Update ghcr.io/siderolabs/talos Docker tag to v1.9.4 #676

renovate · 2025-02-24T13:42:16Z

This PR contains the following updates:

Package	Update	Change
ghcr.io/siderolabs/talos	patch	`v1.9.1` -> `v1.9.4`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

siderolabs/talos (ghcr.io/siderolabs/talos)

`v1.9.4`

Compare Source

Talos 1.9.4 (2025-02-13)

Welcome to the v1.9.4 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Ingress Firewall

Talos Ingress Firewall now filters access to Kubernetes NodePort services correctly.

Component Updates

Linux: 6.12.13
Flannel: 0.26.4
Kubernetes: 1.32.2

Talos is built with Go 1.23.6.

Contributors

Andrey Smirnov
Dmitry Sharshakov
Dmitriy Matrenichev
Mathspy

Changes

13 commits

@c863a56 release(v1.9.4): prepare release
@81164ef chore: fix spurious generate failures
@7639cf7 fix: path for ca-certificates
@9afdaf4 feat: update Kubernetes to 1.32.2
@e3bfb23 fix: make ingress firewall filter traffic to nodeports
@6d0db51 fix: blockdevice transport detection
@39d608a chore: provide more logging for dns requests
@2ca0d59 fix: fix diff printing
@c8a7a2c fix: ignore errors to stop pods
@cfc43b0 fix: handle empty registry config
@a3aa099 feat: update Flannel to 0.26.4
@3612fbf feat: update Linux to 6.12.13
@a320b99 chore: bump Go to 1.23.6

Changes from siderolabs/pkgs

2 commits

siderolabs/pkgs@27017e0 feat: update Linux to 6.12.13
siderolabs/pkgs@bf4206c feat: update Go to 1.23.6

Changes from siderolabs/tools

1 commit

siderolabs/tools@b2ede52 feat: update Go to 1.23.6

Dependency Changes

github.com/siderolabs/go-blockdevice/v2 v2.0.13 -> v2.0.14
github.com/siderolabs/pkgs v1.9.0-25-g2250843 -> v1.9.0-27-g27017e0
github.com/siderolabs/talos/pkg/machinery v1.9.3 -> v1.9.4
github.com/siderolabs/tools v1.9.0-2-gbf2085e -> v1.9.0-3-gb2ede52

Previous release can be found at v1.9.3

Images

ghcr.io/siderolabs/flannel:v0.26.4
registry.k8s.io/coredns/coredns:v1.12.0
gcr.io/etcd-development/etcd:v3.5.18
registry.k8s.io/kube-apiserver:v1.32.2
registry.k8s.io/kube-controller-manager:v1.32.2
registry.k8s.io/kube-scheduler:v1.32.2
registry.k8s.io/kube-proxy:v1.32.2
ghcr.io/siderolabs/kubelet:v1.32.2
ghcr.io/siderolabs/installer:v1.9.4
registry.k8s.io/pause:3.10

`v1.9.3`

Compare Source

Talos 1.9.3 (2025-01-28)

Welcome to the v1.9.3 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Component Updates

Linux: 6.12.11
Kubernetes: 1.32.1
etcd: 3.5.18

Talos is built with Go 1.23.5.

Contributors

Andrey Smirnov
Dmitriy Matrenichev
Noel Georgi

Changes

12 commits

@d40df43 release(v1.9.3): prepare release
@41dd593 test: bump timeout on rotate CA test
@1abeaa3 feat: update Linux to 6.2.11
@2894507 feat: update etcd to 3.5.18
@e3bd08b fix: bring back disk UUID
@8fadd04 fix: disks with 4k sector size and systemd-boot
@b854ea9 fix: abort node watch on hostname change
@5c7b3ec chore: update Go to 1.23.5
@f72a155 fix: ignore forbidden error when waiting for pod eviction
@9587d86 chore: clear cache after updating upstreams
@885cb4c fix: make etc binds read-only
@508cc7b feat: update Kubernetes to 1.32.1

Changes from siderolabs/pkgs

4 commits

siderolabs/pkgs@2250843 feat: update Linux to 6.12.11
siderolabs/pkgs@0f48ede feat: bump NVIDIA driver versions
siderolabs/pkgs@164563f feat: update Linux to 6.2.10
siderolabs/pkgs@17c292f feat: update Go to 1.23.5

Changes from siderolabs/tools

1 commit

siderolabs/tools@bf2085e feat: update Go to 1.23.5

Dependency Changes

github.com/containerd/containerd/v2 v2.0.1 -> v2.0.2
github.com/containerd/platforms v1.0.0-rc.0 -> v1.0.0-rc.1
github.com/opencontainers/runc v1.2.3 -> v1.2.4
github.com/siderolabs/go-blockdevice/v2 v2.0.11 -> v2.0.13
github.com/siderolabs/pkgs v1.9.0-21-gc1f06e5 -> v1.9.0-25-g2250843
github.com/siderolabs/talos/pkg/machinery v1.9.2 -> v1.9.3
github.com/siderolabs/tools v1.9.0-1-geaad82f -> v1.9.0-2-gbf2085e
go.etcd.io/etcd/api/v3 v3.5.17 -> v3.5.18
go.etcd.io/etcd/client/pkg/v3 v3.5.17 -> v3.5.18
go.etcd.io/etcd/client/v3 v3.5.17 -> v3.5.18
go.etcd.io/etcd/etcdutl/v3 v3.5.17 -> v3.5.18
golang.org/x/net v0.32.0 -> v0.34.0
golang.org/x/sys v0.28.0 -> v0.29.0
golang.org/x/term v0.27.0 -> v0.28.0
k8s.io/api v0.32.0 -> v0.32.1
k8s.io/apiserver v0.32.0 -> v0.32.1
k8s.io/client-go v0.32.0 -> v0.32.1
k8s.io/component-base v0.32.0 -> v0.32.1
k8s.io/kube-scheduler v0.32.0 -> v0.32.1
k8s.io/kubectl v0.32.0 -> v0.32.1
k8s.io/kubelet v0.32.0 -> v0.32.1
k8s.io/pod-security-admission v0.32.0 -> v0.32.1

Previous release can be found at v1.9.2

Images

ghcr.io/siderolabs/flannel:v0.26.1
registry.k8s.io/coredns/coredns:v1.12.0
gcr.io/etcd-development/etcd:v3.5.18
registry.k8s.io/kube-apiserver:v1.32.1
registry.k8s.io/kube-controller-manager:v1.32.1
registry.k8s.io/kube-scheduler:v1.32.1
registry.k8s.io/kube-proxy:v1.32.1
ghcr.io/siderolabs/kubelet:v1.32.1
ghcr.io/siderolabs/installer:v1.9.3
registry.k8s.io/pause:3.10

`v1.9.2`

Compare Source

Talos 1.9.2 (2025-01-16)

Welcome to the v1.9.2 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

auditd

Kernel parameter talos.auditd.disabled=1 can be used to disable Talos built-in auditd service.

kube-apiserver Authorization Config

When using .cluster.apiServer.authorizationConfig the user provided order for the authorizers is honoured and Node and RBAC authorizers are always added to the end if not explicitly specified.

Eg: If user provides only Webhook authorizer, the final order will be Webhook, Node, RBAC.

To provide a specific order for Node or RBAC explicitly, user can provide the authorizer in the order they want.

Eg:

cluster:
  apiServer:
    authorizationConfig:
      - type: Node
        name: Node
      - type: Webhook
        name: Webhook
        webhook:
          connectionInfo:
            type: InClusterConfig
        ...
      - type: RBAC
        name: rbac

Usage of authorization-mode CLI argument will not support this form of customization.

Component Updates

Linux: 6.12.9
runc: 1.2.4
containerd: 2.0.2

Talos is built with Go 1.23.4.

Contributors

Andrey Smirnov
Dmitry Sharshakov
L.J. Hanson
Noel Georgi
Skyler Mäntysaari
TomyLobo

Changes

18 commits

@09758b3 release(v1.9.2): prepare release
@207f863 feat: update containerd to 2.0.2
@582064d fix: add informer resync period for node status watcher
@244fd6e feat: add a kernel parameter to disable built-in auditd
@28327e0 fix: kube-apiserver authorizers order
@ff9aa80 fix: a couple of imager panics/crashes
@44e2cc9 feat: update Linux to 6.12.9
@9fd295b fix: detect GPT before ZFS
@7b59573 fix: extfs repair and resize
@5f6bfe0 fix: merge of VolumeConfig documents with sizes
@0c05e1c feat: update Linux to 6.12.8
@b61ab0a fix: partition alignment on disks with 4k sectors
@c4a69d3 fix: yet another dashboard panic
@dec3c6e fix: disable NRI plugin in a different way
@dfb54c8 fix: request previous IP address in discovery
@6b1fe3d fix: mount selinuxfs only when SELinux is enabled
@5e893e1 fix: update field name for bus path disk selector
@9219fc0 fix: exclude disks with empty transport for disk selector

Changes from siderolabs/pkgs

6 commits

siderolabs/pkgs@c1f06e5 feat: update containerd to v2.0.2
siderolabs/pkgs@ef38c38 feat: update Linux to 6.12.9
siderolabs/pkgs@a7487d6 fix: adjust kernel options around ACPI/PCI/EFI
siderolabs/pkgs@376259a feat: update Linux to 6.12.8
siderolabs/pkgs@8e435cd fix: update config-arm64 to add Rasperry Pi watchdog support
siderolabs/pkgs@daabb47 fix: dvb was missing I2C_MUX support and si2168 driver

Dependency Changes

github.com/siderolabs/go-blockdevice/v2 v2.0.9 -> v2.0.11
github.com/siderolabs/pkgs v1.9.0-15-g45c4ba4 -> v1.9.0-21-gc1f06e5
github.com/siderolabs/talos/pkg/machinery v1.9.1 -> v1.9.2

Previous release can be found at v1.9.1

Images

ghcr.io/siderolabs/flannel:v0.26.1
registry.k8s.io/coredns/coredns:v1.12.0
gcr.io/etcd-development/etcd:v3.5.17
registry.k8s.io/kube-apiserver:v1.32.0
registry.k8s.io/kube-controller-manager:v1.32.0
registry.k8s.io/kube-scheduler:v1.32.0
registry.k8s.io/kube-proxy:v1.32.0
ghcr.io/siderolabs/kubelet:v1.32.0
ghcr.io/siderolabs/installer:v1.9.2
registry.k8s.io/pause:3.10

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Update ghcr.io/siderolabs/talos Docker tag to v1.9.4

fc9b0b2

renovate bot added the dependencies label Feb 24, 2025

renovate bot merged commit 4752eda into main Feb 24, 2025
6 checks passed

renovate bot deleted the renovate/ghcr.io-siderolabs-talos-1.x branch February 24, 2025 13:47

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update ghcr.io/siderolabs/talos Docker tag to v1.9.4 #676

Update ghcr.io/siderolabs/talos Docker tag to v1.9.4 #676

Uh oh!

renovate bot commented Feb 24, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Update ghcr.io/siderolabs/talos Docker tag to v1.9.4 #676

Update ghcr.io/siderolabs/talos Docker tag to v1.9.4 #676

Uh oh!

Conversation

renovate bot commented Feb 24, 2025

Release Notes

v1.9.4

Talos 1.9.4 (2025-02-13)

Ingress Firewall

Component Updates

Contributors

Changes

Changes from siderolabs/pkgs

Changes from siderolabs/tools

Dependency Changes

Images

v1.9.3

Talos 1.9.3 (2025-01-28)

Component Updates

Contributors

Changes

Changes from siderolabs/pkgs

Changes from siderolabs/tools

Dependency Changes

Images

v1.9.2

Talos 1.9.2 (2025-01-16)

auditd

kube-apiserver Authorization Config

Component Updates

Contributors

Changes

Changes from siderolabs/pkgs

Dependency Changes

Images

Configuration

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`v1.9.4`

`v1.9.3`

`v1.9.2`