feat(github-release): update aqua:siderolabs/talos ( 1.10.2 → 1.11.5 ) #829
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
1.10.2->1.11.5Release Notes
siderolabs/talos (aqua:siderolabs/talos)
v1.11.5Compare Source
Talos 1.11.5 (2025-11-06)
Welcome to the v1.11.5 release of Talos!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Component Updates
containerd: 2.1.5
Talos is built with Go 1.24.9.
Contributors
Changes
2 commits
bc34de6release(v1.11.5): prepare release3945c6cfeat: update containerd to 2.1.5Changes from siderolabs/pkgs
1 commit
aee690bfeat: update containerd to 2.1.5Dependency Changes
Previous release can be found at v1.11.4
Images
v1.11.4Compare Source
Talos 1.11.4 (2025-11-06)
Welcome to the v1.11.4 release of Talos!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Component Updates
runc: 1.3.3
Linux: 6.12.57
linux-firmware:
2025102Talos is built with Go 1.24.9.
Contributors
Changes
13 commits
8aec376release(v1.11.4): prepare release9c27f9efix: race between VolumeConfigController and UserVolumeConfigControllerac27129fix: provide minimal platform metadata always1946332fix: image-signer commands62aa096chore: update dependencies075f9effix: userspace wireguard handling35b9701fix: log duplication on log sendersd00754efix: add video kernel module to arm89bca75fix: set a timeout for SideroLink provision API call23b21ebfix: imager build on arm642a4f177feat: use image signere043e1bchore: pushlatesttag only on main8edddaffix: reserve the apid and trustd ports from the ephemeral port rangeChanges from siderolabs/pkgs
2 commits
81fd82cchore: update dependenciesb98d490feat: update linux-firmwareDependency Changes
Previous release can be found at v1.11.3
Images
v1.11.3Compare Source
Talos 1.11.3 (2025-10-15)
Welcome to the v1.11.3 release of Talos!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Component Updates
runc: 1.3.2
Kubernetes: 1.34.1
Linux: 6.12.52
linux-firmware:
2025101CoreDNS: 1.12.4
etcd: 3.6.5
Flannel: 0.27.4
Talos is built with Go 1.24.9.
Contributors
Changes
11 commits
a0243efrelease(v1.11.3): prepare release560241cfix: make Akamai platform usable1b23cadfix: cherry-pick of commit0fbb0b0from #11959876719afix: cherry-pick of commitcd9fb27from #119439a30ab6feat: bump go, kernel and runc0fbb0b0fix: provide nocloud metadata with missing network config0dad328feat: update Flannel to v0.27.449182b3fix: support secure HTTP proxy with gRPC diala460f57feat: update etcd 3.6.5, CoreDNS 1.12.448ee858fix: don't set broadcast for /31 and /32 addresses7668c52fix: provide refreshing CA pool (resolvers)Changes from siderolabs/pkgs
5 commits
c316374feat: bump go to 1.24.9769a799feat: update linux-firmware to202510199ddfd5feat: update runc to 1.3.24fecfebfeat: bump kernel to 6.12.52934783ffeat: bump goChanges from siderolabs/tools
2 commits
05ee846feat: bump goefbbe9dfeat: bump goDependency Changes
Previous release can be found at v1.11.2
Images
v1.11.2Compare Source
Talos 1.11.2 (2025-09-25)
Welcome to the v1.11.2 release of Talos!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Component Updates
runc: 1.3.1
Kubernetes: 1.34.1
Linux: 6.12.48
linux-firmware:
2025091Talos is built with Go 1.24.6.
Contributors
Changes
17 commits
511b4d2release(v1.11.2): prepare releaseac45257fix: default gateway as string7cec0e0fix: uefi boot entry handling logic637154edocs: drop invalid v1.12 docsa6d2f65chore(ci): rekres to use new runner groupscd82ee2refactor: efivarfs mock and tests996d97dchore: update pkgsbbf860cdocs: update component updates24c1bcefix: bump trustd memory limit56d6d6fchore: pass in github token to imager682df89fix: use correct order to determine SideroV1 keys directory patha838881fix: trim zero bytes in the DHCP host & domain response9c962aefix: re-create cgroups when restarting runnersde243f9test: fix flakiness in RawVolumes testec8fde5feat: update Kubernetes to 1.34.1797897dtest: improve test stability9827366feat: update runc to 1.3.1Changes from siderolabs/pkgs
3 commits
f95c679chore: update kernel to 6.12.480bd4cb9chore: update linuxfirmware and rekres0c8a195feat: update runc to 1.3.1Dependency Changes
Previous release can be found at v1.11.1
Images
v1.11.1Compare Source
Welcome to the v1.6.0-alpha.2 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Kubelet Credential Provider Configuration
Talos now supports specifying the kubelet credential provider configuration in the Talos configuration file.
It can be set under
machine.kubelet.credentialProviderConfigand kubelet will be automatically configured to with the correct flags.The credential binaries are expected to be present under
/usr/local/lib/kubelet/credentialproviders.Talos System Extensions can be used to install the credential binaries.
Network Device Selectors
Previously, network device selectors only matched the first link, now the configuration is applied to all matching links.
Linux Firmware
Starting with Talos 1.6, there is no Linux firmware included in the initramfs.
Customers who need Linux firmware can pull them as extension during install time using the image factory service.
If the initial boot requires firmware, a custom iso can be built with the firmware included using the image factory service.
This also ensures that the linux-firmware is not tied to a specific Talos version.
Kube-Scheduler Configuration
Talos now supports specifying the kube-scheduler configuration in the Talos configuration file.
It can be set under
cluster.scheduler.configand kube-scheduler will be automatically configured to with the correct flags.KubePrism
KubePrism is enabled by default on port 7445.
Sysctl
Talos now handles sysctl/sysfs key names in line with sysctl.conf(5):
Example (both sysctls are equivalent):
talosctl CLI
The command
imagesdeprecated in Talos 1.5 was removed, please usetalosctl images defaultinstead.Component Updates
Linux: 6.1.63
containerd: 1.7.9
CoreDNS: 1.11.1
Kubernetes: 1.29.0-alpha.3
Flannel: 0.22.3
etcd: 3.5.10
runc: 1.1.10
Talos is built with Go 1.21.4.
Contributors
Changes
177 commits
514e514bafeat: update Linux 6.1.63, containerd 1.7.9aca8b5e17fix: ignore kernel command line in container mode020a0eb63docs: fix table formatting for bootstraprequest0eb245e04docs: fix talosctl pcap example indentationde6caf534docs: fix table formatting for machineservice api27d208c26feat: implement OAuth2 device flow for machine config5c8fa2a80chore: start containerd early in boot95a252cfcdocs: fix link in what is new page0d3c3ed71feat: support kube scheduler config06941b7e5fix: allow rootfs propagation configuration for extension services57dc796f3docs: update lastRelease to v1.5.5 in _index.md21d944a64docs: add timezone information4f1ad16c7feat: support kubelet credentialprovider config71a3bf0e3fix: allow extra kernel args for secureboot installerf38eaaab8feat: rework secureboot and PCR signing key6eade3d5echore: add ability to rewrite uuids and set unique tokens for Talose9c7ac17afix: set max msg recv size when proxyinge22ab440dfeat: update Linux 6.1.61, containerd 1.7.8, runc 1.1.108245361f9feat: show first 32 bytes of response body on download error75d3987c0chore: drop sha1 from genereated pcr json6f32d2990feat: add.deroutputtalosctl gen secureboot pcr87c40da6cfix: proper logging in machined on startupa54da5f64fix: image build for nanopi_4s6f3cd0593refactor: update packet capture to use 'afpacket' interface813442dd7fix: don't validate machine.install if installeddff60069cfeat: update Kubernetes to 1.29.0-alpha.3c97db5dfechore: bump Go dependencies807a9950afix: use custom Talos/kernel version when generating UKIeb94468a6docs: add documentation for Image Factory2e78513e1refactor: drop the dependency link platform -> network ctrl6dc776b8afix: when writing to META in the installer/imager, use fixed name3703041e9chore: remove uneeded codecbe6e7622fix: generate images for SBCs using imager5dff164f1fix: fix error output of cli action trackeref5056122feat: update etcd to 3.5.1045ae80873chore: bump go-api-signature dependency to v0.3.1ffa5e05cbfix: make Talos work on Rockpi 4c boards again8eba4c599feat: generate secrets bundle from the machine configc7de745f6chore: drop deprecated codecc0c3ab69docs: update rpi_generic.mda009f5c60fix: accept sysctl paths with dots4919f6ee2feat: add GOMEMLIMIT to shipped manifests with memory limits73ee576eachore: update sonobuouy library, drop the forkc23bc2f4achore: support OCI layout as a source for profile input154bbd70fdocs: fix talos version in guide for docker11d1f6163release(v1.6.0-alpha.1): prepare release9dfae8467chore: update dependencies38ce3c827feat: nocloud prefer mac address401e89411feat: customize image size865f08f86docs: kubeadm migration guide improvementsc3e418200refactor: use COSI runtime with new controller runtime DBc1ee24465feat: update Kubernetes to v1.29.0-alpha.20ff7350abfix: oracle integration fixes675bada45test: add config generation stability testsf9639fb53test: fix 'talosctl gen' tests6142d87a0feat: hostname configuration improvements on the NoCloud platform7bb205ebefix: don't use runtime-specs Mount struct in machine configd1b27926cfeat: update Go to 1.21.3b87092ab6fix: handle secure boot state policy pcr digest error498aeb8c3docs: fix incorrect image suffixc14a5d4f7feat: support service account auth in cli336aee0fdfix: use tpm2 hash algorithm constants and allow non-SHA-256 PCRs69d8054c9chore: drop UpdateEndpointSuiteef7be16c8fix: clear the encryption config in META when STATE is reset5fc60d2cafeat: add Solarflare SFC9000 support9b5cfdd0bchore: add tests for iscsib897764f8docs: update proxmox.md159f45bdedocs: fix typos in CLI calls to endpoints0bd1bdd74chore: allow insecure access to installer base image (imager)10ed13067fix: the node IP for kubelet shouldn't change if nothing matchese7575ecaafeat: support n-5 latest Kubernetes versionse71508ec1chore: update dependencies6d7fa4668docs: add metal network configuration guide2b548ad0dfeat: update containerd to 1.7.x62dcfe81efix: update kubernetes library to support 1.29 upgrades52caf0763feat: update Kubernetes to 1.29.0-alpha.1390137447feat: enable KubePrism by default1beb5e86edocs: add KubePrism videoa52d3cda3chore: update gen and COSI runtime29b201d61feat: enable common h/w sensors9c2ba7c6fchore: add tests for chelsio drivers5ca4d58dcfix: generate of modules.dep when on the machine5efcccb6bchore: bump kernel to 6.1.5429c767a02docs: add control plane nodes as users of apid also for control plane nodes4874cfb95chore: fix typo96f2a62eatest: update upgrade tests versionsf3a370acbfeat: update Flannel to 0.22.3efdee6965feat: update Kubernetes to 1.28.2e3b494058fix: build CPU ucode correctly for early loaderc5bd0ac5crefactor: reimplement the depmod extension rebuilder0b883f52adocs: add notes about stable addressing3ef670a9echore: pull in dm modules8f4a36b0ddocs: update aws to add command to allow KubeSpan wireguard porta7edd0523fix: set default route priority for hcloud platform87c1b3dddfix: calculate UKI ISO size dynamically9698e4547fix: handle correctly change of listen address for maintenance servicea096f05a5chore: update gRPC library and enable shared write buffers9e78feccachore: improve image signing processf00567e20chore: add PKG_KERNEL arg to customize used kernel2960f93bafeat: add readonly information to the disks API response735bf9ed0feat: bring in Google vNIC driver3f5232075feat: upgrade-k8s without commentse44875106docs: update deploying-cilium.md7046cae43chore: update gopacket to reduce init memory allocsda73b563dchore: update Go to 1.21.15e11f08a6fix: trim file path in the container image3d2dad4e6chore: show securtiystate on dashboardb48510874chore: e2e-aws cleanup1eebbce35chore: add output flag for talosctl config info3fbed806cchore: add tests for util-linux extensions7c514a1a6docs: update header links6058c3602fix: shorten VLAN link names to fit into the limit of 15 characters9c2f765c8fix: allow network device selector to match multiple linksa04b98637fix: update kubernetes library for 1.28 upgrade pre-checksf7473e477feat: update default Kubernetes to 1.28.1d693604a1chore: fix default image list in the release notesd91b5b3a3feat: set environment variables early in the bootc918c0855fix: set correct (1 year) talosconfig expiration79bbdf454fix: set proper timeouts for KubePrism loadbalancerb8fb55d5cfix: use a mount prefix when installing a bootloader44f59a804feat: improve imager APIs2d3ac925erefactor: update NTP spike detectoraf0cc70e3test: update e2e-aws to use worker groupsd03dc7a8achore: validate new system extensionsbbeb489aachore: drop firmware from initramfs3c9f7a7dechore: re-enable nolintlint and typecheck lintersc51e2c9b4feat: update CoreDNS to 1.11.18670450d2release(v1.6.0-alpha.0): prepare release6778ded29feat: add e2e-aws for nvidia extensions74c07ed71chore: update Go to 1.21a28d72e9cfix: ova contents to be nameddisk.*c0ea4d7bafix: properly calculate overal of node address with subnet filtersd6b2719e2chore: drone: move extensions step to a function9608ef56dchore: allow bridge traffic with DHCP broadcast trafficc99316457docs: fix the installing system extensions doc833895940chore: add tests for zfs extensioncb468c41cfix: copy proper modules to arm64 squashfsea0d6e8c6fix: prevent dashboard crashes when process info is not availablee9077a6fbfeat: filter the hostname to produce nodenamedc8361c1dfix: properly GC images supplied with both tag and digestccfa8de11fix: automatically changerpi_4board on upgradeb56e8b7d9fix: support 'List' type manifests574d48e54fix: use image digest when starting a container175747ceafix: ntp query error with bare IPv6 addressc8b507fb2docs: fix kubeprism typo0cdcb2e0edocs: restructure docs for nvidia drivers for v1.4676db9768docs: fork docs for Talos 1.692ad18c18fix: write correct capacity to the ovf6b0373ebechore: move bash tests to integration52b3d8d37docs: make Talos 1.5 documentation the default onedc873df9bchore: fix the filenames of openstack imagesb5c0e7b24docs: update nvidia docs9606e871edocs: update Jiva Pod Security Policya86ed4362chore: update Kubernetes Go modules to 0.28.097b4e3e91feat: update Kubernetes to 1.28.079ca1a3dffeat: e2e-aws using tf codebf3a5e011chore: add version compatibility for Talos 1.6969e8097cfeat: update Kubernetes to 1.28.0-rc.1ca41b611echore: drone jsonnet cleanupbc198e98edocs: retain cilium autoMount pending upstream hostPath fix86c94eff8refactor: docgen and config examplesee6d639f6fix: match routes on the priority properlybff0d8f32chore: fix dependencies in the release pipelinee1b288679refactor: compile regex in validation method on the first usedaa4c185adocs: add what's new and documentation for Talos 1.5c4a1ca8d6chore: remove <-errCh where possible in grpc methodse0f383598chore: clean up the output of theimagerfb536af4dchore: optimize memory usage oftcelllibrary on init7c86a365echore: publish systemd-boot and systemd-stub assets7d688ccfefix: make encryption config provider default toluks2if not set80238a05achore: unify semver undergithub.com/blang/semver/v40f1920bddchore: provide a resource to peek into Linux clock adjustments4eab3017bfix: calculate log2i properlybcf284530fix: update providerid prefix for awsac2aff5ccfix: fix azure portion of cloud uploader793dcedc9fix: fast-wipe the system disk on talosctl reset76fa45afbdocs: update cilium instructionsChanges since v1.6.0-alpha.1
45 commits
514e514bafeat: update Linux 6.1.63, containerd 1.7.9aca8b5e17fix: ignore kernel command line in container mode020a0eb63docs: fix table formatting for bootstraprequest0eb245e04docs: fix talosctl pcap example indentationde6caf534docs: fix table formatting for machineservice api27d208c26feat: implement OAuth2 device flow for machine config5c8fa2a80chore: start containerd early in boot95a252cfcdocs: fix link in what is new page0d3c3ed71feat: support kube scheduler config06941b7e5fix: allow rootfs propagation configuration for extension services57dc796f3docs: update lastRelease to v1.5.5 in _index.md21d944a64docs: add timezone information4f1ad16c7feat: support kubelet credentialprovider config71a3bf0e3fix: allow extra kernel args for secureboot installerf38eaaab8feat: rework secureboot and PCR signing key6eade3d5echore: add ability to rewrite uuids and set unique tokens for Talose9c7ac17afix: set max msg recv size when proxyinge22ab440dfeat: update Linux 6.1.61, containerd 1.7.8, runc 1.1.108245361f9feat: show first 32 bytes of response body on download error75d3987c0chore: drop sha1 from genereated pcr json6f32d2990feat: add.deroutputtalosctl gen secureboot pcr87c40da6cfix: proper logging in machined on startupa54da5f64fix: image build for nanopi_4s6f3cd0593refactor: update packet capture to use 'afpacket' interface813442dd7fix: don't validate machine.install if installeddff60069cfeat: update Kubernetes to 1.29.0-alpha.3c97db5dfechore: bump Go dependencies807a9950afix: use custom Talos/kernel version when generating UKIeb94468a6docs: add documentation for Image Factory2e78513e1refactor: drop the dependency link platform -> network ctrl6dc776b8afix: when writing to META in the installer/imager, use fixed name3703041e9chore: remove uneeded codecbe6e7622fix: generate images for SBCs using imager5dff164f1fix: fix error output of cli action trackeref5056122feat: update etcd to 3.5.1045ae80873chore: bump go-api-signature dependency to v0.3.1ffa5e05cbfix: make Talos work on Rockpi 4c boards again8eba4c599feat: generate secrets bundle from the machine configc7de745f6chore: drop deprecated codecc0c3ab69docs: update rpi_generic.mda009f5c60fix: accept sysctl paths with dots4919f6ee2feat: add GOMEMLIMIT to shipped manifests with memory limits73ee576eachore: update sonobuouy library, drop the forkc23bc2f4achore: support OCI layout as a source for profile input154bbd70fdocs: fix talos version in guide for dockerChanges from siderolabs/extras
7 commits
e8e801bfeat: update Go to 1.21.4d816a02chore: move project to using kres3893789chore: move to github workflows6d48418feat: update Go to 1.21.309d7c3echore: update releasesa011245feat: update Go to 1.21.1d3f54c7feat: update Go to 1.20.8Changes from siderolabs/gen
2 commits
efca710chore: addFilterInPlacemethod to maps and update module36a3ae3feat: update moduleChanges from siderolabs/go-kubernetes
7 commits
fa05430chore: support kube-scheduler config version68bf392feat: add dropped API resource for 1.2909fa006fix: retry Windows connection errors3aa47a4feat: support Kubernetes 1.29 upgradesae33a4afeat: introduce support for Kubernetes version compatibility checkscf2754echore: update to use GHA44e26b3feat: update removed feature gates for 1.28Changes from siderolabs/go-retry
1 commit
23b6fc2fix: provider modern error unwrappingChanges from siderolabs/pkgs
32 commits
3aea711feat: bump dependenciesd59cb3efeat(lvm2): configure thin support252a59ffeat: bump dependencies0bb2a79feat: update Go to 1.21.4f57b0a9chore: fix kernel target to honorPLATFORM5f84302chore: move to using kresd7509f1chore: bump deps3a66437chore: add gh workflows2e892fdfeat: update versions37348d6feat: update Go to 1.21.334f3c41feat: add Solarflare SFC9000 support0c84090feat: update releases19cdf71feat: enable common sensorsacee18echore: bump kernel to 6.1.541d16fd2feat: add Chelsio support4504f83chore: rename kconfig-hardened-check847a9c3chore: enConfiguration
📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.