chore(deps): update module github.com/siderolabs/talos/pkg/machinery to v1.13.0-beta.1#51
Open
renovate[bot] wants to merge 1 commit intomainfrom
Open
Conversation
Contributor
Author
ℹ️ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/github.com-siderolabs-talos-pkg-machinery-1.x
branch
from
ffa6baa to
a0d5fa2
Compare
renovate
bot
changed the title
renovate
bot
deleted the
renovate/github.com-siderolabs-talos-pkg-machinery-1.x
branch
…to v1.13.0-beta.1
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/github.com-siderolabs-talos-pkg-machinery-1.x
branch
2 times, most recently
from
a0d5fa2 to
5182c65
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.13.0-beta.0→v1.13.0-beta.1Release Notes
siderolabs/talos (github.com/siderolabs/talos/pkg/machinery)
v1.13.0-beta.1Compare Source
Talos 1.13.0-beta.1 (2026-03-27)
Welcome to the v1.13.0-beta.1 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Clang built kernel and ThinLTO
Talos now uses a kernel built using Clang compiler, and optimized using ThinLTO. This should bring a small performance improvement,
alongside some hardening features, such as BTI on supported ARM systems.
Container Device Interface
Talos now enables CDI by default and extension/extension services can bring in dynamic
CDI spec files under
/run/cdi.talosctl debug
Talos Linux now provides a way to run and attach to the privileged debug container with a user-provided container image.
The debug container might be used for troubleshooting and debugging purposes.
Environment Configuration Document
A new
EnvironmentConfigdocument has been introduced to allow users to specify environment variables for Talos components.It replaces and deprecates the previous method of setting environment variables via the
.machine.envfield.Multiple values for the same environment variable will replace previous values, with the last one taking precedence.
To remove an environment variable, remove it from the
EnvironmentConfigdocument and restart the node.External Volumes
Talos now supports virtiofs-based external volumes via the new
ExternalVolumeConfig
document.
These virtiofs external volumes are not supported when SELinux is running
in enforcing mode.
Extra Arguments accept slices in addition to strings
Several Talos configuration fields that previously accepted single string values for extra arguments have been updated to accept slices of strings as well.
This includes fields such as
.cluster.apiServer.extraArgs.BREAKING: If you were relying on the resources EtcdConfigs, KubeletConfigs, ControllerManagerConfigs, SchedulerConfigs or APIServerConfigs, the protobuf format has changed from
map<string,string>tomap<string,message>.Container Image Signature Verification
Talos now supports machine-wide container image signature verification via the new
ImageVerificationConfigmachine config document.Any image which gets pulled on the node will be verified against the configured rules, and if no rule matches, it will be pulled without verification.
Talos Imager Enhancements
Talos imager now supports running rootless.
--privilegedand-v /dev:/devare no longer required.Image APIs Updated
Talos Linux provides new APIs to manage container images on the node: listing, pulling, importing and removing images.
The new pull API provides pull progress notifications.
The CLI commands
talosctl image pull,talosctl image listandtalosctl image removehave been updated to interact with the new APIs.Talosctl images k8s-bundle subcommand accepts version parameter
The
talosctl images k8s-bundlecommand now accepts an optional argument to override Talos version.Install and Upgrade API
Talos now exposes install and upgrade operations via the
LifecycleServiceAPI, enabling programmatic installs and upgrades through a single, consistent interface.The legacy upgrade API is deprecated; new integrations should migrate to
LifecycleServicefor future compatibility.Kubernetes server-side apply
Talos now uses inventory backed server-side apply when applying bootstrap manifests (including
extraManifestsandinlineManifests).Purging of unneeded manifests is automatically performed.
The switch and inventory backfill is automatic and no action is needed from the user.
Dynamic Linux Kernel Preemption Model
Talos Linux now defaults to dynamic Linux kernel preemption model, the default value
nonematchesprevious version, but now with kernel argument
preempt=the preemption model can be changed.See Linux kernel documentation for more
information on supported values.
This change only applies to amd64 (x86_64) architecture.
KubeSpan Configuration
A new
KubeSpanConfigdocument has been introduced to configure KubeSpan settings.It replaces and deprecates the previous method of configuring KubeSpan via the
.machine.network.kubespanfield.The old configuration field will continue to work for backward compatibility.
KubeSpan Advertised Network Filters
KubeSpan now supports filtering of advertised networks using the
excludeAdvertisedNetworksfield in theKubeSpanConfigdocument.This allows users to specify a list of CIDRs to exclude from the advertised networks. Please note that routing must be symmetric for any
pair of peers, so if one peer excludes a certain network, the other peer must also exclude it. In other words, for any given pair of peers,
and any pair of their addresses, the traffic should either go through KubeSpan or not, but not one way or the other.
LinkAliasConfig Pattern-Based Multi-Alias
LinkAliasConfignow supports pattern-based alias names using%dformat verb (e.g.net%d).When the alias name contains a
%dformat verb, the selector is allowed to match multiple links.Each matched link receives a sequential alias (e.g.
net0,net1, ...) based on hardware address orderof the links. Links already aliased by a previous config are automatically skipped.
This enables creating stable aliases from any N links using a single config document,
useful for
BondConfigandBridgeConfigmember interfaces on varying hardware.Negative Max Volume Size
Negative max size represents the amount of space to be left free on the device, rather than the size the volume should consume.
For example:
* a max size of "-10GiB" means the volume can grow to the available space minus 10GiB.
* a max size of "-25%" means the volume can grow to the available space minus 25%.
Flannel CNI with Network Policy Support
Talos Linux now supports optionally deploying Flannel CNI with network policy support enabled.
The network policy implementation is kube-network-policies.
To enable Flannel CNI with network policy support, use the following machine configuration patch:
(If the cluster is already running, sync the bootstrap manifests after applying the patch to deploy the new CNI configuration.)
NVIDIA GPU Support
Talos switched to using CDI and now supports configuring NVIDIA GPU via the gpu-operator helm chart.
See the documentation on upgrade notes
for more details on how to configure NVIDIA GPU support in Talos.
Container Image Decompression
Talos now ships with
igzip(amd64) andpigz(arm64) to speed up container image decompression.ProbeConfig
The TCPProbeConfig configuration document allows to configure TCP probes for network reachability checks.
This allows to define a custom connectivity condition.
/proc/PID/mem Access Hardening
A new kernel parameter
proc_mem.force_override=neverhas been introduced by default to enhance system securityby preventing unwanted writes to protected process memory via
/proc/PID/mem.If the kernel parameter is removed, default behavior is restored, allowing access only if the process is traced.
Reproducible Disk Images
Talos disk images are now reproducible. Building the same version of Talos multiple times will yield
identical disk images.
Note: VHD and VMDK (Azure and VMware) images are not currently reproducible due to limitations in the underlying image creation tools.
Users verifying reproducible images should use raw images, verify checksums, and convert them to VHD/VMDK as needed.
ResolverConfig
The nameservers configuration in machine configuration now overwrites any previous layers (defaults, platform, etc.) when specified.
Previously a smart merge was performed to keep IPv4/IPv6 nameservers from lower layers if the machine configuration specified only one type.
Routing Rules Support
Talos now supports routing rules via the new
RoutingRuleConfigmachine config document.Service Account Issuer configuration
In API Server, passing extra args with
service-account-issuerwill append them after default value.This allows easy migration, e.g. by changing
.cluster.controlPlane.endpointto new value, and keeping the old value in.cluster.apiServer.extraArgs["service-account-issuer"].talosctl images talos-bundlecan ignore reaching to the registryThe
talosctl images talos-bundlecommand now accepts optional--overlaysand--extensionsflags.If those are set to
false, the command will not attempt to reach out to the container registry to fetch the latest versions and digests of the overlays and extensions.Lifecycle Upgrade in talosctl
talosctlupgrades now route throughLifecycleService, aligning CLI behavior with the new install/upgrade API and unifying the upgrade path.This change is transparent to users but standardizes the backend used for upgrades.
Component Updates
Linux: 6.18.19
containerd: 2.2.2
etcd: 3.6.9
CoreDNS: 1.14.2
Kubernetes: 1.36.0-beta.0
CNI: 1.9.1
Flannel CNI plugin: v1.9.0-flannel1
Flannel: 0.28.1
LVM2: 2_03_38
runc: 1.4.1
systemd: 259.5
cryptsetup: 2.8.3
Tenstorrent: 2.7.0
iptables: 1.8.12
musl: 1.2.6
Talos is built with Go 1.26.1.
VM Hot-Add Support
Talos now includes udev rules to support hot-adding of CPUs in virtualized environments.
VRF Support
Talos now supports VRF (Virtual Routing and Forwarding) via the new
VRFConfigmachine config document.Contributors
Changes
305 commits
213ecf2release(v1.13.0-beta.1): prepare releaseabc0ddffeat: bump musl to 1.2.6fcdfeabfix: incorrect route source for on-link routesa8f2a0afeat: update NVIDIA production drivers to 595.58.03ccf1e0ctest: fix the PKI mismatch test flake7a94673test: fix cron failures for provision-1 & provision-27978152fix: allow blockdevice wipe in maintenance modeefc76f0test: fix the flakes in tests with trusted roots7fa16b4test: bump memory for Flannel netpolicy tests576c269feat: add --platform=all support to image cache-createceec42ffeat: update Linux to 6.18.19, CNI to 1.9.1902c78atest: improve maintenance API provision testsa4b0cbcfeat: validate luks headers for tampering281584bchore: update go-kubernetes libraryb863607fix: add symlinks nvidia-ctk and nvidia-cdi-hook in /usr/bind82fadafix: unset rlimits for extension services76931f4feat: enforce PID check on connections to services over file socketsdf4e0e7feat: update etcd to 3.6.908ba425feat: update Kubernetes to 1.36.0-beta.01cb2a8bfix: update diff library to v1.0.15e171a3test: fix the apid test against AWS/GCPf98e76ffix: panics in diff algorithmsa544aearelease(v1.13.0-beta.0): prepare releasef36f6efchore: update pkgs and toolsb7d70cffeat: unify maintenance and regular APIs13d6b4afix: trim down cosign dependencies5c39a85fix: drop aws & azure KMS APIs from the machined build3d05975fix: accept image cache volume encryption configd2661d2fix: apparmor parser config files13ef0cffix: unmount pseudo-late recursivelye9d4567fix: panic in hardware.SystemInfoControllera728bbdfix: validate missing apiVersion in config document decoderc8a674afix: pull in a fix for dmesg timestampse7e21fefeat: bump dependencies6bb5cf5feat: implement routing rules supporta0b9d6efeat: bump kernel with uhci_hcd driver1f0d2dafeat: update containerd to 2.2.2cff0f57fix(machined): support USERDATA legacy fallback in OpenNebula driver5d3a326feat(machined): add ONEGATE proxy route and deterministic interface iteration for OpenNebula3bec5ccfeat(machined): inherit IP6_METHOD from METHOD in OpenNebula driver4f4ec98fix(machined): align OpenNebula hostname precedence with reference4d0244dfeat(machined): add IPv6 alias address support for OpenNebula (ETH_ALIAS_IP6)5bb8962feat(machined): support ETH*_IP6_METHOD (static/dhcp/auto/disable) for OpenNebula469db18refactor(machined): extract per-interface IPv4 helper in OpenNebula driverae61f5afix(machined): use ParseFQDN for hostname parsing in OpenNebula7adbbd2feat(machined): support per-interface route metric for OpenNebula (ETH*_METRIC)196658cfeat(machined): add network alias support for OpenNebula (ETH_ALIAS)e96766efeat(machined): merge global and per-interface DNS for OpenNebula23c99a3feat(machined): add static routes support via ETH*_ROUTES for OpenNebulaad3c59afix: prevent stale discovered volumes readsfc9749bfeat: pull in kernel with preemptible kernelc14179echore(ci): update nvidia test to use gpu-operatorda70cedrefactor: drop apid file socketee53a18fix: stop pulling wrong platform for images1733510fix: use non-sensitive resource for health check precondition2fb6f6afeat: add symlinks needed by gpu-operatorf2bae55feat: enable container device interface451b13cfeat: update Linux to 6.18.16a02d578feat: add support for mirroring image signatures57599fbfix: skip some readiness checks when the CNI is disablede6d8669feat: update Go to 1.26.17f2eb48feat: add image verification endpoint1e4cd20feat: add talosctl install command and upgrade via LifecycleService275fa35test: add integration tests for LifecycleService upgrade path15a5ec9feat: implement new install/upgrade API720a214fix: correctly calculate end ranges for nftables sets95287d2fix: environment suite failures10f49cafeat: add trusted roots generation to stdpatches55b8721fix: use correct dhcp option for unicast dhcp renewal58e0064feat: update Kubernetes to 1.36.0-alpha.2ebcfafdfeat: update Linux to 6.18.150ab84c2fix: ignore image digest when doing upgrade-k8sd417d68feat: bring in new ssa logic0bb6413fix: do not fail on RO virtiofsbf2cd0afeat: update Linux to 6.18.14ad29417fix(machined): opennebula: process ETH*_ vars regardless of NETWORK context flagb551cb9feat: allow dashboard mouse supportbfb98a9feat: bump kube-network-policy to v1.0.0000c18dfeat: implement blackhole route configcc636f1fix: image cache test fails with 'no space left on device'f0c51b2feat: implement correct config patching for extraArgs fields1da2b63feat: multi-doc support for configuring vrfsc1d0a33fix: patch with delete for LinkConfigs59311a7release(v1.13.0-alpha.2): prepare release009f0d6chore: update pkgsba56b02feat: include hid-multitouch.ko kernel module in rootfsae29a0dfeat: update Linux to 6.18.137cf1de2fix: bring in new version of go-cmd and go-blockdevicec8800b4fix: update path handling on talosctl cgroups0a7b6ebchore: test extensions8b1c974refactor: drop termui-widgets library5baa002fix: add owning inventory annotation to talos manifestsd3e793dfix: stop Kubernetes client from dynamically reloading the certs6a5a0e3feat: support pattern link aliases9758bd4feat: update Go to 1.26e00aed0feat: update Kubernetes v1.36.0-alpha.1f20445achore: improve logging of disk encryption handlingf018fbefix: handle raw encryption keys with\nproperlye5b0eb0fix: hold user volumes root mountpoint8a0e797refactor: split locate and provisiona59db0efix: improve OpenStack bare metal network configuration reliability659009afix: remove stale endpointsdab0d47fix: allow static hosts in/etc/hostswithout hostname45f2141feat: update go-kubernetes to use new Myers diff35ad044fix: switch to better Myers algorithm implementation0048464feat: update etcd to v3.6.85df10f2fix: use mcopy instead of diskfs to populate VFATce53ffafix: disks flag parsing and handling in create qemu command3bd3dd7fix: memory overuse in imager VFATf118ee4fix: read multi-doc machine config with newer talosctl70c6c21feat: add filter for KubeSpan advertised networksdaf18abfix: fix talosctl debug in enforcing mode33b5b25fix: ignore volumes in wave calculation without provisioninga163925feat: add explicit service account support to Talos client4d53188chore: update dependencies406b8c8feat: update doc links to docs.siderolabs.com87615f5feat: implement network policies with Flannel CNI6995bc1chore: update homebrew formula on release7942d5afix: image gc controller config52e8727feat: add IPv6 GRE support9690dbachore: bump tools (including linter)2628eb2fix: typo with rpi_5 profile named5ebcd7fix: stop building talosctl debug on Windows8b85c7cchore: update depsd905035fix: swap volume configuration for min/max sized43a01cfeat: implementtalosctl debug34a31c9feat: add mount options support for existing volumes1bf95eefeat: improve dashboard uptime display055add7release(v1.13.0-alpha.1): prepare release900516echore: update image signer938de56feat: bump kernel388cec7feat(overlays): add new overlays9f2dd63refactor: api testsa907831feat: add a helper module to generate standard patches1fec5b2fix: implement merger for PercentageSize8b245b8feat: implement new image service APIsd90c775chore: rename internaltalosctl debug air-gapped2165280refactor: change the way one2many proxying is pickedb1b703dchore: move sync logging code to go-kubernetes packagee48c6d7fix: allow to expose a port multiple times in Docker410d8cbfix: undo CRLF on Windows (talosctl edit)859d3f0feat: add RPi5 to the list of supported SBCs0bd48bbfix(talosctl): pass --k8s-endpoint flag to rotate-ca kubernetes rotationb9e27ebfeat: update Linux kernel with dm-integrity6aa9b06fix: skip empty documents on config decoding4944924fix: always set advertised peer URLs782cc50fix: open the filesystem as read-only28e61a7fix: set GRUB prefix correctly on arm64a4f1c52feat: update GRUB to 2.145629207fix: use node podCIDRs for kubespan advertiseKubernetesNetworks3946036feat: implement layering for ProbeSpecb5c760ffeat: add ProbeConfig for network connectivity probes4b274f7feat: support aws cert manager in imager4172095fix: fallback to /proc/meminfo for memory modules7f1147bfix: add warnings to 802.3ad bondddd6b18refactor: generate GRUB imagesc7aa266fix: overwrite resolver config with machine configcf70f05fix: oracle platform file format8c7b8f5feat: add support for negative max size77bc3d2fix: marshal of FailOverMac property38e280cfix: make OOM expression a bit less sensitive3d13016fix: wipe the first/last 1MiB in addition to wiping by signatures1aa6528fix: make OOM controller more precise by considering separate cgroup PSIf7072c0fix: check if the device is not mounted when wiping743c3b9fix: use correct containerd import pathf2dd085feat: report image pull progress in the console72fe98afix: boot with GRUBd4ed13dfix: add talos version to Hetzner Cloud client user agent150c41cfeat: update Linux to 6.18.501a3678fix: use append instead of prepend in service-account-issuerd195427feat: add extraArgs from service-account-issuer91b88f7feat: support multiple values for extraArgs96e6048fix: add hostname to endpoints7033275refactor: move BootloaderKind into machinery71adaf0fix: sort mirrors and tls configs when generating the machine config34f09a3feat: add VLAN support to OpenStack platform5127ef7fix: wipe disk by signatures415bfaefix: panic in configpatcher when the whole section is missinge5aca71fix: fix healthcheck timeout634b71edocs: move talosctl pcap example to Example Block8184927feat: implement KubeSpan multi-document configuration4d0604bchore: remove unrelated machineconfige368634feat: add it87 hwmon module308c750fix: resolve SideroLink Wireguard endpoint on reconnecte4ef494fix: drop the persist config flag from gen configc3176adfeat: add EnvironmentConfig documentc839b38feat: expose more SSA options in the upgrade-k8s commandb8ff967fix: handle correctly incomplete RegistryTLSConfig99f2ddafix: bond config via platform2449ffefix: allow HostnameConfig to be used with incomplete machine config35fc520fix: lock down etcd listen address to IPv4 localhost27253d7feat: use new xfs config filec9d84aefix: generate OCI-compliant image config7a4b2b3fix: update VIP config example080efcbfeat: add k8s-version parameter to k8s-bundleb764f5ffix: skip sync test when kube-proxy is disabled70e6778feat: imager: populate filesystems with root owned files7416dcafix: print talosctl images to release notesdc2009echore: use context when creating filesystems85f7be6chore: update slack links1549521fix: disable swap for system servicesd98b415fix: drop more non-overlay SBC stuff226cd6bfix: do not allocate for the actual disk image file53f5bf8fix: overlay installers10d0cfdfix: overlay install in image mode7708669fix: partition data population4d5657bfix: drop SBC board codec4f3f6dfeat: implement kubernetes server-side applyf12fd2btest: bump Image Factory testsc76484erelease(v1.13.0-alpha.0): prepare releasef0d8a68test: skip the source bundle on exact tagc57701dfix: remove interactive installer43937c1feat: update Linux and systemd72a194dfeat: add VM CPU hot-add rulesf09ae1efix: probe small images correctly8f2b337feat: imager support rootless buildsc7525a9feat: support creating filesystems from foldere2bffb5chore: refactor imager code so it's more clear0fb50dbfix: invalid versions check in talos-bundleb5dd560test: upgrade versions in upgrade tests3dfa4d6fix: make upgrade work with SELinux enforcing=1786c8e2feat: ship pigz/igzip in rootfs to speed up image decompression48d2429feat: update containerd to 2.2.1536541afix: mount volume mount/unmount race39117d4feat: update dependenciesf0f4207fix: bond setting change detection8d6a7a8feat: update Kubernetes to 1.35.0845a0d0feat: update etcd 3.6.7, CoreDNS 1.13.2b95912efeat: enforceproc_mem.force_override=neverby default681f3e8test: run virtiofs tests only when virtiofsd is running0592ff0fix: drop the Omni API URL check on IP addressa4879a5feat: update Linux to 6.18.143b43ffdocs: split talosctl commands into groups6d17c18feat: enable Powercap and Intel RAPL884e766docs: fix the talosctl cluster create help output6dc31befix: exclude new Virtual IPs configured with new config94905c7feat(talosctl): support running qemu x86 on Macf871ab2fix: provide json support innftbinary694f454feat: external volumes39feb16fix: update containerd 2.2.0 with cgroups patch82027ebfix: bond configuration with new settings121b13bfix: disable kexec on arm647eaa725fix: selection of boot entry949bdb9feat: add Secure Boot to CloudStack platform config798143afix: discard better klog message from Kubernetes client008cd09fix: disable kexec in talosctl cluster create on arm64bb62b29chore: prepare talos for 1.13c093503chore: fork reference docs for 1.13.xe387e48fix: do not override DNS on MacOS1e7e87ffix: rework NFT rules for KubeSpan51bcfb5feat: rename image default and source bundle585abe9feat: update Kubernetes to v1.35.0-rc.1f301e3efix: update KubeSpan MSS clamping74c1df6test: propagate MTU size to QEMU intalosctl cluster created347ca1fix: update CNI plugins to 1.9.0e3f8196chore: update Grype and Syfte1b8ab3docs: add misssing periodcd04c3ddocs: update release notesfc8ae32docs: add omni join token example to create qemu command9fa0077chore: update go-blockdeviceba13b67fix: correct condition to use UKI cmdline in GRUBd2ce3f4docs: drop machine.network examplecf087c1test: bird2 extension13df943fix: adapt SELinuxSuite.TestNoPtrace to new strace version861787cfix: mark secureboot as supported for metal04e3e87fix: clean up kubelet mounts2105790fix: clear provisioning data on SideroLink config change0f9f4c0feat: update Kubernetes to 1.35.0-rc.0d4309d7fix: add a timeout for DNS resolving for NTPdd6c108feat: update Linux to 6.18.0e9a30bftest: revert add direct connectivity CA rotation testcc95562fix: don't disable LACP by defaultc9fe467test: add platform acquire/not valid config unit-test5a03a7achore: fix longhorn testa0cfc35feat: implement logs persistence51b732bfix: selection of boot entry18f8ac3feat: update Kubernetes to 1.35.0-beta.092fa7c5chore: update pkgs for NVIDIA 580.105.08f489299chore: correct condition for running k8s integration testsab14975chore: update tools/pkgs to 1.13.0-alpha.087ff9f8test: fix the image-factory test to pass IF endpoint2ffe538test: add direct connectivity CA rotation test70f6b80chore(ci): skip multipath extension tests561cfb6chore: update pkgs and tools version2f42202fix: simplify OOM expression7b06ae8test: fix flaky LinkSpec/Wireguard teste715f38feat: present kernel log astalosctl logs kernele2ee39bfix: support specifying patch file without '@' symbole202b1ffix: trim trailing dots from certificate SANs7f7079ffix: assign value of multicast setting properlyeba9614feat: update etcd to 3.6.69945ceedocs: add API Server Cipher Suites changelog9ed488dfeat: update TLS cipher suites for API serverf1c04e4feat: generate mirrors patcha891089fix: add CA subject to generated certificate35dd612fix: add more resilient move8367583feat: extend flags of cache-cert-gen80ab7a0chore: remove spammy 'clean up unused volumes' logs74d3590chore: disable k8s integration tests for 1GiB worker nodes4f62186feat: support TALOS_HOME env var0c59b3efeat: add multicast to linkconfig6db06f4feat: implement multicast settingeeded98fix: add riscv64 talosctl to release artifactsa6bbae9fix: fix typos across the project83f2bdbfeat: support relative voume sizeChanges since v1.13.0-beta.0
22 commits
213ecf2release(v1.13.0-beta.1): prepare releaseabc0ddffeat: bump musl to 1.2.6fcdfeabfix: incorrect route source for on-link routesa8f2a0afeat: update NVIDIA production drivers to 595.58.03ccf1e0ctest: fix the PKI mismatch test flake7a94673test: fix cron failures for provision-1 & provision-27978152fix: allow blockdevice wipe in maintenance modeefc76f0test: fix the flakes in tests with trusted roots7fa16b4test: bump memory for Flannel netpolicy tests576c269feat: add --platform=all support to image cache-createceec42ffeat: update Linux to 6.18.19, CNI to 1.9.1902c78atest: improve maintenance API provision testsa4b0cbcfeat: validate luks headers for tampering281584bchore: update go-kubernetes libraryb863607fix: add symlinks nvidia-ctk and nvidia-cdi-hook in /usr/bind82fadafix: unset rlimits for extension services76931f4feat: enforce PID check on connections to services over file socketsdf4e0e7feat: update etcd to 3.6.908ba425feat: update Kubernetes to 1.36.0-beta.01cb2a8bfix: update diff library to v1.0.15e171a3test: fix the apid test against AWS/GCPf98e76ffix: panics in diff algorithmsChanges from siderolabs/discovery-api
2 commits
9c06846feat: change the way excluded addresses are specifiedf71a14afeat: add advertised filters to discovery dataChanges from siderolabs/discovery-client
2 commits
854400ffeat: bump discovery API to v0.1.80a4c6fdchore: update dependencies and rekresChanges from siderolabs/go-cmd
2 commits
5f31ba9chore: rekres and updatefff5698feat: allow capturing full output to stdout, modernize APIChanges from siderolabs/go-debug
1 commit
47fce68feat: support Go 1.26, rekresChanges from siderolabs/go-kmsg
3 commits
b53b36dchore: rekres and update6f7d20bfeat: calculate boot time correctly if the time jumps47655eefeat: support PRINTK_CALLER kmsg logsChanges from siderolabs/go-kubernetes
17 commits
503792dchore: add retry to main kubernetes operations6a00c4ffeat: handle CR defined alongside theiConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.