chore(deps): update dependency siderolabs/talos to v1.13.10 #120

Open
botaniker wants to merge 1 commit from renovate/siderolabs-talos-1.13.x into main
Member

This PR contains the following updates:

Package Update Change OpenSSF
siderolabs/talos patch v1.13.7v1.13.10 OpenSSF Scorecard
siderolabs/talos patch v1.13.8v1.13.10 OpenSSF Scorecard

⚠️ Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

siderolabs/talos (siderolabs/talos)

v1.13.10

Compare Source

Talos 1.13.10 (2026-09-03)

Welcome to the v1.13.10 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Component Updates

Linux: 6.18.48
CoreDNS: 1.14.7

Talos is built with Go 1.26.7

Contributors
  • Andrey Smirnov
  • Mateusz Urbanek
  • Noel Georgi
  • Dima Aratin
  • Ivan Demchuk
  • Maja Bojarska
  • Max Makarov
  • Utku Ozdemir
  • immanuwell
Changes
28 commits

  • @​00ca4c9 release(v1.13.10): prepare release
  • @​271ce0d fix: update DHCP library
  • @​3c70f40 fix: harden the code around kubelet's client certificate handling
  • @​40d7de4 fix: normalize image reference when passing to image verification flow
  • @​cf30d6d fix: filter out passed metadata in API proxying
  • @​cc556d9 fix: treat desired roles empty as error in Talos API access
  • @​0d7a473 fix: allow CSI volumes to be mounted with an SELinux context
  • @​17ab196 fix: validate received kubeconfig
  • @​934ae8a chore: update etcd to v3.6.14
  • @​df9b82d chore: update pkgs and tools
  • @​591c53a fix: use os.Root in the talosctl extract path
  • @​c36d990 fix: escape output in the talosctl dashboard
  • @​fc355dc fix: add checks for meta key in the API path
  • @​e950f65 feat: update COSI to 1.16.3
  • @​20cafbd fix: route creation churning every 100ms
  • @​c6fe78c chore: reduce verbosity of the grype scan
  • @​b9696f9 fix: preserve special modes when extracting files
  • @​865aaec fix: use os.Root in the untar path
  • @​097fa18 fix: create parent directories when extracting tar archives
  • @​c6edc39 chore: bump sigstore/rekor to v1.5.4
  • @​6d062e1 fix: write the uploaded etcd snapshot atomically
  • @​f6b7959 fix: skip selinux label for read-only/detached/external mounts
  • @​bea850a fix: persist in-memory meta on fresh install
  • @​dcf46c1 fix: reduce stalls in the etcd member promotion cycle
  • @​0f4d08a feat: update CoreDNS to 1.14.7
  • @​e091638 fix: watch IPv6 route changes in RouteSpecController
  • @​92614ca fix: truncate files replaced by system extensions
  • @​b7b27ec fix: skip target settings for external volume mounts

Changes from siderolabs/pkgs
5 commits

Changes from siderolabs/tools
3 commits

Dependency Changes
  • github.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.1 -> v1.22.0
  • github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.13.1 -> v1.14.0
  • github.com/aws/aws-sdk-go-v2 v1.41.7 -> v1.43.0
  • github.com/aws/aws-sdk-go-v2/config v1.32.17 -> v1.32.31
  • github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.23 -> v1.18.31
  • github.com/aws/aws-sdk-go-v2/service/kms v1.52.0 -> v1.55.0
  • github.com/aws/smithy-go v1.25.1 -> v1.27.3
  • github.com/cosi-project/runtime v1.14.1 -> v1.16.3
  • github.com/docker/cli v29.4.3 -> v29.5.3
  • github.com/fatih/color v1.18.0 -> v1.19.0
  • github.com/google/go-containerregistry v0.21.6 -> v0.21.7
  • github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.3 -> v2.3.4
  • github.com/insomniacslk/dhcp 5adc3eb -> 234b974
  • github.com/klauspost/compress v1.18.7 -> v1.19.2
  • github.com/mattn/go-isatty v0.0.20 -> v0.0.24
  • github.com/prometheus/procfs v0.20.1 -> v0.22.0
  • github.com/siderolabs/pkgs v1.13.0-60-gf541ca4 -> v1.13.0-65-g9b044c5
  • github.com/siderolabs/talos/pkg/machinery v1.13.9 -> v1.13.10
  • github.com/siderolabs/tools v1.13.0-9-ga201d19 -> v1.13.0-12-gc70be08
  • github.com/sigstore/sigstore v1.10.8 -> v1.10.9
  • github.com/sirupsen/logrus v1.9.4 -> v1.10.2
  • github.com/stretchr/testify v1.11.1 -> v1.12.1
  • go.etcd.io/etcd/api/v3 v3.6.12 -> v3.6.14
  • go.etcd.io/etcd/client/pkg/v3 v3.6.12 -> v3.6.14
  • go.etcd.io/etcd/client/v3 v3.6.12 -> v3.6.14
  • go.etcd.io/etcd/etcdutl/v3 v3.6.12 -> v3.6.14
  • go.yaml.in/yaml/v4 v4.0.0-rc.4 -> v4.0.0-rc.6
  • google.golang.org/grpc v1.82.1 -> v1.83.2
  • google.golang.org/protobuf f2248ac -> v1.36.12

Previous release can be found at v1.13.9

Images
ghcr.io/siderolabs/flannel:0.28.8
registry.k8s.io/coredns/coredns:v1.14.7
registry.k8s.io/etcd:v3.6.14
registry.k8s.io/pause:3.10.1
registry.k8s.io/kube-apiserver:v1.36.3
registry.k8s.io/kube-controller-manager:v1.36.3
registry.k8s.io/kube-scheduler:v1.36.3
registry.k8s.io/kube-proxy:v1.36.3
ghcr.io/siderolabs/kubelet:v1.36.3
registry.k8s.io/networking/kube-network-policies:v1.1.0
ghcr.io/siderolabs/installer:v1.13.10
ghcr.io/siderolabs/installer-base:v1.13.10
ghcr.io/siderolabs/imager:v1.13.10
ghcr.io/siderolabs/talos:v1.13.10
ghcr.io/siderolabs/talosctl-all:v1.13.10
ghcr.io/siderolabs/overlays:v1.13.10
ghcr.io/siderolabs/extensions:v1.13.10

v1.13.9

Compare Source

Talos 1.13.9 (2026-08-19)

Welcome to the v1.13.9 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Component Updates

Linux: 6.18.44
containerd: 2.2.7
Kubernetes: 1.36.3

Talos is built with Go 1.26.6.

Contributors
  • Andrey Smirnov
  • Noel Georgi
Changes
7 commits

Changes from siderolabs/pkgs
5 commits

Changes from siderolabs/tools
1 commit

Dependency Changes
  • github.com/siderolabs/pkgs v1.13.0-55-gf677246 -> v1.13.0-60-gf541ca4
  • github.com/siderolabs/talos/pkg/machinery v1.13.8 -> v1.13.9
  • github.com/siderolabs/tools v1.13.0-8-gc2844e6 -> v1.13.0-9-ga201d19
  • golang.org/x/net v0.57.0 -> v0.58.0
  • golang.org/x/text v0.40.0 -> v0.41.0
  • k8s.io/api v0.36.2 -> v0.36.3
  • k8s.io/apiextensions-apiserver v0.36.2 -> v0.36.3
  • k8s.io/apimachinery v0.36.2 -> v0.36.3
  • k8s.io/apiserver v0.36.2 -> v0.36.3
  • k8s.io/client-go v0.36.2 -> v0.36.3
  • k8s.io/component-base v0.36.2 -> v0.36.3
  • k8s.io/cri-api v0.36.2 -> v0.36.3
  • k8s.io/kube-scheduler v0.36.2 -> v0.36.3
  • k8s.io/kubectl v0.36.2 -> v0.36.3
  • k8s.io/kubelet v0.36.2 -> v0.36.3
  • k8s.io/pod-security-admission v0.36.2 -> v0.36.3

Previous release can be found at v1.13.8

Images
ghcr.io/siderolabs/flannel:0.28.8
registry.k8s.io/coredns/coredns:v1.14.6
registry.k8s.io/etcd:v3.6.12
registry.k8s.io/pause:3.10.1
registry.k8s.io/kube-apiserver:v1.36.3
registry.k8s.io/kube-controller-manager:v1.36.3
registry.k8s.io/kube-scheduler:v1.36.3
registry.k8s.io/kube-proxy:v1.36.3
ghcr.io/siderolabs/kubelet:v1.36.3
registry.k8s.io/networking/kube-network-policies:v1.1.0
ghcr.io/siderolabs/installer:v1.13.9
ghcr.io/siderolabs/installer-base:v1.13.9
ghcr.io/siderolabs/imager:v1.13.9
ghcr.io/siderolabs/talos:v1.13.9
ghcr.io/siderolabs/talosctl-all:v1.13.9
ghcr.io/siderolabs/overlays:v1.13.9
ghcr.io/siderolabs/extensions:v1.13.9

v1.13.8

Compare Source

Talos 1.13.8 (2026-08-04)

Welcome to the v1.13.8 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Component Updates

Linux: 6.18.42
CoreDNS: 1.14.6
Flannel: 0.28.8

Talos is built with Go 1.26.5.

Contributors
  • Andrey Smirnov
  • Mateusz Urbanek
  • Noel Georgi
  • ctr49
  • imusmanmalik
  • kastakhov
Changes
14 commits

Changes from siderolabs/pkgs
6 commits

Dependency Changes
  • github.com/google/cel-go v0.28.0 -> v0.29.0
  • github.com/gopacket/gopacket v1.5.0 -> v1.6.1
  • github.com/klauspost/compress v1.18.6 -> v1.18.7
  • github.com/siderolabs/pkgs v1.13.0-49-g91fe0a0 -> v1.13.0-55-gf677246
  • github.com/siderolabs/talos/pkg/machinery v1.13.7 -> v1.13.8
  • github.com/sigstore/sigstore-go v1.2.0 -> v1.2.1
  • golang.org/x/net v0.55.0 -> v0.57.0
  • golang.org/x/sync v0.20.0 -> v0.22.0
  • golang.org/x/sys v0.45.0 -> v0.47.0
  • golang.org/x/term v0.43.0 -> v0.45.0
  • golang.org/x/text v0.37.0 -> v0.40.0
  • google.golang.org/grpc v1.81.1 -> v1.82.1

Previous release can be found at v1.13.7

Images
ghcr.io/siderolabs/flannel:0.28.8
registry.k8s.io/coredns/coredns:v1.14.6
registry.k8s.io/etcd:v3.6.12
registry.k8s.io/pause:3.10.1
registry.k8s.io/kube-apiserver:v1.36.2
registry.k8s.io/kube-controller-manager:v1.36.2
registry.k8s.io/kube-scheduler:v1.36.2
registry.k8s.io/kube-proxy:v1.36.2
ghcr.io/siderolabs/kubelet:v1.36.2
registry.k8s.io/networking/kube-network-policies:v1.1.0
ghcr.io/siderolabs/installer:v1.13.8
ghcr.io/siderolabs/installer-base:v1.13.8
ghcr.io/siderolabs/imager:v1.13.8
ghcr.io/siderolabs/talos:v1.13.8
ghcr.io/siderolabs/talosctl-all:v1.13.8
ghcr.io/siderolabs/overlays:v1.13.8
ghcr.io/siderolabs/extensions:v1.13.8

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot. The local configuration can be found in the SI Renovate Bot repository.

This PR contains the following updates: | Package | Update | Change | OpenSSF | |---|---|---|---| | [siderolabs/talos](https://github.com/siderolabs/talos) | patch | `v1.13.7` → `v1.13.10` | [![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/siderolabs/talos/badge)](https://securityscorecards.dev/viewer/?uri=github.com/siderolabs/talos) | | [siderolabs/talos](https://github.com/siderolabs/talos) | patch | `v1.13.8` → `v1.13.10` | [![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/siderolabs/talos/badge)](https://securityscorecards.dev/viewer/?uri=github.com/siderolabs/talos) | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/30) for more information. --- ### Release Notes <details> <summary>siderolabs/talos (siderolabs/talos)</summary> ### [`v1.13.10`](https://github.com/siderolabs/talos/releases/tag/v1.13.10) [Compare Source](https://github.com/siderolabs/talos/compare/v1.13.9...v1.13.10) ##### [Talos 1.13.10](https://github.com/siderolabs/talos/releases/tag/v1.13.10) (2026-09-03) Welcome to the v1.13.10 release of Talos! Please try out the release binaries and report any issues at <https://github.com/siderolabs/talos/issues>. ##### Component Updates Linux: 6.18.48 CoreDNS: 1.14.7 Talos is built with Go 1.26.7 ##### Contributors - Andrey Smirnov - Mateusz Urbanek - Noel Georgi - Dima Aratin - Ivan Demchuk - Maja Bojarska - Max Makarov - Utku Ozdemir - immanuwell ##### Changes <details><summary>28 commits</summary> <p> - [@&#8203;`00ca4c9`](https://github.com/siderolabs/talos/commit/00ca4c987) release(v1.13.10): prepare release - [@&#8203;`271ce0d`](https://github.com/siderolabs/talos/commit/271ce0dc8) fix: update DHCP library - [@&#8203;`3c70f40`](https://github.com/siderolabs/talos/commit/3c70f4054) fix: harden the code around kubelet's client certificate handling - [@&#8203;`40d7de4`](https://github.com/siderolabs/talos/commit/40d7de4c0) fix: normalize image reference when passing to image verification flow - [@&#8203;`cf30d6d`](https://github.com/siderolabs/talos/commit/cf30d6df4) fix: filter out passed metadata in API proxying - [@&#8203;`cc556d9`](https://github.com/siderolabs/talos/commit/cc556d9ce) fix: treat desired roles empty as error in Talos API access - [@&#8203;`0d7a473`](https://github.com/siderolabs/talos/commit/0d7a47305) fix: allow CSI volumes to be mounted with an SELinux context - [@&#8203;`17ab196`](https://github.com/siderolabs/talos/commit/17ab196fe) fix: validate received kubeconfig - [@&#8203;`934ae8a`](https://github.com/siderolabs/talos/commit/934ae8a2b) chore: update etcd to v3.6.14 - [@&#8203;`df9b82d`](https://github.com/siderolabs/talos/commit/df9b82dce) chore: update pkgs and tools - [@&#8203;`591c53a`](https://github.com/siderolabs/talos/commit/591c53aac) fix: use os.Root in the talosctl extract path - [@&#8203;`c36d990`](https://github.com/siderolabs/talos/commit/c36d99001) fix: escape output in the talosctl dashboard - [@&#8203;`fc355dc`](https://github.com/siderolabs/talos/commit/fc355dcd3) fix: add checks for meta key in the API path - [@&#8203;`e950f65`](https://github.com/siderolabs/talos/commit/e950f655e) feat: update COSI to 1.16.3 - [@&#8203;`20cafbd`](https://github.com/siderolabs/talos/commit/20cafbdb3) fix: route creation churning every 100ms - [@&#8203;`c6fe78c`](https://github.com/siderolabs/talos/commit/c6fe78c61) chore: reduce verbosity of the grype scan - [@&#8203;`b9696f9`](https://github.com/siderolabs/talos/commit/b9696f9d7) fix: preserve special modes when extracting files - [@&#8203;`865aaec`](https://github.com/siderolabs/talos/commit/865aaec80) fix: use os.Root in the untar path - [@&#8203;`097fa18`](https://github.com/siderolabs/talos/commit/097fa184e) fix: create parent directories when extracting tar archives - [@&#8203;`c6edc39`](https://github.com/siderolabs/talos/commit/c6edc3911) chore: bump sigstore/rekor to v1.5.4 - [@&#8203;`6d062e1`](https://github.com/siderolabs/talos/commit/6d062e13b) fix: write the uploaded etcd snapshot atomically - [@&#8203;`f6b7959`](https://github.com/siderolabs/talos/commit/f6b795970) fix: skip selinux label for read-only/detached/external mounts - [@&#8203;`bea850a`](https://github.com/siderolabs/talos/commit/bea850ac3) fix: persist in-memory meta on fresh install - [@&#8203;`dcf46c1`](https://github.com/siderolabs/talos/commit/dcf46c11e) fix: reduce stalls in the etcd member promotion cycle - [@&#8203;`0f4d08a`](https://github.com/siderolabs/talos/commit/0f4d08a1f) feat: update CoreDNS to 1.14.7 - [@&#8203;`e091638`](https://github.com/siderolabs/talos/commit/e0916388e) fix: watch IPv6 route changes in RouteSpecController - [@&#8203;`92614ca`](https://github.com/siderolabs/talos/commit/92614ca8a) fix: truncate files replaced by system extensions - [@&#8203;`b7b27ec`](https://github.com/siderolabs/talos/commit/b7b27ec29) fix: skip target settings for external volume mounts </p> </details> ##### Changes from siderolabs/pkgs <details><summary>5 commits</summary> <p> - [siderolabs/pkgs@`9b044c5`](https://github.com/siderolabs/pkgs/commit/9b044c5) feat: update kernel to 6.18.48 - [siderolabs/pkgs@`de74a50`](https://github.com/siderolabs/pkgs/commit/de74a50) feat: bump kernel to 6.18.47 - [siderolabs/pkgs@`bb15c62`](https://github.com/siderolabs/pkgs/commit/bb15c62) chore: update toolchain and tools - [siderolabs/pkgs@`49c50f7`](https://github.com/siderolabs/pkgs/commit/49c50f7) feat: bump kernel to 6.18.46 - [siderolabs/pkgs@`2da2cdc`](https://github.com/siderolabs/pkgs/commit/2da2cdc) feat: backport aes256k support (Ceph) </p> </details> ##### Changes from siderolabs/tools <details><summary>3 commits</summary> <p> - [siderolabs/tools@`c70be08`](https://github.com/siderolabs/tools/commit/c70be08) chore: update toolchain - [siderolabs/tools@`7791f48`](https://github.com/siderolabs/tools/commit/7791f48) feat: use kernel gnu mirrors - [siderolabs/tools@`d908dc0`](https://github.com/siderolabs/tools/commit/d908dc0) fix: update OpenSSL to 3.6.4 </p> </details> ##### Dependency Changes - **github.com/Azure/azure-sdk-for-go/sdk/azcore** v1.21.1 -> v1.22.0 - **github.com/Azure/azure-sdk-for-go/sdk/azidentity** v1.13.1 -> v1.14.0 - **github.com/aws/aws-sdk-go-v2** v1.41.7 -> v1.43.0 - **github.com/aws/aws-sdk-go-v2/config** v1.32.17 -> v1.32.31 - **github.com/aws/aws-sdk-go-v2/feature/ec2/imds** v1.18.23 -> v1.18.31 - **github.com/aws/aws-sdk-go-v2/service/kms** v1.52.0 -> v1.55.0 - **github.com/aws/smithy-go** v1.25.1 -> v1.27.3 - **github.com/cosi-project/runtime** v1.14.1 -> v1.16.3 - **github.com/docker/cli** v29.4.3 -> v29.5.3 - **github.com/fatih/color** v1.18.0 -> v1.19.0 - **github.com/google/go-containerregistry** v0.21.6 -> v0.21.7 - **github.com/grpc-ecosystem/go-grpc-middleware/v2** v2.3.3 -> v2.3.4 - **github.com/insomniacslk/dhcp** [`5adc3eb`](https://github.com/siderolabs/talos/commit/5adc3eb26f91) -> [`234b974`](https://github.com/siderolabs/talos/commit/234b97448fae) - **github.com/klauspost/compress** v1.18.7 -> v1.19.2 - **github.com/mattn/go-isatty** v0.0.20 -> v0.0.24 - **github.com/prometheus/procfs** v0.20.1 -> v0.22.0 - **github.com/siderolabs/pkgs** v1.13.0-60-gf541ca4 -> v1.13.0-65-g9b044c5 - **github.com/siderolabs/talos/pkg/machinery** v1.13.9 -> v1.13.10 - **github.com/siderolabs/tools** v1.13.0-9-ga201d19 -> v1.13.0-12-gc70be08 - **github.com/sigstore/sigstore** v1.10.8 -> v1.10.9 - **github.com/sirupsen/logrus** v1.9.4 -> v1.10.2 - **github.com/stretchr/testify** v1.11.1 -> v1.12.1 - **go.etcd.io/etcd/api/v3** v3.6.12 -> v3.6.14 - **go.etcd.io/etcd/client/pkg/v3** v3.6.12 -> v3.6.14 - **go.etcd.io/etcd/client/v3** v3.6.12 -> v3.6.14 - **go.etcd.io/etcd/etcdutl/v3** v3.6.12 -> v3.6.14 - **go.yaml.in/yaml/v4** v4.0.0-rc.4 -> v4.0.0-rc.6 - **google.golang.org/grpc** v1.82.1 -> v1.83.2 - **google.golang.org/protobuf** [`f2248ac`](https://github.com/siderolabs/talos/commit/f2248ac996af) -> v1.36.12 Previous release can be found at [v1.13.9](https://github.com/siderolabs/talos/releases/tag/v1.13.9) ##### Images ``` ghcr.io/siderolabs/flannel:0.28.8 registry.k8s.io/coredns/coredns:v1.14.7 registry.k8s.io/etcd:v3.6.14 registry.k8s.io/pause:3.10.1 registry.k8s.io/kube-apiserver:v1.36.3 registry.k8s.io/kube-controller-manager:v1.36.3 registry.k8s.io/kube-scheduler:v1.36.3 registry.k8s.io/kube-proxy:v1.36.3 ghcr.io/siderolabs/kubelet:v1.36.3 registry.k8s.io/networking/kube-network-policies:v1.1.0 ghcr.io/siderolabs/installer:v1.13.10 ghcr.io/siderolabs/installer-base:v1.13.10 ghcr.io/siderolabs/imager:v1.13.10 ghcr.io/siderolabs/talos:v1.13.10 ghcr.io/siderolabs/talosctl-all:v1.13.10 ghcr.io/siderolabs/overlays:v1.13.10 ghcr.io/siderolabs/extensions:v1.13.10 ``` ### [`v1.13.9`](https://github.com/siderolabs/talos/releases/tag/v1.13.9) [Compare Source](https://github.com/siderolabs/talos/compare/v1.13.8...v1.13.9) ##### [Talos 1.13.9](https://github.com/siderolabs/talos/releases/tag/v1.13.9) (2026-08-19) Welcome to the v1.13.9 release of Talos! Please try out the release binaries and report any issues at <https://github.com/siderolabs/talos/issues>. ##### Component Updates Linux: 6.18.44 containerd: 2.2.7 Kubernetes: 1.36.3 Talos is built with Go 1.26.6. ##### Contributors - Andrey Smirnov - Noel Georgi ##### Changes <details><summary>7 commits</summary> <p> - [@&#8203;`3ebd10a`](https://github.com/siderolabs/talos/commit/3ebd10a7c) release(v1.13.9): prepare release - [@&#8203;`9ade215`](https://github.com/siderolabs/talos/commit/9ade215ce) feat: update Kubernetes to 1.36.3 - [@&#8203;`14343cd`](https://github.com/siderolabs/talos/commit/14343cd29) test: save the provision test logs - [@&#8203;`b33e5fc`](https://github.com/siderolabs/talos/commit/b33e5fce2) fix: support try mode apply without prior config - [@&#8203;`6a8f295`](https://github.com/siderolabs/talos/commit/6a8f29591) fix: share IPC namespace with the host for extension services - [@&#8203;`b525b82`](https://github.com/siderolabs/talos/commit/b525b8290) fix: size the receive/send buffers for nftables netlink - [@&#8203;`7ac5264`](https://github.com/siderolabs/talos/commit/7ac52642c) feat: update Go to 1.26.6 </p> </details> ##### Changes from siderolabs/pkgs <details><summary>5 commits</summary> <p> - [siderolabs/pkgs@`f541ca4`](https://github.com/siderolabs/pkgs/commit/f541ca4) feat: bump kernel to 6.18.44 - [siderolabs/pkgs@`a4f2c26`](https://github.com/siderolabs/pkgs/commit/a4f2c26) feat: bump kernel to 6.18.43 - [siderolabs/pkgs@`79a7531`](https://github.com/siderolabs/pkgs/commit/79a7531) feat: update Linux firmware to [`2026081`](https://github.com/siderolabs/talos/commit/20260810) - [siderolabs/pkgs@`89d76bf`](https://github.com/siderolabs/pkgs/commit/89d76bf) feat: update backportable dependencies - [siderolabs/pkgs@`af6c08a`](https://github.com/siderolabs/pkgs/commit/af6c08a) feat: update Go to 1.26.6 </p> </details> ##### Changes from siderolabs/tools <details><summary>1 commit</summary> <p> - [siderolabs/tools@`a201d19`](https://github.com/siderolabs/tools/commit/a201d19) feat: update Go to 1.26.6 </p> </details> ##### Dependency Changes - **github.com/siderolabs/pkgs** v1.13.0-55-gf677246 -> v1.13.0-60-gf541ca4 - **github.com/siderolabs/talos/pkg/machinery** v1.13.8 -> v1.13.9 - **github.com/siderolabs/tools** v1.13.0-8-gc2844e6 -> v1.13.0-9-ga201d19 - **golang.org/x/net** v0.57.0 -> v0.58.0 - **golang.org/x/text** v0.40.0 -> v0.41.0 - **k8s.io/api** v0.36.2 -> v0.36.3 - **k8s.io/apiextensions-apiserver** v0.36.2 -> v0.36.3 - **k8s.io/apimachinery** v0.36.2 -> v0.36.3 - **k8s.io/apiserver** v0.36.2 -> v0.36.3 - **k8s.io/client-go** v0.36.2 -> v0.36.3 - **k8s.io/component-base** v0.36.2 -> v0.36.3 - **k8s.io/cri-api** v0.36.2 -> v0.36.3 - **k8s.io/kube-scheduler** v0.36.2 -> v0.36.3 - **k8s.io/kubectl** v0.36.2 -> v0.36.3 - **k8s.io/kubelet** v0.36.2 -> v0.36.3 - **k8s.io/pod-security-admission** v0.36.2 -> v0.36.3 Previous release can be found at [v1.13.8](https://github.com/siderolabs/talos/releases/tag/v1.13.8) ##### Images ``` ghcr.io/siderolabs/flannel:0.28.8 registry.k8s.io/coredns/coredns:v1.14.6 registry.k8s.io/etcd:v3.6.12 registry.k8s.io/pause:3.10.1 registry.k8s.io/kube-apiserver:v1.36.3 registry.k8s.io/kube-controller-manager:v1.36.3 registry.k8s.io/kube-scheduler:v1.36.3 registry.k8s.io/kube-proxy:v1.36.3 ghcr.io/siderolabs/kubelet:v1.36.3 registry.k8s.io/networking/kube-network-policies:v1.1.0 ghcr.io/siderolabs/installer:v1.13.9 ghcr.io/siderolabs/installer-base:v1.13.9 ghcr.io/siderolabs/imager:v1.13.9 ghcr.io/siderolabs/talos:v1.13.9 ghcr.io/siderolabs/talosctl-all:v1.13.9 ghcr.io/siderolabs/overlays:v1.13.9 ghcr.io/siderolabs/extensions:v1.13.9 ``` ### [`v1.13.8`](https://github.com/siderolabs/talos/releases/tag/v1.13.8) [Compare Source](https://github.com/siderolabs/talos/compare/v1.13.7...v1.13.8) ##### [Talos 1.13.8](https://github.com/siderolabs/talos/releases/tag/v1.13.8) (2026-08-04) Welcome to the v1.13.8 release of Talos! Please try out the release binaries and report any issues at <https://github.com/siderolabs/talos/issues>. ##### Component Updates Linux: 6.18.42 CoreDNS: 1.14.6 Flannel: 0.28.8 Talos is built with Go 1.26.5. ##### Contributors - Andrey Smirnov - Mateusz Urbanek - Noel Georgi - ctr49 - imusmanmalik - kastakhov ##### Changes <details><summary>14 commits</summary> <p> - [@&#8203;`3de4932`](https://github.com/siderolabs/talos/commit/3de493227) release(v1.13.8): prepare release - [@&#8203;`76de777`](https://github.com/siderolabs/talos/commit/76de777df) chore: update dependencies - [@&#8203;`77d5fe2`](https://github.com/siderolabs/talos/commit/77d5fe2cc) chore: update pkgs - [@&#8203;`a7db9b2`](https://github.com/siderolabs/talos/commit/a7db9b227) fix: verify the public key signed images correctly - [@&#8203;`d769389`](https://github.com/siderolabs/talos/commit/d76938912) fix: use context without cancelation for etcd locks - [@&#8203;`3a2abc0`](https://github.com/siderolabs/talos/commit/3a2abc01e) fix: redact resource specs in the merge controllers - [@&#8203;`1531797`](https://github.com/siderolabs/talos/commit/153179702) fix(machined): preserve health when services reach running - [@&#8203;`fc75754`](https://github.com/siderolabs/talos/commit/fc757545c) fix: race with PCR extensions and volume unlock - [@&#8203;`2a51fb1`](https://github.com/siderolabs/talos/commit/2a51fb18f) feat: update Flannel to 0.28.8 - [@&#8203;`05471d3`](https://github.com/siderolabs/talos/commit/05471d31d) feat: update CoreDNS to 1.14.6 - [@&#8203;`9e0b1ca`](https://github.com/siderolabs/talos/commit/9e0b1caba) fix: volume mount race (third attempt) around service restart - [@&#8203;`c5cb365`](https://github.com/siderolabs/talos/commit/c5cb36528) fix: ignore insecure-only imager assets - [@&#8203;`c67b10d`](https://github.com/siderolabs/talos/commit/c67b10d29) test: update Calico in canal reset test - [@&#8203;`9eca6ea`](https://github.com/siderolabs/talos/commit/9eca6ea4a) fix: preserve trailing rate-limited trigger events </p> </details> ##### Changes from siderolabs/pkgs <details><summary>6 commits</summary> <p> - [siderolabs/pkgs@`f677246`](https://github.com/siderolabs/pkgs/commit/f677246) chore: update kernel - [siderolabs/pkgs@`6c5daf2`](https://github.com/siderolabs/pkgs/commit/6c5daf2) chore: replace gnu mirror - [siderolabs/pkgs@`4304e87`](https://github.com/siderolabs/pkgs/commit/4304e87) feat: bump kernel to 6.18.41 - [siderolabs/pkgs@`e66edeb`](https://github.com/siderolabs/pkgs/commit/e66edeb) feat: enable PCF8523 RTC support for arm64 - [siderolabs/pkgs@`b2e51fc`](https://github.com/siderolabs/pkgs/commit/b2e51fc) feat: bump kernel to 6.18.40 - [siderolabs/pkgs@`33195c5`](https://github.com/siderolabs/pkgs/commit/33195c5) feat: enable CONFIG\_NFT\_SOCKET in the kernel </p> </details> ##### Dependency Changes - **github.com/google/cel-go** v0.28.0 -> v0.29.0 - **github.com/gopacket/gopacket** v1.5.0 -> v1.6.1 - **github.com/klauspost/compress** v1.18.6 -> v1.18.7 - **github.com/siderolabs/pkgs** v1.13.0-49-g91fe0a0 -> v1.13.0-55-gf677246 - **github.com/siderolabs/talos/pkg/machinery** v1.13.7 -> v1.13.8 - **github.com/sigstore/sigstore-go** v1.2.0 -> v1.2.1 - **golang.org/x/net** v0.55.0 -> v0.57.0 - **golang.org/x/sync** v0.20.0 -> v0.22.0 - **golang.org/x/sys** v0.45.0 -> v0.47.0 - **golang.org/x/term** v0.43.0 -> v0.45.0 - **golang.org/x/text** v0.37.0 -> v0.40.0 - **google.golang.org/grpc** v1.81.1 -> v1.82.1 Previous release can be found at [v1.13.7](https://github.com/siderolabs/talos/releases/tag/v1.13.7) ##### Images ``` ghcr.io/siderolabs/flannel:0.28.8 registry.k8s.io/coredns/coredns:v1.14.6 registry.k8s.io/etcd:v3.6.12 registry.k8s.io/pause:3.10.1 registry.k8s.io/kube-apiserver:v1.36.2 registry.k8s.io/kube-controller-manager:v1.36.2 registry.k8s.io/kube-scheduler:v1.36.2 registry.k8s.io/kube-proxy:v1.36.2 ghcr.io/siderolabs/kubelet:v1.36.2 registry.k8s.io/networking/kube-network-policies:v1.1.0 ghcr.io/siderolabs/installer:v1.13.8 ghcr.io/siderolabs/installer-base:v1.13.8 ghcr.io/siderolabs/imager:v1.13.8 ghcr.io/siderolabs/talos:v1.13.8 ghcr.io/siderolabs/talosctl-all:v1.13.8 ghcr.io/siderolabs/overlays:v1.13.8 ghcr.io/siderolabs/extensions:v1.13.8 ``` </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). The local configuration can be found in the [SI Renovate Bot repository](https://git.shivering-isles.com/shivering-isles/infrastructure-gitops/src/branch/main/apps/k8s01/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNzIuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjUwLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->
chore(deps): update dependency siderolabs/talos to v1.13.8
All checks were successful
gitops-pr-validation Pipeline completed successfully
f0c3fefb76
botaniker force-pushed renovate/siderolabs-talos-1.13.x from f0c3fefb76
All checks were successful
gitops-pr-validation Pipeline completed successfully
to 5f1862f0a0
All checks were successful
gitops-pr-validation Pipeline completed successfully
gitops-images Pipeline completed successfully
2026-08-20 06:07:21 +00:00
Compare
botaniker changed title from chore(deps): update dependency siderolabs/talos to v1.13.8 to chore(deps): update dependency siderolabs/talos to v1.13.9 2026-08-20 06:07:30 +00:00
botaniker force-pushed renovate/siderolabs-talos-1.13.x from 5f1862f0a0
All checks were successful
gitops-pr-validation Pipeline completed successfully
gitops-images Pipeline completed successfully
to 2ebfa4b6ff
Some checks failed
gitops-pr-validation Pipeline failed
gitops-images Pipeline completed successfully
2026-08-22 06:29:09 +00:00
Compare
botaniker force-pushed renovate/siderolabs-talos-1.13.x from 2ebfa4b6ff
Some checks failed
gitops-pr-validation Pipeline failed
gitops-images Pipeline completed successfully
to 8c7b86764c
Some checks failed
gitops-images Image build started
gitops-pr-validation Pipeline failed
2026-08-24 06:07:22 +00:00
Compare
botaniker force-pushed renovate/siderolabs-talos-1.13.x from 8c7b86764c
Some checks failed
gitops-images Image build started
gitops-pr-validation Pipeline failed
to dc1a4e9e9d
All checks were successful
gitops-pr-validation Pipeline completed successfully
gitops-images Pipeline completed successfully
2026-08-30 06:05:33 +00:00
Compare
botaniker force-pushed renovate/siderolabs-talos-1.13.x from dc1a4e9e9d
All checks were successful
gitops-pr-validation Pipeline completed successfully
gitops-images Pipeline completed successfully
to 44baec36e5
Some checks failed
gitops-images Image build started
gitops-pr-validation Pipeline failed
2026-09-02 06:08:16 +00:00
Compare
botaniker force-pushed renovate/siderolabs-talos-1.13.x from 44baec36e5
Some checks failed
gitops-images Image build started
gitops-pr-validation Pipeline failed
to bd6d26ee3b
Some checks are pending
gitops-images Image build started
gitops-pr-validation Pipeline completed successfully
2026-09-04 06:05:42 +00:00
Compare
botaniker changed title from chore(deps): update dependency siderolabs/talos to v1.13.9 to chore(deps): update dependency siderolabs/talos to v1.13.10 2026-09-04 06:05:52 +00:00
Some checks are pending
gitops-images Image build started
Required
Details
gitops-pr-validation Pipeline completed successfully
Required
Details
Some required checks are missing.
This branch is out-of-date with the base branch
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/siderolabs-talos-1.13.x:renovate/siderolabs-talos-1.13.x
git switch renovate/siderolabs-talos-1.13.x
Sign in to join this conversation.
No reviewers
No labels
No milestone
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
shivering-isles/infrastructure-gitops!120
No description provided.