2025.11.0

What's Changed

• Use ed25519 to generate deploy-key by @edenhaus in #1993
• fix(container): Align network kustomizations with oher ones by @edenhaus in #1994
• feat(container): update image ghcr.io/coredns/charts/coredns ( 1.43.3 ➔ 1.44.3 ) by @renovate[bot] in #1995
• feat(container): update image ghcr.io/prometheus-community/charts/kube-prometheus-stack ( 77.12.0 ➔ 77.13.0 ) by @renovate[bot] in #1996
• feat(container): update image ghcr.io/prometheus-community/charts/kube-prometheus-stack ( 77.13.0 ➔ 77.14.0 ) by @renovate[bot] in #1999
• feat(container): update image quay.io/jetstack/charts/cert-manager ( v1.18.2 ➔ v1.19.0 ) by @renovate[bot] in #2000
• feat(container): update flux-operator group by @renovate[bot] in #1998
• feat(container)!: Update image ghcr.io/prometheus-community/charts/kube-prometheus-stack ( 77.14.0 ➔ 78.1.0 ) - autoclosed by @renovate[bot] in #2001
• feat(container): update image ghcr.io/prometheus-community/charts/kube-prometheus-stack ( 78.1.0 ➔ 78.2.0 ) by @renovate[bot] in #2002
• fix(container): update image ghcr.io/siderolabs/installer ( v1.11.2 ➔ v1.11.3 ) by @renovate[bot] in #2003
• fix(container): update image quay.io/jetstack/charts/cert-manager ( v1.19.0 ➔ v1.19.1 ) by @renovate[bot] in #2004
• feat(container): update image docker.io/cloudflare/cloudflared ( 2025.9.1 ➔ 2025.10.0 ) by @renovate[bot] in #2005
• feat(container): update image ghcr.io/bjw-s-labs/helm/app-template ( 4.3.0 ➔ 4.4.0 ) by @renovate[bot] in #2006
• feat(container): update image ghcr.io/prometheus-community/charts/kube-prometheus-stack ( 78.2.0 ➔ 78.3.0 ) by @renovate[bot] in #2007
• feat(container): update image ghcr.io/wiremind/wiremind-helm-charts/gateway-api-crds ( 1.3.0 ➔ 1.4.0 ) - autoclosed by @renovate[bot] in #2008
• feat: set helmrelease defaults via ks patch by @onedr0p in #2009
• feat: remove namespace component by @onedr0p in #2010
• feat: switch to envoy-gateway by @onedr0p in #2011
• feat(container): update image ghcr.io/coredns/charts/coredns ( 1.44.3 ➔ 1.45.0 ) by @renovate[bot] in #2014
• fix(container): update image ghcr.io/prometheus-community/charts/kube-prometheus-stack ( 78.3.0 ➔ 78.3.1 ) by @renovate[bot] in #2013
• feat(container): update image ghcr.io/prometheus-community/charts/kube-prometheus-stack ( 78.3.1 ➔ 78.4.0 ) by @renovate[bot] in #2015
• feat(container)!: Update image ghcr.io/mendhak/http-https-echo ( 37 ➔ 38 ) by @renovate[bot] in #2019
• fix(container): update image ghcr.io/home-operations/charts-mirror/cilium ( 1.18.2 ➔ 1.18.3 ) by @renovate[bot] in #2016
• fix(container): update image mirror.gcr.io/envoyproxy/gateway-helm ( 1.5.3 ➔ v1.5.4 ) by @renovate[bot] in #2017
• feat(container): update image ghcr.io/prometheus-community/charts/kube-prometheus-stack ( 78.4.0 ➔ 78.5.0 ) by @renovate[bot] in #2018
• fix(talos): admissionControl patch by @Diaoul in #2020
• template Taskfile.yaml - talenv.sops.yaml patch by @wasurerarenai in #2021

New Contributors

• @edenhaus made their first contribution in #1993
• @Diaoul made their first contribution in #2020

Full Changelog: 2025.10.0...2025.11.0

2025.10.0

What's Changed

• feat(container): update image ghcr.io/siderolabs/installer ( v1.10.7 ➔ v1.11.0 ) by @renovate[bot] in #1966
• feat(container): update image ghcr.io/siderolabs/kubelet ( v1.33.4 ➔ v1.34.0 ) by @renovate[bot] in #1965
• feat: update bootstrap process and break up HRs and OCIRepos by @onedr0p in #1968
• Add OCIRepository configuration for flux-instance by @onedr0p in #1970
• ci(github-action)!: Update action actions/github-script ( v7.1.0 ➔ v8.0.0 ) by @renovate[bot] in #1972
• ci(github-action)!: Update action actions/labeler ( v5.0.0 ➔ v6.0.1 ) - autoclosed by @renovate[bot] in #1973
• feat(container): update image ghcr.io/prometheus-community/charts/kube-prometheus-stack ( 77.3.0 ➔ 77.5.0 ) by @renovate[bot] in #1971
• fix(container): update image ghcr.io/siderolabs/installer ( v1.11.0 ➔ v1.11.1 ) by @renovate[bot] in #1974
• feat(container): update image ghcr.io/home-operations/charts-mirror/external-dns ( 1.18.0 ➔ 1.19.0 ) by @renovate[bot] in #1975
• feat(container): update image ghcr.io/prometheus-community/charts/kube-prometheus-stack ( 77.5.0 ➔ 77.6.0 ) by @renovate[bot] in #1976
• fix(container): update image ghcr.io/siderolabs/kubelet ( v1.34.0 ➔ v1.34.1 ) by @renovate[bot] in #1978
• fix(container): update image ghcr.io/prometheus-community/charts/kube-prometheus-stack ( 77.6.0 ➔ 77.6.2 ) by @renovate[bot] in #1977
• ci(github-action)!: Update action tj-actions/changed-files ( v46.0.5 ➔ v47.0.0 ) by @renovate[bot] in #1979
• feat(container): update image ghcr.io/spegel-org/helm-charts/spegel ( 0.3.0 ➔ 0.4.0 ) by @renovate[bot] in #1980
• fix(container): update image ghcr.io/home-operations/charts-mirror/cilium ( 1.18.1 ➔ 1.18.2 ) by @renovate[bot] in #1981
• fix(container): update image ghcr.io/stakater/charts/reloader ( 2.2.2 ➔ 2.2.3 ) by @renovate[bot] in #1982
• feat(container): update image docker.io/cloudflare/cloudflared ( 2025.8.1 ➔ 2025.9.0 ) by @renovate[bot] in #1983
• feat(container): update image ghcr.io/bjw-s-labs/helm/app-template ( 4.2.0 ➔ 4.3.0 ) by @renovate[bot] in #1984
• feat(mise): update tool aqua:go-task/task ( 3.44.1 ➔ 3.45.4 ) by @renovate[bot] in #1986
• feat(container): update image ghcr.io/prometheus-community/charts/kube-prometheus-stack ( 77.6.2 ➔ 77.10.0 ) by @renovate[bot] in #1985
• fix(container): update image ghcr.io/siderolabs/installer ( v1.11.1 ➔ v1.11.2 ) by @renovate[bot] in #1988
• fix(container): update image docker.io/cloudflare/cloudflared ( 2025.9.0 ➔ 2025.9.1 ) by @renovate[bot] in #1987
• feat(container): update flux-operator group ( 0.28.0 ➔ 0.29.0 ) by @renovate[bot] in #1989
• feat(container): update image ghcr.io/prometheus-community/charts/kube-prometheus-stack ( 77.10.0 ➔ 77.12.0 ) by @renovate[bot] in #1990
• feat(flux): pre 2.7.0 changes by @onedr0p in #1991
• feat(container): update flux-operator group by @renovate[bot] in #1992
• feat: add kustomize-controller sops decryption by @onedr0p in #1969

Full Changelog: 2025.9.0...2025.10.0

2025.9.0

What's Changed

• fix(container): update image ghcr.io/siderolabs/installer ( v1.10.5 → v1.10.6 ) by @renovate[bot] in #1941
• feat(container): update image ghcr.io/stakater/charts/reloader ( 2.1.5 → 2.2.0 ) by @renovate[bot] in #1944
• feat(container): update image ghcr.io/bjw-s-labs/helm/app-template ( 4.1.2 → 4.2.0 ) by @renovate[bot] in #1943
• feat(container): update flux operator group ( 0.25.0 → 0.26.0 ) - autoclosed by @renovate[bot] in #1942
• feat(helm): update chart cilium ( 1.17.6 → 1.18.0 ) by @renovate[bot] in #1945
• feat: use gcr mirror for docker.io pulls by @onedr0p in #1946
• Revert "feat: use gcr mirror for docker.io pulls" by @onedr0p in #1947
• fix(container): update coredns group ( 1.43.0 → 1.43.2 ) by @renovate[bot] in #1948
• fix(github-release): update release prometheus-operator/prometheus-operator ( v0.84.0 → v0.84.1 ) by @renovate[bot] in #1949
• feat(container): update flux operator group ( 0.26.0 → 0.27.0 ) by @renovate[bot] in #1950
• feat(container): update image docker.io/cloudflare/cloudflared ( 2025.7.0 → 2025.8.0 ) by @renovate[bot] in #1951
• fix(helm): update chart cilium ( 1.18.0 → 1.18.1 ) by @renovate[bot] in #1954
• fix(container): update image ghcr.io/siderolabs/kubelet ( v1.33.3 → v1.33.4 ) by @renovate[bot] in #1953
• fix(container): update image ghcr.io/k8s-gateway/charts/k8s-gateway ( 3.2.3 → 3.2.6 ) by @renovate[bot] in #1952
• ci(github-action)!: Update action actions/checkout ( v4.3.0 → v5.0.0 ) by @renovate[bot] in #1955
• feat(container): update flux operator group ( 0.27.0 → 0.28.0 ) by @renovate[bot] in #1956
• ci(github-action)!: Update action jdx/mise-action ( v2.4.4 → v3.1.0 ) by @renovate[bot] in #1957
• fix(container): update image docker.io/cloudflare/cloudflared ( 2025.8.0 → 2025.8.1 ) by @renovate[bot] in #1958
• feat(github-release): update release prometheus-operator/prometheus-operator ( v0.84.1 → v0.85.0 ) by @renovate[bot] in #1959
• chore: housekeeping 🧹 by @onedr0p in #1960
• fix(container): update image ghcr.io/stakater/charts/reloader ( 2.2.0 ➔ 2.2.2 ) by @renovate[bot] in #1962
• fix(container): update image ghcr.io/siderolabs/installer ( v1.10.6 ➔ v1.10.7 ) by @renovate[bot] in #1961
• fix(container): update image ghcr.io/k8s-gateway/charts/k8s-gateway ( 3.2.6 ➔ 3.2.7 ) by @renovate[bot] in #1964
• fix(container): update image ghcr.io/coredns/charts/coredns ( 1.43.2 ➔ 1.43.3 ) by @renovate[bot] in #1963

Full Changelog: 2025.8.0...2025.9.0

2025.8.0

What's Changed

• fix(container): update image ghcr.io/k8s-gateway/charts/k8s-gateway ( 3.2.0 → 3.2.1 ) by @renovate[bot] in #1925
• fix(container): update image ghcr.io/siderolabs/installer ( v1.10.4 → v1.10.5 ) by @renovate[bot] in #1926
• feat(container): update image docker.io/cloudflare/cloudflared ( 2025.6.1 → 2025.7.0 ) by @renovate[bot] in #1927
• fix(github-release): update release controlplaneio-fluxcd/distribution ( v2.6.2 → v2.6.3 ) by @renovate[bot] in #1924
• fix(container): update image ghcr.io/stakater/charts/reloader ( 2.1.4 → 2.1.5 ) - autoclosed by @renovate[bot] in #1928
• feat(container): update flux operator group ( 0.23.0 → 0.24.1 ) by @renovate[bot] in #1930
• fix(github-release): update release controlplaneio-fluxcd/distribution ( v2.6.3 → v2.6.4 ) - autoclosed by @renovate[bot] in #1929
• fix: set token permissions for label-sync by @mynameisbogdan in #1931
• feat(container): update cert-manager group ( v1.17.2 → v1.18.2 ) by @renovate[bot] in #1932
• fix(container): update image ghcr.io/k8s-gateway/charts/k8s-gateway ( 3.2.1 → 3.2.3 ) by @renovate[bot] in #1933
• fix(container): update image ghcr.io/siderolabs/kubelet ( v1.33.2 → v1.33.3 ) by @renovate[bot] in #1934
• fix(helm): update chart cilium ( 1.17.5 → 1.17.6 ) by @renovate[bot] in #1935
• feat(github-release): update release prometheus-operator/prometheus-operator ( v0.83.0 → v0.84.0 ) by @renovate[bot] in #1936
• feat(helm): update chart external-dns ( 1.17.0 → 1.18.0 ) by @renovate[bot] in #1937
• fix labeler permissions by @hef in #1938
• feat(container): update flux operator group ( 0.24.1 → 0.25.0 ) by @renovate[bot] in #1939
• feat(helm): update chart metrics-server ( 3.12.2 → 3.13.0 ) by @renovate[bot] in #1940

New Contributors

• @mynameisbogdan made their first contribution in #1931
• @hef made their first contribution in #1938

Full Changelog: 2025.7.0...2025.8.0

2025.7.0

What's Changed

• update external-dns mainfest yaml filename by @ajaykumar4 in #1922

Full Changelog: 2025.6.0...2025.7.0

2025.6.0

What's Changed

• fix: Added annotations to gateways by @gregmulvaney in #1897
• feat: post-flux v2.6.0 updates by @onedr0p in #1902

Full Changelog: 2025.5.1...2025.6.0

2025.5.1

What's Changed

• chore(external-dns): update CRD path by @Tanguille in #1890
• feat(k8s_gateway): switch to maintained fork by @onedr0p in #1894
• feat!: deprecate ingress-nginx and use gateway-api by @onedr0p in #1895

Full Changelog: 2025.5.0...2025.5.1

2025.5.0

What's Changed

• fix: cert manager to oci chart by @onedr0p in #1850
• feat(cilium): update BGP configuration to use cluster config and peer settings by @snoopy82481 in #1856
• Swap Cilium BGP Node/Router ASNs by @wasurerarenai in #1862

New Contributors

• @snoopy82481 made their first contribution in #1856

Full Changelog: 2025.4.0...2025.5.0

2025.4.0

What's Changed

• Remove .github/release.yaml too as part of tidy action by @fhoekstra in #1802
• chore(mise): upgrade dependencies by @github-actions in #1803
• fix: rename a few cloudflare vars in cluster.yaml by @onedr0p in #1804
• fix: update cert-manager template logic by @onedr0p in #1806
• Fix: Allow secureboot and encrypt_disk fields to be optional by @mrkhachaturov in #1808
• fix: set defaults for sb and encrypt disk by @onedr0p in #1809
• fix: make hsts-max-age well formed by @rafal11ck in #1810
• feat: update helmfile and introduce ocirepositories by @onedr0p in #1811
• feat: only deploy spegel if more than one node by @onedr0p in #1812
• fix: update talhelper config files by @onedr0p in #1814
• chore: namespace is not needed on these resources by @onedr0p in #1815
• chore: update readme by @onedr0p in #1818
• feat: only deploy production certificate by @onedr0p in #1819
• Make bash and gsed brew availability check Intel Mac compatible by @Jimver in #1821
• feat: combine helmrepo and helmrelease files by @onedr0p in #1822
• chore: update cloudflared by @onedr0p in #1823
• feat: improve makejinja functions and cloudflared deployment by @onedr0p in #1824
• fix: move installation of crds to bootstrap script by @onedr0p in #1825
• chore: remove requirements.txt by @onedr0p in #1826
• feat: remove global postbuild patch by @onedr0p in #1827
• chore(mise): upgrade dependencies by @github-actions in #1836
• chore(mise): upgrade dependencies by @github-actions in #1843
• Add back read permission in flux-local workflow by @Jimver in #1844

New Contributors

• @fhoekstra made their first contribution in #1802
• @mrkhachaturov made their first contribution in #1808
• @rafal11ck made their first contribution in #1810

Full Changelog: 2025.3.0...2025.4.0

2025.3.0

What's Changed

• chore(mise): upgrade dependencies by @github-actions in #1737
• Add read permission for flux local diff workflow by @Jimver in #1742
• feat: remove openebs by @onedr0p in #1746
• feat!: migrate flux ks out of flux-system by @onedr0p in #1747
• feat: bootstrap all namespaces and secrets by @onedr0p in #1748
• fix: talos genconfig tasks updates by @onedr0p in #1750
• chore(mise): upgrade dependencies by @github-actions in #1751
• fix: add validation for github repository name by @onedr0p in #1754
• feat: prometheus operator crds need no flux management by @onedr0p in #1755
• feat: flatten existing components into common by @onedr0p in #1757
• helmfile.yaml.j2 - Switch cilium hook to postsync event by @wasurerarenai in #1759
• fix(helmfile): add some idempotence to hooks by @onedr0p in #1761
• fix: update helmfile hooks by @onedr0p in #1762
• chore(mise): upgrade dependencies by @github-actions in #1764
• feat: deploy SUC by @onedr0p in #1770
• feat(helmfile): put prepare logic in bash script by @onedr0p in #1763
• Revert "feat: deploy SUC" by @onedr0p in #1772
• chore(mise): upgrade dependencies by @github-actions in #1776
• refactor: update directory paths by @onedr0p in #1777
• fix: issue with GitHub deploy key by @onedr0p in #1783
• fix: install prom op crds via talhelper config by @onedr0p in #1784
• chore(cilium): update tolerations in Flux HR instead by @onedr0p in #1789
• chore(mise): upgrade dependencies by @github-actions in #1790
• refactor: remove ability to disable cloudflare and refactor config.yaml by @onedr0p in #1791
• fix(readme): typo in link to cloudflare documentation by @surskitt in #1792
• Use new variable name in README.md by @Jimver in #1793
• Add back missing newline in github-deploy-key by @Jimver in #1794
• feat: reorganize helmfile flux apps and update flux ks intervals by @onedr0p in #1795

New Contributors

• @Jimver made their first contribution in #1742

Full Changelog: 2025.2.0...2025.3.0