Update dependency siderolabs/talos to v1.14.4 #32

Open
renovate wants to merge 1 commit from renovate/siderolabs-talos-1.x into master
Collaborator

This PR contains the following updates:

Package Update Change
siderolabs/talos patch v1.14.1 → v1.14.4

Release Notes

siderolabs/talos (siderolabs/talos)

v1.14.4

Compare Source

Talos 1.14.4 (2026-10-16)

Welcome to the v1.14.4 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Component Updates

Linux: 6.18.57

Talos is built with Go 1.26.9.

Contributors
  • Andrey Smirnov
Changes
1 commit

Changes from siderolabs/pkgs
2 commits

Dependency Changes
  • github.com/siderolabs/pkgs v1.14.0-42-g5fa47d1 -> v1.14.0-44-g2ec10eb

Previous release can be found at v1.14.3

Images
ghcr.io/siderolabs/flannel:0.28.9
registry.k8s.io/coredns/coredns:v1.14.7
registry.k8s.io/etcd:v3.7.2
registry.k8s.io/pause:3.10.2
registry.k8s.io/kube-apiserver:v1.37.1
registry.k8s.io/kube-controller-manager:v1.37.1
registry.k8s.io/kube-scheduler:v1.37.1
registry.k8s.io/kube-proxy:v1.37.1
ghcr.io/siderolabs/kubelet:v1.37.1
registry.k8s.io/networking/kube-network-policies:v1.1.2
ghcr.io/siderolabs/installer-base:v1.14.4
ghcr.io/siderolabs/imager:v1.14.4
ghcr.io/siderolabs/talos:v1.14.4
ghcr.io/siderolabs/talosctl-all:v1.14.4
ghcr.io/siderolabs/overlays:v1.14.4
ghcr.io/siderolabs/extensions:v1.14.4

v1.14.3

Compare Source

Talos 1.14.3 (2026-10-15)

Welcome to the v1.14.3 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Time Check API

The TimeService/TimeCheck API (talosctl time --check) is no longer available to the os:reader role, as it allows querying
arbitrary time servers from the node. The TimeService/Time API (querying the configured time server) is still available to os:reader.

PTP device paths are now strictly validated both in the machine configuration and in the API: the path should be directly under /dev,
the name should start with ptp (e.g. /dev/ptp0, /dev/ptp_kvm), and the device should be a PTP character device.

Component Updates

Linux: 6.18.56
containerd: 2.3.7
etcd: 3.7.2

Talos is built with Go 1.26.9.

Contributors
  • Andrey Smirnov
  • Alexander Soelberg Heidarsson
  • Angelos Petheriotis
  • Brian Cappello
  • Christoph Engelbert (noctarius)
  • Mateusz Urbanek
  • Noel Georgi
  • Oguz Kilcan
  • Steve Wills
  • frauniki
Changes
17 commits

  • @​68da63f release(v1.14.3): prepare release
  • @​cbe3449 fix: disable GSO offload on QEMU 10.2+
  • @​1e3f3ad test: adapt minimal settings to new QEMU version
  • @​59e1fcd fix: restrict raw disk helper to linux
  • @​08b2136 fix: make the imager installer reproducible with system extensions
  • @​a9b984a fix: improve KubePrism load balancer recovery
  • @​d015381 fix: clean up mountpoints on unmount
  • @​146c2bd fix: roll back stacked try configs to the config before the first try
  • @​f518223 fix: correct handling of DHCP changing address
  • @​f97d79f fix: image verification test
  • @​5fadce7 fix: verify the claim for the legacy bundle image verification
  • @​6cade9f fix: restore source names for pseudo filesystem mounts
  • @​692e679 fix: add validation for the PTP device name
  • @​b166b72 fix: network on azure (and might fix some other platforms)
  • @​4c4e57a feat: update etcd to 3.7.2
  • @​0d3b40c feat: update tools and pkgs
  • @​51d094f fix: tear down stale routes before adding their replacements

Changes from siderolabs/pkgs
5 commits

Changes from siderolabs/tools
1 commit

Dependency Changes
  • github.com/containerd/containerd/v2 v2.3.6 -> v2.3.7
  • github.com/siderolabs/pkgs v1.14.0-37-g6c312e4 -> v1.14.0-42-g5fa47d1
  • github.com/siderolabs/talos/pkg/machinery v1.14.2 -> v1.14.3
  • github.com/siderolabs/tools v1.14.0-8-g9776960 -> v1.14.0-9-g6b71647
  • go.etcd.io/etcd/api/v3 v3.7.1 -> v3.7.2
  • go.etcd.io/etcd/client/pkg/v3 v3.7.1 -> v3.7.2
  • go.etcd.io/etcd/client/v3 v3.7.1 -> v3.7.2
  • go.etcd.io/etcd/etcdutl/v3 v3.7.1 -> v3.7.2
  • golang.org/x/net v0.58.0 -> v0.60.0
  • golang.org/x/sync v0.22.0 -> v0.23.0
  • golang.org/x/sys v0.47.0 -> v0.48.0
  • golang.org/x/term v0.45.0 -> v0.46.0
  • golang.org/x/text v0.41.0 -> v0.42.0

Previous release can be found at v1.14.2

Images
ghcr.io/siderolabs/flannel:0.28.9
registry.k8s.io/coredns/coredns:v1.14.7
registry.k8s.io/etcd:v3.7.2
registry.k8s.io/pause:3.10.2
registry.k8s.io/kube-apiserver:v1.37.1
registry.k8s.io/kube-controller-manager:v1.37.1
registry.k8s.io/kube-scheduler:v1.37.1
registry.k8s.io/kube-proxy:v1.37.1
ghcr.io/siderolabs/kubelet:v1.37.1
registry.k8s.io/networking/kube-network-policies:v1.1.2
ghcr.io/siderolabs/installer-base:v1.14.3
ghcr.io/siderolabs/imager:v1.14.3
ghcr.io/siderolabs/talos:v1.14.3
ghcr.io/siderolabs/talosctl-all:v1.14.3
ghcr.io/siderolabs/overlays:v1.14.3
ghcr.io/siderolabs/extensions:v1.14.3

v1.14.2

Compare Source

Talos 1.14.2 (2026-09-29)

Welcome to the v1.14.2 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Kubelet Resource Manager State

Talos now validates the kubelet CPU manager and memory manager state files (/var/lib/kubelet/cpu_manager_state, /var/lib/kubelet/memory_manager_state)
the same way kubelet does on startup, and removes a state file kubelet would refuse to load before starting kubelet.

Previously only a change of the manager policy was detected, so changing e.g. reservedSystemCPUs or reservedMemory, or
a change of the CPU/NUMA topology of the machine, left kubelet unable to start until the state file was removed manually.

Only the rendered KubeletConfiguration (machine.kubelet.extraConfig) is checked: the resource manager settings passed as kubelet
command line flags via machine.kubelet.extraArgs (e.g. --cpu-manager-policy, --reserved-cpus) are not taken into account.

Component Updates

Linux: 6.18.54
containerd: 2.3.6
runc: 1.5.2
Kubernetes: 1.37.1

Talos is built with Go 1.26.8.

Contributors
  • Andrey Smirnov
  • Jarrad S
  • Noel Georgi
  • Joakim Nohlgård
  • Karthik Chowdary
  • Loki San
Changes
20 commits

  • @​f513c73 release(v1.14.2): prepare release
  • @​114c70a feat: update Kubernetes default to 1.37.1
  • @​00a53e1 feat: update containerd to 2.3.6
  • @​305ced3 test: fix the md-boot pipeline
  • @​540a427 docs: clarify the KMS endpoint scheme
  • @​f53a000 fix: drop devices from the last observed generation if they are gone
  • @​a015f81 feat: handle the change in kubelet's CPU and memory policies
  • @​c792fa4 fix: perform stricter validation of hostnames/search domains
  • @​3137edf fix: handle correctly routes without outlinkname set
  • @​e966b13 chore: clean up unused settings in LVM reconcile controllers
  • @​da3b328 fix: do not disclose pre-shared Wireguard key in LinkStatus
  • @​80fd649 fix: retry transient LVM reconciliation failures
  • @​98b3cb5 feat: add macsec module
  • @​949b85f fix: preserve hostname under Docker (in container mode)
  • @​ad65799 fix: handle Akamai/Linode metadata without IPv6
  • @​2e87819 docs: clarify admission control and flannel config docs
  • @​a942241 test: fix the aws-arm64 test
  • @​c7e2524 fix: use correct conditions on CRI <> sandboxd dependency
  • @​5a78c3f fix: extend the USB settle code for more code paths
  • @​a8ac3ca feat: sync pkgs/tools

Changes from siderolabs/pkgs
12 commits

Changes from siderolabs/tools
1 commit

Dependency Changes
  • github.com/containerd/containerd/v2 v2.3.5 -> v2.3.6
  • github.com/siderolabs/pkgs v1.14.0-25-gf694e1b -> v1.14.0-37-g6c312e4
  • github.com/siderolabs/talos/pkg/machinery v1.14.1 -> v1.14.2
  • github.com/siderolabs/tools v1.14.0-7-ga404efb -> v1.14.0-8-g9776960
  • k8s.io/api v0.37.0 -> v0.37.1
  • k8s.io/apiextensions-apiserver v0.37.0 -> v0.37.1
  • k8s.io/apimachinery v0.37.0 -> v0.37.1
  • k8s.io/apiserver v0.37.0 -> v0.37.1
  • k8s.io/client-go v0.37.0 -> v0.37.1
  • k8s.io/component-base v0.37.0 -> v0.37.1
  • k8s.io/kube-proxy v0.37.0 -> v0.37.1
  • k8s.io/kube-scheduler v0.37.0 -> v0.37.1
  • k8s.io/kubectl v0.37.0 -> v0.37.1
  • k8s.io/kubelet v0.37.0 -> v0.37.1
  • k8s.io/pod-security-admission v0.37.0 -> v0.37.1
  • k8s.io/utils cf1189d new

Previous release can be found at v1.14.1

Images
ghcr.io/siderolabs/flannel:0.28.9
registry.k8s.io/coredns/coredns:v1.14.7
registry.k8s.io/etcd:3.7.1
registry.k8s.io/pause:3.10.2
registry.k8s.io/kube-apiserver:v1.37.1
registry.k8s.io/kube-controller-manager:v1.37.1
registry.k8s.io/kube-scheduler:v1.37.1
registry.k8s.io/kube-proxy:v1.37.1
ghcr.io/siderolabs/kubelet:v1.37.1
registry.k8s.io/networking/kube-network-policies:v1.1.1
ghcr.io/siderolabs/installer-base:v1.14.2
ghcr.io/siderolabs/imager:v1.14.2
ghcr.io/siderolabs/talos:v1.14.2
ghcr.io/siderolabs/talosctl-all:v1.14.2
ghcr.io/siderolabs/overlays:v1.14.2
ghcr.io/siderolabs/extensions:v1.14.2

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [siderolabs/talos](https://github.com/siderolabs/talos) | patch | `v1.14.1` → `v1.14.4` | --- ### Release Notes <details> <summary>siderolabs/talos (siderolabs/talos)</summary> ### [`v1.14.4`](https://github.com/siderolabs/talos/releases/tag/v1.14.4) [Compare Source](https://github.com/siderolabs/talos/compare/v1.14.3...v1.14.4) ##### [Talos 1.14.4](https://github.com/siderolabs/talos/releases/tag/v1.14.4) (2026-10-16) Welcome to the v1.14.4 release of Talos! Please try out the release binaries and report any issues at <https://github.com/siderolabs/talos/issues>. ##### Component Updates Linux: 6.18.57 Talos is built with Go 1.26.9. ##### Contributors - Andrey Smirnov ##### Changes <details><summary>1 commit</summary> <p> - [@&#8203;`3fb46c3`](https://github.com/siderolabs/talos/commit/3fb46c378) release(v1.14.4): prepare release </p> </details> ##### Changes from siderolabs/pkgs <details><summary>2 commits</summary> <p> - [siderolabs/pkgs@`2ec10eb`](https://github.com/siderolabs/pkgs/commit/2ec10eb) chore: update DRBD compat - [siderolabs/pkgs@`643b731`](https://github.com/siderolabs/pkgs/commit/643b731) feat: update Linux to 6.18.57 </p> </details> ##### Dependency Changes - **github.com/siderolabs/pkgs** v1.14.0-42-g5fa47d1 -> v1.14.0-44-g2ec10eb Previous release can be found at [v1.14.3](https://github.com/siderolabs/talos/releases/tag/v1.14.3) ##### Images ``` ghcr.io/siderolabs/flannel:0.28.9 registry.k8s.io/coredns/coredns:v1.14.7 registry.k8s.io/etcd:v3.7.2 registry.k8s.io/pause:3.10.2 registry.k8s.io/kube-apiserver:v1.37.1 registry.k8s.io/kube-controller-manager:v1.37.1 registry.k8s.io/kube-scheduler:v1.37.1 registry.k8s.io/kube-proxy:v1.37.1 ghcr.io/siderolabs/kubelet:v1.37.1 registry.k8s.io/networking/kube-network-policies:v1.1.2 ghcr.io/siderolabs/installer-base:v1.14.4 ghcr.io/siderolabs/imager:v1.14.4 ghcr.io/siderolabs/talos:v1.14.4 ghcr.io/siderolabs/talosctl-all:v1.14.4 ghcr.io/siderolabs/overlays:v1.14.4 ghcr.io/siderolabs/extensions:v1.14.4 ``` ### [`v1.14.3`](https://github.com/siderolabs/talos/releases/tag/v1.14.3) [Compare Source](https://github.com/siderolabs/talos/compare/v1.14.2...v1.14.3) ##### [Talos 1.14.3](https://github.com/siderolabs/talos/releases/tag/v1.14.3) (2026-10-15) Welcome to the v1.14.3 release of Talos! Please try out the release binaries and report any issues at <https://github.com/siderolabs/talos/issues>. ##### Time Check API The `TimeService/TimeCheck` API (`talosctl time --check`) is no longer available to the `os:reader` role, as it allows querying arbitrary time servers from the node. The `TimeService/Time` API (querying the configured time server) is still available to `os:reader`. PTP device paths are now strictly validated both in the machine configuration and in the API: the path should be directly under `/dev`, the name should start with `ptp` (e.g. `/dev/ptp0`, `/dev/ptp_kvm`), and the device should be a PTP character device. ##### Component Updates Linux: 6.18.56 containerd: 2.3.7 etcd: 3.7.2 Talos is built with Go 1.26.9. ##### Contributors - Andrey Smirnov - Alexander Soelberg Heidarsson - Angelos Petheriotis - Brian Cappello - Christoph Engelbert (noctarius) - Mateusz Urbanek - Noel Georgi - Oguz Kilcan - Steve Wills - frauniki ##### Changes <details><summary>17 commits</summary> <p> - [@&#8203;`68da63f`](https://github.com/siderolabs/talos/commit/68da63f11) release(v1.14.3): prepare release - [@&#8203;`cbe3449`](https://github.com/siderolabs/talos/commit/cbe344931) fix: disable GSO offload on QEMU 10.2+ - [@&#8203;`1e3f3ad`](https://github.com/siderolabs/talos/commit/1e3f3ad5f) test: adapt minimal settings to new QEMU version - [@&#8203;`59e1fcd`](https://github.com/siderolabs/talos/commit/59e1fcd63) fix: restrict raw disk helper to linux - [@&#8203;`08b2136`](https://github.com/siderolabs/talos/commit/08b213686) fix: make the imager installer reproducible with system extensions - [@&#8203;`a9b984a`](https://github.com/siderolabs/talos/commit/a9b984aab) fix: improve KubePrism load balancer recovery - [@&#8203;`d015381`](https://github.com/siderolabs/talos/commit/d01538115) fix: clean up mountpoints on unmount - [@&#8203;`146c2bd`](https://github.com/siderolabs/talos/commit/146c2bd92) fix: roll back stacked try configs to the config before the first try - [@&#8203;`f518223`](https://github.com/siderolabs/talos/commit/f5182237e) fix: correct handling of DHCP changing address - [@&#8203;`f97d79f`](https://github.com/siderolabs/talos/commit/f97d79fc3) fix: image verification test - [@&#8203;`5fadce7`](https://github.com/siderolabs/talos/commit/5fadce79d) fix: verify the claim for the legacy bundle image verification - [@&#8203;`6cade9f`](https://github.com/siderolabs/talos/commit/6cade9fed) fix: restore source names for pseudo filesystem mounts - [@&#8203;`692e679`](https://github.com/siderolabs/talos/commit/692e6796b) fix: add validation for the PTP device name - [@&#8203;`b166b72`](https://github.com/siderolabs/talos/commit/b166b72ca) fix: network on azure (and might fix some other platforms) - [@&#8203;`4c4e57a`](https://github.com/siderolabs/talos/commit/4c4e57a4b) feat: update etcd to 3.7.2 - [@&#8203;`0d3b40c`](https://github.com/siderolabs/talos/commit/0d3b40c44) feat: update tools and pkgs - [@&#8203;`51d094f`](https://github.com/siderolabs/talos/commit/51d094f47) fix: tear down stale routes before adding their replacements </p> </details> ##### Changes from siderolabs/pkgs <details><summary>5 commits</summary> <p> - [siderolabs/pkgs@`5fa47d1`](https://github.com/siderolabs/pkgs/commit/5fa47d1) feat: update to containerd 2.3.7 - [siderolabs/pkgs@`6873154`](https://github.com/siderolabs/pkgs/commit/6873154) feat: update Linux to 6.18.56 - [siderolabs/pkgs@`ecd53d0`](https://github.com/siderolabs/pkgs/commit/ecd53d0) feat: enable pNFS block and SCSI layouts in nfsd - [siderolabs/pkgs@`473b20c`](https://github.com/siderolabs/pkgs/commit/473b20c) feat: enable bhyve guest support on amd64 - [siderolabs/pkgs@`f3add0c`](https://github.com/siderolabs/pkgs/commit/f3add0c) feat: enable Qualcomm Cloud AI 100 (QAIC) driver </p> </details> ##### Changes from siderolabs/tools <details><summary>1 commit</summary> <p> - [siderolabs/tools@`6b71647`](https://github.com/siderolabs/tools/commit/6b71647) feat: update Go to 1.26.9 </p> </details> ##### Dependency Changes - **github.com/containerd/containerd/v2** v2.3.6 -> v2.3.7 - **github.com/siderolabs/pkgs** v1.14.0-37-g6c312e4 -> v1.14.0-42-g5fa47d1 - **github.com/siderolabs/talos/pkg/machinery** v1.14.2 -> v1.14.3 - **github.com/siderolabs/tools** v1.14.0-8-g9776960 -> v1.14.0-9-g6b71647 - **go.etcd.io/etcd/api/v3** v3.7.1 -> v3.7.2 - **go.etcd.io/etcd/client/pkg/v3** v3.7.1 -> v3.7.2 - **go.etcd.io/etcd/client/v3** v3.7.1 -> v3.7.2 - **go.etcd.io/etcd/etcdutl/v3** v3.7.1 -> v3.7.2 - **golang.org/x/net** v0.58.0 -> v0.60.0 - **golang.org/x/sync** v0.22.0 -> v0.23.0 - **golang.org/x/sys** v0.47.0 -> v0.48.0 - **golang.org/x/term** v0.45.0 -> v0.46.0 - **golang.org/x/text** v0.41.0 -> v0.42.0 Previous release can be found at [v1.14.2](https://github.com/siderolabs/talos/releases/tag/v1.14.2) ##### Images ``` ghcr.io/siderolabs/flannel:0.28.9 registry.k8s.io/coredns/coredns:v1.14.7 registry.k8s.io/etcd:v3.7.2 registry.k8s.io/pause:3.10.2 registry.k8s.io/kube-apiserver:v1.37.1 registry.k8s.io/kube-controller-manager:v1.37.1 registry.k8s.io/kube-scheduler:v1.37.1 registry.k8s.io/kube-proxy:v1.37.1 ghcr.io/siderolabs/kubelet:v1.37.1 registry.k8s.io/networking/kube-network-policies:v1.1.2 ghcr.io/siderolabs/installer-base:v1.14.3 ghcr.io/siderolabs/imager:v1.14.3 ghcr.io/siderolabs/talos:v1.14.3 ghcr.io/siderolabs/talosctl-all:v1.14.3 ghcr.io/siderolabs/overlays:v1.14.3 ghcr.io/siderolabs/extensions:v1.14.3 ``` ### [`v1.14.2`](https://github.com/siderolabs/talos/releases/tag/v1.14.2) [Compare Source](https://github.com/siderolabs/talos/compare/v1.14.1...v1.14.2) ##### [Talos 1.14.2](https://github.com/siderolabs/talos/releases/tag/v1.14.2) (2026-09-29) Welcome to the v1.14.2 release of Talos! Please try out the release binaries and report any issues at <https://github.com/siderolabs/talos/issues>. ##### Kubelet Resource Manager State Talos now validates the kubelet CPU manager and memory manager state files (`/var/lib/kubelet/cpu_manager_state`, `/var/lib/kubelet/memory_manager_state`) the same way kubelet does on startup, and removes a state file kubelet would refuse to load before starting kubelet. Previously only a change of the manager policy was detected, so changing e.g. `reservedSystemCPUs` or `reservedMemory`, or a change of the CPU/NUMA topology of the machine, left kubelet unable to start until the state file was removed manually. Only the rendered `KubeletConfiguration` (`machine.kubelet.extraConfig`) is checked: the resource manager settings passed as kubelet command line flags via `machine.kubelet.extraArgs` (e.g. `--cpu-manager-policy`, `--reserved-cpus`) are not taken into account. ##### Component Updates Linux: 6.18.54 containerd: 2.3.6 runc: 1.5.2 Kubernetes: 1.37.1 Talos is built with Go 1.26.8. ##### Contributors - Andrey Smirnov - Jarrad S - Noel Georgi - Joakim Nohlgård - Karthik Chowdary - Loki San ##### Changes <details><summary>20 commits</summary> <p> - [@&#8203;`f513c73`](https://github.com/siderolabs/talos/commit/f513c7358) release(v1.14.2): prepare release - [@&#8203;`114c70a`](https://github.com/siderolabs/talos/commit/114c70ae3) feat: update Kubernetes default to 1.37.1 - [@&#8203;`00a53e1`](https://github.com/siderolabs/talos/commit/00a53e13d) feat: update containerd to 2.3.6 - [@&#8203;`305ced3`](https://github.com/siderolabs/talos/commit/305ced360) test: fix the md-boot pipeline - [@&#8203;`540a427`](https://github.com/siderolabs/talos/commit/540a427c3) docs: clarify the KMS endpoint scheme - [@&#8203;`f53a000`](https://github.com/siderolabs/talos/commit/f53a00050) fix: drop devices from the last observed generation if they are gone - [@&#8203;`a015f81`](https://github.com/siderolabs/talos/commit/a015f8176) feat: handle the change in kubelet's CPU and memory policies - [@&#8203;`c792fa4`](https://github.com/siderolabs/talos/commit/c792fa485) fix: perform stricter validation of hostnames/search domains - [@&#8203;`3137edf`](https://github.com/siderolabs/talos/commit/3137edfb0) fix: handle correctly routes without outlinkname set - [@&#8203;`e966b13`](https://github.com/siderolabs/talos/commit/e966b131d) chore: clean up unused settings in LVM reconcile controllers - [@&#8203;`da3b328`](https://github.com/siderolabs/talos/commit/da3b328db) fix: do not disclose pre-shared Wireguard key in LinkStatus - [@&#8203;`80fd649`](https://github.com/siderolabs/talos/commit/80fd649d1) fix: retry transient LVM reconciliation failures - [@&#8203;`98b3cb5`](https://github.com/siderolabs/talos/commit/98b3cb51e) feat: add macsec module - [@&#8203;`949b85f`](https://github.com/siderolabs/talos/commit/949b85fa7) fix: preserve hostname under Docker (in container mode) - [@&#8203;`ad65799`](https://github.com/siderolabs/talos/commit/ad65799ab) fix: handle Akamai/Linode metadata without IPv6 - [@&#8203;`2e87819`](https://github.com/siderolabs/talos/commit/2e87819aa) docs: clarify admission control and flannel config docs - [@&#8203;`a942241`](https://github.com/siderolabs/talos/commit/a9422412d) test: fix the aws-arm64 test - [@&#8203;`c7e2524`](https://github.com/siderolabs/talos/commit/c7e25249d) fix: use correct conditions on CRI <> sandboxd dependency - [@&#8203;`5a78c3f`](https://github.com/siderolabs/talos/commit/5a78c3fc3) fix: extend the USB settle code for more code paths - [@&#8203;`a8ac3ca`](https://github.com/siderolabs/talos/commit/a8ac3ca50) feat: sync pkgs/tools </p> </details> ##### Changes from siderolabs/pkgs <details><summary>12 commits</summary> <p> - [siderolabs/pkgs@`6c312e4`](https://github.com/siderolabs/pkgs/commit/6c312e4) fix: add a patch to fix booting on Apple hardware - [siderolabs/pkgs@`e1a76c7`](https://github.com/siderolabs/pkgs/commit/e1a76c7) feat: update Linux to 6.18.54, runc to 1.5.2 - [siderolabs/pkgs@`3f054f6`](https://github.com/siderolabs/pkgs/commit/3f054f6) feat: enable CONFIG\_CRYPTO\_ECC, CONFIG\_CRYPTO\_ECDH on arm64 to match amd64 - [siderolabs/pkgs@`cc717ed`](https://github.com/siderolabs/pkgs/commit/cc717ed) feat: enable CONFIG\_BLK\_WBT - [siderolabs/pkgs@`cc32ceb`](https://github.com/siderolabs/pkgs/commit/cc32ceb) feat: update containerd to 2.3.6 - [siderolabs/pkgs@`b9f707f`](https://github.com/siderolabs/pkgs/commit/b9f707f) feat: update Linux to 6.18.53 - [siderolabs/pkgs@`cf70858`](https://github.com/siderolabs/pkgs/commit/cf70858) fix: add missing sboms for swtpm - [siderolabs/pkgs@`7f22731`](https://github.com/siderolabs/pkgs/commit/7f22731) feat: enable CONFIG\_MACSEC in the kernel - [siderolabs/pkgs@`3e199fb`](https://github.com/siderolabs/pkgs/commit/3e199fb) feat: add swtpm - [siderolabs/pkgs@`31af1a6`](https://github.com/siderolabs/pkgs/commit/31af1a6) feat: update DRBD & Linux firmware - [siderolabs/pkgs@`612628d`](https://github.com/siderolabs/pkgs/commit/612628d) feat: update Linux to 6.18.52 - [siderolabs/pkgs@`ed28ebb`](https://github.com/siderolabs/pkgs/commit/ed28ebb) chore: sync tools with release-1.14 </p> </details> ##### Changes from siderolabs/tools <details><summary>1 commit</summary> <p> - [siderolabs/tools@`9776960`](https://github.com/siderolabs/tools/commit/9776960) feat: update pcre to 10.48 </p> </details> ##### Dependency Changes - **github.com/containerd/containerd/v2** v2.3.5 -> v2.3.6 - **github.com/siderolabs/pkgs** v1.14.0-25-gf694e1b -> v1.14.0-37-g6c312e4 - **github.com/siderolabs/talos/pkg/machinery** v1.14.1 -> v1.14.2 - **github.com/siderolabs/tools** v1.14.0-7-ga404efb -> v1.14.0-8-g9776960 - **k8s.io/api** v0.37.0 -> v0.37.1 - **k8s.io/apiextensions-apiserver** v0.37.0 -> v0.37.1 - **k8s.io/apimachinery** v0.37.0 -> v0.37.1 - **k8s.io/apiserver** v0.37.0 -> v0.37.1 - **k8s.io/client-go** v0.37.0 -> v0.37.1 - **k8s.io/component-base** v0.37.0 -> v0.37.1 - **k8s.io/kube-proxy** v0.37.0 -> v0.37.1 - **k8s.io/kube-scheduler** v0.37.0 -> v0.37.1 - **k8s.io/kubectl** v0.37.0 -> v0.37.1 - **k8s.io/kubelet** v0.37.0 -> v0.37.1 - **k8s.io/pod-security-admission** v0.37.0 -> v0.37.1 - **k8s.io/utils** [`cf1189d`](https://github.com/siderolabs/talos/commit/cf1189d6abe3) ***new*** Previous release can be found at [v1.14.1](https://github.com/siderolabs/talos/releases/tag/v1.14.1) ##### Images ``` ghcr.io/siderolabs/flannel:0.28.9 registry.k8s.io/coredns/coredns:v1.14.7 registry.k8s.io/etcd:3.7.1 registry.k8s.io/pause:3.10.2 registry.k8s.io/kube-apiserver:v1.37.1 registry.k8s.io/kube-controller-manager:v1.37.1 registry.k8s.io/kube-scheduler:v1.37.1 registry.k8s.io/kube-proxy:v1.37.1 ghcr.io/siderolabs/kubelet:v1.37.1 registry.k8s.io/networking/kube-network-policies:v1.1.1 ghcr.io/siderolabs/installer-base:v1.14.2 ghcr.io/siderolabs/imager:v1.14.2 ghcr.io/siderolabs/talos:v1.14.2 ghcr.io/siderolabs/talosctl-all:v1.14.2 ghcr.io/siderolabs/overlays:v1.14.2 ghcr.io/siderolabs/extensions:v1.14.2 ``` </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xOC4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTguMCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6W119-->
renovate force-pushed renovate/siderolabs-talos-1.x from 8124f49aef to 4203cb6fcf 2026-10-15 22:00:44 +00:00 Compare
renovate changed title from Update dependency siderolabs/talos to v1.14.2 to Update dependency siderolabs/talos to v1.14.3 2026-10-15 23:04:32 +00:00
renovate force-pushed renovate/siderolabs-talos-1.x from 4203cb6fcf to c88ac113f8 2026-10-16 16:00:38 +00:00 Compare
renovate changed title from Update dependency siderolabs/talos to v1.14.3 to Update dependency siderolabs/talos to v1.14.4 2026-10-16 16:01:03 +00:00
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/siderolabs-talos-1.x:renovate/siderolabs-talos-1.x
git switch renovate/siderolabs-talos-1.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch master
git merge --no-ff renovate/siderolabs-talos-1.x
git switch renovate/siderolabs-talos-1.x
git rebase master
git switch master
git merge --ff-only renovate/siderolabs-talos-1.x
git switch renovate/siderolabs-talos-1.x
git rebase master
git switch master
git merge --no-ff renovate/siderolabs-talos-1.x
git switch master
git merge --squash renovate/siderolabs-talos-1.x
git switch master
git merge --ff-only renovate/siderolabs-talos-1.x
git switch master
git merge renovate/siderolabs-talos-1.x
git push origin master
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
BlackDragon/infra!32
No description provided.