (#13746)
e2e: Bump to kind main to fix e2e tests (#13769)
e2e: Bump to kind v0.32.0 (#13781)
e2e: Bump to kind v0.32.0 (#13787)
e2e: Make the clusterctl upgrade management cluster control plane count configurable (#13771)
KCP: Update RemoveEtcdMember to accept a *etcd.Member instead of a member name (#13786)
Misc: Add finalizer only after we got owner/cluster (#13748)

📖 Additionally, there has been 1 contribution to our documentation and book. (#13719)

Dependencies

Added

Nothing has changed.

Changed

golang.org/x/crypto: v0.50.0 → v0.51.0
golang.org/x/mod: v0.34.0 → v0.35.0
golang.org/x/net: v0.53.0 → v0.55.0
golang.org/x/sys: v0.43.0 → v0.45.0
golang.org/x/telemetry: 579e4da → be6f6cb
golang.org/x/term: v0.42.0 → v0.43.0
golang.org/x/text: v0.36.0 → v0.37.0
golang.org/x/tools: v0.43.0 → v0.44.0

Removed

Nothing has changed.

Thanks to all our contributors! 😊

`v1.13.2`

Compare Source

👌 Kubernetes version support

Management Cluster: v1.32.x -> v1.36.x
Workload Cluster: v1.30.x -> v1.36.x

More information about version support can be found here

Changes since v1.13.1

📈 Overview

10 new commits merged
2 bugs fixed 🐛

🐛 Bug Fixes

Devtools: Fix Tilt kube-state-metrics deployment (#13678)
KCP: Fix KCP in-place update with InfraMachine webhooks with immutability validation (#13643)

🌱 Others

CI: Make it possible to exclude CVEs with govulncheck (#13671)
Dependency: Bump envtest 1.36 (#13658)
Dependency: Bumping corefile-migration to v1.0.32 (#13635)
Dependency: Go bump to 1.25.10 (#13666)
e2e: Start testing K8s 1.37 (#13638)
KCP: Add kubeadm cluster role (#13670)
KCP: KCP cleanup etcd members not started after a machine is remediated (#13688)

📖 Additionally, there has been 1 contribution to our documentation and book. (#13621)

Dependencies

Added

Nothing has changed.

Changed

github.com/coredns/corefile-migration: v1.0.31 → v1.0.32

Removed

Nothing has changed.

Thanks to all our contributors! 😊

`v1.13.1`

Compare Source

👌 Kubernetes version support

Management Cluster: v1.32.x -> v1.36.x
Workload Cluster: v1.30.x -> v1.36.x

More information about version support can be found here

Changes since v1.13.0

📈 Overview

4 new commits merged

🌱 Others

Dependency: Bump the all-go-mod-patch-and-minor group across 3 directories with 11 updates (#13601)
e2e: Start testing with K8s 1.36.0 (#13612)

📖 Additionally, there have been 2 contributions to our documentation and book. (#13606, #13616)

Dependencies

Added

Nothing has changed.

Changed

github.com/moby/spdystream: v0.5.0 → v0.5.1
k8s.io/api: v0.35.3 → v0.35.4
k8s.io/apiextensions-apiserver: v0.35.3 → v0.35.4
k8s.io/apimachinery: v0.35.3 → v0.35.4
k8s.io/apiserver: v0.35.3 → v0.35.4
k8s.io/client-go: v0.35.3 → v0.35.4
k8s.io/cluster-bootstrap: v0.35.3 → v0.35.4
k8s.io/code-generator: v0.35.3 → v0.35.4
k8s.io/component-base: v0.35.3 → v0.35.4
k8s.io/kms: v0.35.3 → v0.35.4
sigs.k8s.io/structured-merge-diff/v6: v6.3.2 → v6.4.0

Removed

Nothing has changed.

Thanks to all our contributors! 😊

`v1.13.0`

Compare Source

👌 Kubernetes version support

Management Cluster: v1.32.x -> v1.35.x
Workload Cluster: v1.30.x -> v1.35.x

More information about version support can be found here

Highlights

CAPI v1.13 is a release focused on stability, reliability and performances:

Bumped to Go 1.25, controller-runtime v0.23, k8s.io/* v0.35, controller-gen v0.20
KCP now allows to recover from different kind of failures as well as from multiple failures:
- Increased tolerance to unexpected state of control plane components (accidental node deletion, manual removal of etcd members, accidental deletion of kubeadm control plane labels, and more)
- Better visibility on common symptoms of kubeadm join errors (failed to promote etcd member, failed to apply kubeadm control plane labels and taints)
Multiple improvements to improve controllers memory and CPU footprint, performance and stability at scale

Note: Cluster API is only supported on conformant Kubernetes Clusters and contract-relevant provider resources (e.g. InfraCluster) have to be implemented as CRDs (i.e. not via an aggregated apiserver).

Other changes

The implementation of the Taint propagation proposal is now completed
Runtime Hooks are now embedding v1beta2 Cluster types
Machine now reports info about machine placement in the status.failureDomain field
rolloutAfter for control plane and MachineDeployments can now be controlled from Cluster.spec.topology
MachineWaitForVolumeDetachConsiderVolumeAttachments feature graduated to GA
PriorityQueue feature graduated to beta and it is now enabled by default
ReconcilerRateLimiting feature graduated to beta and it is now enabled by default
- Starting from this release ReconcilerRateLimiting feature also requires PriorityQueue to be enabled. This ensures that ReconcilerRateLimiting works consistently with controller runtime ExponentialBackoff.

Deprecation and Removals Warning

v1alpha3 and v1alpha4 apiVersions have been removed
Reminder: v1beta1 is on track to be unserved in CAPI v1.16
- Reminder: Provider should start implementing the v1beta2 contract ASAP.

For additional details for providers, please take a look at Cluster API v1.12 compared to v1.13.[GitHub issue #REPLACE ME](REPLACE ME)

Changes since v1.12.0

📈 Overview

279 new commits merged
10 breaking changes ⚠️
30 feature additions ✨
39 bugs fixed 🐛

📝 Proposals

Core: Update autoscaling from zero enhancement proposal with node labels and taints configuration clarification (#13308)

⚠️ Breaking Changes

API/Runtime SDK: Bump Runtime Hooks v1alpha1 types to core CAPI v1beta2 (#13200)
API: Remove v1alpha3 + v1alpha4 apiVersions (#13199)
CABPK: Remove deprecated --cluster-concurrency flag in CABPK (#13288)
CAPD: Mark docker resources as deprecated (#13565)
ClusterCache: Remove deprecated ClusterCache GetClientCertificatePrivateKey (#13156)
ClusterClass: Remove deprecated ShouldSkipImmutabilityChecks (#13291)
clusterctl: Remove deprecated --disable-grouping clusterctl describe cluster flag (#13289)
clusterctl: Remove deprecated provider CRD migration from clusterctl upgrade (#13290)
Dependency: Bump to controller-runtime main & controller-tools v0.20 (#13159)
Misc: Remove deprecated ParseMajorMinorPatchTolerant / ParseMajorMinorPatch (#13292)

✨ New Features

API: Backport newly introduced v1beta2 API fields to v1beta1 (#13455)
CABPK: Optimize cache configuration of CABPK & standardize cache/client setup (#13407)
CAPD: Implement DevMachinePools (#13346)
CAPD: Improve CAPD wait for multi-user target (#13514)
CAPD: Support externally managed LB (#13362)
Cluster: Only set ownerReference on InfraCluster/ControlPlane when Topology is defined (#13332)
ClusterCache: Add ClusterFilter to ClusterCache Options (#12665)
ClusterClass: Implement support for taints (#13192)
clusterctl: Allow overriding image name in clusterctl config (#13014)
Core: Optimize cache configuration of core CAPI (#13488)
Dependency: Bump Go to v1.25.5 (#13164)
Dependency: Bump to controller-runtime v0.23 (#13245)
Devtools: Add a flag to skip image preloading (#13143)
KCP/CABPK: Allow diskSetup to include partition layout (#11634)
KCP/MachineDeployment/Cluster: Add rolloutAfter to cluster.spec.topology (#13391)
KCP: Allow remediation of multiple failures in KCP (#13352)
KCP: Bump coredns/corefile-migration to v1.0.30 (#13282)
KCP: Implement support for machine taints (#13181)
KCP: Optimize cache configuration of KCP (#13460)
Machine: Add Machine status.failureDomain (#13266)
Machine: Promote MachineWaitForVolumeDetachConsiderVolumeAttachments feature to GA (#13293)
Metrics/e2e: Add infra CRDs to dashboards, improve/fix dashboards, enable native histograms (#13354)
Misc: Disable DWARF and symbol table to decrease binary/image size (#12856)
Misc: Enable PriorityQueue per default (#13171)
Misc: Promote ReconcileRateLimiting to beta (enabled per default) (#13373)
Misc: Tune controller concurrency and cache timeout for scale (#13496)
Release: Prepare main branch for v1.13 (#13174)
Testing: Add example / debug suite for envtest (#13453)
util: Extend conversion tests to cover the "no spec" case (#13409)
util: Refresh cache entries on cache hit in SSA caches (#13459)

🐛 Bug Fixes

API: Fix v1beta1 ControlPlane contract to handle .status.initialized correctly (#13186)
CAPD: Fix "Failed to exec DockerMachine bootstrap" errors in CAPD (#13447)
CAPD: Remove finalizers during deletion if ownerRef was never set for cluster controllers (#13239)
CAPIM: Extend CAPD in-memory backend to set CP taint to fix scale tests (#13187)
CAPIM: Fix in-memory watch unit test (#13464)
CI: Bump trivy to v0.69.2 to fix CI (#13387)
Cluster: Fix panic in Cluster conversion (#13383)
ClusterClass/KCP/MachineSet/MachineDeployment: Mitigate managedFields apiserver issue for SSA (#13338)
ClusterClass: Allow adding spec via ClusterClass JSON patches (#13225)
ClusterClass: Do not overwrite global http.DefaultClient TLSConfig (#13058)
ClusterClass: Fix upgradePlan computation in GetUpgradePlanFromClusterClassVersions (#13463)
Dependency: Bump dependencies to fix CVE GO-2026-4394 (go.opentelemetry.io/otel/sdk pkg) (#13372)
Dependency: Fix CVE-2026-39883 (#13573)
e2e: Add wait-resource-versions-{become,remain}-stable intervals to e2e config (#13263)
e2e: Clean up namespace in e2e tests (#13233)
e2e: Fix cross-ns scale test (#13309)
e2e: Fix goroutine & memory leak in inmemory provider (#13361)
e2e: Fix node-label calculation in test extension & fix upgrade test (#13356)
e2e: Fix WaitForMachinesReady interval (#13050)
e2e: Increase reconcile timeout for KCP & DockerMachine (#13093)
e2e: Only retry creating objects that failed (#13265)
e2e: Tolerate NotFound errors during Namespace deletion in scale test cleanup (#13439)
KCP/MachineSet: Preserve existing object names for backward compatibility with pre-v1.7 in-place updates (#13124)
KCP: Grant delete permissions to Secrets. (#13070)
KCP: KCP deletion should tolerate missing InfraTemplates (#13562)
KCP: Use errors.Errorf instead of errors.Wrapf since the err is nil (#13486)
Machine/MachineSet/MachineDeployment: Fix UpToDate calculation for rolloutAfter (#13404)
MachineSet: Use MachineSet template values in completeMoveMachine for in-place updates (#13059)
Misc: Fix bug while setting status for deprecated fields (#13336)
Runtime SDK: Improve client cert/key rotation of the RuntimeSDK client (#13213)
Testing/e2e: Fix unit test flakes, improve clusterctl download error in e2e tests (#13045)
Testing: Fix flaky by waiting for CRD finalizer processing (#13470)
Testing: Fix flaky TestClusterReconciler unit test (#13180)
Testing: Fix TestReconcile flake (#13255)
Testing: Fix webhook envtest tests for Kubernetes < v1.35 (#13170)
Upgrades: Remove conflicting rules field from aggregated ClusterRoles (#13490)
util: Fix a panic in conditions.Delete method if the sources condition list is empty (#13048)
util: Fix exponential backoff with ReconcilerRateLimiting (#13416)
util: Fix patchHelper unit test flakes (#13412)

🌱 Others

API: Deprecate custom Condition types (#13237)
API: Introduce conversion.MarshalDataUnsafeNoCopy to avoid unnecessary memory allocations during conversion (#13402)
API: Postpone date when we stop serving v1beta1 (#13394)
API: Relax validation for Machine .status.addresses to maximum of 128 instead of 32 items (#13060)
API: Relax validation for Machine .status.addresses to maximum of 256 instead of 128 items (#13395)
CAPD/CAPIM: Implement .status.failureDomain for DockerMachine & DevMachine (#13286)
CAPD: Implement pause for DockerMachinePool (#13445)
CAPD: Improve condition if CAPD Machine is not yet ready for bootstrap exec (#13461)
CAPD: Move RBAC for devmachinetemplates from main.go to controller.go (#13271)
CAPD: Reduce verbosity of CAPD exec log (#13493)
CAPD: Use select with time.After instead of time.Sleep (#13480)
CAPIM: Fix inMemory watch (#13229)
CI: Bump golangci-lint v2.7.0 (#13108)
CI: Bump Kubernetes version used for testing to v1.35.0-rc.0 (#13103)
CI: Bump Kubernetes version used for testing to v1.35.0-rc.1 (#13138)
CI: Drop security scan on 1.10 (#13454)
CI: Dump resources in scale test (#13232)
CI: Improve Fake API server (#13183)
CI: Inmemory APIserver fails for unsupported fieldSelectors (#13306)
CI: Migrate away from custom GitHub action approval workflow (#13533)
CI: Revive the debug endpoint for CAPDev in-memory (#13423)
CI: Use env test 1.35.0 (#13168)
ClusterCache: Remove stack traces from ClusterCache errors (#13396)
ClusterClass: Add validation in ClusterClass for CP MachineInfra (#13378)
ClusterClass: Fix test compute control plane version (#13287)
ClusterClass: Improve topology diff (#13166)
ClusterClass: Simplify GetUpgradePlanFromClusterClassVersions (#13276)
clusterctl: Add cloudscale-ch-cloudscale provider (#13567)
clusterctl: Bump cert-manager to v1.20.0 (#13482)
clusterctl: Bump cert-manager to v1.20.1 (#13515)
clusterctl: Bump cert-manager v1.19.4 (#13376)
clusterctl: Bump Cert-manager v1.20.2 (#13598)
clusterctl: Drop handling of old cert-manager annotation in clusterctl (#13202)
clusterctl: Update cert-manager to v1.19.3 (#13307)
clusterctl: Update to cert-manager v1.19.2 (#13277)
ClusterResourceSet: Remove ClusterResourceSet ensureKubernetesServiceCreated (#13158)
ClusterResourceSet: Set WithOwnedV1Beta1Conditions for ClusterResourceSet patch (#13267)
Community meeting: Add AndiDog as machine pool area reviewer (#13033)
Dependency: Bump go 1.25.7 (#13323)
Dependency: Bump Go to v1.24.11 (#13106)
Dependency: Bump Go to v1.25.6 (#13240)
Dependency: Bump go v1.25.8 (#13428)
Dependency: Bump go v1.25.9 (#13553)
Dependency: Bump go-github to v82 (#13296)
Dependency: Bump golang.org/x/net to v0.51 to fix CVE (#13392)
Dependency: Bump the all-go-mod-patch-and-minor group across 3 directories with 4 updates (#13582)
Dependency: Switch from docker to moby dependencies (#13545)
Devtools: Add additional_uncategorized_resources for Tilt (#13312)
Devtools: Add labels to cluster deployment form fields (#13441)
Devtools: Add other to prow job generator (#13537)
Devtools: Bump CAPI Visualizer to v1.5.0 (#13222)
Devtools: Enable native histograms in Grafana / Prometheus (#13304)
Devtools: Make kind image configurable via env var for make tilt-up (#13333)
Devtools: Updated dev observability stack (#13044)
e2e: 0 in e2e tests (#13429)
e2e: Add json struct tags to ContainerImage (#13130)
e2e: Add retry in test framework when getting manifest YAMLs (#13357)
e2e: Bump autoscaler version used for testing to v1.34.2 (#13102)
e2e: Bump autoscaler version used for testing to v1.35.0 (#13353)
e2e: Bump kind to v0.31.0 (#13162)
e2e: Bump Kubernetes version used for testing to v1.35.0 (#13151)
e2e: Bump to etcd-v3.6.6-0 (#13144)
e2e: Do not expect Machines for MachinePools not supporting Machines (#13071)
e2e: Drop handling for clusterctl < v1.7.2 in e2e tests & framework (#13347)
e2e: Drop unused e2e test template & handling for Kubernetes < v1.25 in e2e CC (#13348)
e2e: Extend test extension to improve test coverage (#13343)
e2e: Improve scale test for re-entrancy and improve observability stack (#13492)
e2e: Make clusterctl upgrade test to work when there are no machines (#13072)
e2e: Remove handling for Kubernetes <= v1.28 in clusterctl upgrade test (#13157)
e2e: Skip test using outdated docker client (#13125)
e2e: Small cleanup in the RuntimeSDK test (#13274)
e2e: Start testing against Kubernetes v1.36 (#13152)
e2e: Start testing with Kubernetes v1.36.0-beta.0 (#13513)
e2e: Start testing with Kubernetes v1.36.0-rc.0 (#13569)
e2e: Start testing with Kubernetes v1.36.0-rc.1 (#13587)
e2e: Use crane to pre-pull images instead of docker pull (#13113)
KCP: Drop unnecessary etcd call in KCP (#13330)
KCP: Fix flaky KCP test (#13374)
KCP: KCP should handle missing control plane label (#13466)
KCP: KCP should read only KCP machines (#13457)
KCP: KCP should report missing certificates (#13175)
KCP: KCP should report missing Node labels and taint (#13176)
KCP: Migrate from Requeue to RequeueAfter in kcp (#13028)
KCP: Remove live list Machine call in KCP (#13458)
KCP: Remove the ControlPlaneKubeletLocalMode for kubeadm 1.36 later (#13177)
Logging: Drop or reduce verbosity for noisy logs (#13420)
Logging: Log flags on controller startup (#13437)
Logging: Use klog.Obj in log messages (#13421)
Machine: Avoid unsetting nodeDeletionTimeoutSeconds during Machine deletion (#13401)
MachineHealthCheck: Decrease verbosity for MHC log entry (#13076)
MachineHealthCheck: Increase MHC rate limiting and filter events (#13422)
MachinePool: Fix reconcileDelete returning unnecessary error (#13481)
Misc: Increase default kube-api qps/burst (#13317)
Misc: Removing cluster-api-provider-nested as it is read-only (#13500)
Misc: Removing v1beta1 from admissionReviewVersions & conversionReviewVersions (#13190)
Runtime SDK: Add httpClientCache to runtime client (#13075)
Runtime SDK: Allow chained upgrade with runtimeSDK feature flag false (#13517)
Testing: Extend managedField mitigation unit test (#13450)
Testing: Improve error reporting of envtest CleanupAndWait (#13446)
Testing: Improve pod log streaming to avoid duplicate logs (#13410)
Testing: Increase envtest manager graceful shutdown timeout & print goroutines on error (#13443)
Testing: Simplify TestGetNode unit test (#13196)
Testing: Update version matrix for GitHub workflows for release 1.12 (#13049)
util: Add safeguard to patchHelper to avoid sending empty patches to the apiserver (#13403)
util: Export controller util (#13363)
util: Improve patch helper for no-op cases (#13364)
util: Optimise patch calls (#13367)
util: Reduce dep tree for util/patch (#13275)
util: Stop using patch helper when enforcing finalizers (#13365)

📖 Additionally, there have been 47 contributions to our documentation and book. (#12872, #12971, #13016, #13043, #13055, #13079, #13086, #13087, #13088, #13095, #13134, #13140, #13153, #13155, #13179, #13193, #13194, #13195, #13201, #13204, #13205, #13206, #13207, #13216, #13220, #13228, #13259, #13260, #13272, #13283, #13297, #13302, #13311, #13334, #13414, #13419, #13435, #13436, #13456, #13527, #13534, #13535, #13560, #13577, #13581, #13586, #13590)

Dependencies

Added

github.com/cenkalti/backoff/v5: v5.0.3
github.com/google/go-github/v82: v82.0.0
golang.org/x/tools/go/expect: v0.1.0-deprecated
golang.org/x/tools/go/packages/packagestest: v0.1.1-deprecated
gonum.org/v1/gonum: v0.17.0

Changed

cel.dev/expr: v0.24.0 → v0.25.1
cloud.google.com/go/compute/metadata: v0.6.0 → v0.9.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: v1.26.0 → v1.31.0
github.com/cncf/xds/go: 2f00578 → ee656c7
github.com/coredns/corefile-migration: v1.0.29 → v1.0.31
github.com/envoyproxy/go-control-plane/envoy: v1.32.4 → v1.36.0
github.com/envoyproxy/go-control-plane: v0.13.4 → v0.14.0
github.com/envoyproxy/protoc-gen-validate: v1.2.1 → v1.3.0
github.com/fatih/color: v1.18.0 → v1.19.0
github.com/go-jose/go-jose/v4: v4.0.4 → v4.1.3
github.com/golang/glog: v1.2.4 → v1.2.5
github.com/google/go-querystring: v1.1.0 → v1.2.0
github.com/google/pprof: f64d9cf → 294ebfa
github.com/grpc-ecosystem/grpc-gateway/v2: v2.26.3 → v2.28.0
github.com/onsi/ginkgo/v2: v2.27.2 → v2.28.1
github.com/onsi/gomega: v1.38.2 → v1.39.1
github.com/prometheus/client_golang: v1.22.0 → v1.23.2
github.com/prometheus/common: v0.62.0 → v0.66.1
github.com/prometheus/procfs: v0.15.1 → v0.16.1
github.com/spf13/cobra: v1.10.1 → v1.10.2
github.com/spiffe/go-spiffe/v2: v2.5.0 → v2.6.0
github.com/valyala/fastjson: v1.6.4 → v1.6.10
go.etcd.io/bbolt: v1.4.2 → v1.4.3
go.etcd.io/etcd/api/v3: v3.6.6 → v3.6.10
go.etcd.io/etcd/client/pkg/v3: v3.6.6 → v3.6.10
go.etcd.io/etcd/client/v3: v3.6.6 → v3.6.10
go.etcd.io/etcd/pkg/v3: v3.6.4 → v3.6.5
go.etcd.io/etcd/server/v3: v3.6.4 → v3.6.5
go.opentelemetry.io/auto/sdk: v1.1.0 → v1.2.1
go.opentelemetry.io/contrib/detectors/gcp: v1.34.0 → v1.39.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.58.0 → v0.65.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.34.0 → v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.34.0 → v1.43.0
go.opentelemetry.io/otel/metric: v1.35.0 → v1.43.0
go.opentelemetry.io/otel/sdk/metric: v1.34.0 → v1.43.0
go.opentelemetry.io/otel/sdk: v1.34.0 → v1.43.0
go.opentelemetry.io/otel/trace: v1.35.0 → v1.43.0
go.opentelemetry.io/otel: v1.35.0 → v1.43.0
go.opentelemetry.io/proto/otlp: v1.5.0 → v1.10.0
go.yaml.in/yaml/v2: v2.4.2 → v2.4.3
golang.org/x/crypto: v0.45.0 → v0.50.0
golang.org/x/mod: v0.29.0 → v0.34.0
golang.org/x/net: v0.47.0 → v0.53.0
golang.org/x/oauth2: v0.33.0 → v0.36.0
golang.org/x/sync: v0.18.0 → v0.20.0
golang.org/x/sys: v0.38.0 → v0.43.0
golang.org/x/telemetry: 078029d → 579e4da
golang.org/x/term: v0.37.0 → v0.42.0
golang.org/x/text: v0.31.0 → v0.36.0
golang.org/x/tools: v0.38.0 → v0.43.0
google.golang.org/appengine: v1.6.7 → v1.6.5
google.golang.org/genproto/googleapis/api: a0af3ef → 9d38bb4
google.golang.org/genproto/googleapis/rpc: a0af3ef → 9d38bb4
google.golang.org/grpc: v1.72.3 → v1.80.0
google.golang.org/protobuf: v1.36.7 → v1.36.11
gopkg.in/evanphx/json-patch.v4: v4.12.0 → v4.13.0
k8s.io/api: v0.34.2 → v0.35.3
k8s.io/apiextensions-apiserver: v0.34.2 → v0.35.3
k8s.io/apimachinery: v0.34.2 → v0.35.3
k8s.io/apiserver: v0.34.2 → v0.35.3
k8s.io/client-go: v0.34.2 → v0.35.3
k8s.io/cluster-bootstrap: v0.34.2 → v0.35.3
k8s.io/code-generator: v0.34.2 → v0.35.3
k8s.io/component-base: v0.34.2 → v0.35.3
k8s.io/gengo/v2: 85fd79d → ec3ebc5
k8s.io/kms: v0.34.2 → v0.35.3
k8s.io/kube-openapi: f3f2b99 → 589584f
k8s.io/utils: 4c0f3b2 → bc988d5
sigs.k8s.io/controller-runtime: v0.22.4 → v0.23.3
sigs.k8s.io/json: cfa47c3 → 2d32026
sigs.k8s.io/structured-merge-diff/v6: v6.3.0 → v6.3.2

Removed

github.com/ProtonMail/go-crypto: 7d5c6f0
github.com/bwesterb/go-ristretto: v1.2.3
github.com/cloudflare/circl: v1.6.1
github.com/google/go-github/v53: v53.2.0
github.com/zeebo/errs: v1.4.0
go.uber.org/automaxprocs: v1.6.0

Thanks to all our contributors! 😊

`v1.12.11`

Compare Source

👌 Kubernetes version support

Management Cluster: v1.31.x -> v1.36.x
Workload Cluster: v1.29.x -> v1.36.x

More information about version support can be found here

Changes since v1.12.10

📈 Overview

9 new commits merged
1 bug fixed 🐛

🐛 Bug Fixes

CAPD: Fix a panic in CAPDev cache.Get() (#13962)

🌱 Others

CI: Trivyignore CVE-2026-56852 (#14027)
clusterctl: Bump cert-manager to v1.21.0 (#13916)
clusterctl: Harden clusterctl move (#13941)
Dependency: Bump x/text to v0.39.0, otel to v1.41.0, cel-go to v0.29.0 and grpc to v1.82.1 to address security advisories (#13978)
e2e: Bump autoscaler version used for testing (#13943)
e2e: Increase clusterctl and e2e test dry-run cluster-template timeouts (#14016)
KCP: Bump corefile-migration to v1.0.34 (#13957)
KCP: KCP enforce context deadline on connection stream (#14004)

Dependencies

Added

Nothing has changed.

Changed

github.com/antlr4-go/antlr/v4: v4.13.0 → v4.13.1
github.com/coredns/corefile-migration: v1.0.32 → v1.0.34
github.com/google/cel-go: v0.26.0 → v0.29.0
golang.org/x/exp: 8a7402a → 9b4947d

Removed

Nothing has changed.

Thanks to all our contributors! 😊

`v1.12.10`

Compare Source

👌 Kubernetes version support

Management Cluster: v1.31.x -> v1.36.x
Workload Cluster: v1.29.x -> v1.36.x

More information about version support can be found here

Changes since v1.12.9

📈 Overview

5 new commits merged
2 bugs fixed 🐛

🐛 Bug Fixes

e2e: Bump kind image in clusterctl v1.10 upgrade test to avoid containerd segv (#13855)
e2e: Fix PrettyPrint in WaitForControlPlaneToBeReady (#13845)

🌱 Others

clusterctl: Bump cert-manager to v1.20.3 (#13852)
Dependency: Add CVEs to .trivyignore (#13865)
Dependency: Bump Go version to v1.25.12 (#13907)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Thanks to all our contributors! 😊

`v1.12.9`

Compare Source

👌 Kubernetes version support

Management Cluster: v1.31.x -> v1.36.x
Workload Cluster: v1.29.x -> v1.36.x

More information about version support can be found here

Changes since v1.12.8

📈 Overview

5 new commits merged
2 bugs fixed 🐛

🐛 Bug Fixes

clusterctl: Skip update check for clusterctl completion (#13698)
Security: Grant RBAC to support OwnerReferencesPermissionEnforcement admission controller (#13818)

🌱 Others

CI: Bump gcb-docker-gcloud image (#13796)
Dependency: Add GO-2026-5026 to .govuln_exclude (#13745)
Dependency: Bump go to v1.25.11 (#13790)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Thanks to all our contributors! 😊

`v1.12.8`

Compare Source

👌 Kubernetes version support

Management Cluster: v1.31.x -> v1.36.x
Workload Cluster: v1.29.x -> v1.36.x

More information about version support can be found here

Changes since v1.12.7

📈 Overview

9 new commits merged
2 bugs fixed 🐛

🐛 Bug Fixes

Devtools: Fix Tilt kube-state-metrics deployment (#13679)
KCP: Fix in-place update with InfraMachine webhooks with immutability (#13644)

🌱 Others

CI: Make it possible to exclude CVEs with govulncheck (#13672)
Dependency: Bumping corefile-migration to v1.0.32 (#13636)
Dependency: Bumping github.com/moby/spdystream to v0.5.1 (#13633)
Dependency: Go bump 1.12.10 (#13665)
Dependency: Ignore false positive CVEs (#13668)
Dependency: Start testing with K8s 1.36.0 (#13613)
KCP: Add kubeadm cluster role (#13673)

Dependencies

Added

Nothing has changed.

Changed

github.com/coredns/corefile-migration: v1.0.31 → v1.0.32
github.com/moby/spdystream: v0.5.0 → v0.5.1

Removed

Nothing has changed.

Thanks to all our contributors! 😊

`v1.12.7`

Compare Source

👌 Kubernetes version support

Management Cluster: v1.31.x -> v1.35.x
Workload Cluster: v1.29.x -> v1.35.x

More information about version support can be found here

Changes since v1.12.5

📈 Overview

7 new commits merged
2 bugs fixed 🐛

🐛 Bug Fixes

Dependency: Fix CVE 2026 39883 release 1.12 (#13575)
KCP: KCP deletion should tolerate missing InfraTemplates (#13563)

🌱 Others

clusterctl: Bump Cert-manager v1.20.2 (#13597)
Dependency: Bump cloudbuild to use gcb-docker-gcloud image with Go v1.25.5 (#13607)
e2e: Start testing with Kubernetes v1.36.0-rc.0 (#13570)
e2e: Start testing with Kubernetes v1.36.0-rc.1 (#13588)

📖 Additionally, there has been 1 contribution to our documentation and book. (#13561)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Thanks to all our contributors! 😊

`v1.12.5`

Compare Source

👌 Kubernetes version support

Management Cluster: v1.31.x -> v1.35.x
Workload Cluster: v1.29.x -> v1.35.x

More information about version support can be found here

Changes since v1.12.4

📈 Overview

14 new commits merged
1 feature addition ✨
3 bugs fixed 🐛

✨ New Features

CAPD: Improve CAPD wait for multi-user target (#13523)

🐛 Bug Fixes

Testing: Fix flaky by waiting for CRD finalizer processing (#13478)
Testing: Fix flaky TestClusterReconciler unit test (#13475)
Testing: Fix TestMachineSetReconciler_createMachines_preflightChecks flake (#13477)

🌱 Others

CAPD: Reduce verbosity of CAPD exec log (#13494)
clusterctl: Bump cert-manager to v1.20.0 (#13484)
clusterctl: Bump cert-manager to v1.20.1 (#13519)
Dependency: Bump corefile-migration to v1.0.31 (#13526)
Dependency: Bump dependencies to fix CVE-2026-33186 (google.golang.org/grpc) (#13504)
Dependency: Bump go v1.25.9 (#13554)
Dependency: Switch from docker to moby dependencies (#13550)
e2e: Start testing with Kubernetes v1.36.0-beta.0 (#13525)
KCP: KCP surfaces learner etcd members (#13491)

📖 Additionally, there has been 1 contribution to our documentation and book. (#13528)

Dependencies

Added

Nothing has changed.

Changed

cel.dev/expr: v0.24.0 → v0.25.1
github.com/cncf/xds/go: 0feb691 → ee656c7
github.com/coredns/corefile-migration: v1.0.30 → v1.0.31
github.com/envoyproxy/go-control-plane/envoy: v1.35.0 → v1.36.0
github.com/envoyproxy/go-control-plane: 75eaa19 → v0.14.0
github.com/envoyproxy/protoc-gen-validate: v1.2.1 → v1.3.0
go.opentelemetry.io/contrib/detectors/gcp: v1.38.0 → v1.39.0
google.golang.org/grpc: v1.78.0 → v1.79.3

Removed

Nothing has changed.

Thanks to all our contributors! 😊

`v1.12.4`

Compare Source

👌 Kubernetes version support

Management Cluster: v1.31.x -> v1.35.x
Workload Cluster: v1.29.x -> v1.35.x

More information about version support can be found here

Highlights

Starting from this release ReconcilerRateLimiting feature also requires PriorityQueue to be enabled.
This ensures that ReconcilerRateLimiting works consistently with controller runtime ExponentialBackoff.

Changes since v1.12.3

📈 Overview

17 new commits merged
9 bugs fixed 🐛

🐛 Bug Fixes

CAPD: Fix "Failed to exec DockerMachine bootstrap" errors in CAPD (#13451)
CI: Bump trivy to v0.69.2 to fix CI (#13388)
Cluster: Fix panic in Cluster conversion (#13384)
ClusterClass/KCP/MachineSet/MachineDeployment: Implement mitigation for managedFields issue with SSA in apiserver (#13355)
ClusterClass: Fix upgradePlan computation in GetUpgradePlanFromClusterClassVersions (#13471)
Dependency: Bump dependencies to fix CVE GO-2026-4394 (go.opentelemetry.io/otel/sdk pkg) (#13377)
e2e: Only retry creating objects that failed (#13430)
Machine/MachineSet/MachineDeployment: Fix UpToDate calculation for rolloutAfter (#13406)
util: Fix exponential backoff with ReconcilerRateLimiting (#13427)

🌱 Others

API: Relax validation for Machine .status.addresses to maximum of 256 instead of 128 items (#13399)
CAPD: Implement pause for DockerMachinePool (#13448)
clusterctl: Bump cert-manager v1.19.4 (#13381)
Dependency: Bump cloudflare/circl (#13438)
Dependency: Bump go v1.25.8 (#13432)
e2e: Add retry in test framework when getting manifest YAMLs (#13358)
e2e: Bump autoscaler version used for testing to v1.35.0 (#13375)
e2e: Improve condition if CAPD Machine is not yet ready for bootstrap exec (#13468)

Dependencies

Added

github.com/cenkalti/backoff/v5: v5.0.3
gonum.org/v1/gonum: v0.16.0

Changed

cloud.google.com/go/compute/metadata: v0.6.0 → v0.9.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: v1.26.0 → v1.30.0
github.com/cloudflare/circl: v1.6.1 → v1.6.3
github.com/cncf/xds/go: 2f00578 → 0feb691
github.com/envoyproxy/go-control-plane/envoy: v1.32.4 → v1.35.0
github.com/envoyproxy/go-control-plane: v0.13.4 → 75eaa19
github.com/go-jose/go-jose/v4: v4.0.4 → v4.1.3
github.com/golang/glog: v1.2.4 → v1.2.5
github.com/grpc-ecosystem/grpc-gateway/v2: v2.26.3 → v2.27.7
github.com/spiffe/go-spiffe/v2: v2.5.0 → v2.6.0
go.opentelemetry.io/auto/sdk: v1.1.0 → v1.2.1
go.opentelemetry.io/contrib/detectors/gcp: v1.34.0 → v1.38.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.58.0 → v0.65.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.34.0 → v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.34.0 → v1.40.0
go.opentelemetry.io/otel/metric: v1.35.0 → v1.40.0
go.opentelemetry.io/otel/sdk/metric: v1.34.0 → v1.40.0
go.opentelemetry.io/otel/sdk: v1.34.0 → v1.40.0
go.opentelemetry.io/otel/trace: v1.35.0 → v1.40.0
go.opentelemetry.io/otel: v1.35.0 → v1.40.0
go.opentelemetry.io/proto/otlp: v1.5.0 → v1.9.0
golang.org/x/crypto: v0.45.0 → v0.47.0
golang.org/x/mod: v0.29.0 → v0.31.0
golang.org/x/net: v0.47.0 → v0.49.0
golang.org/x/oauth2: v0.33.0 → v0.34.0
golang.org/x/sync: v0.18.0 → v0.19.0
golang.org/x/sys: v0.38.0 → v0.40.0
golang.org/x/telemetry: 078029d → 8fff8a5
golang.org/x/term: v0.37.0 → v0.39.0
golang.org/x/text: v0.31.0 → v0.33.0
golang.org/x/tools: v0.38.0 → v0.40.0
google.golang.org/genproto/googleapis/api: a0af3ef → 8636f87
google.golang.org/genproto/googleapis/rpc: a0af3ef → 8636f87
google.golang.org/grpc: v1.72.3 → v1.78.0
google.golang.org/protobuf: v1.36.7 → v1.36.11
sigs.k8s.io/structured-merge-diff/v6: v6.3.0 → d9cc664

Removed

github.com/zeebo/errs: v1.4.0

Thanks to all our contributors! 😊

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot. The local configuration can be found in the SI Renovate Bot repository.

This PR contains the following updates: | Package | Update | Change | OpenSSF | |---|---|---|---| | [kubernetes-sigs/cluster-api](https://github.com/kubernetes-sigs/cluster-api) | minor | `v1.12.3` → `v1.14.0` | [![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/kubernetes-sigs/cluster-api/badge)](https://securityscorecards.dev/viewer/?uri=github.com/kubernetes-sigs/cluster-api) | --- ### Release Notes <details> <summary>kubernetes-sigs/cluster-api (kubernetes-sigs/cluster-api)</summary> ### [`v1.14.0`](https://github.com/kubernetes-sigs/cluster-api/releases/tag/v1.14.0) [Compare Source](https://github.com/kubernetes-sigs/cluster-api/compare/v1.13.5...v1.14.0) ##### 👌 Kubernetes version support - Management Cluster: v1.33.x -> v1.36.x - Workload Cluster: v1.31.x -> v1.36.x [More information about version support can be found here](https://cluster-api.sigs.k8s.io/reference/versions.html) ##### Highlights - Cluster API is now using Golang 1.26, CR v0.24, CT v0.21 - Improve the project security posture and increase its capability to deal with CVEs from direct/indirect dependencies - Introduced dedicated Golang module for API types ([#13762](https://github.com/kubernetes-sigs/cluster-api/issues/13762)) - This new API module ensures consumers of the API types - Stronger compatibility guarantees. - Considerably smaller and tightly controlled dependency tree, thus reducing exposure to CVEs from dependencies. - Formalization of policies and rules for Golang version bump, allowing a better response to Golang CVEs. - See also the wider effort about code organization [proposal](https://github.com/kubernetes-sigs/cluster-api/blob/main/docs/proposals/20260701-code-organization.md) + ([#13910](https://github.com/kubernetes-sigs/cluster-api/issues/13910)). - Enable safe joining of nodes on older kubernetes versions with kubeadm ([#13433](https://github.com/kubernetes-sigs/cluster-api/issues/13433)) - This feature removes a constraint preventing scale up, remediation and autoscaling of worker nodes during cluster rollouts, thus allowing future improvements like support for independent worker versions in cluster topology. - Improved observability on upgrades, Kubernetes version in-use and runtime extensions errors. - Surface upgrade plan in cluster status ([#13923](https://github.com/kubernetes-sigs/cluster-api/issues/13923)) - Surface aggregated machine versions in status ([#13341](https://github.com/kubernetes-sigs/cluster-api/issues/13341)) - Surface Runtime Extension errors in cluster conditions ([#13813](https://github.com/kubernetes-sigs/cluster-api/issues/13813)) - More work to improve robustness and reliability of controllers - Improve forward etcd leadership in KCP, allowing the system to better handle partial failures during control plane machine deletion ([#13848](https://github.com/kubernetes-sigs/cluster-api/issues/13848)) - Tolerate missing InfraTemplates during control plane machine deletion, allowing the system to tolerate accidental resource deletion ([#13558](https://github.com/kubernetes-sigs/cluster-api/issues/13558)) - Allow KCP remediation of unhealthy machines during intermediate steps of chained upgrades ([#13869](https://github.com/kubernetes-sigs/cluster-api/issues/13869)) - KCP is now able to cleanup not started etcd members after a machine is remediated ([#13685](https://github.com/kubernetes-sigs/cluster-api/issues/13685)) - Implement stale controller mitigation in all the relevant controllers ([#13720](https://github.com/kubernetes-sigs/cluster-api/issues/13720), [#13737](https://github.com/kubernetes-sigs/cluster-api/issues/13737), [#13730](https://github.com/kubernetes-sigs/cluster-api/issues/13730)) - Allow remediation of unhealthy Machines managed by old MachineSets during in-place updates ([#13886](https://github.com/kubernetes-sigs/cluster-api/issues/13886)) - Perform draining and volume detachment once until completion ([#11590](https://github.com/kubernetes-sigs/cluster-api/issues/11590)) - Use regular patch instead of SSA to patch Cluster in topology controller ([#13760](https://github.com/kubernetes-sigs/cluster-api/issues/13760)) - More work for reducing Cluster API memory footprint and for improving performance at scale - Introduce options for cache tuning in ClusterCache clients, use those options to better control memory footprint in core CAPI, CABPK and KCP ([#13780](https://github.com/kubernetes-sigs/cluster-api/issues/13780), [#13820](https://github.com/kubernetes-sigs/cluster-api/issues/13820)) - Implement managedFields interning ([#13807](https://github.com/kubernetes-sigs/cluster-api/issues/13807)) - Misc: - Allow patching of metadata.{labels,annotations} through ClusterClass patches ([#13924](https://github.com/kubernetes-sigs/cluster-api/issues/13924)) - Kubernetes version validation now enforces strict semver compatibility ([#13874](https://github.com/kubernetes-sigs/cluster-api/issues/13874)) - Several changes to reduce E2E test durations while we keep adding new tests and improving test coverage of the existing ones. - Add experimental `clusterctl convert` command ([#12843](https://github.com/kubernetes-sigs/cluster-api/issues/12843)) ##### Deprecation Warning Important: - The v1beta1 API version in core Cluster API, CABPK and KCP is on track to be unserved in CAPI v1.16. All the consumers of this API version should migrate to v1beta2 ASAP. - Utils for the Cluster API v1beta1 condition types (condition helpers, patch helper etc.) will be removed as a next step. - All the `status.deprecated` fields existing in v1beta2 types (used for v1beta1 down conversions) types will be removed as a next step. - Support for the Cluster API v1beta1 contract versions is on track to be dropped in CAPI v1.16. Provider should start implementing the v1beta2 contract ASAP. Removal of Docker\* API resources will happen in CAPI v1.15. All the consumers of these API resources should migrate to Dev\* API resources ASAP. - NOTE: CAPD is considered a test provider, API deprecation period does not apply For additional details for providers, please take a look at [Cluster API v1.13 compared to v1.14](https://main.cluster-api.sigs.k8s.io/developer/providers/migrations/v1.13-to-v1.14). ##### Changes since v1.13.0 ##### :chart\_with\_upwards\_trend: Overview - 258 new commits merged - 4 breaking changes :warning: - 28 feature additions ✨ - 28 bugs fixed 🐛 ##### :warning: Breaking Changes - CAPD: Mark docker resources as deprecated ([#13557](https://github.com/kubernetes-sigs/cluster-api/issues/13557)) - Dependency: Bump to controller-runtime v0.24 & controller-tools v0.21 ([#13651](https://github.com/kubernetes-sigs/cluster-api/issues/13651)) - Machine/MachinePool/MachineSet/MachineDeployment/Cluster: Fix version validation in webhooks ([#13874](https://github.com/kubernetes-sigs/cluster-api/issues/13874)) - Misc: Fix minor goroutine leak in util/cache after controller shutdown ([#13487](https://github.com/kubernetes-sigs/cluster-api/issues/13487)) ##### :sparkles: New Features - API: Introduce separate API module ([#13762](https://github.com/kubernetes-sigs/cluster-api/issues/13762)) - API: Move OpenAPI schema out of the api package to avoid direct dependency on kube-openapi in the api module ([#13825](https://github.com/kubernetes-sigs/cluster-api/issues/13825)) - API: Surface aggregated machine versions in status ([#13341](https://github.com/kubernetes-sigs/cluster-api/issues/13341)) - Bootstrap: Write kubeadm control plane version file for workers to use to fetch the matching kubeadm binary ([#13433](https://github.com/kubernetes-sigs/cluster-api/issues/13433)) - CAPD: Introduce per-reconciler concurrency flags in CAPDev ([#13740](https://github.com/kubernetes-sigs/cluster-api/issues/13740)) - CAPD: Migrate ClusterClass changes e2e test from the docker to the in-memory backend ([#13764](https://github.com/kubernetes-sigs/cluster-api/issues/13764)) - CAPD: Migrate templates to use Dev\* instead of Docker\* ([#13741](https://github.com/kubernetes-sigs/cluster-api/issues/13741)) - CI: Remove YEAR from copyright header boilerplate ([#13889](https://github.com/kubernetes-sigs/cluster-api/issues/13889)) - Cluster: Use regular patch instead of SSA to patch Cluster in topology controller ([#13760](https://github.com/kubernetes-sigs/cluster-api/issues/13760)) - ClusterCache: Expose and use DefaultTransform on CacheOptions ([#13780](https://github.com/kubernetes-sigs/cluster-api/issues/13780)) - ClusterCache: Use DefaultTransform in core CAPI, CABPK and KCP ([#13820](https://github.com/kubernetes-sigs/cluster-api/issues/13820)) - ClusterClass/KCP/MachineSet: Implement stale controller mitigation in KCP / MS / Cluster topology controller ([#13737](https://github.com/kubernetes-sigs/cluster-api/issues/13737)) - ClusterClass: Allow patching of metadata.{labels,annotations} through ClusterClass patches ([#13924](https://github.com/kubernetes-sigs/cluster-api/issues/13924)) - clusterctl: Add cluster-api-provider-kubeswift to the built-in infrastructure provider list ([#13946](https://github.com/kubernetes-sigs/cluster-api/issues/13946)) - clusterctl: Add configuration `ExternallyProvisioned` for clusterctl ([#13739](https://github.com/kubernetes-sigs/cluster-api/issues/13739)) - clusterctl: Add experimental `clusterctl convert` command ([#12843](https://github.com/kubernetes-sigs/cluster-api/issues/12843)) - Dependency: Bump Go 1.26 ([#13623](https://github.com/kubernetes-sigs/cluster-api/issues/13623)) - e2e: Migrate ClusterClass rollout e2e test from the docker to the in-memory backend ([#13806](https://github.com/kubernetes-sigs/cluster-api/issues/13806)) - e2e: Migrate ClusterClass upgrade with different NS e2e test from the docker to the in-memory backend ([#13885](https://github.com/kubernetes-sigs/cluster-api/issues/13885)) - e2e: Migrate e2e tests from using Docker\* resources to Dev\* resources ([#13647](https://github.com/kubernetes-sigs/cluster-api/issues/13647)) - e2e: Migrate test extension to use Dev\* instead of Docker\* ([#13716](https://github.com/kubernetes-sigs/cluster-api/issues/13716)) - e2e: Update in-place updating a workload cluster e2e test to use in-memory backend ([#13895](https://github.com/kubernetes-sigs/cluster-api/issues/13895)) - e2e: Use in-memory template for clusterctl upgrade tests ([#13866](https://github.com/kubernetes-sigs/cluster-api/issues/13866)) - KCP: Improve forward etcd leadership ([#13848](https://github.com/kubernetes-sigs/cluster-api/issues/13848)) - MachineDeployment/util: Stale controller mitigation in reconcile wrapper & MD controller, enable store & fifo informer metrics ([#13720](https://github.com/kubernetes-sigs/cluster-api/issues/13720)) - Misc: Implement managedFields interning ([#13807](https://github.com/kubernetes-sigs/cluster-api/issues/13807)) - Misc: Implement new code structure ([#13894](https://github.com/kubernetes-sigs/cluster-api/issues/13894)) - Release: Prepare main branch for v1.14 development ([#13617](https://github.com/kubernetes-sigs/cluster-api/issues/13617)) ##### :bug: Bug Fixes - CAPD: Fix a panic in CAPDev cache.Get() ([#13959](https://github.com/kubernetes-sigs/cluster-api/issues/13959)) - CAPD: Fix CAPD flakes ([#13757](https://github.com/kubernetes-sigs/cluster-api/issues/13757)) - CAPD: Fix E2E host port binding lookup ([#13627](https://github.com/kubernetes-sigs/cluster-api/issues/13627)) - CAPIM: Fix deadlock in in-memory server ([#13971](https://github.com/kubernetes-sigs/cluster-api/issues/13971)) - CI: Fix verify docker images arch ([#13922](https://github.com/kubernetes-sigs/cluster-api/issues/13922)) - ClusterClass: Fix Machine taint propagation in the Cluster topology controller for the v1beta1 contract ([#13991](https://github.com/kubernetes-sigs/cluster-api/issues/13991)) - clusterctl: Detect cert-manager image changes during upgrade ([#13850](https://github.com/kubernetes-sigs/cluster-api/issues/13850)) - clusterctl: Fix v1beta1 describe output stream ([#13893](https://github.com/kubernetes-sigs/cluster-api/issues/13893)) - clusterctl: Raise management cluster client QPS and Burst ([#13875](https://github.com/kubernetes-sigs/cluster-api/issues/13875)) - clusterctl: Reject incomplete GitHub release asset URLs ([#13909](https://github.com/kubernetes-sigs/cluster-api/issues/13909)) - clusterctl: Skip update check for clusterctl completion ([#13653](https://github.com/kubernetes-sigs/cluster-api/issues/13653)) - clusterctl: Trim whitespace in --show-conditions filters ([#13897](https://github.com/kubernetes-sigs/cluster-api/issues/13897)) - Dependency: Fix CVE-2026-39883 ([#13571](https://github.com/kubernetes-sigs/cluster-api/issues/13571)) - Devtools: Fix Grafana deployment ([#13998](https://github.com/kubernetes-sigs/cluster-api/issues/13998)) - Devtools: Fix parallel build of binaries in Tiltfile ([#13995](https://github.com/kubernetes-sigs/cluster-api/issues/13995)) - Devtools: Fix Tilt kube-state-metrics deployment ([#13677](https://github.com/kubernetes-sigs/cluster-api/issues/13677)) - e2e: Fix ClusterClass rollout test with k8s latest ([#13881](https://github.com/kubernetes-sigs/cluster-api/issues/13881)) - e2e: Fix PrettyPrint in WaitForControlPlaneToBeReady ([#13843](https://github.com/kubernetes-sigs/cluster-api/issues/13843)) - e2e: Fix self-hosted test ([#13778](https://github.com/kubernetes-sigs/cluster-api/issues/13778)) - KCP: Fix failing TestKubeadmControlPlaneReconciler\_reconcileEtcdMembers ([#13717](https://github.com/kubernetes-sigs/cluster-api/issues/13717)) - KCP: Fix KCP in-place update with InfraMachine webhooks with immutability validation ([#13640](https://github.com/kubernetes-sigs/cluster-api/issues/13640)) - KCP: KCP deletion should tolerate missing InfraTemplates ([#13558](https://github.com/kubernetes-sigs/cluster-api/issues/13558)) - Machine/Bootstrap: Perform draining and volume detachment once until completion ([#11590](https://github.com/kubernetes-sigs/cluster-api/issues/11590)) - MachineDeployment: Fix nil pointer panic when paused with no matching MachineSet ([#13827](https://github.com/kubernetes-sigs/cluster-api/issues/13827)) - MachineSet: Delete unhealthy Machines of old MS during in-place updates ([#13886](https://github.com/kubernetes-sigs/cluster-api/issues/13886)) - MachineSet: Fix retry to remove finalizer in MS topology reconciler ([#13993](https://github.com/kubernetes-sigs/cluster-api/issues/13993)) - Release: Revert unset GOCACHE env var ([#13732](https://github.com/kubernetes-sigs/cluster-api/issues/13732)) - Testing: Fix TestHealthCheckTargets flake ([#13860](https://github.com/kubernetes-sigs/cluster-api/issues/13860)) ##### :seedling: Others - API/Runtime SDK/IPAM/MachinePool/MachineSet/MachineDeployment: Fix typos in generated CRD descriptions ([#13641](https://github.com/kubernetes-sigs/cluster-api/issues/13641)) - API: Adjust IsMachineDeploymentUpgrading to detect in-place upgrades ([#13876](https://github.com/kubernetes-sigs/cluster-api/issues/13876)) - API: Follow-ups for Surface aggregated machine versions in status ([#13871](https://github.com/kubernetes-sigs/cluster-api/issues/13871)) - API: Surface upgrade plan in cluster status ([#13923](https://github.com/kubernetes-sigs/cluster-api/issues/13923)) - Bootstrap: Limit size of files generated from templates ([#13927](https://github.com/kubernetes-sigs/cluster-api/issues/13927)) - CABPK: Prevent CABPK to override controlling ownerRef for bootstrap secrets ([#13937](https://github.com/kubernetes-sigs/cluster-api/issues/13937)) - CABPK: Use ClusterClass with RuntimeSDK in kubeadm join old Node e2e test & fix e2e test failures ([#13759](https://github.com/kubernetes-sigs/cluster-api/issues/13759)) - CAPD: Add support for controller restart to in-memory backend ([#13595](https://github.com/kubernetes-sigs/cluster-api/issues/13595)) - CAPD: Only add finalizer after InfraMachine has owner in CAPDev ([#13714](https://github.com/kubernetes-sigs/cluster-api/issues/13714)) - CAPD: Partially revert fix self-hosted test ([#13795](https://github.com/kubernetes-sigs/cluster-api/issues/13795)) - CAPD: Refactor CAPDev reconciler ([#13702](https://github.com/kubernetes-sigs/cluster-api/issues/13702)) - CI: Add cron buckets to prow generator ([#13656](https://github.com/kubernetes-sigs/cluster-api/issues/13656)) - CI: Add KCP infra adoption test ([#13731](https://github.com/kubernetes-sigs/cluster-api/issues/13731)) - CI: Add stable BuildKit cache mount IDs ([#13930](https://github.com/kubernetes-sigs/cluster-api/issues/13930)) - CI: Cleanup ./scripts folder ([#13896](https://github.com/kubernetes-sigs/cluster-api/issues/13896)) - CI: Cleanup golangci-lint excludes ([#13891](https://github.com/kubernetes-sigs/cluster-api/issues/13891)) - CI: Drop jobs on release-1.11 ([#13593](https://github.com/kubernetes-sigs/cluster-api/issues/13593)) - CI: Fix link in cloudbuild.yaml's ([#13793](https://github.com/kubernetes-sigs/cluster-api/issues/13793)) - CI: Fix linter findings in hack/tools ([#13814](https://github.com/kubernetes-sigs/cluster-api/issues/13814)) - CI: Harden git workflows ([#13442](https://github.com/kubernetes-sigs/cluster-api/issues/13442)) - CI: Make it possible to exclude CVEs with govulncheck ([#13669](https://github.com/kubernetes-sigs/cluster-api/issues/13669)) - CI: Migrate from import boss to depguard ([#13873](https://github.com/kubernetes-sigs/cluster-api/issues/13873)) - CI: Read permissions for pr-verify action ([#13687](https://github.com/kubernetes-sigs/cluster-api/issues/13687)) - CI: Replace deprecated gaurav-nelson/github-action-markdown-link-check with tcort fork ([#13572](https://github.com/kubernetes-sigs/cluster-api/issues/13572)) - CI: Revert "Migrate away from custom GitHub action approval workflow" ([#13802](https://github.com/kubernetes-sigs/cluster-api/issues/13802)) - CI: Stop running make lint-api multiple times in the GitHub action ([#13824](https://github.com/kubernetes-sigs/cluster-api/issues/13824)) - ClusterCache/Misc: Block ExecProvider/AuthProvider in ClusterCache, deprecate remote funcs ([#13949](https://github.com/kubernetes-sigs/cluster-api/issues/13949)) - ClusterCache: Cleanup ClusterCache metrics for deleted Clusters ([#13660](https://github.com/kubernetes-sigs/cluster-api/issues/13660)) - ClusterClass: Increase MD/MS topology reconciler concurrency to 25 ([#14008](https://github.com/kubernetes-sigs/cluster-api/issues/14008)) - clusterctl/Misc: Avoid building if LDFLAGS returns error checking for SemVer ([#13418](https://github.com/kubernetes-sigs/cluster-api/issues/13418)) - clusterctl: Add cloudscale-ch-cloudscale provider ([#13544](https://github.com/kubernetes-sigs/cluster-api/issues/13544)) - clusterctl: Add oxide as an infrastructure provider ([#13920](https://github.com/kubernetes-sigs/cluster-api/issues/13920)) - clusterctl: Bump cert-manager to v1.20.3 ([#13847](https://github.com/kubernetes-sigs/cluster-api/issues/13847)) - clusterctl: Bump cert-manager to v1.21.0 ([#13900](https://github.com/kubernetes-sigs/cluster-api/issues/13900)) - clusterctl: Bump cert-manager to v1.21.1 ([#14012](https://github.com/kubernetes-sigs/cluster-api/issues/14012)) - clusterctl: Bump Cert-manager v1.20.2 ([#13583](https://github.com/kubernetes-sigs/cluster-api/issues/13583)) - clusterctl: Harden clusterctl move ([#13928](https://github.com/kubernetes-sigs/cluster-api/issues/13928)) - clusterctl: Improve clusterctl describe ([#13753](https://github.com/kubernetes-sigs/cluster-api/issues/13753)) - clusterctl: Print help on argument validation errors ([#13808](https://github.com/kubernetes-sigs/cluster-api/issues/13808)) - Control-plane: Add additional test cases for EnsureKubeadmPermissions ([#13758](https://github.com/kubernetes-sigs/cluster-api/issues/13758)) - Control-plane: Align scale validator to upstream ([#13925](https://github.com/kubernetes-sigs/cluster-api/issues/13925)) - Control-plane: Remove unused functions in internal/contract ([#13826](https://github.com/kubernetes-sigs/cluster-api/issues/13826)) - Control-plane: Verify etcd serving certificate against the etcd CA ([#13765](https://github.com/kubernetes-sigs/cluster-api/issues/13765)) - Dependency: 1.26.3 ([#13661](https://github.com/kubernetes-sigs/cluster-api/issues/13661)) - Dependency: Bump cel-go to v0.29.0 and grpc to v1.82.1 to address security advisories ([#13976](https://github.com/kubernetes-sigs/cluster-api/issues/13976)) - Dependency: Bump envtest 1.36 ([#13657](https://github.com/kubernetes-sigs/cluster-api/issues/13657)) - Dependency: Bump go to v1.26.4 ([#13788](https://github.com/kubernetes-sigs/cluster-api/issues/13788)) - Dependency: Bump Go to v1.26.5 ([#13902](https://github.com/kubernetes-sigs/cluster-api/issues/13902)) - Dependency: Bump golang/x/net to 0.55.0 ([#13744](https://github.com/kubernetes-sigs/cluster-api/issues/13744)) - Devtools: Add Headlamp to Tilt dev environment ([#13538](https://github.com/kubernetes-sigs/cluster-api/issues/13538)) - Devtools: Add log dashboard ([#13594](https://github.com/kubernetes-sigs/cluster-api/issues/13594)) - Devtools: Add Log dashboard to grafana ([#13972](https://github.com/kubernetes-sigs/cluster-api/issues/13972)) - Devtools: Bump headlamp CAPI plugin to 0.2.0-beta.0 ([#13783](https://github.com/kubernetes-sigs/cluster-api/issues/13783)) - Devtools: Bump setup-envtest to v0.24.1 ([#13948](https://github.com/kubernetes-sigs/cluster-api/issues/13948)) - Devtools: Enable prealloc linter & fix findings ([#13711](https://github.com/kubernetes-sigs/cluster-api/issues/13711)) - Devtools: Fix gosec lint findings ([#13709](https://github.com/kubernetes-sigs/cluster-api/issues/13709)) - Devtools: Improve metrics config ([#13974](https://github.com/kubernetes-sigs/cluster-api/issues/13974)) - Devtools: Move scripts under hack/scripts ([#13877](https://github.com/kubernetes-sigs/cluster-api/issues/13877)) - Devtools: Upgrade tempo & fix configuration ([#13727](https://github.com/kubernetes-sigs/cluster-api/issues/13727)) - Devtools: Verify mdbook sha ([#13926](https://github.com/kubernetes-sigs/cluster-api/issues/13926)) - e2e: Add options to runtimesdk e2e test ([#13750](https://github.com/kubernetes-sigs/cluster-api/issues/13750)) - e2e: Bump autoscaler version used for testing ([#13919](https://github.com/kubernetes-sigs/cluster-api/issues/13919)) - e2e: Bump Kubernetes version used for testing to v1.37.0-beta.0 ([#13912](https://github.com/kubernetes-sigs/cluster-api/issues/13912)) - e2e: Bump to kind main to fix e2e tests ([#13767](https://github.com/kubernetes-sigs/cluster-api/issues/13767)) - e2e: Bump to kind v0.32.0 ([#13781](https://github.com/kubernetes-sigs/cluster-api/issues/13781)) - e2e: Cleanup of ControlPlaneKubeletLocalMode handling in KCP adoption test ([#13695](https://github.com/kubernetes-sigs/cluster-api/issues/13695)) - e2e: Cleanup unused e2e test templates ([#13713](https://github.com/kubernetes-sigs/cluster-api/issues/13713)) - e2e: Drop syncer from in-memory server ([#13992](https://github.com/kubernetes-sigs/cluster-api/issues/13992)) - e2e: Enable opt-out of OwnerReferencesPermissionEnforcement admission controller & opt-out in clusterctl upgrade tests ([#13819](https://github.com/kubernetes-sigs/cluster-api/issues/13819)) - e2e: Fix E2E chained upgrade ([#13618](https://github.com/kubernetes-sigs/cluster-api/issues/13618)) - e2e: Give resource versions more time to become stable in e2e tests ([#13882](https://github.com/kubernetes-sigs/cluster-api/issues/13882)) - e2e: Improve handling of missing kind versions ([#13642](https://github.com/kubernetes-sigs/cluster-api/issues/13642)) - e2e: Increase clusterctl and e2e test dry-run cluster-template timeouts ([#14014](https://github.com/kubernetes-sigs/cluster-api/issues/14014)) - e2e: Make it easier to debug cert issues in clusterctl upgrade & self-hosted tests ([#13966](https://github.com/kubernetes-sigs/cluster-api/issues/13966)) - e2e: Rename in-memory e2e test flavor to in-memory-scale ([#13936](https://github.com/kubernetes-sigs/cluster-api/issues/13936)) - e2e: Start testing against Kubernetes v1.37 ([#13614](https://github.com/kubernetes-sigs/cluster-api/issues/13614)) - e2e: Start testing with K8s 1.36.0 ([#13611](https://github.com/kubernetes-sigs/cluster-api/issues/13611)) - e2e: Start testing with Kubernetes v1.36.0-rc.0 ([#13564](https://github.com/kubernetes-sigs/cluster-api/issues/13564)) - e2e: Start testing with Kubernetes v1.36.0-rc.1 ([#13585](https://github.com/kubernetes-sigs/cluster-api/issues/13585)) - e2e: Use only 1 worker machine per MD/MP in RuntimeSDK e2e test ([#13872](https://github.com/kubernetes-sigs/cluster-api/issues/13872)) - e2e: Use Runtime SDK for kcp-infra-adoption e2e test ([#13809](https://github.com/kubernetes-sigs/cluster-api/issues/13809)) - KCP: Add kubeadm cluster role ([#13664](https://github.com/kubernetes-sigs/cluster-api/issues/13664)) - KCP: Allow KCP remediation on chained upgrade intermediate steps ([#13869](https://github.com/kubernetes-sigs/cluster-api/issues/13869)) - KCP: KCP cleanup etcd members not started after a machine is remediated ([#13685](https://github.com/kubernetes-sigs/cluster-api/issues/13685)) - KCP: KCP enforce context deadline on connection stream ([#13939](https://github.com/kubernetes-sigs/cluster-api/issues/13939)) - KCP: Remove the check on the errors returned by etcd's status response ([#13846](https://github.com/kubernetes-sigs/cluster-api/issues/13846)) - KCP: Update RemoveEtcdMember to accept a \*etcd.Member instead of a member name ([#13784](https://github.com/kubernetes-sigs/cluster-api/issues/13784)) - Machine: Drop KCP specific logic in Machine reconcileDelete ([#13829](https://github.com/kubernetes-sigs/cluster-api/issues/13829)) - Machine: Improve machine controller in-place update unit tests ([#13682](https://github.com/kubernetes-sigs/cluster-api/issues/13682)) - MachineDeployment: Extend stale controller mitigation in MD controller to MS deletion ([#13730](https://github.com/kubernetes-sigs/cluster-api/issues/13730)) - MachinePool: Unit testing to determine if provider allows individual machines to be deleted. ([#13832](https://github.com/kubernetes-sigs/cluster-api/issues/13832)) - MachineSet: Cleanup orphaned BoostrapConfigs / InfraMachines in MS controller ([#13812](https://github.com/kubernetes-sigs/cluster-api/issues/13812)) - MachineSet: Consider MS skip preflight check annotation from BootstrapConfigTemplate ([#13938](https://github.com/kubernetes-sigs/cluster-api/issues/13938)) - Misc: Add finalizer only after we got owner/cluster ([#13747](https://github.com/kubernetes-sigs/cluster-api/issues/13747)) - Misc: Correct typos in comments and error messages ([#13756](https://github.com/kubernetes-sigs/cluster-api/issues/13756)) - Misc: Delete unused nolint directives ([#13710](https://github.com/kubernetes-sigs/cluster-api/issues/13710)) - Misc: Fix static check lint errors ([#13708](https://github.com/kubernetes-sigs/cluster-api/issues/13708)) - Misc: Improve conversion webhook aliasing ([#13828](https://github.com/kubernetes-sigs/cluster-api/issues/13828)) - Misc: Replace reflect.Ptr with reflect.Pointer ([#13707](https://github.com/kubernetes-sigs/cluster-api/issues/13707)) - Misc: Stop setting TypeMeta in typed objects (part II) ([#13890](https://github.com/kubernetes-sigs/cluster-api/issues/13890)) - Misc: Update Kubernetes bump issue template ([#13693](https://github.com/kubernetes-sigs/cluster-api/issues/13693)) - Misc: Use pkgerrors as alias for github.com/pkg/errors & no alias for errors ([#13963](https://github.com/kubernetes-sigs/cluster-api/issues/13963)) - Release: Add Code Freeze date field to `provider_issues.go` to be used for beta communication ([#13915](https://github.com/kubernetes-sigs/cluster-api/issues/13915)) - Release: Add workaround for generate release notes ([#13655](https://github.com/kubernetes-sigs/cluster-api/issues/13655)) - Release: Optimize go build in `make release-binary` ([#13499](https://github.com/kubernetes-sigs/cluster-api/issues/13499)) - Release: Report consistency errors in release note draft ([#13861](https://github.com/kubernetes-sigs/cluster-api/issues/13861)) - Runtime SDK: Add 20 MB read limits for Runtime SDK client & server ([#13944](https://github.com/kubernetes-sigs/cluster-api/issues/13944)) - Runtime SDK: Do not follow redirects when calling runtime extensions ([#13763](https://github.com/kubernetes-sigs/cluster-api/issues/13763)) - Runtime SDK: Surface Runtime Extension errors in conditions ([#13813](https://github.com/kubernetes-sigs/cluster-api/issues/13813)) - Security: Updated gitignore ([#13799](https://github.com/kubernetes-sigs/cluster-api/issues/13799)) - Testing/Documentation/e2e: Improve support for OwnerReferencesPermissionEnforcement admission controller ([#13805](https://github.com/kubernetes-sigs/cluster-api/issues/13805)) - Testing: Add a test case to confirm that kcp can safely remove a member when it doesn't have a corresponding machine but it has no alarm ([#13772](https://github.com/kubernetes-sigs/cluster-api/issues/13772)) - Testing: Improve KCP remediation ack signal diagnostics and reset handling ([#13736](https://github.com/kubernetes-sigs/cluster-api/issues/13736)) - Testing: Make the clusterctl upgrade management cluster control plane count configurable ([#13766](https://github.com/kubernetes-sigs/cluster-api/issues/13766)) - Testing: Update version matrix for GitHub workflows for release 1.13 ([#13578](https://github.com/kubernetes-sigs/cluster-api/issues/13578)) - util: Deprecate util/record ([#13981](https://github.com/kubernetes-sigs/cluster-api/issues/13981)) - util: Refactor consistency store to allow defer without previous store registration ([#13751](https://github.com/kubernetes-sigs/cluster-api/issues/13751)) - util: Remove deprecated code ([#13749](https://github.com/kubernetes-sigs/cluster-api/issues/13749)) - util: Switch CRD migrator to use merge patch ([#13792](https://github.com/kubernetes-sigs/cluster-api/issues/13792)) :book: Additionally, there have been 32 contributions to our documentation and book. ([#13419](https://github.com/kubernetes-sigs/cluster-api/issues/13419), [#13559](https://github.com/kubernetes-sigs/cluster-api/issues/13559), [#13566](https://github.com/kubernetes-sigs/cluster-api/issues/13566), [#13568](https://github.com/kubernetes-sigs/cluster-api/issues/13568), [#13574](https://github.com/kubernetes-sigs/cluster-api/issues/13574), [#13589](https://github.com/kubernetes-sigs/cluster-api/issues/13589), [#13592](https://github.com/kubernetes-sigs/cluster-api/issues/13592), [#13603](https://github.com/kubernetes-sigs/cluster-api/issues/13603), [#13615](https://github.com/kubernetes-sigs/cluster-api/issues/13615), [#13620](https://github.com/kubernetes-sigs/cluster-api/issues/13620), [#13624](https://github.com/kubernetes-sigs/cluster-api/issues/13624), [#13637](https://github.com/kubernetes-sigs/cluster-api/issues/13637), [#13645](https://github.com/kubernetes-sigs/cluster-api/issues/13645), [#13683](https://github.com/kubernetes-sigs/cluster-api/issues/13683), [#13684](https://github.com/kubernetes-sigs/cluster-api/issues/13684), [#13696](https://github.com/kubernetes-sigs/cluster-api/issues/13696), [#13699](https://github.com/kubernetes-sigs/cluster-api/issues/13699), [#13704](https://github.com/kubernetes-sigs/cluster-api/issues/13704), [#13718](https://github.com/kubernetes-sigs/cluster-api/issues/13718), [#13777](https://github.com/kubernetes-sigs/cluster-api/issues/13777), [#13834](https://github.com/kubernetes-sigs/cluster-api/issues/13834), [#13859](https://github.com/kubernetes-sigs/cluster-api/issues/13859), [#13862](https://github.com/kubernetes-sigs/cluster-api/issues/13862), [#13887](https://github.com/kubernetes-sigs/cluster-api/issues/13887), [#13903](https://github.com/kubernetes-sigs/cluster-api/issues/13903), [#13918](https://github.com/kubernetes-sigs/cluster-api/issues/13918), [#13921](https://github.com/kubernetes-sigs/cluster-api/issues/13921), [#13947](https://github.com/kubernetes-sigs/cluster-api/issues/13947), [#13951](https://github.com/kubernetes-sigs/cluster-api/issues/13951), [#13955](https://github.com/kubernetes-sigs/cluster-api/issues/13955), [#13969](https://github.com/kubernetes-sigs/cluster-api/issues/13969), [#14007](https://github.com/kubernetes-sigs/cluster-api/issues/14007)) ##### Dependencies ##### Added - github.com/clipperhouse/displaywidth: [v0.10.0](https://github.com/clipperhouse/displaywidth/tree/v0.10.0) - github.com/clipperhouse/stringish: [v0.1.1](https://github.com/clipperhouse/stringish/tree/v0.1.1) - github.com/clipperhouse/uax29/v2: [v2.6.0](https://github.com/clipperhouse/uax29/tree/v2.6.0) - k8s.io/streaming: v0.36.3 ##### Changed - github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: [v1.31.0 → v1.32.0](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go/compare/detectors/gcp/v1.31.0...detectors/gcp/v1.32.0) - github.com/alecthomas/units: [b94a6e3 → 0f3dac3](https://github.com/alecthomas/units/compare/b94a6e3...0f3dac3) - github.com/antlr4-go/antlr/v4: [v4.13.0 → v4.13.1](https://github.com/antlr4-go/antlr/compare/v4.13.0...v4.13.1) - github.com/cncf/xds/go: [ee656c7 → dba9d58](https://github.com/cncf/xds/compare/ee656c7...dba9d58) - github.com/coredns/corefile-migration: [v1.0.31 → v1.0.34](https://github.com/coredns/corefile-migration/compare/v1.0.31...v1.0.34) - github.com/coreos/go-oidc: [v2.3.0+incompatible → v2.5.0+incompatible](https://github.com/coreos/go-oidc/compare/v2.3.0...v2.5.0) - github.com/coreos/go-systemd/v22: [v22.5.0 → v22.7.0](https://github.com/coreos/go-systemd/compare/v22.5.0...v22.7.0) - github.com/envoyproxy/go-control-plane/envoy: [v1.36.0 → v1.37.0](https://github.com/envoyproxy/go-control-plane/compare/envoy/v1.36.0...envoy/v1.37.0) - github.com/envoyproxy/protoc-gen-validate: [v1.3.0 → v1.3.3](https://github.com/envoyproxy/protoc-gen-validate/compare/v1.3.0...v1.3.3) - github.com/go-jose/go-jose/v4: [v4.1.3 → v4.1.4](https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4) - github.com/go-logr/logr: [v1.4.3 → v1.4.4](https://github.com/go-logr/logr/compare/v1.4.3...v1.4.4) - github.com/godbus/dbus/v5: [v5.0.4 → v5.1.0](https://github.com/godbus/dbus/compare/v5.0.4...v5.1.0) - github.com/golang-jwt/jwt/v5: [v5.2.2 → v5.3.0](https://github.com/golang-jwt/jwt/compare/v5.2.2...v5.3.0) - github.com/google/cel-go: [v0.26.0 → v0.29.0](https://github.com/google/cel-go/compare/v0.26.0...v0.29.0) - github.com/google/pprof: [294ebfa → 545e8a4](https://github.com/google/pprof/compare/294ebfa...545e8a4) - github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus: [v1.0.1 → v1.1.0](https://github.com/grpc-ecosystem/go-grpc-middleware/compare/providers/prometheus/v1.0.1...providers/prometheus/v1.1.0) - github.com/grpc-ecosystem/go-grpc-middleware/v2: [v2.3.0 → v2.3.3](https://github.com/grpc-ecosystem/go-grpc-middleware/compare/v2.3.0...v2.3.3) - github.com/mattn/go-runewidth: [v0.0.16 → v0.0.19](https://github.com/mattn/go-runewidth/compare/v0.0.16...v0.0.19) - github.com/moby/spdystream: [v0.5.0 → v0.5.1](https://github.com/moby/spdystream/compare/v0.5.0...v0.5.1) - github.com/olekukonko/errors: [v1.1.0 → v1.2.0](https://github.com/olekukonko/errors/compare/v1.1.0...v1.2.0) - github.com/olekukonko/ll: [v0.1.1 → v0.1.6](https://github.com/olekukonko/ll/compare/v0.1.1...v0.1.6) - github.com/olekukonko/tablewriter: [v1.0.9 → v1.1.4](https://github.com/olekukonko/tablewriter/compare/v1.0.9...v1.1.4) - github.com/onsi/ginkgo/v2: [v2.28.1 → v2.32.0](https://github.com/onsi/ginkgo/compare/v2.28.1...v2.32.0) - github.com/onsi/gomega: [v1.39.1 → v1.42.1](https://github.com/onsi/gomega/compare/v1.39.1...v1.42.1) - github.com/pmezard/go-difflib: [v1.0.0 → 5d4384e](https://github.com/pmezard/go-difflib/compare/v1.0.0...5d4384e) - github.com/prometheus/common: [v0.66.1 → v0.67.5](https://github.com/prometheus/common/compare/v0.66.1...v0.67.5) - github.com/prometheus/procfs: [v0.16.1 → v0.19.2](https://github.com/prometheus/procfs/compare/v0.16.1...v0.19.2) - go.etcd.io/etcd/api/v3: v3.6.10 → v3.6.14 - go.etcd.io/etcd/client/pkg/v3: v3.6.10 → v3.6.14 - go.etcd.io/etcd/client/v3: v3.6.10 → v3.6.14 - go.etcd.io/etcd/pkg/v3: v3.6.5 → v3.6.8 - go.etcd.io/etcd/server/v3: v3.6.5 → v3.6.8 - go.opentelemetry.io/contrib/detectors/gcp: v1.39.0 → v1.43.0 - go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc: v0.60.0 → v0.65.0 - go.uber.org/zap: v1.27.1 → v1.28.0 - golang.org/x/crypto: v0.50.0 → v0.53.0 - golang.org/x/exp: [`8a7402a`](https://github.com/kubernetes-sigs/cluster-api/commit/8a7402a) → [`944ab1f`](https://github.com/kubernetes-sigs/cluster-api/commit/944ab1f) - golang.org/x/mod: v0.34.0 → v0.37.0 - golang.org/x/net: v0.53.0 → v0.56.0 - golang.org/x/sync: v0.20.0 → v0.22.0 - golang.org/x/sys: v0.43.0 → v0.46.0 - golang.org/x/telemetry: [`579e4da`](https://github.com/kubernetes-sigs/cluster-api/commit/579e4da) → [`59b4966`](https://github.com/kubernetes-sigs/cluster-api/commit/59b4966) - golang.org/x/term: v0.42.0 → v0.44.0 - golang.org/x/text: v0.36.0 → v0.40.0 - golang.org/x/time: v0.9.0 → v0.14.0 - golang.org/x/tools/go/expect: v0.1.0-deprecated → v0.1.1-deprecated - golang.org/x/tools: v0.43.0 → v0.47.0 - google.golang.org/genproto/googleapis/api: [`9d38bb4`](https://github.com/kubernetes-sigs/cluster-api/commit/9d38bb4) → [`afd174a`](https://github.com/kubernetes-sigs/cluster-api/commit/afd174a) - google.golang.org/genproto/googleapis/rpc: [`9d38bb4`](https://github.com/kubernetes-sigs/cluster-api/commit/9d38bb4) → [`afd174a`](https://github.com/kubernetes-sigs/cluster-api/commit/afd174a) - google.golang.org/grpc: v1.80.0 → v1.82.1 - google.golang.org/protobuf: v1.36.11 → [`f2248ac`](https://github.com/kubernetes-sigs/cluster-api/commit/f2248ac) - k8s.io/api: v0.35.3 → v0.36.3 - k8s.io/apiextensions-apiserver: v0.35.3 → v0.36.3 - k8s.io/apimachinery: v0.35.3 → v0.36.3 - k8s.io/apiserver: v0.35.3 → v0.36.3 - k8s.io/client-go: v0.35.3 → v0.36.3 - k8s.io/cluster-bootstrap: v0.35.3 → v0.36.3 - k8s.io/code-generator: v0.35.3 → v0.36.3 - k8s.io/component-base: v0.35.3 → v0.36.3 - k8s.io/klog/v2: v2.130.1 → v2.140.0 - k8s.io/kms: v0.35.3 → v0.36.3 - k8s.io/kube-openapi: [`589584f`](https://github.com/kubernetes-sigs/cluster-api/commit/589584f) → [`43fb72c`](https://github.com/kubernetes-sigs/cluster-api/commit/43fb72c) - k8s.io/utils: [`bc988d5`](https://github.com/kubernetes-sigs/cluster-api/commit/bc988d5) → [`b8788ab`](https://github.com/kubernetes-sigs/cluster-api/commit/b8788ab) - sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.31.2 → v0.34.0 - sigs.k8s.io/controller-runtime: v0.23.3 → v0.24.1 - sigs.k8s.io/structured-merge-diff/v6: v6.3.2 → v6.4.2 ##### Removed - github.com/cenkalti/backoff/v4: [v4.3.0](https://github.com/cenkalti/backoff/tree/v4.3.0) - github.com/gregjones/httpcache: [901d907](https://github.com/gregjones/httpcache/tree/901d907) - github.com/grpc-ecosystem/go-grpc-prometheus: [v1.2.0](https://github.com/grpc-ecosystem/go-grpc-prometheus/tree/v1.2.0) - github.com/rivo/uniseg: [v0.4.7](https://github.com/rivo/uniseg/tree/v0.4.7) *Thanks to all our contributors!* 😊 ### [`v1.13.5`](https://github.com/kubernetes-sigs/cluster-api/releases/tag/v1.13.5) [Compare Source](https://github.com/kubernetes-sigs/cluster-api/compare/v1.13.4...v1.13.5) ##### 👌 Kubernetes version support - Management Cluster: v1.32.x -> v1.36.x - Workload Cluster: v1.30.x -> v1.36.x [More information about version support can be found here](https://cluster-api.sigs.k8s.io/reference/versions.html) ##### Changes since v1.13.4 ##### :chart\_with\_upwards\_trend: Overview - 13 new commits merged - 2 bugs fixed 🐛 ##### :bug: Bug Fixes - CAPD: Fix a panic in CAPDev cache.Get() ([#13961](https://github.com/kubernetes-sigs/cluster-api/issues/13961)) - ClusterClass: Fix Machine taint propagation in the Cluster topology controller for the v1beta1 contract ([#13985](https://github.com/kubernetes-sigs/cluster-api/issues/13985)) ##### :seedling: Others - clusterctl: Add oxide as an infrastructure provider ([#13934](https://github.com/kubernetes-sigs/cluster-api/issues/13934)) - clusterctl: Bump cert-manager to v1.21.0 ([#13917](https://github.com/kubernetes-sigs/cluster-api/issues/13917)) - clusterctl: Bump cert-manager to v1.21.1 ([#14011](https://github.com/kubernetes-sigs/cluster-api/issues/14011)) - clusterctl: Harden clusterctl move ([#13940](https://github.com/kubernetes-sigs/cluster-api/issues/13940)) - Dependency: Bump golang.org/x/text to v0.39.0, cel-go to v0.29.0 and grpc to v1.82.1 to address security advisories ([#13977](https://github.com/kubernetes-sigs/cluster-api/issues/13977)) - e2e: Bump autoscaler version used for testing ([#13942](https://github.com/kubernetes-sigs/cluster-api/issues/13942)) - e2e: Bump Kubernetes version used for testing to v1.37.0-beta.0 ([#13950](https://github.com/kubernetes-sigs/cluster-api/issues/13950)) - e2e: Increase clusterctl and e2e test dry-run cluster-template timeouts ([#14015](https://github.com/kubernetes-sigs/cluster-api/issues/14015)) - KCP: Bump corefile-migration to v1.0.34 ([#13958](https://github.com/kubernetes-sigs/cluster-api/issues/13958)) - KCP: KCP enforce context deadline on connection stream ([#14001](https://github.com/kubernetes-sigs/cluster-api/issues/14001)) :book: Additionally, there has been 1 contribution to our documentation and book. ([#13935](https://github.com/kubernetes-sigs/cluster-api/issues/13935)) ##### Dependencies ##### Added *Nothing has changed.* ##### Changed - github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: [v1.31.0 → v1.32.0](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go/compare/detectors/gcp/v1.31.0...detectors/gcp/v1.32.0) - github.com/antlr4-go/antlr/v4: [v4.13.0 → v4.13.1](https://github.com/antlr4-go/antlr/compare/v4.13.0...v4.13.1) - github.com/cncf/xds/go: [ee656c7 → dba9d58](https://github.com/cncf/xds/compare/ee656c7...dba9d58) - github.com/coredns/corefile-migration: [v1.0.32 → v1.0.34](https://github.com/coredns/corefile-migration/compare/v1.0.32...v1.0.34) - github.com/envoyproxy/go-control-plane/envoy: [v1.36.0 → v1.37.0](https://github.com/envoyproxy/go-control-plane/compare/envoy/v1.36.0...envoy/v1.37.0) - github.com/envoyproxy/protoc-gen-validate: [v1.3.0 → v1.3.3](https://github.com/envoyproxy/protoc-gen-validate/compare/v1.3.0...v1.3.3) - github.com/go-jose/go-jose/v4: [v4.1.3 → v4.1.4](https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4) - github.com/google/cel-go: [v0.26.0 → v0.29.0](https://github.com/google/cel-go/compare/v0.26.0...v0.29.0) - go.opentelemetry.io/contrib/detectors/gcp: v1.39.0 → v1.43.0 - golang.org/x/exp: [`8a7402a`](https://github.com/kubernetes-sigs/cluster-api/commit/8a7402a) → [`9b4947d`](https://github.com/kubernetes-sigs/cluster-api/commit/9b4947d) - golang.org/x/mod: v0.36.0 → v0.37.0 - golang.org/x/net: v0.55.0 → v0.56.0 - golang.org/x/telemetry: [`42602be`](https://github.com/kubernetes-sigs/cluster-api/commit/42602be) → [`59b4966`](https://github.com/kubernetes-sigs/cluster-api/commit/59b4966) - golang.org/x/text: v0.38.0 → v0.39.0 - golang.org/x/tools: v0.45.0 → v0.47.0 - google.golang.org/genproto/googleapis/api: [`9d38bb4`](https://github.com/kubernetes-sigs/cluster-api/commit/9d38bb4) → [`afd174a`](https://github.com/kubernetes-sigs/cluster-api/commit/afd174a) - google.golang.org/genproto/googleapis/rpc: [`9d38bb4`](https://github.com/kubernetes-sigs/cluster-api/commit/9d38bb4) → [`afd174a`](https://github.com/kubernetes-sigs/cluster-api/commit/afd174a) - google.golang.org/grpc: v1.80.0 → v1.82.1 ##### Removed *Nothing has changed.* *Thanks to all our contributors!* 😊 ### [`v1.13.4`](https://github.com/kubernetes-sigs/cluster-api/releases/tag/v1.13.4) [Compare Source](https://github.com/kubernetes-sigs/cluster-api/compare/v1.13.3...v1.13.4) #### 👌 Kubernetes version support - Management Cluster: v1.32.x -> v1.36.x - Workload Cluster: v1.30.x -> v1.36.x [More information about version support can be found here](https://cluster-api.sigs.k8s.io/reference/versions.html) #### Changes since v1.13.3 #### :chart\_with\_upwards\_trend: Overview - 7 new commits merged - 4 bugs fixed 🐛 #### :bug: Bug Fixes - clusterctl: Raise management cluster client QPS and Burst ([#13901](https://github.com/kubernetes-sigs/cluster-api/issues/13901)) - e2e: Bump kind image in clusterctl v1.10 upgrade test to avoid containerd segv ([#13854](https://github.com/kubernetes-sigs/cluster-api/issues/13854)) - e2e: Fix PrettyPrint in WaitForControlPlaneToBeReady ([#13844](https://github.com/kubernetes-sigs/cluster-api/issues/13844)) - MachineSet: Delete unhealthy Machines on old MS during in-place updates ([#13888](https://github.com/kubernetes-sigs/cluster-api/issues/13888)) #### :seedling: Others - clusterctl: Bump cert-manager to v1.20.3 ([#13851](https://github.com/kubernetes-sigs/cluster-api/issues/13851)) - Dependency: Bump Go version to v1.25.12 ([#13906](https://github.com/kubernetes-sigs/cluster-api/issues/13906)) - Dependency: Bump golang.org/x/crypto version to v0.53.0 ([#13864](https://github.com/kubernetes-sigs/cluster-api/issues/13864)) #### Dependencies ##### Added *Nothing has changed.* ##### Changed - golang.org/x/crypto: v0.51.0 → v0.53.0 - golang.org/x/mod: v0.35.0 → v0.36.0 - golang.org/x/sync: v0.20.0 → v0.21.0 - golang.org/x/sys: v0.45.0 → v0.46.0 - golang.org/x/telemetry: [`be6f6cb`](https://github.com/kubernetes-sigs/cluster-api/commit/be6f6cb) → [`42602be`](https://github.com/kubernetes-sigs/cluster-api/commit/42602be) - golang.org/x/term: v0.43.0 → v0.44.0 - golang.org/x/text: v0.37.0 → v0.38.0 - golang.org/x/tools: v0.44.0 → v0.45.0 ##### Removed *Nothing has changed.* *Thanks to all our contributors!* 😊 ### [`v1.13.3`](https://github.com/kubernetes-sigs/cluster-api/releases/tag/v1.13.3) [Compare Source](https://github.com/kubernetes-sigs/cluster-api/compare/v1.13.2...v1.13.3) #### 👌 Kubernetes version support - Management Cluster: v1.32.x -> v1.36.x - Workload Cluster: v1.30.x -> v1.36.x [More information about version support can be found here](https://cluster-api.sigs.k8s.io/reference/versions.html) #### Changes since v1.13.2 #### :chart\_with\_upwards\_trend: Overview - 14 new commits merged - 1 feature addition ✨ - 3 bugs fixed 🐛 #### :sparkles: New Features - ClusterCache: Expose DefaultTransform on CacheOptions ([#13785](https://github.com/kubernetes-sigs/cluster-api/issues/13785)) #### :bug: Bug Fixes - clusterctl: Skip update check for clusterctl completion ([#13697](https://github.com/kubernetes-sigs/cluster-api/issues/13697)) - KCP: Fix failing TestKubeadmControlPlaneReconciler\_reconcileEtcdMembers ([#13728](https://github.com/kubernetes-sigs/cluster-api/issues/13728)) - Security: Grant RBAC to support OwnerReferencesPermissionEnforcement admission controller ([#13817](https://github.com/kubernetes-sigs/cluster-api/issues/13817)) #### :seedling: Others - CI: Bump gcb-docker-gcloud image ([#13794](https://github.com/kubernetes-sigs/cluster-api/issues/13794)) - Dependency: Bump go to v1.25.11 ([#13789](https://github.com/kubernetes-sigs/cluster-api/issues/13789)) - Dependency: Bump golang/x/net to 0.55.0 ([#13746](https://github.com/kubernetes-sigs/cluster-api/issues/13746)) - e2e: Bump to kind main to fix e2e tests ([#13769](https://github.com/kubernetes-sigs/cluster-api/issues/13769)) - e2e: Bump to kind v0.32.0 ([#13781](https://github.com/kubernetes-sigs/cluster-api/issues/13781)) - e2e: Bump to kind v0.32.0 ([#13787](https://github.com/kubernetes-sigs/cluster-api/issues/13787)) - e2e: Make the clusterctl upgrade management cluster control plane count configurable ([#13771](https://github.com/kubernetes-sigs/cluster-api/issues/13771)) - KCP: Update RemoveEtcdMember to accept a \*etcd.Member instead of a member name ([#13786](https://github.com/kubernetes-sigs/cluster-api/issues/13786)) - Misc: Add finalizer only after we got owner/cluster ([#13748](https://github.com/kubernetes-sigs/cluster-api/issues/13748)) :book: Additionally, there has been 1 contribution to our documentation and book. ([#13719](https://github.com/kubernetes-sigs/cluster-api/issues/13719)) #### Dependencies ##### Added *Nothing has changed.* ##### Changed - golang.org/x/crypto: v0.50.0 → v0.51.0 - golang.org/x/mod: v0.34.0 → v0.35.0 - golang.org/x/net: v0.53.0 → v0.55.0 - golang.org/x/sys: v0.43.0 → v0.45.0 - golang.org/x/telemetry: [`579e4da`](https://github.com/kubernetes-sigs/cluster-api/commit/579e4da) → [`be6f6cb`](https://github.com/kubernetes-sigs/cluster-api/commit/be6f6cb) - golang.org/x/term: v0.42.0 → v0.43.0 - golang.org/x/text: v0.36.0 → v0.37.0 - golang.org/x/tools: v0.43.0 → v0.44.0 ##### Removed *Nothing has changed.* *Thanks to all our contributors!* 😊 ### [`v1.13.2`](https://github.com/kubernetes-sigs/cluster-api/releases/tag/v1.13.2) [Compare Source](https://github.com/kubernetes-sigs/cluster-api/compare/v1.13.1...v1.13.2) #### 👌 Kubernetes version support - Management Cluster: v1.32.x -> v1.36.x - Workload Cluster: v1.30.x -> v1.36.x [More information about version support can be found here](https://cluster-api.sigs.k8s.io/reference/versions.html) #### Changes since v1.13.1 #### :chart\_with\_upwards\_trend: Overview - 10 new commits merged - 2 bugs fixed 🐛 #### :bug: Bug Fixes - Devtools: Fix Tilt kube-state-metrics deployment ([#13678](https://github.com/kubernetes-sigs/cluster-api/issues/13678)) - KCP: Fix KCP in-place update with InfraMachine webhooks with immutability validation ([#13643](https://github.com/kubernetes-sigs/cluster-api/issues/13643)) #### :seedling: Others - CI: Make it possible to exclude CVEs with govulncheck ([#13671](https://github.com/kubernetes-sigs/cluster-api/issues/13671)) - Dependency: Bump envtest 1.36 ([#13658](https://github.com/kubernetes-sigs/cluster-api/issues/13658)) - Dependency: Bumping corefile-migration to v1.0.32 ([#13635](https://github.com/kubernetes-sigs/cluster-api/issues/13635)) - Dependency: Go bump to 1.25.10 ([#13666](https://github.com/kubernetes-sigs/cluster-api/issues/13666)) - e2e: Start testing K8s 1.37 ([#13638](https://github.com/kubernetes-sigs/cluster-api/issues/13638)) - KCP: Add kubeadm cluster role ([#13670](https://github.com/kubernetes-sigs/cluster-api/issues/13670)) - KCP: KCP cleanup etcd members not started after a machine is remediated ([#13688](https://github.com/kubernetes-sigs/cluster-api/issues/13688)) :book: Additionally, there has been 1 contribution to our documentation and book. ([#13621](https://github.com/kubernetes-sigs/cluster-api/issues/13621)) #### Dependencies ##### Added *Nothing has changed.* ##### Changed - github.com/coredns/corefile-migration: [v1.0.31 → v1.0.32](https://github.com/coredns/corefile-migration/compare/v1.0.31...v1.0.32) ##### Removed *Nothing has changed.* *Thanks to all our contributors!* 😊 ### [`v1.13.1`](https://github.com/kubernetes-sigs/cluster-api/releases/tag/v1.13.1) [Compare Source](https://github.com/kubernetes-sigs/cluster-api/compare/v1.13.0...v1.13.1) #### 👌 Kubernetes version support - Management Cluster: v1.32.x -> v1.36.x - Workload Cluster: v1.30.x -> v1.36.x [More information about version support can be found here](https://cluster-api.sigs.k8s.io/reference/versions.html) #### Changes since v1.13.0 #### :chart\_with\_upwards\_trend: Overview - 4 new commits merged #### :seedling: Others - Dependency: Bump the all-go-mod-patch-and-minor group across 3 directories with 11 updates ([#13601](https://github.com/kubernetes-sigs/cluster-api/issues/13601)) - e2e: Start testing with K8s 1.36.0 ([#13612](https://github.com/kubernetes-sigs/cluster-api/issues/13612)) :book: Additionally, there have been 2 contributions to our documentation and book. ([#13606](https://github.com/kubernetes-sigs/cluster-api/issues/13606), [#13616](https://github.com/kubernetes-sigs/cluster-api/issues/13616)) #### Dependencies ##### Added *Nothing has changed.* ##### Changed - github.com/moby/spdystream: [v0.5.0 → v0.5.1](https://github.com/moby/spdystream/compare/v0.5.0...v0.5.1) - k8s.io/api: v0.35.3 → v0.35.4 - k8s.io/apiextensions-apiserver: v0.35.3 → v0.35.4 - k8s.io/apimachinery: v0.35.3 → v0.35.4 - k8s.io/apiserver: v0.35.3 → v0.35.4 - k8s.io/client-go: v0.35.3 → v0.35.4 - k8s.io/cluster-bootstrap: v0.35.3 → v0.35.4 - k8s.io/code-generator: v0.35.3 → v0.35.4 - k8s.io/component-base: v0.35.3 → v0.35.4 - k8s.io/kms: v0.35.3 → v0.35.4 - sigs.k8s.io/structured-merge-diff/v6: v6.3.2 → v6.4.0 ##### Removed *Nothing has changed.* *Thanks to all our contributors!* 😊 ### [`v1.13.0`](https://github.com/kubernetes-sigs/cluster-api/releases/tag/v1.13.0) [Compare Source](https://github.com/kubernetes-sigs/cluster-api/compare/v1.12.11...v1.13.0) #### 👌 Kubernetes version support - Management Cluster: v1.32.x -> v1.35.x - Workload Cluster: v1.30.x -> v1.35.x [More information about version support can be found here](https://cluster-api.sigs.k8s.io/reference/versions.html) #### Highlights CAPI v1.13 is a release focused on stability, reliability and performances: - Bumped to Go 1.25, controller-runtime v0.23, k8s.io/\* v0.35, controller-gen v0.20 - KCP now allows to recover from different kind of failures as well as from multiple failures: - Increased tolerance to unexpected state of control plane components (accidental node deletion, manual removal of etcd members, accidental deletion of kubeadm control plane labels, and more) - Better visibility on common symptoms of kubeadm join errors (failed to promote etcd member, failed to apply kubeadm control plane labels and taints) - Multiple improvements to improve controllers memory and CPU footprint, performance and stability at scale Note: Cluster API is only supported on conformant Kubernetes Clusters and contract-relevant provider resources (e.g. InfraCluster) have to be implemented as CRDs (i.e. not via an aggregated apiserver). #### Other changes - The implementation of the [Taint propagation proposal](https://github.com/kubernetes-sigs/cluster-api/blob/main/docs/proposals/20250513-propogate-taints.md) is now completed - Runtime Hooks are now embedding v1beta2 Cluster types - Machine now reports info about machine placement in the status.failureDomain field - rolloutAfter for control plane and MachineDeployments can now be controlled from Cluster.spec.topology - MachineWaitForVolumeDetachConsiderVolumeAttachments feature graduated to GA - PriorityQueue feature graduated to beta and it is now enabled by default - ReconcilerRateLimiting feature graduated to beta and it is now enabled by default - Starting from this release ReconcilerRateLimiting feature also requires PriorityQueue to be enabled. This ensures that ReconcilerRateLimiting works consistently with controller runtime ExponentialBackoff. #### Deprecation and Removals Warning - v1alpha3 and v1alpha4 apiVersions have been removed - Reminder: [v1beta1 is on track to be unserved in CAPI v1.16](https://github.com/kubernetes-sigs/cluster-api/issues/11920) - Reminder: Provider should start implementing the v1beta2 contract ASAP. For additional details for providers, please take a look at [Cluster API v1.12 compared to v1.13](https://main.cluster-api.sigs.k8s.io/developer/providers/migrations/v1.12-to-v1.13).\[GitHub issue #REPLACE ME]\(REPLACE ME) #### Changes since v1.12.0 #### :chart\_with\_upwards\_trend: Overview - 279 new commits merged - 10 breaking changes :warning: - 30 feature additions ✨ - 39 bugs fixed 🐛 #### :memo: Proposals - Core: Update autoscaling from zero enhancement proposal with node labels and taints configuration clarification ([#13308](https://github.com/kubernetes-sigs/cluster-api/issues/13308)) #### :warning: Breaking Changes - API/Runtime SDK: Bump Runtime Hooks v1alpha1 types to core CAPI v1beta2 ([#13200](https://github.com/kubernetes-sigs/cluster-api/issues/13200)) - API: Remove v1alpha3 + v1alpha4 apiVersions ([#13199](https://github.com/kubernetes-sigs/cluster-api/issues/13199)) - CABPK: Remove deprecated --cluster-concurrency flag in CABPK ([#13288](https://github.com/kubernetes-sigs/cluster-api/issues/13288)) - CAPD: Mark docker resources as deprecated ([#13565](https://github.com/kubernetes-sigs/cluster-api/issues/13565)) - ClusterCache: Remove deprecated ClusterCache GetClientCertificatePrivateKey ([#13156](https://github.com/kubernetes-sigs/cluster-api/issues/13156)) - ClusterClass: Remove deprecated ShouldSkipImmutabilityChecks ([#13291](https://github.com/kubernetes-sigs/cluster-api/issues/13291)) - clusterctl: Remove deprecated --disable-grouping clusterctl describe cluster flag ([#13289](https://github.com/kubernetes-sigs/cluster-api/issues/13289)) - clusterctl: Remove deprecated provider CRD migration from clusterctl upgrade ([#13290](https://github.com/kubernetes-sigs/cluster-api/issues/13290)) - Dependency: Bump to controller-runtime main & controller-tools v0.20 ([#13159](https://github.com/kubernetes-sigs/cluster-api/issues/13159)) - Misc: Remove deprecated ParseMajorMinorPatchTolerant / ParseMajorMinorPatch ([#13292](https://github.com/kubernetes-sigs/cluster-api/issues/13292)) #### :sparkles: New Features - API: Backport newly introduced v1beta2 API fields to v1beta1 ([#13455](https://github.com/kubernetes-sigs/cluster-api/issues/13455)) - CABPK: Optimize cache configuration of CABPK & standardize cache/client setup ([#13407](https://github.com/kubernetes-sigs/cluster-api/issues/13407)) - CAPD: Implement DevMachinePools ([#13346](https://github.com/kubernetes-sigs/cluster-api/issues/13346)) - CAPD: Improve CAPD wait for multi-user target ([#13514](https://github.com/kubernetes-sigs/cluster-api/issues/13514)) - CAPD: Support externally managed LB ([#13362](https://github.com/kubernetes-sigs/cluster-api/issues/13362)) - Cluster: Only set ownerReference on InfraCluster/ControlPlane when Topology is defined ([#13332](https://github.com/kubernetes-sigs/cluster-api/issues/13332)) - ClusterCache: Add ClusterFilter to ClusterCache Options ([#12665](https://github.com/kubernetes-sigs/cluster-api/issues/12665)) - ClusterClass: Implement support for taints ([#13192](https://github.com/kubernetes-sigs/cluster-api/issues/13192)) - clusterctl: Allow overriding image name in clusterctl config ([#13014](https://github.com/kubernetes-sigs/cluster-api/issues/13014)) - Core: Optimize cache configuration of core CAPI ([#13488](https://github.com/kubernetes-sigs/cluster-api/issues/13488)) - Dependency: Bump Go to v1.25.5 ([#13164](https://github.com/kubernetes-sigs/cluster-api/issues/13164)) - Dependency: Bump to controller-runtime v0.23 ([#13245](https://github.com/kubernetes-sigs/cluster-api/issues/13245)) - Devtools: Add a flag to skip image preloading ([#13143](https://github.com/kubernetes-sigs/cluster-api/issues/13143)) - KCP/CABPK: Allow diskSetup to include partition layout ([#11634](https://github.com/kubernetes-sigs/cluster-api/issues/11634)) - KCP/MachineDeployment/Cluster: Add rolloutAfter to cluster.spec.topology ([#13391](https://github.com/kubernetes-sigs/cluster-api/issues/13391)) - KCP: Allow remediation of multiple failures in KCP ([#13352](https://github.com/kubernetes-sigs/cluster-api/issues/13352)) - KCP: Bump coredns/corefile-migration to v1.0.30 ([#13282](https://github.com/kubernetes-sigs/cluster-api/issues/13282)) - KCP: Implement support for machine taints ([#13181](https://github.com/kubernetes-sigs/cluster-api/issues/13181)) - KCP: Optimize cache configuration of KCP ([#13460](https://github.com/kubernetes-sigs/cluster-api/issues/13460)) - Machine: Add Machine status.failureDomain ([#13266](https://github.com/kubernetes-sigs/cluster-api/issues/13266)) - Machine: Promote MachineWaitForVolumeDetachConsiderVolumeAttachments feature to GA ([#13293](https://github.com/kubernetes-sigs/cluster-api/issues/13293)) - Metrics/e2e: Add infra CRDs to dashboards, improve/fix dashboards, enable native histograms ([#13354](https://github.com/kubernetes-sigs/cluster-api/issues/13354)) - Misc: Disable DWARF and symbol table to decrease binary/image size ([#12856](https://github.com/kubernetes-sigs/cluster-api/issues/12856)) - Misc: Enable PriorityQueue per default ([#13171](https://github.com/kubernetes-sigs/cluster-api/issues/13171)) - Misc: Promote ReconcileRateLimiting to beta (enabled per default) ([#13373](https://github.com/kubernetes-sigs/cluster-api/issues/13373)) - Misc: Tune controller concurrency and cache timeout for scale ([#13496](https://github.com/kubernetes-sigs/cluster-api/issues/13496)) - Release: Prepare main branch for v1.13 ([#13174](https://github.com/kubernetes-sigs/cluster-api/issues/13174)) - Testing: Add example / debug suite for envtest ([#13453](https://github.com/kubernetes-sigs/cluster-api/issues/13453)) - util: Extend conversion tests to cover the "no spec" case ([#13409](https://github.com/kubernetes-sigs/cluster-api/issues/13409)) - util: Refresh cache entries on cache hit in SSA caches ([#13459](https://github.com/kubernetes-sigs/cluster-api/issues/13459)) #### :bug: Bug Fixes - API: Fix v1beta1 ControlPlane contract to handle .status.initialized correctly ([#13186](https://github.com/kubernetes-sigs/cluster-api/issues/13186)) - CAPD: Fix "Failed to exec DockerMachine bootstrap" errors in CAPD ([#13447](https://github.com/kubernetes-sigs/cluster-api/issues/13447)) - CAPD: Remove finalizers during deletion if ownerRef was never set for cluster controllers ([#13239](https://github.com/kubernetes-sigs/cluster-api/issues/13239)) - CAPIM: Extend CAPD in-memory backend to set CP taint to fix scale tests ([#13187](https://github.com/kubernetes-sigs/cluster-api/issues/13187)) - CAPIM: Fix in-memory watch unit test ([#13464](https://github.com/kubernetes-sigs/cluster-api/issues/13464)) - CI: Bump trivy to v0.69.2 to fix CI ([#13387](https://github.com/kubernetes-sigs/cluster-api/issues/13387)) - Cluster: Fix panic in Cluster conversion ([#13383](https://github.com/kubernetes-sigs/cluster-api/issues/13383)) - ClusterClass/KCP/MachineSet/MachineDeployment: Mitigate managedFields apiserver issue for SSA ([#13338](https://github.com/kubernetes-sigs/cluster-api/issues/13338)) - ClusterClass: Allow adding spec via ClusterClass JSON patches ([#13225](https://github.com/kubernetes-sigs/cluster-api/issues/13225)) - ClusterClass: Do not overwrite global http.DefaultClient TLSConfig ([#13058](https://github.com/kubernetes-sigs/cluster-api/issues/13058)) - ClusterClass: Fix upgradePlan computation in GetUpgradePlanFromClusterClassVersions ([#13463](https://github.com/kubernetes-sigs/cluster-api/issues/13463)) - Dependency: Bump dependencies to fix CVE GO-2026-4394 (go.opentelemetry.io/otel/sdk pkg) ([#13372](https://github.com/kubernetes-sigs/cluster-api/issues/13372)) - Dependency: Fix CVE-2026-39883 ([#13573](https://github.com/kubernetes-sigs/cluster-api/issues/13573)) - e2e: Add wait-resource-versions-{become,remain}-stable intervals to e2e config ([#13263](https://github.com/kubernetes-sigs/cluster-api/issues/13263)) - e2e: Clean up namespace in e2e tests ([#13233](https://github.com/kubernetes-sigs/cluster-api/issues/13233)) - e2e: Fix cross-ns scale test ([#13309](https://github.com/kubernetes-sigs/cluster-api/issues/13309)) - e2e: Fix goroutine & memory leak in inmemory provider ([#13361](https://github.com/kubernetes-sigs/cluster-api/issues/13361)) - e2e: Fix node-label calculation in test extension & fix upgrade test ([#13356](https://github.com/kubernetes-sigs/cluster-api/issues/13356)) - e2e: Fix WaitForMachinesReady interval ([#13050](https://github.com/kubernetes-sigs/cluster-api/issues/13050)) - e2e: Increase reconcile timeout for KCP & DockerMachine ([#13093](https://github.com/kubernetes-sigs/cluster-api/issues/13093)) - e2e: Only retry creating objects that failed ([#13265](https://github.com/kubernetes-sigs/cluster-api/issues/13265)) - e2e: Tolerate NotFound errors during Namespace deletion in scale test cleanup ([#13439](https://github.com/kubernetes-sigs/cluster-api/issues/13439)) - KCP/MachineSet: Preserve existing object names for backward compatibility with pre-v1.7 in-place updates ([#13124](https://github.com/kubernetes-sigs/cluster-api/issues/13124)) - KCP: Grant `delete` permissions to Secrets. ([#13070](https://github.com/kubernetes-sigs/cluster-api/issues/13070)) - KCP: KCP deletion should tolerate missing InfraTemplates ([#13562](https://github.com/kubernetes-sigs/cluster-api/issues/13562)) - KCP: Use errors.Errorf instead of errors.Wrapf since the err is nil ([#13486](https://github.com/kubernetes-sigs/cluster-api/issues/13486)) - Machine/MachineSet/MachineDeployment: Fix UpToDate calculation for rolloutAfter ([#13404](https://github.com/kubernetes-sigs/cluster-api/issues/13404)) - MachineSet: Use MachineSet template values in completeMoveMachine for in-place updates ([#13059](https://github.com/kubernetes-sigs/cluster-api/issues/13059)) - Misc: Fix bug while setting status for deprecated fields ([#13336](https://github.com/kubernetes-sigs/cluster-api/issues/13336)) - Runtime SDK: Improve client cert/key rotation of the RuntimeSDK client ([#13213](https://github.com/kubernetes-sigs/cluster-api/issues/13213)) - Testing/e2e: Fix unit test flakes, improve clusterctl download error in e2e tests ([#13045](https://github.com/kubernetes-sigs/cluster-api/issues/13045)) - Testing: Fix flaky by waiting for CRD finalizer processing ([#13470](https://github.com/kubernetes-sigs/cluster-api/issues/13470)) - Testing: Fix flaky TestClusterReconciler unit test ([#13180](https://github.com/kubernetes-sigs/cluster-api/issues/13180)) - Testing: Fix TestReconcile flake ([#13255](https://github.com/kubernetes-sigs/cluster-api/issues/13255)) - Testing: Fix webhook envtest tests for Kubernetes < v1.35 ([#13170](https://github.com/kubernetes-sigs/cluster-api/issues/13170)) - Upgrades: Remove conflicting rules field from aggregated ClusterRoles ([#13490](https://github.com/kubernetes-sigs/cluster-api/issues/13490)) - util: Fix a panic in conditions.Delete method if the sources condition list is empty ([#13048](https://github.com/kubernetes-sigs/cluster-api/issues/13048)) - util: Fix exponential backoff with ReconcilerRateLimiting ([#13416](https://github.com/kubernetes-sigs/cluster-api/issues/13416)) - util: Fix patchHelper unit test flakes ([#13412](https://github.com/kubernetes-sigs/cluster-api/issues/13412)) #### :seedling: Others - API: Deprecate custom Condition types ([#13237](https://github.com/kubernetes-sigs/cluster-api/issues/13237)) - API: Introduce conversion.MarshalDataUnsafeNoCopy to avoid unnecessary memory allocations during conversion ([#13402](https://github.com/kubernetes-sigs/cluster-api/issues/13402)) - API: Postpone date when we stop serving v1beta1 ([#13394](https://github.com/kubernetes-sigs/cluster-api/issues/13394)) - API: Relax validation for Machine .status.addresses to maximum of 128 instead of 32 items ([#13060](https://github.com/kubernetes-sigs/cluster-api/issues/13060)) - API: Relax validation for Machine .status.addresses to maximum of 256 instead of 128 items ([#13395](https://github.com/kubernetes-sigs/cluster-api/issues/13395)) - CAPD/CAPIM: Implement .status.failureDomain for DockerMachine & DevMachine ([#13286](https://github.com/kubernetes-sigs/cluster-api/issues/13286)) - CAPD: Implement pause for DockerMachinePool ([#13445](https://github.com/kubernetes-sigs/cluster-api/issues/13445)) - CAPD: Improve condition if CAPD Machine is not yet ready for bootstrap exec ([#13461](https://github.com/kubernetes-sigs/cluster-api/issues/13461)) - CAPD: Move RBAC for devmachinetemplates from main.go to controller.go ([#13271](https://github.com/kubernetes-sigs/cluster-api/issues/13271)) - CAPD: Reduce verbosity of CAPD exec log ([#13493](https://github.com/kubernetes-sigs/cluster-api/issues/13493)) - CAPD: Use select with time.After instead of time.Sleep ([#13480](https://github.com/kubernetes-sigs/cluster-api/issues/13480)) - CAPIM: Fix inMemory watch ([#13229](https://github.com/kubernetes-sigs/cluster-api/issues/13229)) - CI: Bump golangci-lint v2.7.0 ([#13108](https://github.com/kubernetes-sigs/cluster-api/issues/13108)) - CI: Bump Kubernetes version used for testing to v1.35.0-rc.0 ([#13103](https://github.com/kubernetes-sigs/cluster-api/issues/13103)) - CI: Bump Kubernetes version used for testing to v1.35.0-rc.1 ([#13138](https://github.com/kubernetes-sigs/cluster-api/issues/13138)) - CI: Drop security scan on 1.10 ([#13454](https://github.com/kubernetes-sigs/cluster-api/issues/13454)) - CI: Dump resources in scale test ([#13232](https://github.com/kubernetes-sigs/cluster-api/issues/13232)) - CI: Improve Fake API server ([#13183](https://github.com/kubernetes-sigs/cluster-api/issues/13183)) - CI: Inmemory APIserver fails for unsupported fieldSelectors ([#13306](https://github.com/kubernetes-sigs/cluster-api/issues/13306)) - CI: Migrate away from custom GitHub action approval workflow ([#13533](https://github.com/kubernetes-sigs/cluster-api/issues/13533)) - CI: Revive the debug endpoint for CAPDev in-memory ([#13423](https://github.com/kubernetes-sigs/cluster-api/issues/13423)) - CI: Use env test 1.35.0 ([#13168](https://github.com/kubernetes-sigs/cluster-api/issues/13168)) - ClusterCache: Remove stack traces from ClusterCache errors ([#13396](https://github.com/kubernetes-sigs/cluster-api/issues/13396)) - ClusterClass: Add validation in ClusterClass for CP MachineInfra ([#13378](https://github.com/kubernetes-sigs/cluster-api/issues/13378)) - ClusterClass: Fix test compute control plane version ([#13287](https://github.com/kubernetes-sigs/cluster-api/issues/13287)) - ClusterClass: Improve topology diff ([#13166](https://github.com/kubernetes-sigs/cluster-api/issues/13166)) - ClusterClass: Simplify GetUpgradePlanFromClusterClassVersions ([#13276](https://github.com/kubernetes-sigs/cluster-api/issues/13276)) - clusterctl: Add cloudscale-ch-cloudscale provider ([#13567](https://github.com/kubernetes-sigs/cluster-api/issues/13567)) - clusterctl: Bump cert-manager to v1.20.0 ([#13482](https://github.com/kubernetes-sigs/cluster-api/issues/13482)) - clusterctl: Bump cert-manager to v1.20.1 ([#13515](https://github.com/kubernetes-sigs/cluster-api/issues/13515)) - clusterctl: Bump cert-manager v1.19.4 ([#13376](https://github.com/kubernetes-sigs/cluster-api/issues/13376)) - clusterctl: Bump Cert-manager v1.20.2 ([#13598](https://github.com/kubernetes-sigs/cluster-api/issues/13598)) - clusterctl: Drop handling of old cert-manager annotation in clusterctl ([#13202](https://github.com/kubernetes-sigs/cluster-api/issues/13202)) - clusterctl: Update cert-manager to v1.19.3 ([#13307](https://github.com/kubernetes-sigs/cluster-api/issues/13307)) - clusterctl: Update to cert-manager v1.19.2 ([#13277](https://github.com/kubernetes-sigs/cluster-api/issues/13277)) - ClusterResourceSet: Remove ClusterResourceSet ensureKubernetesServiceCreated ([#13158](https://github.com/kubernetes-sigs/cluster-api/issues/13158)) - ClusterResourceSet: Set WithOwnedV1Beta1Conditions for ClusterResourceSet patch ([#13267](https://github.com/kubernetes-sigs/cluster-api/issues/13267)) - Community meeting: Add AndiDog as machine pool area reviewer ([#13033](https://github.com/kubernetes-sigs/cluster-api/issues/13033)) - Dependency: Bump go 1.25.7 ([#13323](https://github.com/kubernetes-sigs/cluster-api/issues/13323)) - Dependency: Bump Go to v1.24.11 ([#13106](https://github.com/kubernetes-sigs/cluster-api/issues/13106)) - Dependency: Bump Go to v1.25.6 ([#13240](https://github.com/kubernetes-sigs/cluster-api/issues/13240)) - Dependency: Bump go v1.25.8 ([#13428](https://github.com/kubernetes-sigs/cluster-api/issues/13428)) - Dependency: Bump go v1.25.9 ([#13553](https://github.com/kubernetes-sigs/cluster-api/issues/13553)) - Dependency: Bump go-github to v82 ([#13296](https://github.com/kubernetes-sigs/cluster-api/issues/13296)) - Dependency: Bump golang.org/x/net to v0.51 to fix CVE ([#13392](https://github.com/kubernetes-sigs/cluster-api/issues/13392)) - Dependency: Bump the all-go-mod-patch-and-minor group across 3 directories with 4 updates ([#13582](https://github.com/kubernetes-sigs/cluster-api/issues/13582)) - Dependency: Switch from docker to moby dependencies ([#13545](https://github.com/kubernetes-sigs/cluster-api/issues/13545)) - Devtools: Add additional\_uncategorized\_resources for Tilt ([#13312](https://github.com/kubernetes-sigs/cluster-api/issues/13312)) - Devtools: Add labels to cluster deployment form fields ([#13441](https://github.com/kubernetes-sigs/cluster-api/issues/13441)) - Devtools: Add other to prow job generator ([#13537](https://github.com/kubernetes-sigs/cluster-api/issues/13537)) - Devtools: Bump CAPI Visualizer to v1.5.0 ([#13222](https://github.com/kubernetes-sigs/cluster-api/issues/13222)) - Devtools: Enable native histograms in Grafana / Prometheus ([#13304](https://github.com/kubernetes-sigs/cluster-api/issues/13304)) - Devtools: Make kind image configurable via env var for make tilt-up ([#13333](https://github.com/kubernetes-sigs/cluster-api/issues/13333)) - Devtools: Updated dev observability stack ([#13044](https://github.com/kubernetes-sigs/cluster-api/issues/13044)) - e2e: 0 in e2e tests ([#13429](https://github.com/kubernetes-sigs/cluster-api/issues/13429)) - e2e: Add json struct tags to ContainerImage ([#13130](https://github.com/kubernetes-sigs/cluster-api/issues/13130)) - e2e: Add retry in test framework when getting manifest YAMLs ([#13357](https://github.com/kubernetes-sigs/cluster-api/issues/13357)) - e2e: Bump autoscaler version used for testing to v1.34.2 ([#13102](https://github.com/kubernetes-sigs/cluster-api/issues/13102)) - e2e: Bump autoscaler version used for testing to v1.35.0 ([#13353](https://github.com/kubernetes-sigs/cluster-api/issues/13353)) - e2e: Bump kind to v0.31.0 ([#13162](https://github.com/kubernetes-sigs/cluster-api/issues/13162)) - e2e: Bump Kubernetes version used for testing to v1.35.0 ([#13151](https://github.com/kubernetes-sigs/cluster-api/issues/13151)) - e2e: Bump to etcd-v3.6.6-0 ([#13144](https://github.com/kubernetes-sigs/cluster-api/issues/13144)) - e2e: Do not expect Machines for MachinePools not supporting Machines ([#13071](https://github.com/kubernetes-sigs/cluster-api/issues/13071)) - e2e: Drop handling for clusterctl < v1.7.2 in e2e tests & framework ([#13347](https://github.com/kubernetes-sigs/cluster-api/issues/13347)) - e2e: Drop unused e2e test template & handling for Kubernetes < v1.25 in e2e CC ([#13348](https://github.com/kubernetes-sigs/cluster-api/issues/13348)) - e2e: Extend test extension to improve test coverage ([#13343](https://github.com/kubernetes-sigs/cluster-api/issues/13343)) - e2e: Improve scale test for re-entrancy and improve observability stack ([#13492](https://github.com/kubernetes-sigs/cluster-api/issues/13492)) - e2e: Make clusterctl upgrade test to work when there are no machines ([#13072](https://github.com/kubernetes-sigs/cluster-api/issues/13072)) - e2e: Remove handling for Kubernetes <= v1.28 in clusterctl upgrade test ([#13157](https://github.com/kubernetes-sigs/cluster-api/issues/13157)) - e2e: Skip test using outdated docker client ([#13125](https://github.com/kubernetes-sigs/cluster-api/issues/13125)) - e2e: Small cleanup in the RuntimeSDK test ([#13274](https://github.com/kubernetes-sigs/cluster-api/issues/13274)) - e2e: Start testing against Kubernetes v1.36 ([#13152](https://github.com/kubernetes-sigs/cluster-api/issues/13152)) - e2e: Start testing with Kubernetes v1.36.0-beta.0 ([#13513](https://github.com/kubernetes-sigs/cluster-api/issues/13513)) - e2e: Start testing with Kubernetes v1.36.0-rc.0 ([#13569](https://github.com/kubernetes-sigs/cluster-api/issues/13569)) - e2e: Start testing with Kubernetes v1.36.0-rc.1 ([#13587](https://github.com/kubernetes-sigs/cluster-api/issues/13587)) - e2e: Use crane to pre-pull images instead of docker pull ([#13113](https://github.com/kubernetes-sigs/cluster-api/issues/13113)) - KCP: Drop unnecessary etcd call in KCP ([#13330](https://github.com/kubernetes-sigs/cluster-api/issues/13330)) - KCP: Fix flaky KCP test ([#13374](https://github.com/kubernetes-sigs/cluster-api/issues/13374)) - KCP: KCP should handle missing control plane label ([#13466](https://github.com/kubernetes-sigs/cluster-api/issues/13466)) - KCP: KCP should read only KCP machines ([#13457](https://github.com/kubernetes-sigs/cluster-api/issues/13457)) - KCP: KCP should report missing certificates ([#13175](https://github.com/kubernetes-sigs/cluster-api/issues/13175)) - KCP: KCP should report missing Node labels and taint ([#13176](https://github.com/kubernetes-sigs/cluster-api/issues/13176)) - KCP: Migrate from Requeue to RequeueAfter in kcp ([#13028](https://github.com/kubernetes-sigs/cluster-api/issues/13028)) - KCP: Remove live list Machine call in KCP ([#13458](https://github.com/kubernetes-sigs/cluster-api/issues/13458)) - KCP: Remove the ControlPlaneKubeletLocalMode for kubeadm 1.36 later ([#13177](https://github.com/kubernetes-sigs/cluster-api/issues/13177)) - Logging: Drop or reduce verbosity for noisy logs ([#13420](https://github.com/kubernetes-sigs/cluster-api/issues/13420)) - Logging: Log flags on controller startup ([#13437](https://github.com/kubernetes-sigs/cluster-api/issues/13437)) - Logging: Use klog.Obj in log messages ([#13421](https://github.com/kubernetes-sigs/cluster-api/issues/13421)) - Machine: Avoid unsetting nodeDeletionTimeoutSeconds during Machine deletion ([#13401](https://github.com/kubernetes-sigs/cluster-api/issues/13401)) - MachineHealthCheck: Decrease verbosity for MHC log entry ([#13076](https://github.com/kubernetes-sigs/cluster-api/issues/13076)) - MachineHealthCheck: Increase MHC rate limiting and filter events ([#13422](https://github.com/kubernetes-sigs/cluster-api/issues/13422)) - MachinePool: Fix reconcileDelete returning unnecessary error ([#13481](https://github.com/kubernetes-sigs/cluster-api/issues/13481)) - Misc: Increase default kube-api qps/burst ([#13317](https://github.com/kubernetes-sigs/cluster-api/issues/13317)) - Misc: Removing cluster-api-provider-nested as it is read-only ([#13500](https://github.com/kubernetes-sigs/cluster-api/issues/13500)) - Misc: Removing v1beta1 from admissionReviewVersions & conversionReviewVersions ([#13190](https://github.com/kubernetes-sigs/cluster-api/issues/13190)) - Runtime SDK: Add httpClientCache to runtime client ([#13075](https://github.com/kubernetes-sigs/cluster-api/issues/13075)) - Runtime SDK: Allow chained upgrade with runtimeSDK feature flag false ([#13517](https://github.com/kubernetes-sigs/cluster-api/issues/13517)) - Testing: Extend managedField mitigation unit test ([#13450](https://github.com/kubernetes-sigs/cluster-api/issues/13450)) - Testing: Improve error reporting of envtest CleanupAndWait ([#13446](https://github.com/kubernetes-sigs/cluster-api/issues/13446)) - Testing: Improve pod log streaming to avoid duplicate logs ([#13410](https://github.com/kubernetes-sigs/cluster-api/issues/13410)) - Testing: Increase envtest manager graceful shutdown timeout & print goroutines on error ([#13443](https://github.com/kubernetes-sigs/cluster-api/issues/13443)) - Testing: Simplify TestGetNode unit test ([#13196](https://github.com/kubernetes-sigs/cluster-api/issues/13196)) - Testing: Update version matrix for GitHub workflows for release 1.12 ([#13049](https://github.com/kubernetes-sigs/cluster-api/issues/13049)) - util: Add safeguard to patchHelper to avoid sending empty patches to the apiserver ([#13403](https://github.com/kubernetes-sigs/cluster-api/issues/13403)) - util: Export controller util ([#13363](https://github.com/kubernetes-sigs/cluster-api/issues/13363)) - util: Improve patch helper for no-op cases ([#13364](https://github.com/kubernetes-sigs/cluster-api/issues/13364)) - util: Optimise patch calls ([#13367](https://github.com/kubernetes-sigs/cluster-api/issues/13367)) - util: Reduce dep tree for util/patch ([#13275](https://github.com/kubernetes-sigs/cluster-api/issues/13275)) - util: Stop using patch helper when enforcing finalizers ([#13365](https://github.com/kubernetes-sigs/cluster-api/issues/13365)) :book: Additionally, there have been 47 contributions to our documentation and book. ([#12872](https://github.com/kubernetes-sigs/cluster-api/issues/12872), [#12971](https://github.com/kubernetes-sigs/cluster-api/issues/12971), [#13016](https://github.com/kubernetes-sigs/cluster-api/issues/13016), [#13043](https://github.com/kubernetes-sigs/cluster-api/issues/13043), [#13055](https://github.com/kubernetes-sigs/cluster-api/issues/13055), [#13079](https://github.com/kubernetes-sigs/cluster-api/issues/13079), [#13086](https://github.com/kubernetes-sigs/cluster-api/issues/13086), [#13087](https://github.com/kubernetes-sigs/cluster-api/issues/13087), [#13088](https://github.com/kubernetes-sigs/cluster-api/issues/13088), [#13095](https://github.com/kubernetes-sigs/cluster-api/issues/13095), [#13134](https://github.com/kubernetes-sigs/cluster-api/issues/13134), [#13140](https://github.com/kubernetes-sigs/cluster-api/issues/13140), [#13153](https://github.com/kubernetes-sigs/cluster-api/issues/13153), [#13155](https://github.com/kubernetes-sigs/cluster-api/issues/13155), [#13179](https://github.com/kubernetes-sigs/cluster-api/issues/13179), [#13193](https://github.com/kubernetes-sigs/cluster-api/issues/13193), [#13194](https://github.com/kubernetes-sigs/cluster-api/issues/13194), [#13195](https://github.com/kubernetes-sigs/cluster-api/issues/13195), [#13201](https://github.com/kubernetes-sigs/cluster-api/issues/13201), [#13204](https://github.com/kubernetes-sigs/cluster-api/issues/13204), [#13205](https://github.com/kubernetes-sigs/cluster-api/issues/13205), [#13206](https://github.com/kubernetes-sigs/cluster-api/issues/13206), [#13207](https://github.com/kubernetes-sigs/cluster-api/issues/13207), [#13216](https://github.com/kubernetes-sigs/cluster-api/issues/13216), [#13220](https://github.com/kubernetes-sigs/cluster-api/issues/13220), [#13228](https://github.com/kubernetes-sigs/cluster-api/issues/13228), [#13259](https://github.com/kubernetes-sigs/cluster-api/issues/13259), [#13260](https://github.com/kubernetes-sigs/cluster-api/issues/13260), [#13272](https://github.com/kubernetes-sigs/cluster-api/issues/13272), [#13283](https://github.com/kubernetes-sigs/cluster-api/issues/13283), [#13297](https://github.com/kubernetes-sigs/cluster-api/issues/13297), [#13302](https://github.com/kubernetes-sigs/cluster-api/issues/13302), [#13311](https://github.com/kubernetes-sigs/cluster-api/issues/13311), [#13334](https://github.com/kubernetes-sigs/cluster-api/issues/13334), [#13414](https://github.com/kubernetes-sigs/cluster-api/issues/13414), [#13419](https://github.com/kubernetes-sigs/cluster-api/issues/13419), [#13435](https://github.com/kubernetes-sigs/cluster-api/issues/13435), [#13436](https://github.com/kubernetes-sigs/cluster-api/issues/13436), [#13456](https://github.com/kubernetes-sigs/cluster-api/issues/13456), [#13527](https://github.com/kubernetes-sigs/cluster-api/issues/13527), [#13534](https://github.com/kubernetes-sigs/cluster-api/issues/13534), [#13535](https://github.com/kubernetes-sigs/cluster-api/issues/13535), [#13560](https://github.com/kubernetes-sigs/cluster-api/issues/13560), [#13577](https://github.com/kubernetes-sigs/cluster-api/issues/13577), [#13581](https://github.com/kubernetes-sigs/cluster-api/issues/13581), [#13586](https://github.com/kubernetes-sigs/cluster-api/issues/13586), [#13590](https://github.com/kubernetes-sigs/cluster-api/issues/13590)) #### Dependencies ##### Added - github.com/cenkalti/backoff/v5: [v5.0.3](https://github.com/cenkalti/backoff/tree/v5.0.3) - github.com/google/go-github/v82: [v82.0.0](https://github.com/google/go-github/tree/v82.0.0) - golang.org/x/tools/go/expect: v0.1.0-deprecated - golang.org/x/tools/go/packages/packagestest: v0.1.1-deprecated - gonum.org/v1/gonum: v0.17.0 ##### Changed - cel.dev/expr: v0.24.0 → v0.25.1 - cloud.google.com/go/compute/metadata: v0.6.0 → v0.9.0 - github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: [v1.26.0 → v1.31.0](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go/compare/detectors/gcp/v1.26.0...detectors/gcp/v1.31.0) - github.com/cncf/xds/go: [2f00578 → ee656c7](https://github.com/cncf/xds/compare/2f00578...ee656c7) - github.com/coredns/corefile-migration: [v1.0.29 → v1.0.31](https://github.com/coredns/corefile-migration/compare/v1.0.29...v1.0.31) - github.com/envoyproxy/go-control-plane/envoy: [v1.32.4 → v1.36.0](https://github.com/envoyproxy/go-control-plane/compare/envoy/v1.32.4...envoy/v1.36.0) - github.com/envoyproxy/go-control-plane: [v0.13.4 → v0.14.0](https://github.com/envoyproxy/go-control-plane/compare/v0.13.4...v0.14.0) - github.com/envoyproxy/protoc-gen-validate: [v1.2.1 → v1.3.0](https://github.com/envoyproxy/protoc-gen-validate/compare/v1.2.1...v1.3.0) - github.com/fatih/color: [v1.18.0 → v1.19.0](https://github.com/fatih/color/compare/v1.18.0...v1.19.0) - github.com/go-jose/go-jose/v4: [v4.0.4 → v4.1.3](https://github.com/go-jose/go-jose/compare/v4.0.4...v4.1.3) - github.com/golang/glog: [v1.2.4 → v1.2.5](https://github.com/golang/glog/compare/v1.2.4...v1.2.5) - github.com/google/go-querystring: [v1.1.0 → v1.2.0](https://github.com/google/go-querystring/compare/v1.1.0...v1.2.0) - github.com/google/pprof: [f64d9cf → 294ebfa](https://github.com/google/pprof/compare/f64d9cf...294ebfa) - github.com/grpc-ecosystem/grpc-gateway/v2: [v2.26.3 → v2.28.0](https://github.com/grpc-ecosystem/grpc-gateway/compare/v2.26.3...v2.28.0) - github.com/onsi/ginkgo/v2: [v2.27.2 → v2.28.1](https://github.com/onsi/ginkgo/compare/v2.27.2...v2.28.1) - github.com/onsi/gomega: [v1.38.2 → v1.39.1](https://github.com/onsi/gomega/compare/v1.38.2...v1.39.1) - github.com/prometheus/client\_golang: [v1.22.0 → v1.23.2](https://github.com/prometheus/client_golang/compare/v1.22.0...v1.23.2) - github.com/prometheus/common: [v0.62.0 → v0.66.1](https://github.com/prometheus/common/compare/v0.62.0...v0.66.1) - github.com/prometheus/procfs: [v0.15.1 → v0.16.1](https://github.com/prometheus/procfs/compare/v0.15.1...v0.16.1) - github.com/spf13/cobra: [v1.10.1 → v1.10.2](https://github.com/spf13/cobra/compare/v1.10.1...v1.10.2) - github.com/spiffe/go-spiffe/v2: [v2.5.0 → v2.6.0](https://github.com/spiffe/go-spiffe/compare/v2.5.0...v2.6.0) - github.com/valyala/fastjson: [v1.6.4 → v1.6.10](https://github.com/valyala/fastjson/compare/v1.6.4...v1.6.10) - go.etcd.io/bbolt: v1.4.2 → v1.4.3 - go.etcd.io/etcd/api/v3: v3.6.6 → v3.6.10 - go.etcd.io/etcd/client/pkg/v3: v3.6.6 → v3.6.10 - go.etcd.io/etcd/client/v3: v3.6.6 → v3.6.10 - go.etcd.io/etcd/pkg/v3: v3.6.4 → v3.6.5 - go.etcd.io/etcd/server/v3: v3.6.4 → v3.6.5 - go.opentelemetry.io/auto/sdk: v1.1.0 → v1.2.1 - go.opentelemetry.io/contrib/detectors/gcp: v1.34.0 → v1.39.0 - go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.58.0 → v0.65.0 - go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.34.0 → v1.43.0 - go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.34.0 → v1.43.0 - go.opentelemetry.io/otel/metric: v1.35.0 → v1.43.0 - go.opentelemetry.io/otel/sdk/metric: v1.34.0 → v1.43.0 - go.opentelemetry.io/otel/sdk: v1.34.0 → v1.43.0 - go.opentelemetry.io/otel/trace: v1.35.0 → v1.43.0 - go.opentelemetry.io/otel: v1.35.0 → v1.43.0 - go.opentelemetry.io/proto/otlp: v1.5.0 → v1.10.0 - go.yaml.in/yaml/v2: v2.4.2 → v2.4.3 - golang.org/x/crypto: v0.45.0 → v0.50.0 - golang.org/x/mod: v0.29.0 → v0.34.0 - golang.org/x/net: v0.47.0 → v0.53.0 - golang.org/x/oauth2: v0.33.0 → v0.36.0 - golang.org/x/sync: v0.18.0 → v0.20.0 - golang.org/x/sys: v0.38.0 → v0.43.0 - golang.org/x/telemetry: [`078029d`](https://github.com/kubernetes-sigs/cluster-api/commit/078029d) → [`579e4da`](https://github.com/kubernetes-sigs/cluster-api/commit/579e4da) - golang.org/x/term: v0.37.0 → v0.42.0 - golang.org/x/text: v0.31.0 → v0.36.0 - golang.org/x/tools: v0.38.0 → v0.43.0 - google.golang.org/appengine: v1.6.7 → v1.6.5 - google.golang.org/genproto/googleapis/api: [`a0af3ef`](https://github.com/kubernetes-sigs/cluster-api/commit/a0af3ef) → [`9d38bb4`](https://github.com/kubernetes-sigs/cluster-api/commit/9d38bb4) - google.golang.org/genproto/googleapis/rpc: [`a0af3ef`](https://github.com/kubernetes-sigs/cluster-api/commit/a0af3ef) → [`9d38bb4`](https://github.com/kubernetes-sigs/cluster-api/commit/9d38bb4) - google.golang.org/grpc: v1.72.3 → v1.80.0 - google.golang.org/protobuf: v1.36.7 → v1.36.11 - gopkg.in/evanphx/json-patch.v4: v4.12.0 → v4.13.0 - k8s.io/api: v0.34.2 → v0.35.3 - k8s.io/apiextensions-apiserver: v0.34.2 → v0.35.3 - k8s.io/apimachinery: v0.34.2 → v0.35.3 - k8s.io/apiserver: v0.34.2 → v0.35.3 - k8s.io/client-go: v0.34.2 → v0.35.3 - k8s.io/cluster-bootstrap: v0.34.2 → v0.35.3 - k8s.io/code-generator: v0.34.2 → v0.35.3 - k8s.io/component-base: v0.34.2 → v0.35.3 - k8s.io/gengo/v2: [`85fd79d`](https://github.com/kubernetes-sigs/cluster-api/commit/85fd79d) → [`ec3ebc5`](https://github.com/kubernetes-sigs/cluster-api/commit/ec3ebc5) - k8s.io/kms: v0.34.2 → v0.35.3 - k8s.io/kube-openapi: [`f3f2b99`](https://github.com/kubernetes-sigs/cluster-api/commit/f3f2b99) → [`589584f`](https://github.com/kubernetes-sigs/cluster-api/commit/589584f) - k8s.io/utils: [`4c0f3b2`](https://github.com/kubernetes-sigs/cluster-api/commit/4c0f3b2) → [`bc988d5`](https://github.com/kubernetes-sigs/cluster-api/commit/bc988d5) - sigs.k8s.io/controller-runtime: v0.22.4 → v0.23.3 - sigs.k8s.io/json: [`cfa47c3`](https://github.com/kubernetes-sigs/cluster-api/commit/cfa47c3) → [`2d32026`](https://github.com/kubernetes-sigs/cluster-api/commit/2d32026) - sigs.k8s.io/structured-merge-diff/v6: v6.3.0 → v6.3.2 ##### Removed - github.com/ProtonMail/go-crypto: [7d5c6f0](https://github.com/ProtonMail/go-crypto/tree/7d5c6f0) - github.com/bwesterb/go-ristretto: [v1.2.3](https://github.com/bwesterb/go-ristretto/tree/v1.2.3) - github.com/cloudflare/circl: [v1.6.1](https://github.com/cloudflare/circl/tree/v1.6.1) - github.com/google/go-github/v53: [v53.2.0](https://github.com/google/go-github/tree/v53.2.0) - github.com/zeebo/errs: [v1.4.0](https://github.com/zeebo/errs/tree/v1.4.0) - go.uber.org/automaxprocs: v1.6.0 *Thanks to all our contributors!* 😊 ### [`v1.12.11`](https://github.com/kubernetes-sigs/cluster-api/releases/tag/v1.12.11) [Compare Source](https://github.com/kubernetes-sigs/cluster-api/compare/v1.12.10...v1.12.11) ##### 👌 Kubernetes version support - Management Cluster: v1.31.x -> v1.36.x - Workload Cluster: v1.29.x -> v1.36.x [More information about version support can be found here](https://cluster-api.sigs.k8s.io/reference/versions.html) ##### Changes since v1.12.10 ##### :chart\_with\_upwards\_trend: Overview - 9 new commits merged - 1 bug fixed 🐛 ##### :bug: Bug Fixes - CAPD: Fix a panic in CAPDev cache.Get() ([#13962](https://github.com/kubernetes-sigs/cluster-api/issues/13962)) ##### :seedling: Others - CI: Trivyignore CVE-2026-56852 ([#14027](https://github.com/kubernetes-sigs/cluster-api/issues/14027)) - clusterctl: Bump cert-manager to v1.21.0 ([#13916](https://github.com/kubernetes-sigs/cluster-api/issues/13916)) - clusterctl: Harden clusterctl move ([#13941](https://github.com/kubernetes-sigs/cluster-api/issues/13941)) - Dependency: Bump x/text to v0.39.0, otel to v1.41.0, cel-go to v0.29.0 and grpc to v1.82.1 to address security advisories ([#13978](https://github.com/kubernetes-sigs/cluster-api/issues/13978)) - e2e: Bump autoscaler version used for testing ([#13943](https://github.com/kubernetes-sigs/cluster-api/issues/13943)) - e2e: Increase clusterctl and e2e test dry-run cluster-template timeouts ([#14016](https://github.com/kubernetes-sigs/cluster-api/issues/14016)) - KCP: Bump corefile-migration to v1.0.34 ([#13957](https://github.com/kubernetes-sigs/cluster-api/issues/13957)) - KCP: KCP enforce context deadline on connection stream ([#14004](https://github.com/kubernetes-sigs/cluster-api/issues/14004)) ##### Dependencies ##### Added *Nothing has changed.* ##### Changed - github.com/antlr4-go/antlr/v4: [v4.13.0 → v4.13.1](https://github.com/antlr4-go/antlr/compare/v4.13.0...v4.13.1) - github.com/coredns/corefile-migration: [v1.0.32 → v1.0.34](https://github.com/coredns/corefile-migration/compare/v1.0.32...v1.0.34) - github.com/google/cel-go: [v0.26.0 → v0.29.0](https://github.com/google/cel-go/compare/v0.26.0...v0.29.0) - golang.org/x/exp: [`8a7402a`](https://github.com/kubernetes-sigs/cluster-api/commit/8a7402a) → [`9b4947d`](https://github.com/kubernetes-sigs/cluster-api/commit/9b4947d) ##### Removed *Nothing has changed.* *Thanks to all our contributors!* 😊 ### [`v1.12.10`](https://github.com/kubernetes-sigs/cluster-api/releases/tag/v1.12.10) [Compare Source](https://github.com/kubernetes-sigs/cluster-api/compare/v1.12.9...v1.12.10) #### 👌 Kubernetes version support - Management Cluster: v1.31.x -> v1.36.x - Workload Cluster: v1.29.x -> v1.36.x [More information about version support can be found here](https://cluster-api.sigs.k8s.io/reference/versions.html) #### Changes since v1.12.9 #### :chart\_with\_upwards\_trend: Overview - 5 new commits merged - 2 bugs fixed 🐛 #### :bug: Bug Fixes - e2e: Bump kind image in clusterctl v1.10 upgrade test to avoid containerd segv ([#13855](https://github.com/kubernetes-sigs/cluster-api/issues/13855)) - e2e: Fix PrettyPrint in WaitForControlPlaneToBeReady ([#13845](https://github.com/kubernetes-sigs/cluster-api/issues/13845)) #### :seedling: Others - clusterctl: Bump cert-manager to v1.20.3 ([#13852](https://github.com/kubernetes-sigs/cluster-api/issues/13852)) - Dependency: Add CVEs to .trivyignore ([#13865](https://github.com/kubernetes-sigs/cluster-api/issues/13865)) - Dependency: Bump Go version to v1.25.12 ([#13907](https://github.com/kubernetes-sigs/cluster-api/issues/13907)) #### Dependencies ##### Added *Nothing has changed.* ##### Changed *Nothing has changed.* ##### Removed *Nothing has changed.* *Thanks to all our contributors!* 😊 ### [`v1.12.9`](https://github.com/kubernetes-sigs/cluster-api/releases/tag/v1.12.9) [Compare Source](https://github.com/kubernetes-sigs/cluster-api/compare/v1.12.8...v1.12.9) #### 👌 Kubernetes version support - Management Cluster: v1.31.x -> v1.36.x - Workload Cluster: v1.29.x -> v1.36.x [More information about version support can be found here](https://cluster-api.sigs.k8s.io/reference/versions.html) #### Changes since v1.12.8 #### :chart\_with\_upwards\_trend: Overview - 5 new commits merged - 2 bugs fixed 🐛 #### :bug: Bug Fixes - clusterctl: Skip update check for clusterctl completion ([#13698](https://github.com/kubernetes-sigs/cluster-api/issues/13698)) - Security: Grant RBAC to support OwnerReferencesPermissionEnforcement admission controller ([#13818](https://github.com/kubernetes-sigs/cluster-api/issues/13818)) #### :seedling: Others - CI: Bump gcb-docker-gcloud image ([#13796](https://github.com/kubernetes-sigs/cluster-api/issues/13796)) - Dependency: Add GO-2026-5026 to .govuln\_exclude ([#13745](https://github.com/kubernetes-sigs/cluster-api/issues/13745)) - Dependency: Bump go to v1.25.11 ([#13790](https://github.com/kubernetes-sigs/cluster-api/issues/13790)) #### Dependencies ##### Added *Nothing has changed.* ##### Changed *Nothing has changed.* ##### Removed *Nothing has changed.* *Thanks to all our contributors!* 😊 ### [`v1.12.8`](https://github.com/kubernetes-sigs/cluster-api/releases/tag/v1.12.8) [Compare Source](https://github.com/kubernetes-sigs/cluster-api/compare/v1.12.7...v1.12.8) #### 👌 Kubernetes version support - Management Cluster: v1.31.x -> v1.36.x - Workload Cluster: v1.29.x -> v1.36.x [More information about version support can be found here](https://cluster-api.sigs.k8s.io/reference/versions.html) #### Changes since v1.12.7 #### :chart\_with\_upwards\_trend: Overview - 9 new commits merged - 2 bugs fixed 🐛 #### :bug: Bug Fixes - Devtools: Fix Tilt kube-state-metrics deployment ([#13679](https://github.com/kubernetes-sigs/cluster-api/issues/13679)) - KCP: Fix in-place update with InfraMachine webhooks with immutability ([#13644](https://github.com/kubernetes-sigs/cluster-api/issues/13644)) #### :seedling: Others - CI: Make it possible to exclude CVEs with govulncheck ([#13672](https://github.com/kubernetes-sigs/cluster-api/issues/13672)) - Dependency: Bumping corefile-migration to v1.0.32 ([#13636](https://github.com/kubernetes-sigs/cluster-api/issues/13636)) - Dependency: Bumping github.com/moby/spdystream to v0.5.1 ([#13633](https://github.com/kubernetes-sigs/cluster-api/issues/13633)) - Dependency: Go bump 1.12.10 ([#13665](https://github.com/kubernetes-sigs/cluster-api/issues/13665)) - Dependency: Ignore false positive CVEs ([#13668](https://github.com/kubernetes-sigs/cluster-api/issues/13668)) - Dependency: Start testing with K8s 1.36.0 ([#13613](https://github.com/kubernetes-sigs/cluster-api/issues/13613)) - KCP: Add kubeadm cluster role ([#13673](https://github.com/kubernetes-sigs/cluster-api/issues/13673)) #### Dependencies ##### Added *Nothing has changed.* ##### Changed - github.com/coredns/corefile-migration: [v1.0.31 → v1.0.32](https://github.com/coredns/corefile-migration/compare/v1.0.31...v1.0.32) - github.com/moby/spdystream: [v0.5.0 → v0.5.1](https://github.com/moby/spdystream/compare/v0.5.0...v0.5.1) ##### Removed *Nothing has changed.* *Thanks to all our contributors!* 😊 ### [`v1.12.7`](https://github.com/kubernetes-sigs/cluster-api/releases/tag/v1.12.7) [Compare Source](https://github.com/kubernetes-sigs/cluster-api/compare/v1.12.5...v1.12.7) #### 👌 Kubernetes version support - Management Cluster: v1.31.x -> v1.35.x - Workload Cluster: v1.29.x -> v1.35.x [More information about version support can be found here](https://cluster-api.sigs.k8s.io/reference/versions.html) #### Changes since v1.12.5 #### :chart\_with\_upwards\_trend: Overview - 7 new commits merged - 2 bugs fixed 🐛 #### :bug: Bug Fixes - Dependency: Fix CVE 2026 39883 release 1.12 ([#13575](https://github.com/kubernetes-sigs/cluster-api/issues/13575)) - KCP: KCP deletion should tolerate missing InfraTemplates ([#13563](https://github.com/kubernetes-sigs/cluster-api/issues/13563)) #### :seedling: Others - clusterctl: Bump Cert-manager v1.20.2 ([#13597](https://github.com/kubernetes-sigs/cluster-api/issues/13597)) - Dependency: Bump cloudbuild to use gcb-docker-gcloud image with Go v1.25.5 ([#13607](https://github.com/kubernetes-sigs/cluster-api/issues/13607)) - e2e: Start testing with Kubernetes v1.36.0-rc.0 ([#13570](https://github.com/kubernetes-sigs/cluster-api/issues/13570)) - e2e: Start testing with Kubernetes v1.36.0-rc.1 ([#13588](https://github.com/kubernetes-sigs/cluster-api/issues/13588)) :book: Additionally, there has been 1 contribution to our documentation and book. ([#13561](https://github.com/kubernetes-sigs/cluster-api/issues/13561)) #### Dependencies ##### Added *Nothing has changed.* ##### Changed *Nothing has changed.* ##### Removed *Nothing has changed.* *Thanks to all our contributors!* 😊 ### [`v1.12.5`](https://github.com/kubernetes-sigs/cluster-api/releases/tag/v1.12.5) [Compare Source](https://github.com/kubernetes-sigs/cluster-api/compare/v1.12.4...v1.12.5) #### 👌 Kubernetes version support - Management Cluster: v1.31.x -> v1.35.x - Workload Cluster: v1.29.x -> v1.35.x [More information about version support can be found here](https://cluster-api.sigs.k8s.io/reference/versions.html) #### Changes since v1.12.4 #### :chart\_with\_upwards\_trend: Overview - 14 new commits merged - 1 feature addition ✨ - 3 bugs fixed 🐛 #### :sparkles: New Features - CAPD: Improve CAPD wait for multi-user target ([#13523](https://github.com/kubernetes-sigs/cluster-api/issues/13523)) #### :bug: Bug Fixes - Testing: Fix flaky by waiting for CRD finalizer processing ([#13478](https://github.com/kubernetes-sigs/cluster-api/issues/13478)) - Testing: Fix flaky TestClusterReconciler unit test ([#13475](https://github.com/kubernetes-sigs/cluster-api/issues/13475)) - Testing: Fix TestMachineSetReconciler\_createMachines\_preflightChecks flake ([#13477](https://github.com/kubernetes-sigs/cluster-api/issues/13477)) #### :seedling: Others - CAPD: Reduce verbosity of CAPD exec log ([#13494](https://github.com/kubernetes-sigs/cluster-api/issues/13494)) - clusterctl: Bump cert-manager to v1.20.0 ([#13484](https://github.com/kubernetes-sigs/cluster-api/issues/13484)) - clusterctl: Bump cert-manager to v1.20.1 ([#13519](https://github.com/kubernetes-sigs/cluster-api/issues/13519)) - Dependency: Bump corefile-migration to v1.0.31 ([#13526](https://github.com/kubernetes-sigs/cluster-api/issues/13526)) - Dependency: Bump dependencies to fix CVE-2026-33186 (google.golang.org/grpc) ([#13504](https://github.com/kubernetes-sigs/cluster-api/issues/13504)) - Dependency: Bump go v1.25.9 ([#13554](https://github.com/kubernetes-sigs/cluster-api/issues/13554)) - Dependency: Switch from docker to moby dependencies ([#13550](https://github.com/kubernetes-sigs/cluster-api/issues/13550)) - e2e: Start testing with Kubernetes v1.36.0-beta.0 ([#13525](https://github.com/kubernetes-sigs/cluster-api/issues/13525)) - KCP: KCP surfaces learner etcd members ([#13491](https://github.com/kubernetes-sigs/cluster-api/issues/13491)) :book: Additionally, there has been 1 contribution to our documentation and book. ([#13528](https://github.com/kubernetes-sigs/cluster-api/issues/13528)) #### Dependencies ##### Added *Nothing has changed.* ##### Changed - cel.dev/expr: v0.24.0 → v0.25.1 - github.com/cncf/xds/go: [0feb691 → ee656c7](https://github.com/cncf/xds/compare/0feb691...ee656c7) - github.com/coredns/corefile-migration: [v1.0.30 → v1.0.31](https://github.com/coredns/corefile-migration/compare/v1.0.30...v1.0.31) - github.com/envoyproxy/go-control-plane/envoy: [v1.35.0 → v1.36.0](https://github.com/envoyproxy/go-control-plane/compare/envoy/v1.35.0...envoy/v1.36.0) - github.com/envoyproxy/go-control-plane: [75eaa19 → v0.14.0](https://github.com/envoyproxy/go-control-plane/compare/75eaa19...v0.14.0) - github.com/envoyproxy/protoc-gen-validate: [v1.2.1 → v1.3.0](https://github.com/envoyproxy/protoc-gen-validate/compare/v1.2.1...v1.3.0) - go.opentelemetry.io/contrib/detectors/gcp: v1.38.0 → v1.39.0 - google.golang.org/grpc: v1.78.0 → v1.79.3 ##### Removed *Nothing has changed.* *Thanks to all our contributors!* 😊 ### [`v1.12.4`](https://github.com/kubernetes-sigs/cluster-api/releases/tag/v1.12.4) [Compare Source](https://github.com/kubernetes-sigs/cluster-api/compare/v1.12.3...v1.12.4) #### 👌 Kubernetes version support - Management Cluster: v1.31.x -> v1.35.x - Workload Cluster: v1.29.x -> v1.35.x [More information about version support can be found here](https://cluster-api.sigs.k8s.io/reference/versions.html) #### Highlights Starting from this release ReconcilerRateLimiting feature also requires PriorityQueue to be enabled. This ensures that ReconcilerRateLimiting works consistently with controller runtime ExponentialBackoff. #### Changes since v1.12.3 #### :chart\_with\_upwards\_trend: Overview - 17 new commits merged - 9 bugs fixed 🐛 #### :bug: Bug Fixes - CAPD: Fix "Failed to exec DockerMachine bootstrap" errors in CAPD ([#13451](https://github.com/kubernetes-sigs/cluster-api/issues/13451)) - CI: Bump trivy to v0.69.2 to fix CI ([#13388](https://github.com/kubernetes-sigs/cluster-api/issues/13388)) - Cluster: Fix panic in Cluster conversion ([#13384](https://github.com/kubernetes-sigs/cluster-api/issues/13384)) - ClusterClass/KCP/MachineSet/MachineDeployment: Implement mitigation for managedFields issue with SSA in apiserver ([#13355](https://github.com/kubernetes-sigs/cluster-api/issues/13355)) - ClusterClass: Fix upgradePlan computation in GetUpgradePlanFromClusterClassVersions ([#13471](https://github.com/kubernetes-sigs/cluster-api/issues/13471)) - Dependency: Bump dependencies to fix CVE GO-2026-4394 (go.opentelemetry.io/otel/sdk pkg) ([#13377](https://github.com/kubernetes-sigs/cluster-api/issues/13377)) - e2e: Only retry creating objects that failed ([#13430](https://github.com/kubernetes-sigs/cluster-api/issues/13430)) - Machine/MachineSet/MachineDeployment: Fix UpToDate calculation for rolloutAfter ([#13406](https://github.com/kubernetes-sigs/cluster-api/issues/13406)) - util: Fix exponential backoff with ReconcilerRateLimiting ([#13427](https://github.com/kubernetes-sigs/cluster-api/issues/13427)) #### :seedling: Others - API: Relax validation for Machine .status.addresses to maximum of 256 instead of 128 items ([#13399](https://github.com/kubernetes-sigs/cluster-api/issues/13399)) - CAPD: Implement pause for DockerMachinePool ([#13448](https://github.com/kubernetes-sigs/cluster-api/issues/13448)) - clusterctl: Bump cert-manager v1.19.4 ([#13381](https://github.com/kubernetes-sigs/cluster-api/issues/13381)) - Dependency: Bump cloudflare/circl ([#13438](https://github.com/kubernetes-sigs/cluster-api/issues/13438)) - Dependency: Bump go v1.25.8 ([#13432](https://github.com/kubernetes-sigs/cluster-api/issues/13432)) - e2e: Add retry in test framework when getting manifest YAMLs ([#13358](https://github.com/kubernetes-sigs/cluster-api/issues/13358)) - e2e: Bump autoscaler version used for testing to v1.35.0 ([#13375](https://github.com/kubernetes-sigs/cluster-api/issues/13375)) - e2e: Improve condition if CAPD Machine is not yet ready for bootstrap exec ([#13468](https://github.com/kubernetes-sigs/cluster-api/issues/13468)) #### Dependencies ##### Added - github.com/cenkalti/backoff/v5: [v5.0.3](https://github.com/cenkalti/backoff/tree/v5.0.3) - gonum.org/v1/gonum: v0.16.0 ##### Changed - cloud.google.com/go/compute/metadata: v0.6.0 → v0.9.0 - github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: [v1.26.0 → v1.30.0](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go/compare/detectors/gcp/v1.26.0...detectors/gcp/v1.30.0) - github.com/cloudflare/circl: [v1.6.1 → v1.6.3](https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.3) - github.com/cncf/xds/go: [2f00578 → 0feb691](https://github.com/cncf/xds/compare/2f00578...0feb691) - github.com/envoyproxy/go-control-plane/envoy: [v1.32.4 → v1.35.0](https://github.com/envoyproxy/go-control-plane/compare/envoy/v1.32.4...envoy/v1.35.0) - github.com/envoyproxy/go-control-plane: [v0.13.4 → 75eaa19](https://github.com/envoyproxy/go-control-plane/compare/v0.13.4...75eaa19) - github.com/go-jose/go-jose/v4: [v4.0.4 → v4.1.3](https://github.com/go-jose/go-jose/compare/v4.0.4...v4.1.3) - github.com/golang/glog: [v1.2.4 → v1.2.5](https://github.com/golang/glog/compare/v1.2.4...v1.2.5) - github.com/grpc-ecosystem/grpc-gateway/v2: [v2.26.3 → v2.27.7](https://github.com/grpc-ecosystem/grpc-gateway/compare/v2.26.3...v2.27.7) - github.com/spiffe/go-spiffe/v2: [v2.5.0 → v2.6.0](https://github.com/spiffe/go-spiffe/compare/v2.5.0...v2.6.0) - go.opentelemetry.io/auto/sdk: v1.1.0 → v1.2.1 - go.opentelemetry.io/contrib/detectors/gcp: v1.34.0 → v1.38.0 - go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.58.0 → v0.65.0 - go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.34.0 → v1.40.0 - go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.34.0 → v1.40.0 - go.opentelemetry.io/otel/metric: v1.35.0 → v1.40.0 - go.opentelemetry.io/otel/sdk/metric: v1.34.0 → v1.40.0 - go.opentelemetry.io/otel/sdk: v1.34.0 → v1.40.0 - go.opentelemetry.io/otel/trace: v1.35.0 → v1.40.0 - go.opentelemetry.io/otel: v1.35.0 → v1.40.0 - go.opentelemetry.io/proto/otlp: v1.5.0 → v1.9.0 - golang.org/x/crypto: v0.45.0 → v0.47.0 - golang.org/x/mod: v0.29.0 → v0.31.0 - golang.org/x/net: v0.47.0 → v0.49.0 - golang.org/x/oauth2: v0.33.0 → v0.34.0 - golang.org/x/sync: v0.18.0 → v0.19.0 - golang.org/x/sys: v0.38.0 → v0.40.0 - golang.org/x/telemetry: [`078029d`](https://github.com/kubernetes-sigs/cluster-api/commit/078029d) → [`8fff8a5`](https://github.com/kubernetes-sigs/cluster-api/commit/8fff8a5) - golang.org/x/term: v0.37.0 → v0.39.0 - golang.org/x/text: v0.31.0 → v0.33.0 - golang.org/x/tools: v0.38.0 → v0.40.0 - google.golang.org/genproto/googleapis/api: [`a0af3ef`](https://github.com/kubernetes-sigs/cluster-api/commit/a0af3ef) → [`8636f87`](https://github.com/kubernetes-sigs/cluster-api/commit/8636f87) - google.golang.org/genproto/googleapis/rpc: [`a0af3ef`](https://github.com/kubernetes-sigs/cluster-api/commit/a0af3ef) → [`8636f87`](https://github.com/kubernetes-sigs/cluster-api/commit/8636f87) - google.golang.org/grpc: v1.72.3 → v1.78.0 - google.golang.org/protobuf: v1.36.7 → v1.36.11 - sigs.k8s.io/structured-merge-diff/v6: v6.3.0 → [`d9cc664`](https://github.com/kubernetes-sigs/cluster-api/commit/d9cc664) ##### Removed - github.com/zeebo/errs: [v1.4.0](https://github.com/zeebo/errs/tree/v1.4.0) *Thanks to all our contributors!* 😊 </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). The local configuration can be found in the [SI Renovate Bot repository](https://git.shivering-isles.com/shivering-isles/infrastructure-gitops/src/branch/main/apps/k8s01/renovate).

botaniker added 1 commit

2026-07-09 11:32:23 +00:00

chore(deps): update dependency kubernetes-sigs/cluster-api to v1.13.3 9625af20a4

sheogorath was assigned by botaniker

2026-07-09 11:32:23 +00:00

botaniker force-pushed renovate/kubernetes-sigs-cluster-api-1.x from 9625af20a4 to 8e9171c2d1

gitops-pr-validation Pipeline failed

Details

2026-07-10 13:32:58 +00:00

Compare

botaniker force-pushed renovate/kubernetes-sigs-cluster-api-1.x from 8e9171c2d1

gitops-pr-validation Pipeline failed

Details

to d118037f57

gitops-pr-validation Pipeline completed successfully

Details

2026-07-11 14:36:35 +00:00

Compare

botaniker force-pushed renovate/kubernetes-sigs-cluster-api-1.x from d118037f57

gitops-pr-validation Pipeline completed successfully

Details

to ef56635b58

gitops-pr-validation Pipeline failed

Details

2026-07-16 06:08:35 +00:00

Compare

botaniker changed title from ~~chore(deps): update dependency kubernetes-sigs/cluster-api to v1.13.3~~ to chore(deps): update dependency kubernetes-sigs/cluster-api to v1.13.4

2026-07-16 06:08:35 +00:00

botaniker force-pushed renovate/kubernetes-sigs-cluster-api-1.x from ef56635b58

gitops-pr-validation Pipeline failed

Details

to 0f75c7cda1

gitops-pr-validation Pipeline completed successfully

Details

2026-07-17 06:09:20 +00:00

Compare

botaniker force-pushed renovate/kubernetes-sigs-cluster-api-1.x from 0f75c7cda1

gitops-pr-validation Pipeline completed successfully

Details

to b0e75f5a47

gitops-pr-validation Pipeline completed successfully

Details

2026-07-17 06:22:54 +00:00

Compare

botaniker force-pushed renovate/kubernetes-sigs-cluster-api-1.x from b0e75f5a47

gitops-pr-validation Pipeline completed successfully

Details

to 76d4366c5e

gitops-pr-validation Pipeline completed successfully

Details

2026-08-12 06:06:56 +00:00

Compare

botaniker changed title from ~~chore(deps): update dependency kubernetes-sigs/cluster-api to v1.13.4~~ to chore(deps): update dependency kubernetes-sigs/cluster-api to v1.14.0

2026-08-12 06:06:57 +00:00

botaniker force-pushed renovate/kubernetes-sigs-cluster-api-1.x from 76d4366c5e

gitops-pr-validation Pipeline completed successfully

Details

to 17bc765a8d

gitops-images Image build started

Details

gitops-pr-validation Pipeline failed

Details

2026-08-17 06:10:54 +00:00

Compare

gitops-images Image build started

Details

gitops-pr-validation Pipeline failed

Required

Details

Some required checks were not successful.

This branch is out-of-date with the base branch

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin renovate/kubernetes-sigs-cluster-api-1.x:renovate/kubernetes-sigs-cluster-api-1.x

git switch renovate/kubernetes-sigs-cluster-api-1.x

No reviewers

No labels

No milestone

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

shivering-isles/infrastructure-gitops!11

No description provided.

Rows
Columns