chore(deps): update dependency siderolabs/talos to v1.13.11 #120

Open
botaniker wants to merge 1 commit from renovate/siderolabs-talos-1.13.x into main
Member

This PR contains the following updates:

Package Update Change OpenSSF
siderolabs/talos patch v1.13.9 → v1.13.11 OpenSSF Scorecard
siderolabs/talos patch v1.13.7 → v1.13.11 OpenSSF Scorecard
siderolabs/talos patch v1.13.8 → v1.13.11 OpenSSF Scorecard

Release Notes

siderolabs/talos

v1.13.11

Compare Source

Talos 1.13.11 (2026-10-01)

Welcome to the v1.13.11 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Time Check API

The TimeService/TimeCheck API (talosctl time --check) is no longer available to the os:reader role, as it allows querying
arbitrary time servers from the node. The TimeService/Time API (querying the configured time server) is still available to os:reader.

PTP device paths are now strictly validated both in the machine configuration and in the API: the path should be directly under /dev,
the name should start with ptp (e.g. /dev/ptp0, /dev/ptp_kvm), and the device should be a PTP character device.

Component Updates

Linux: 6.18.54
containerd: 2.2.9

Talos is built with Go 1.26.7

Contributors
  • Andrey Smirnov
  • Maja Bojarska
  • Noel Georgi
  • Raphaël DUCOM
  • Utku Ozdemir
Changes
13 commits

  • @​638bd94 release(v1.13.11): prepare release
  • @​5f3e4fc test: fix up tests for default OCI spec
  • @​4fe094e fix: add validation for the PTP device name
  • @​56c81cf fix: drop devices from the last observed generation if they are gone
  • @​bd7a2d4 fix: perform stricter validation of hostnames/search domains
  • @​dbe8e02 fix: do not disclose pre-shared Wireguard key in LinkStatus
  • @​00db0af chore: pass kernel version down to VEX generator
  • @​5008991 fix: reconnect the WireGuard over gRPC tunnel after a failure
  • @​0077a50 fix: drop logical links if they no longer declare as logical
  • @​29b1e65 fix: notify about link alias changes
  • @​118a773 fix(security): define the permissions the 6.18 kernel expects in the classes
  • @​365e3c4 fix: set TCP keealive and user timeout on apid proxied connections
  • @​080979b feat: update pkgs/tools

Changes from siderolabs/pkgs
10 commits

Changes from siderolabs/tools
2 commits

Dependency Changes
  • github.com/siderolabs/pkgs v1.13.0-65-g9b044c5 -> v1.13.0-75-g642a01b
  • github.com/siderolabs/talos/pkg/machinery v1.13.10 -> v1.13.11
  • github.com/siderolabs/tools v1.13.0-12-gc70be08 -> v1.13.0-14-gb912600

Previous release can be found at v1.13.10

Images
ghcr.io/siderolabs/flannel:0.28.8
registry.k8s.io/coredns/coredns:v1.14.7
registry.k8s.io/etcd:v3.6.14
registry.k8s.io/pause:3.10.1
registry.k8s.io/kube-apiserver:v1.36.3
registry.k8s.io/kube-controller-manager:v1.36.3
registry.k8s.io/kube-scheduler:v1.36.3
registry.k8s.io/kube-proxy:v1.36.3
ghcr.io/siderolabs/kubelet:v1.36.3
registry.k8s.io/networking/kube-network-policies:v1.1.0
ghcr.io/siderolabs/installer:v1.13.11
ghcr.io/siderolabs/installer-base:v1.13.11
ghcr.io/siderolabs/imager:v1.13.11
ghcr.io/siderolabs/talos:v1.13.11
ghcr.io/siderolabs/talosctl-all:v1.13.11
ghcr.io/siderolabs/overlays:v1.13.11
ghcr.io/siderolabs/extensions:v1.13.11

v1.13.10

Compare Source

Talos 1.13.10 (2026-09-03)

Welcome to the v1.13.10 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Component Updates

Linux: 6.18.48
CoreDNS: 1.14.7

Talos is built with Go 1.26.7

Contributors
  • Andrey Smirnov
  • Mateusz Urbanek
  • Noel Georgi
  • Dima Aratin
  • Ivan Demchuk
  • Maja Bojarska
  • Max Makarov
  • Utku Ozdemir
  • immanuwell
Changes
28 commits

  • @​00ca4c9 release(v1.13.10): prepare release
  • @​271ce0d fix: update DHCP library
  • @​3c70f40 fix: harden the code around kubelet's client certificate handling
  • @​40d7de4 fix: normalize image reference when passing to image verification flow
  • @​cf30d6d fix: filter out passed metadata in API proxying
  • @​cc556d9 fix: treat desired roles empty as error in Talos API access
  • @​0d7a473 fix: allow CSI volumes to be mounted with an SELinux context
  • @​17ab196 fix: validate received kubeconfig
  • @​934ae8a chore: update etcd to v3.6.14
  • @​df9b82d chore: update pkgs and tools
  • @​591c53a fix: use os.Root in the talosctl extract path
  • @​c36d990 fix: escape output in the talosctl dashboard
  • @​fc355dc fix: add checks for meta key in the API path
  • @​e950f65 feat: update COSI to 1.16.3
  • @​20cafbd fix: route creation churning every 100ms
  • @​c6fe78c chore: reduce verbosity of the grype scan
  • @​b9696f9 fix: preserve special modes when extracting files
  • @​865aaec fix: use os.Root in the untar path
  • @​097fa18 fix: create parent directories when extracting tar archives
  • @​c6edc39 chore: bump sigstore/rekor to v1.5.4
  • @​6d062e1 fix: write the uploaded etcd snapshot atomically
  • @​f6b7959 fix: skip selinux label for read-only/detached/external mounts
  • @​bea850a fix: persist in-memory meta on fresh install
  • @​dcf46c1 fix: reduce stalls in the etcd member promotion cycle
  • @​0f4d08a feat: update CoreDNS to 1.14.7
  • @​e091638 fix: watch IPv6 route changes in RouteSpecController
  • @​92614ca fix: truncate files replaced by system extensions
  • @​b7b27ec fix: skip target settings for external volume mounts

Changes from siderolabs/pkgs
5 commits

Changes from siderolabs/tools
3 commits

Dependency Changes
  • github.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.1 -> v1.22.0
  • github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.13.1 -> v1.14.0
  • github.com/aws/aws-sdk-go-v2 v1.41.7 -> v1.43.0
  • github.com/aws/aws-sdk-go-v2/config v1.32.17 -> v1.32.31
  • github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.23 -> v1.18.31
  • github.com/aws/aws-sdk-go-v2/service/kms v1.52.0 -> v1.55.0
  • github.com/aws/smithy-go v1.25.1 -> v1.27.3
  • github.com/cosi-project/runtime v1.14.1 -> v1.16.3
  • github.com/docker/cli v29.4.3 -> v29.5.3
  • github.com/fatih/color v1.18.0 -> v1.19.0
  • github.com/google/go-containerregistry v0.21.6 -> v0.21.7
  • github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.3 -> v2.3.4
  • github.com/insomniacslk/dhcp 5adc3eb -> 234b974
  • github.com/klauspost/compress v1.18.7 -> v1.19.2
  • github.com/mattn/go-isatty v0.0.20 -> v0.0.24
  • github.com/prometheus/procfs v0.20.1 -> v0.22.0
  • github.com/siderolabs/pkgs v1.13.0-60-gf541ca4 -> v1.13.0-65-g9b044c5
  • github.com/siderolabs/talos/pkg/machinery v1.13.9 -> v1.13.10
  • github.com/siderolabs/tools v1.13.0-9-ga201d19 -> v1.13.0-12-gc70be08
  • github.com/sigstore/sigstore v1.10.8 -> v1.10.9
  • github.com/sirupsen/logrus v1.9.4 -> v1.10.2
  • github.com/stretchr/testify v1.11.1 -> v1.12.1
  • go.etcd.io/etcd/api/v3 v3.6.12 -> v3.6.14
  • go.etcd.io/etcd/client/pkg/v3 v3.6.12 -> v3.6.14
  • go.etcd.io/etcd/client/v3 v3.6.12 -> v3.6.14
  • go.etcd.io/etcd/etcdutl/v3 v3.6.12 -> v3.6.14
  • go.yaml.in/yaml/v4 v4.0.0-rc.4 -> v4.0.0-rc.6
  • google.golang.org/grpc v1.82.1 -> v1.83.2
  • google.golang.org/protobuf f2248ac -> v1.36.12

Previous release can be found at v1.13.9

Images
ghcr.io/siderolabs/flannel:0.28.8
registry.k8s.io/coredns/coredns:v1.14.7
registry.k8s.io/etcd:v3.6.14
registry.k8s.io/pause:3.10.1
registry.k8s.io/kube-apiserver:v1.36.3
registry.k8s.io/kube-controller-manager:v1.36.3
registry.k8s.io/kube-scheduler:v1.36.3
registry.k8s.io/kube-proxy:v1.36.3
ghcr.io/siderolabs/kubelet:v1.36.3
registry.k8s.io/networking/kube-network-policies:v1.1.0
ghcr.io/siderolabs/installer:v1.13.10
ghcr.io/siderolabs/installer-base:v1.13.10
ghcr.io/siderolabs/imager:v1.13.10
ghcr.io/siderolabs/talos:v1.13.10
ghcr.io/siderolabs/talosctl-all:v1.13.10
ghcr.io/siderolabs/overlays:v1.13.10
ghcr.io/siderolabs/extensions:v1.13.10

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot. The local configuration can be found in the SI Renovate Bot repository.

This PR contains the following updates: | Package | Update | Change | OpenSSF | |---|---|---|---| | [siderolabs/talos](https://github.com/siderolabs/talos) | patch | `v1.13.9` → `v1.13.11` | [![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/siderolabs/talos/badge)](https://securityscorecards.dev/viewer/?uri=github.com/siderolabs/talos) | | [siderolabs/talos](https://github.com/siderolabs/talos) | patch | `v1.13.7` → `v1.13.11` | [![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/siderolabs/talos/badge)](https://securityscorecards.dev/viewer/?uri=github.com/siderolabs/talos) | | [siderolabs/talos](https://github.com/siderolabs/talos) | patch | `v1.13.8` → `v1.13.11` | [![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/siderolabs/talos/badge)](https://securityscorecards.dev/viewer/?uri=github.com/siderolabs/talos) | --- ### Release Notes <details> <summary>siderolabs/talos</summary> ### [`v1.13.11`](https://github.com/siderolabs/talos/releases/tag/v1.13.11) [Compare Source](https://github.com/siderolabs/talos/compare/v1.13.10...v1.13.11) ##### [Talos 1.13.11](https://github.com/siderolabs/talos/releases/tag/v1.13.11) (2026-10-01) Welcome to the v1.13.11 release of Talos! Please try out the release binaries and report any issues at <https://github.com/siderolabs/talos/issues>. ##### Time Check API The `TimeService/TimeCheck` API (`talosctl time --check`) is no longer available to the `os:reader` role, as it allows querying arbitrary time servers from the node. The `TimeService/Time` API (querying the configured time server) is still available to `os:reader`. PTP device paths are now strictly validated both in the machine configuration and in the API: the path should be directly under `/dev`, the name should start with `ptp` (e.g. `/dev/ptp0`, `/dev/ptp_kvm`), and the device should be a PTP character device. ##### Component Updates Linux: 6.18.54 containerd: 2.2.9 Talos is built with Go 1.26.7 ##### Contributors - Andrey Smirnov - Maja Bojarska - Noel Georgi - Raphaël DUCOM - Utku Ozdemir ##### Changes <details><summary>13 commits</summary> <p> - [@&#8203;`638bd94`](https://github.com/siderolabs/talos/commit/638bd9493) release(v1.13.11): prepare release - [@&#8203;`5f3e4fc`](https://github.com/siderolabs/talos/commit/5f3e4fce3) test: fix up tests for default OCI spec - [@&#8203;`4fe094e`](https://github.com/siderolabs/talos/commit/4fe094e73) fix: add validation for the PTP device name - [@&#8203;`56c81cf`](https://github.com/siderolabs/talos/commit/56c81cffd) fix: drop devices from the last observed generation if they are gone - [@&#8203;`bd7a2d4`](https://github.com/siderolabs/talos/commit/bd7a2d4dc) fix: perform stricter validation of hostnames/search domains - [@&#8203;`dbe8e02`](https://github.com/siderolabs/talos/commit/dbe8e022c) fix: do not disclose pre-shared Wireguard key in LinkStatus - [@&#8203;`00db0af`](https://github.com/siderolabs/talos/commit/00db0af77) chore: pass kernel version down to VEX generator - [@&#8203;`5008991`](https://github.com/siderolabs/talos/commit/500899185) fix: reconnect the WireGuard over gRPC tunnel after a failure - [@&#8203;`0077a50`](https://github.com/siderolabs/talos/commit/0077a50ed) fix: drop logical links if they no longer declare as logical - [@&#8203;`29b1e65`](https://github.com/siderolabs/talos/commit/29b1e6536) fix: notify about link alias changes - [@&#8203;`118a773`](https://github.com/siderolabs/talos/commit/118a77363) fix(security): define the permissions the 6.18 kernel expects in the classes - [@&#8203;`365e3c4`](https://github.com/siderolabs/talos/commit/365e3c4f6) fix: set TCP keealive and user timeout on apid proxied connections - [@&#8203;`080979b`](https://github.com/siderolabs/talos/commit/080979b4c) feat: update pkgs/tools </p> </details> ##### Changes from siderolabs/pkgs <details><summary>10 commits</summary> <p> - [siderolabs/pkgs@`642a01b`](https://github.com/siderolabs/pkgs/commit/642a01b) feat: update containerd to 2.2.9 - [siderolabs/pkgs@`3016b61`](https://github.com/siderolabs/pkgs/commit/3016b61) fix: add a patch to fix booting on Apple hardware - [siderolabs/pkgs@`889ec2b`](https://github.com/siderolabs/pkgs/commit/889ec2b) feat: update Linux to 6.18.54 - [siderolabs/pkgs@`b554743`](https://github.com/siderolabs/pkgs/commit/b554743) feat: update Linux to 6.18.53 - [siderolabs/pkgs@`574809b`](https://github.com/siderolabs/pkgs/commit/574809b) feat: update DRBD & Linux firmware - [siderolabs/pkgs@`6f29f5d`](https://github.com/siderolabs/pkgs/commit/6f29f5d) feat: update Linux to 6.18.52 - [siderolabs/pkgs@`1737c02`](https://github.com/siderolabs/pkgs/commit/1737c02) feat: update Linux to 6.18.51 - [siderolabs/pkgs@`6b76586`](https://github.com/siderolabs/pkgs/commit/6b76586) feat: update Linux to 6.18.50 - [siderolabs/pkgs@`bb9fe70`](https://github.com/siderolabs/pkgs/commit/bb9fe70) feat: bump kernel to 6.18.49 - [siderolabs/pkgs@`6187366`](https://github.com/siderolabs/pkgs/commit/6187366) chore: sync tools </p> </details> ##### Changes from siderolabs/tools <details><summary>2 commits</summary> <p> - [siderolabs/tools@`b912600`](https://github.com/siderolabs/tools/commit/b912600) feat: update pcre to 10.48 - [siderolabs/tools@`7b95365`](https://github.com/siderolabs/tools/commit/7b95365) chore: bump util-linux 2.42.3 </p> </details> ##### Dependency Changes - **github.com/siderolabs/pkgs** v1.13.0-65-g9b044c5 -> v1.13.0-75-g642a01b - **github.com/siderolabs/talos/pkg/machinery** v1.13.10 -> v1.13.11 - **github.com/siderolabs/tools** v1.13.0-12-gc70be08 -> v1.13.0-14-gb912600 Previous release can be found at [v1.13.10](https://github.com/siderolabs/talos/releases/tag/v1.13.10) ##### Images ``` ghcr.io/siderolabs/flannel:0.28.8 registry.k8s.io/coredns/coredns:v1.14.7 registry.k8s.io/etcd:v3.6.14 registry.k8s.io/pause:3.10.1 registry.k8s.io/kube-apiserver:v1.36.3 registry.k8s.io/kube-controller-manager:v1.36.3 registry.k8s.io/kube-scheduler:v1.36.3 registry.k8s.io/kube-proxy:v1.36.3 ghcr.io/siderolabs/kubelet:v1.36.3 registry.k8s.io/networking/kube-network-policies:v1.1.0 ghcr.io/siderolabs/installer:v1.13.11 ghcr.io/siderolabs/installer-base:v1.13.11 ghcr.io/siderolabs/imager:v1.13.11 ghcr.io/siderolabs/talos:v1.13.11 ghcr.io/siderolabs/talosctl-all:v1.13.11 ghcr.io/siderolabs/overlays:v1.13.11 ghcr.io/siderolabs/extensions:v1.13.11 ``` ### [`v1.13.10`](https://github.com/siderolabs/talos/releases/tag/v1.13.10) [Compare Source](https://github.com/siderolabs/talos/compare/v1.13.9...v1.13.10) ##### [Talos 1.13.10](https://github.com/siderolabs/talos/releases/tag/v1.13.10) (2026-09-03) Welcome to the v1.13.10 release of Talos! Please try out the release binaries and report any issues at <https://github.com/siderolabs/talos/issues>. ##### Component Updates Linux: 6.18.48 CoreDNS: 1.14.7 Talos is built with Go 1.26.7 ##### Contributors - Andrey Smirnov - Mateusz Urbanek - Noel Georgi - Dima Aratin - Ivan Demchuk - Maja Bojarska - Max Makarov - Utku Ozdemir - immanuwell ##### Changes <details><summary>28 commits</summary> <p> - [@&#8203;`00ca4c9`](https://github.com/siderolabs/talos/commit/00ca4c987) release(v1.13.10): prepare release - [@&#8203;`271ce0d`](https://github.com/siderolabs/talos/commit/271ce0dc8) fix: update DHCP library - [@&#8203;`3c70f40`](https://github.com/siderolabs/talos/commit/3c70f4054) fix: harden the code around kubelet's client certificate handling - [@&#8203;`40d7de4`](https://github.com/siderolabs/talos/commit/40d7de4c0) fix: normalize image reference when passing to image verification flow - [@&#8203;`cf30d6d`](https://github.com/siderolabs/talos/commit/cf30d6df4) fix: filter out passed metadata in API proxying - [@&#8203;`cc556d9`](https://github.com/siderolabs/talos/commit/cc556d9ce) fix: treat desired roles empty as error in Talos API access - [@&#8203;`0d7a473`](https://github.com/siderolabs/talos/commit/0d7a47305) fix: allow CSI volumes to be mounted with an SELinux context - [@&#8203;`17ab196`](https://github.com/siderolabs/talos/commit/17ab196fe) fix: validate received kubeconfig - [@&#8203;`934ae8a`](https://github.com/siderolabs/talos/commit/934ae8a2b) chore: update etcd to v3.6.14 - [@&#8203;`df9b82d`](https://github.com/siderolabs/talos/commit/df9b82dce) chore: update pkgs and tools - [@&#8203;`591c53a`](https://github.com/siderolabs/talos/commit/591c53aac) fix: use os.Root in the talosctl extract path - [@&#8203;`c36d990`](https://github.com/siderolabs/talos/commit/c36d99001) fix: escape output in the talosctl dashboard - [@&#8203;`fc355dc`](https://github.com/siderolabs/talos/commit/fc355dcd3) fix: add checks for meta key in the API path - [@&#8203;`e950f65`](https://github.com/siderolabs/talos/commit/e950f655e) feat: update COSI to 1.16.3 - [@&#8203;`20cafbd`](https://github.com/siderolabs/talos/commit/20cafbdb3) fix: route creation churning every 100ms - [@&#8203;`c6fe78c`](https://github.com/siderolabs/talos/commit/c6fe78c61) chore: reduce verbosity of the grype scan - [@&#8203;`b9696f9`](https://github.com/siderolabs/talos/commit/b9696f9d7) fix: preserve special modes when extracting files - [@&#8203;`865aaec`](https://github.com/siderolabs/talos/commit/865aaec80) fix: use os.Root in the untar path - [@&#8203;`097fa18`](https://github.com/siderolabs/talos/commit/097fa184e) fix: create parent directories when extracting tar archives - [@&#8203;`c6edc39`](https://github.com/siderolabs/talos/commit/c6edc3911) chore: bump sigstore/rekor to v1.5.4 - [@&#8203;`6d062e1`](https://github.com/siderolabs/talos/commit/6d062e13b) fix: write the uploaded etcd snapshot atomically - [@&#8203;`f6b7959`](https://github.com/siderolabs/talos/commit/f6b795970) fix: skip selinux label for read-only/detached/external mounts - [@&#8203;`bea850a`](https://github.com/siderolabs/talos/commit/bea850ac3) fix: persist in-memory meta on fresh install - [@&#8203;`dcf46c1`](https://github.com/siderolabs/talos/commit/dcf46c11e) fix: reduce stalls in the etcd member promotion cycle - [@&#8203;`0f4d08a`](https://github.com/siderolabs/talos/commit/0f4d08a1f) feat: update CoreDNS to 1.14.7 - [@&#8203;`e091638`](https://github.com/siderolabs/talos/commit/e0916388e) fix: watch IPv6 route changes in RouteSpecController - [@&#8203;`92614ca`](https://github.com/siderolabs/talos/commit/92614ca8a) fix: truncate files replaced by system extensions - [@&#8203;`b7b27ec`](https://github.com/siderolabs/talos/commit/b7b27ec29) fix: skip target settings for external volume mounts </p> </details> ##### Changes from siderolabs/pkgs <details><summary>5 commits</summary> <p> - [siderolabs/pkgs@`9b044c5`](https://github.com/siderolabs/pkgs/commit/9b044c5) feat: update kernel to 6.18.48 - [siderolabs/pkgs@`de74a50`](https://github.com/siderolabs/pkgs/commit/de74a50) feat: bump kernel to 6.18.47 - [siderolabs/pkgs@`bb15c62`](https://github.com/siderolabs/pkgs/commit/bb15c62) chore: update toolchain and tools - [siderolabs/pkgs@`49c50f7`](https://github.com/siderolabs/pkgs/commit/49c50f7) feat: bump kernel to 6.18.46 - [siderolabs/pkgs@`2da2cdc`](https://github.com/siderolabs/pkgs/commit/2da2cdc) feat: backport aes256k support (Ceph) </p> </details> ##### Changes from siderolabs/tools <details><summary>3 commits</summary> <p> - [siderolabs/tools@`c70be08`](https://github.com/siderolabs/tools/commit/c70be08) chore: update toolchain - [siderolabs/tools@`7791f48`](https://github.com/siderolabs/tools/commit/7791f48) feat: use kernel gnu mirrors - [siderolabs/tools@`d908dc0`](https://github.com/siderolabs/tools/commit/d908dc0) fix: update OpenSSL to 3.6.4 </p> </details> ##### Dependency Changes - **github.com/Azure/azure-sdk-for-go/sdk/azcore** v1.21.1 -> v1.22.0 - **github.com/Azure/azure-sdk-for-go/sdk/azidentity** v1.13.1 -> v1.14.0 - **github.com/aws/aws-sdk-go-v2** v1.41.7 -> v1.43.0 - **github.com/aws/aws-sdk-go-v2/config** v1.32.17 -> v1.32.31 - **github.com/aws/aws-sdk-go-v2/feature/ec2/imds** v1.18.23 -> v1.18.31 - **github.com/aws/aws-sdk-go-v2/service/kms** v1.52.0 -> v1.55.0 - **github.com/aws/smithy-go** v1.25.1 -> v1.27.3 - **github.com/cosi-project/runtime** v1.14.1 -> v1.16.3 - **github.com/docker/cli** v29.4.3 -> v29.5.3 - **github.com/fatih/color** v1.18.0 -> v1.19.0 - **github.com/google/go-containerregistry** v0.21.6 -> v0.21.7 - **github.com/grpc-ecosystem/go-grpc-middleware/v2** v2.3.3 -> v2.3.4 - **github.com/insomniacslk/dhcp** [`5adc3eb`](https://github.com/siderolabs/talos/commit/5adc3eb26f91) -> [`234b974`](https://github.com/siderolabs/talos/commit/234b97448fae) - **github.com/klauspost/compress** v1.18.7 -> v1.19.2 - **github.com/mattn/go-isatty** v0.0.20 -> v0.0.24 - **github.com/prometheus/procfs** v0.20.1 -> v0.22.0 - **github.com/siderolabs/pkgs** v1.13.0-60-gf541ca4 -> v1.13.0-65-g9b044c5 - **github.com/siderolabs/talos/pkg/machinery** v1.13.9 -> v1.13.10 - **github.com/siderolabs/tools** v1.13.0-9-ga201d19 -> v1.13.0-12-gc70be08 - **github.com/sigstore/sigstore** v1.10.8 -> v1.10.9 - **github.com/sirupsen/logrus** v1.9.4 -> v1.10.2 - **github.com/stretchr/testify** v1.11.1 -> v1.12.1 - **go.etcd.io/etcd/api/v3** v3.6.12 -> v3.6.14 - **go.etcd.io/etcd/client/pkg/v3** v3.6.12 -> v3.6.14 - **go.etcd.io/etcd/client/v3** v3.6.12 -> v3.6.14 - **go.etcd.io/etcd/etcdutl/v3** v3.6.12 -> v3.6.14 - **go.yaml.in/yaml/v4** v4.0.0-rc.4 -> v4.0.0-rc.6 - **google.golang.org/grpc** v1.82.1 -> v1.83.2 - **google.golang.org/protobuf** [`f2248ac`](https://github.com/siderolabs/talos/commit/f2248ac996af) -> v1.36.12 Previous release can be found at [v1.13.9](https://github.com/siderolabs/talos/releases/tag/v1.13.9) ##### Images ``` ghcr.io/siderolabs/flannel:0.28.8 registry.k8s.io/coredns/coredns:v1.14.7 registry.k8s.io/etcd:v3.6.14 registry.k8s.io/pause:3.10.1 registry.k8s.io/kube-apiserver:v1.36.3 registry.k8s.io/kube-controller-manager:v1.36.3 registry.k8s.io/kube-scheduler:v1.36.3 registry.k8s.io/kube-proxy:v1.36.3 ghcr.io/siderolabs/kubelet:v1.36.3 registry.k8s.io/networking/kube-network-policies:v1.1.0 ghcr.io/siderolabs/installer:v1.13.10 ghcr.io/siderolabs/installer-base:v1.13.10 ghcr.io/siderolabs/imager:v1.13.10 ghcr.io/siderolabs/talos:v1.13.10 ghcr.io/siderolabs/talosctl-all:v1.13.10 ghcr.io/siderolabs/overlays:v1.13.10 ghcr.io/siderolabs/extensions:v1.13.10 ``` </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). The local configuration can be found in the [SI Renovate Bot repository](https://git.shivering-isles.com/shivering-isles/infrastructure-gitops/src/branch/main/apps/k8s01/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNzIuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE1NS45IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
chore(deps): update dependency siderolabs/talos to v1.13.8
All checks were successful
gitops-pr-validation Pipeline completed successfully
f0c3fefb76
botaniker force-pushed renovate/siderolabs-talos-1.13.x from f0c3fefb76
All checks were successful
gitops-pr-validation Pipeline completed successfully
to 5f1862f0a0
All checks were successful
gitops-pr-validation Pipeline completed successfully
gitops-images Pipeline completed successfully
2026-08-20 06:07:21 +00:00
Compare
botaniker changed title from chore(deps): update dependency siderolabs/talos to v1.13.8 to chore(deps): update dependency siderolabs/talos to v1.13.9 2026-08-20 06:07:30 +00:00
botaniker force-pushed renovate/siderolabs-talos-1.13.x from 5f1862f0a0
All checks were successful
gitops-pr-validation Pipeline completed successfully
gitops-images Pipeline completed successfully
to 2ebfa4b6ff
Some checks failed
gitops-pr-validation Pipeline failed
gitops-images Pipeline completed successfully
2026-08-22 06:29:09 +00:00
Compare
botaniker force-pushed renovate/siderolabs-talos-1.13.x from 2ebfa4b6ff
Some checks failed
gitops-pr-validation Pipeline failed
gitops-images Pipeline completed successfully
to 8c7b86764c
Some checks failed
gitops-images Image build started
gitops-pr-validation Pipeline failed
2026-08-24 06:07:22 +00:00
Compare
botaniker force-pushed renovate/siderolabs-talos-1.13.x from 8c7b86764c
Some checks failed
gitops-images Image build started
gitops-pr-validation Pipeline failed
to dc1a4e9e9d
All checks were successful
gitops-pr-validation Pipeline completed successfully
gitops-images Pipeline completed successfully
2026-08-30 06:05:33 +00:00
Compare
botaniker force-pushed renovate/siderolabs-talos-1.13.x from dc1a4e9e9d
All checks were successful
gitops-pr-validation Pipeline completed successfully
gitops-images Pipeline completed successfully
to 44baec36e5
Some checks failed
gitops-images Image build started
gitops-pr-validation Pipeline failed
2026-09-02 06:08:16 +00:00
Compare
botaniker force-pushed renovate/siderolabs-talos-1.13.x from 44baec36e5
Some checks failed
gitops-images Image build started
gitops-pr-validation Pipeline failed
to bd6d26ee3b
Some checks are pending
gitops-images Image build started
gitops-pr-validation Pipeline completed successfully
2026-09-04 06:05:42 +00:00
Compare
botaniker changed title from chore(deps): update dependency siderolabs/talos to v1.13.9 to chore(deps): update dependency siderolabs/talos to v1.13.10 2026-09-04 06:05:52 +00:00
botaniker force-pushed renovate/siderolabs-talos-1.13.x from bd6d26ee3b
Some checks are pending
gitops-images Image build started
gitops-pr-validation Pipeline completed successfully
to 01a4141bb1
Some checks are pending
gitops-pr-validation Pipeline started
go-lint Go pipeline started
gitops-images Image build started
2026-09-11 22:07:57 +00:00
Compare
botaniker force-pushed renovate/siderolabs-talos-1.13.x from 01a4141bb1
Some checks are pending
gitops-pr-validation Pipeline started
go-lint Go pipeline started
gitops-images Image build started
to e5ac328f4e 2026-09-30 06:07:04 +00:00
Compare
botaniker force-pushed renovate/siderolabs-talos-1.13.x from e5ac328f4e to 8cacb4e0e2
All checks were successful
gitops-images Pipeline completed successfully
go-lint Pipeline completed successfully
gitops-pr-validation Pipeline completed successfully
2026-10-01 19:59:56 +00:00
Compare
botaniker changed title from chore(deps): update dependency siderolabs/talos to v1.13.10 to chore(deps): update dependency siderolabs/talos to v1.13.11 2026-10-01 20:00:05 +00:00
All checks were successful
gitops-images Pipeline completed successfully
Required
Details
go-lint Pipeline completed successfully
gitops-pr-validation Pipeline completed successfully
Required
Details
This pull request can be merged automatically.
This branch is out-of-date with the base branch
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/siderolabs-talos-1.13.x:renovate/siderolabs-talos-1.13.x
git switch renovate/siderolabs-talos-1.13.x
Sign in to join this conversation.
No reviewers
No labels
No milestone
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
shivering-isles/infrastructure-gitops!120
No description provided.