Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package talosctl for openSUSE:Factory checked in at 2026-08-28 19:51:14 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/talosctl (Old) and /work/SRC/openSUSE:Factory/.talosctl.new.1265 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "talosctl" Fri Aug 28 19:51:14 2026 rev:53 rq:1374262 version:1.13.9 Changes: -------- --- /work/SRC/openSUSE:Factory/talosctl/talosctl.changes 2026-08-06 16:23:45.275692083 +0200 +++ /work/SRC/openSUSE:Factory/.talosctl.new.1265/talosctl.changes 2026-08-28 19:52:42.277138524 +0200 @@ -1,0 +2,27 @@ +Fri Aug 28 07:33:30 UTC 2026 - Johannes Kastl <[email protected]> + +- update to 1.13.9: + https://github.com/siderolabs/talos/releases/tag/v1.13.9 + No talosctl-related changes + * Dependencies + - feat: update Go to 1.26.6 + - github.com/siderolabs/pkgs v1.13.0-55-gf677246 -> + v1.13.0-60-gf541ca4 + - github.com/siderolabs/talos/pkg/machinery v1.13.8 -> v1.13.9 + - github.com/siderolabs/tools v1.13.0-8-gc2844e6 -> + v1.13.0-9-ga201d19 + - golang.org/x/net v0.57.0 -> v0.58.0 + - golang.org/x/text v0.40.0 -> v0.41.0 + - k8s.io/api v0.36.2 -> v0.36.3 + - k8s.io/apiextensions-apiserver v0.36.2 -> v0.36.3 + - k8s.io/apimachinery v0.36.2 -> v0.36.3 + - k8s.io/apiserver v0.36.2 -> v0.36.3 + - k8s.io/client-go v0.36.2 -> v0.36.3 + - k8s.io/component-base v0.36.2 -> v0.36.3 + - k8s.io/cri-api v0.36.2 -> v0.36.3 + - k8s.io/kube-scheduler v0.36.2 -> v0.36.3 + - k8s.io/kubectl v0.36.2 -> v0.36.3 + - k8s.io/kubelet v0.36.2 -> v0.36.3 + - k8s.io/pod-security-admission v0.36.2 -> v0.36.3 + +------------------------------------------------------------------- Old: ---- talosctl-1.13.8.obscpio New: ---- talosctl-1.13.9.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ talosctl.spec ++++++ --- /var/tmp/diff_new_pack.1KUjU1/_old 2026-08-28 19:52:45.351245976 +0200 +++ /var/tmp/diff_new_pack.1KUjU1/_new 2026-08-28 19:52:45.361246326 +0200 @@ -17,7 +17,7 @@ Name: talosctl -Version: 1.13.8 +Version: 1.13.9 Release: 0 Summary: CLI to interact with Talos Linux License: MPL-2.0 @@ -26,7 +26,7 @@ Source1: vendor.tar.gz BuildRequires: bash-completion BuildRequires: fish -BuildRequires: go1.26 >= 1.26.5 +BuildRequires: go1.26 >= 1.26.6 BuildRequires: zsh %description ++++++ _service ++++++ --- /var/tmp/diff_new_pack.1KUjU1/_old 2026-08-28 19:52:45.468250066 +0200 +++ /var/tmp/diff_new_pack.1KUjU1/_new 2026-08-28 19:52:45.476250345 +0200 @@ -4,7 +4,7 @@ <param name="scm">git</param> <param name="exclude">.git</param> <param name="exclude">go.work</param> - <param name="revision">refs/tags/v1.13.8</param> + <param name="revision">refs/tags/v1.13.9</param> <param name="match-tag">v*</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> ++++++ talosctl-1.13.8.obscpio -> talosctl-1.13.9.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/talosctl-1.13.8/.disvulncheck.yaml new/talosctl-1.13.9/.disvulncheck.yaml --- old/talosctl-1.13.8/.disvulncheck.yaml 2026-08-04 14:58:45.000000000 +0200 +++ new/talosctl-1.13.9/.disvulncheck.yaml 2026-08-18 16:14:19.000000000 +0200 @@ -3,4 +3,4 @@ ignore: - id: GO-2026-5932 reason: No fix available; golang.org/x/crypto/openpgp only reachable via cosign legacy PGP signature verification, which Talos does not use (sigstore-based verification). - date: 2026-08-04 + date: 2026-08-17 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/talosctl-1.13.8/CHANGELOG.md new/talosctl-1.13.9/CHANGELOG.md --- old/talosctl-1.13.8/CHANGELOG.md 2026-08-04 14:58:45.000000000 +0200 +++ new/talosctl-1.13.9/CHANGELOG.md 2026-08-18 16:14:19.000000000 +0200 @@ -1,3 +1,79 @@ +## [Talos 1.13.9](https://github.com/siderolabs/talos/releases/tag/v1.13.9) (2026-08-18) + +Welcome to the v1.13.9 release of Talos! + + + +Please try out the release binaries and report any issues at +https://github.com/siderolabs/talos/issues. + +### Component Updates + +Linux: 6.18.44 +containerd: 2.2.7 +Kubernetes: 1.36.3 + +Talos is built with Go 1.26.6. + + +### Contributors + +* Andrey Smirnov +* Noel Georgi + +### Changes +<details><summary>6 commits</summary> +<p> + +* [`9ade215ce`](https://github.com/siderolabs/talos/commit/9ade215ced0546aa1a59525a183fed6ec7472cf7) feat: update Kubernetes to 1.36.3 +* [`14343cd29`](https://github.com/siderolabs/talos/commit/14343cd2913ccfe278c1acdc0713eb881da2f2e3) test: save the provision test logs +* [`b33e5fce2`](https://github.com/siderolabs/talos/commit/b33e5fce2c65249ea534610cb019bf8b0ffdf102) fix: support try mode apply without prior config +* [`6a8f29591`](https://github.com/siderolabs/talos/commit/6a8f29591366cef7f83e42b753e6b0c1420ad5ea) fix: share IPC namespace with the host for extension services +* [`b525b8290`](https://github.com/siderolabs/talos/commit/b525b82900e56c92a51721e5adf6cadc54db6a03) fix: size the receive/send buffers for nftables netlink +* [`7ac52642c`](https://github.com/siderolabs/talos/commit/7ac52642cff3c8995884eb7bcdca54f257d254ff) feat: update Go to 1.26.6 +</p> +</details> + +### Changes from siderolabs/pkgs +<details><summary>5 commits</summary> +<p> + +* [`f541ca4`](https://github.com/siderolabs/pkgs/commit/f541ca434ee63964319bb912e370f0ed407f8a18) feat: bump kernel to 6.18.44 +* [`a4f2c26`](https://github.com/siderolabs/pkgs/commit/a4f2c2607bdb1326760ce08edaeabec8d5e02d9a) feat: bump kernel to 6.18.43 +* [`79a7531`](https://github.com/siderolabs/pkgs/commit/79a753140cee4bb8f968b7f95683773938cdb37f) feat: update Linux firmware to 20260810 +* [`89d76bf`](https://github.com/siderolabs/pkgs/commit/89d76bf7e1aca2b750e93d6c2492421518aef86c) feat: update backportable dependencies +* [`af6c08a`](https://github.com/siderolabs/pkgs/commit/af6c08a34b7b94c48b09dd6022d151406fef5c32) feat: update Go to 1.26.6 +</p> +</details> + +### Changes from siderolabs/tools +<details><summary>1 commit</summary> +<p> + +* [`a201d19`](https://github.com/siderolabs/tools/commit/a201d197a0ddb199a8a81d7d6043664bb16dca4a) feat: update Go to 1.26.6 +</p> +</details> + +### Dependency Changes + +* **github.com/siderolabs/pkgs** v1.13.0-55-gf677246 -> v1.13.0-60-gf541ca4 +* **github.com/siderolabs/tools** v1.13.0-8-gc2844e6 -> v1.13.0-9-ga201d19 +* **golang.org/x/net** v0.57.0 -> v0.58.0 +* **golang.org/x/text** v0.40.0 -> v0.41.0 +* **k8s.io/api** v0.36.2 -> v0.36.3 +* **k8s.io/apiextensions-apiserver** v0.36.2 -> v0.36.3 +* **k8s.io/apimachinery** v0.36.2 -> v0.36.3 +* **k8s.io/apiserver** v0.36.2 -> v0.36.3 +* **k8s.io/client-go** v0.36.2 -> v0.36.3 +* **k8s.io/component-base** v0.36.2 -> v0.36.3 +* **k8s.io/cri-api** v0.36.2 -> v0.36.3 +* **k8s.io/kube-scheduler** v0.36.2 -> v0.36.3 +* **k8s.io/kubectl** v0.36.2 -> v0.36.3 +* **k8s.io/kubelet** v0.36.2 -> v0.36.3 +* **k8s.io/pod-security-admission** v0.36.2 -> v0.36.3 + +Previous release can be found at [v1.13.8](https://github.com/siderolabs/talos/releases/tag/v1.13.8) + ## [Talos 1.13.8](https://github.com/siderolabs/talos/releases/tag/v1.13.8) (2026-08-04) Welcome to the v1.13.8 release of Talos! diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/talosctl-1.13.8/Makefile new/talosctl-1.13.9/Makefile --- old/talosctl-1.13.8/Makefile 2026-08-04 14:58:45.000000000 +0200 +++ new/talosctl-1.13.9/Makefile 2026-08-18 16:14:19.000000000 +0200 @@ -26,9 +26,9 @@ EMBED_TARGET ?= embed TOOLS_PREFIX ?= ghcr.io/siderolabs/tools -TOOLS ?= v1.13.0-8-gc2844e6 +TOOLS ?= v1.13.0-9-ga201d19 PKGS_PREFIX ?= ghcr.io/siderolabs -PKGS ?= v1.13.0-55-gf677246 +PKGS ?= v1.13.0-60-gf541ca4 GENERATE_VEX_PREFIX ?= ghcr.io/siderolabs/generate-vex GENERATE_VEX ?= latest @@ -104,7 +104,7 @@ INTEGRATION_TEST_DEFAULT_TARGET := $(INTEGRATION_TEST)-$(OPERATING_SYSTEM) INTEGRATION_TEST_PROVISION_DEFAULT_TARGET := integration-test-provision-$(OPERATING_SYSTEM) # renovate: datasource=github-releases depName=kubernetes/kubernetes -KUBECTL_VERSION ?= v1.36.2 +KUBECTL_VERSION ?= v1.36.3 # renovate: datasource=github-releases depName=kastenhq/kubestr KUBESTR_VERSION ?= v0.4.49 # renovate: datasource=github-releases depName=helm/helm diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/talosctl-1.13.8/go.mod new/talosctl-1.13.9/go.mod --- old/talosctl-1.13.8/go.mod 2026-08-04 14:58:45.000000000 +0200 +++ new/talosctl-1.13.9/go.mod 2026-08-18 16:14:19.000000000 +0200 @@ -1,6 +1,6 @@ module github.com/siderolabs/talos -go 1.26.5 +go 1.26.6 replace ( // forked coredns so we don't carry caddy and other stuff into the Talos @@ -26,17 +26,17 @@ // Kubernetes dependencies sharing the same version. require ( - k8s.io/api v0.36.2 - k8s.io/apiextensions-apiserver v0.36.2 - k8s.io/apimachinery v0.36.2 - k8s.io/apiserver v0.36.2 - k8s.io/client-go v0.36.2 - k8s.io/component-base v0.36.2 - k8s.io/cri-api v0.36.2 - k8s.io/kube-scheduler v0.36.2 - k8s.io/kubectl v0.36.2 - k8s.io/kubelet v0.36.2 - k8s.io/pod-security-admission v0.36.2 + k8s.io/api v0.36.3 + k8s.io/apiextensions-apiserver v0.36.3 + k8s.io/apimachinery v0.36.3 + k8s.io/apiserver v0.36.3 + k8s.io/client-go v0.36.3 + k8s.io/component-base v0.36.3 + k8s.io/cri-api v0.36.3 + k8s.io/kube-scheduler v0.36.3 + k8s.io/kubectl v0.36.3 + k8s.io/kubelet v0.36.3 + k8s.io/pod-security-admission v0.36.3 ) require ( @@ -159,7 +159,7 @@ github.com/siderolabs/net v0.4.0 github.com/siderolabs/proto-codec v0.1.3 github.com/siderolabs/siderolink v0.3.15 - github.com/siderolabs/talos/pkg/machinery v1.13.8 + github.com/siderolabs/talos/pkg/machinery v1.13.9 github.com/sigstore/cosign/v3 v3.0.6 github.com/sigstore/sigstore v1.10.8 github.com/sigstore/sigstore-go v1.2.1 @@ -180,12 +180,12 @@ go.uber.org/zap v1.28.0 go.yaml.in/yaml/v4 v4.0.0-rc.4 go4.org/netipx v0.0.0-20231129151722-fdeea329fbba - golang.org/x/net v0.57.0 + golang.org/x/net v0.58.0 golang.org/x/oauth2 v0.36.0 golang.org/x/sync v0.22.0 golang.org/x/sys v0.47.0 golang.org/x/term v0.45.0 - golang.org/x/text v0.40.0 + golang.org/x/text v0.41.0 golang.org/x/time v0.15.0 golang.zx2c4.com/wireguard/wgctrl v0.0.0-20241231184526-a9ab2273dd10 google.golang.org/grpc v1.82.1 @@ -231,7 +231,7 @@ github.com/cenkalti/backoff/v5 v5.0.3 // indirect github.com/cespare/xxhash/v2 v2.3.0 // indirect github.com/chai2010/gettext-go v1.0.2 // indirect - github.com/cilium/ebpf v0.21.0 // indirect + github.com/cilium/ebpf v0.22.0 // indirect github.com/cloudflare/circl v1.6.3 // indirect github.com/containerd/continuity v0.4.5 // indirect github.com/containerd/errdefs/pkg v0.3.0 // indirect @@ -395,10 +395,10 @@ go.uber.org/multierr v1.11.0 // indirect go.yaml.in/yaml/v2 v2.4.4 // indirect go.yaml.in/yaml/v3 v3.0.4 // indirect - golang.org/x/crypto v0.54.0 // indirect + golang.org/x/crypto v0.55.0 // indirect golang.org/x/exp v0.0.0-20260218203240-3dfff04db8fa // indirect - golang.org/x/mod v0.37.0 // indirect - golang.org/x/tools v0.47.0 // indirect + golang.org/x/mod v0.40.0 // indirect + golang.org/x/tools v0.49.0 // indirect golang.zx2c4.com/wintun v0.0.0-20230126152724-0fa3db229ce2 // indirect golang.zx2c4.com/wireguard v0.0.0-20231211153847-12269c276173 // indirect google.golang.org/genproto/googleapis/api v0.0.0-20260526163538-3dc84a4a5aaa // indirect @@ -407,9 +407,9 @@ gopkg.in/inf.v0 v0.9.1 // indirect gopkg.in/yaml.v2 v2.4.0 // indirect gopkg.in/yaml.v3 v3.0.1 // indirect - k8s.io/cli-runtime v0.36.2 // indirect + k8s.io/cli-runtime v0.36.3 // indirect k8s.io/kube-openapi v0.0.0-20260319004828-5883c5ee87b9 // indirect - k8s.io/streaming v0.36.2 // indirect + k8s.io/streaming v0.36.3 // indirect k8s.io/utils v0.0.0-20260319190234-28399d86e0b5 // indirect kernel.org/pub/linux/libs/security/libcap/psx v1.2.78 // indirect rsc.io/qr v0.2.0 // indirect @@ -419,7 +419,7 @@ sigs.k8s.io/kustomize/api v0.21.1 // indirect sigs.k8s.io/kustomize/kyaml v0.21.1 // indirect sigs.k8s.io/randfill v1.0.0 // indirect - sigs.k8s.io/structured-merge-diff/v6 v6.3.2 // indirect + sigs.k8s.io/structured-merge-diff/v6 v6.3.3 // indirect sigs.k8s.io/yaml v1.6.0 // indirect ) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/talosctl-1.13.8/go.sum new/talosctl-1.13.9/go.sum --- old/talosctl-1.13.8/go.sum 2026-08-04 14:58:45.000000000 +0200 +++ new/talosctl-1.13.9/go.sum 2026-08-18 16:14:19.000000000 +0200 @@ -138,8 +138,8 @@ github.com/cilium/ebpf v0.5.0/go.mod h1:4tRaxcgiL706VnOzHOdBlY8IEAIdxINsQBcU4xJJXRs= github.com/cilium/ebpf v0.7.0/go.mod h1:/oI2+1shJiTGAMgl6/RgJr36Eo1jzrRcAWbcXO2usCA= github.com/cilium/ebpf v0.8.1/go.mod h1:f5zLIM0FSNuAkSyLAN7X+Hy6yznlF1mNiWUMfxMtrgk= -github.com/cilium/ebpf v0.21.0 h1:4dpx1J/B/1apeTmWBH5BkVLayHTkFrMovVPnHEk+l3k= -github.com/cilium/ebpf v0.21.0/go.mod h1:1kHKv6Kvh5a6TePP5vvvoMa1bclRyzUXELSs272fmIQ= +github.com/cilium/ebpf v0.22.0 h1:v2ktp0roffpMOj2MMf3idtCQZOsAoC4BJbAJN+ke2bY= +github.com/cilium/ebpf v0.22.0/go.mod h1:CDzZbe2hC5JjlDC+CY3KFCzlYwN4gbxppYM+Z10bQt4= github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDkc90ppPyw= github.com/cloudflare/circl v1.6.3 h1:9GPOhQGF9MCYUeXyMYlqTR6a5gTrgR/fBLXvUgtVcg8= github.com/cloudflare/circl v1.6.3/go.mod h1:2eXP6Qfat4O/Yhh8BznvKnJ+uzEoTQ6jVKJRn81BiS4= @@ -1002,8 +1002,8 @@ golang.org/x/crypto v0.0.0-20200420201142-3c4aac89819a/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto= golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto= golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc= -golang.org/x/crypto v0.54.0 h1:YLIA59K4fiNzHzjnZt2tUJQjQtUWfWbeHBqKtk3eScw= -golang.org/x/crypto v0.54.0/go.mod h1:KWL8ny2AZdGR2cWmzeHrp2azQPGogOv+HeQaVEXC2dk= +golang.org/x/crypto v0.55.0 h1:+KWHjbgOaAQ66dh/YlkZKHlz9ZUlq61AFirAR9ntP8M= +golang.org/x/crypto v0.55.0/go.mod h1:uq0V9dE/fzQuJtbnL+2EhWOE63vo164FY8xqEnV9xis= golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= golang.org/x/exp v0.0.0-20260218203240-3dfff04db8fa h1:Zt3DZoOFFYkKhDT3v7Lm9FDMEV06GpzjG2jrqW+QTE0= golang.org/x/exp v0.0.0-20260218203240-3dfff04db8fa/go.mod h1:K79w1Vqn7PoiZn+TkNpx3BUWUQksGO3JcVX6qIjytmA= @@ -1015,8 +1015,8 @@ golang.org/x/mod v0.5.1/go.mod h1:5OXOZSfqPIIbmVBIIKWRFfZjPR0E5r58TLhUjH0a2Ro= golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4= golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs= -golang.org/x/mod v0.37.0 h1:vF1DjpVEshcIqoEaauuHebaLk1O1forxjxBaVn884JQ= -golang.org/x/mod v0.37.0/go.mod h1:m8S8VeM9r4dzDwjrKO0a1sZP3YjeMamRRlD+fmR2Q/0= +golang.org/x/mod v0.40.0 h1:hUv+3cXcdRHz08UmSiOob7sadHig73uo5bkXxQ/tvUs= +golang.org/x/mod v0.40.0/go.mod h1:0/weTWkPWGBikyTWAX3dkjVztMmBA5hM0DH6BElSupE= golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= golang.org/x/net v0.0.0-20180906233101-161cd47e91fd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= @@ -1048,8 +1048,8 @@ golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c= golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs= golang.org/x/net v0.9.0/go.mod h1:d48xBJpPfHeWQsugry2m+kC02ZBRGRgulfHnEXEuWns= -golang.org/x/net v0.57.0 h1:K5+3DljvIuDG9/Jv9rvyMywYNFCQ9RSUY6OOTTkT+tE= -golang.org/x/net v0.57.0/go.mod h1:KpXc8iv+r3XplLAG/f7Jsf9RPszJzdR0f58q9vGOuEU= +golang.org/x/net v0.58.0 h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To= +golang.org/x/net v0.58.0/go.mod h1:YwCddHnFlT7eLQqVprV19OnhLGtc5xOKgE0RyqgfWAU= golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U= golang.org/x/oauth2 v0.36.0 h1:peZ/1z27fi9hUOFCAZaHyrpWG5lwe0RJEEEeH0ThlIs= golang.org/x/oauth2 v0.36.0/go.mod h1:YDBUJMTkDnJS+A4BP4eZBjCqtokkg1hODuPjwiGPO7Q= @@ -1127,8 +1127,8 @@ golang.org/x/text v0.8.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8= golang.org/x/text v0.9.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8= golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU= -golang.org/x/text v0.40.0 h1:Ub2Z6/xjgF1WrYQz2nuITOEegKFtiIy+rieRJ5lHZKs= -golang.org/x/text v0.40.0/go.mod h1:hpnzDAfGV753zIKo+wk3u1bVKCGPbrnF7+7LBF/UHVY= +golang.org/x/text v0.41.0 h1:vz/seA0lnX87Othu2f/0L24RcgrXD9/YFTSuGjj3rH8= +golang.org/x/text v0.41.0/go.mod h1:jvf1O8ajNzZqhSrQBPbutR/EB83Cc0CFrezNQIwbb5M= golang.org/x/time v0.15.0 h1:bbrp8t3bGUeFOx08pvsMYRTCVSMk89u4tKbNOZbp88U= golang.org/x/time v0.15.0/go.mod h1:Y4YMaQmXwGQZoFaVFk4YpCt4FLQMYKZe9oeV/f4MSno= golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= @@ -1143,8 +1143,8 @@ golang.org/x/tools v0.1.8/go.mod h1:nABZi5QlRsZVlzPpHl034qft6wpY4eDcsTt5AaioBiU= golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc= golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU= -golang.org/x/tools v0.47.0 h1:7Kn5x/d1svx/PzryTsqeoZN4TZwqeH5pGWjefhLi/1Q= -golang.org/x/tools v0.47.0/go.mod h1:dFHnyTvFWY212G+h7ZY4Vsp/K3U4/7W9TyVaAul8uCA= +golang.org/x/tools v0.49.0 h1:3NI7VXzL9+1WZD52Dx2ttoPwD5DWrFGpl9mFZDlmisI= +golang.org/x/tools v0.49.0/go.mod h1:SJNXV9DBKT0UbdttsQjbfJlAE/q+y36++zo3uL3N0Oo= golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= @@ -1222,36 +1222,36 @@ gvisor.dev/gvisor v0.0.0-20230927004350-cbd86285d259/go.mod h1:AVgIgHMwK63XvmAzWG9vLQ41YnVHN0du0tEC46fI7yY= honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4= honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4= -k8s.io/api v0.36.2 h1:TF6YDLIzKfccK7cq9YpTcGX8TJmEkHVRv78DM51fRYY= -k8s.io/api v0.36.2/go.mod h1:F4LbMO4brjZYh7yFkXWhynSvtB7YauxV4c+HHkNRGNg= -k8s.io/apiextensions-apiserver v0.36.2 h1:3O5gqOj/dt2XWWbpMe+TXWpE9yU6pjM/tXxtHHJT/K4= -k8s.io/apiextensions-apiserver v0.36.2/go.mod h1:cL1tBWe8XSaP1H30iWKGo7hf6iAUUUJPEU70dskmAnA= -k8s.io/apimachinery v0.36.2 h1:0PE/W/WNy1UX61NLbXY5TMbJ6UwLL6E6lAPkYrKFxbQ= -k8s.io/apimachinery v0.36.2/go.mod h1:fvf/HOLXq9RId0rnDIbN1OEBvHXdQbLMM8nu0LcBUf4= -k8s.io/apiserver v0.36.2 h1:6vMnkmHZPeBloNkHUhmZYq7Ylv8WIB8xjyEl+eSt26E= -k8s.io/apiserver v0.36.2/go.mod h1:9PoQ2ikCytrZyZg11mGhLEF5m8Rgsb5FJmYJ4Wvnl1k= -k8s.io/cli-runtime v0.36.2 h1:CconTvEeV4DJs4ZX3HQKCFbFRGsm6OtuBM9yjmMP2VM= -k8s.io/cli-runtime v0.36.2/go.mod h1:LddcjiMf4YlnHO7c1Y7rEtDqL84FyiYVLco7V679GUU= -k8s.io/client-go v0.36.2 h1:bfgxmFKc9CgqsgX4xKLAAdmTQlWee7Ob/HlDOrJ5TBI= -k8s.io/client-go v0.36.2/go.mod h1:1vgO4OAlfPnoLcb+Rze2GF5rAr14w8qjrYMoyXJzQj0= -k8s.io/component-base v0.36.2 h1:Z0VH80O7Ng0HDZnZj3WRR3urEGa0kTwmO8CwEwjVK1w= -k8s.io/component-base v0.36.2/go.mod h1:mGfFOA7Gwpdm1VW2cwSQYbiDIlz8GD2WGwH88QSeCyA= -k8s.io/cri-api v0.36.2 h1:2a0SEBXZfvCF9YMjlRbRj487tiAaqJbe4Djkx5Yk+bg= -k8s.io/cri-api v0.36.2/go.mod h1:1gMX7udEAiRCWGS4uxscdbxq6vufwhZt38Ri+XH6P00= +k8s.io/api v0.36.3 h1:NxB+05W2UGqXWFXcLO0RB5cnqnUPP5v5sVlaOH0Iz4w= +k8s.io/api v0.36.3/go.mod h1:JzLQKqRHC5+I8RVj/lS3lCg0mg6nWI9Fo/Sk3ElxHzg= +k8s.io/apiextensions-apiserver v0.36.3 h1:dPmOAPhwTtqb1bTxbFPsy18KHPhktQeO3WUPXunZIB0= +k8s.io/apiextensions-apiserver v0.36.3/go.mod h1:KTXFqgXiuw2pRoL+Wpmttqc+up9Xt/GohadPWeLLOa4= +k8s.io/apimachinery v0.36.3 h1:PkzMRBRG8joFD8EhCuQAtNPvJlxb82FwplP26HIzvAM= +k8s.io/apimachinery v0.36.3/go.mod h1:cTSjBWgPe/6CQyBKzY/hDIRWCQQQeK0mfLbml0UYFHE= +k8s.io/apiserver v0.36.3 h1:MGSg2SkdfuytiDEcRylT5mQFmmSsbx90XFUO67Y4bsQ= +k8s.io/apiserver v0.36.3/go.mod h1:fVH7zv9EUNUA7Fl7LtDKh8aB9W7u1VQPSGtWV5SjUxg= +k8s.io/cli-runtime v0.36.3 h1:g+eJ+M1sYpnNYp/q5fzaw2KejIL0Q7DH+xFl6YVoL4U= +k8s.io/cli-runtime v0.36.3/go.mod h1:hZpAqK8nSFXvvLaVCbzUPVp8e9TRLSTCfpNzMt7s3tE= +k8s.io/client-go v0.36.3 h1:M4JdVzXxYcZk4fGpfDdYnxSwhLKWCFoQsHW6t+z8Hfg= +k8s.io/client-go v0.36.3/go.mod h1:gcPwr0c87vjjG6HB6pWEqOeuYVoXSsREjzux2j6GF30= +k8s.io/component-base v0.36.3 h1:vc/UFvPCkW0irPz84LAodAL1j3f4xktPM6dDJIEheAY= +k8s.io/component-base v0.36.3/go.mod h1:hZbNFG+gCMl9EbykDGEu73feKP9/Cq6JsV4pTo9GTO8= +k8s.io/cri-api v0.36.3 h1:QFEMKGim6DSdlaW3JwpjVCjUQgTnkKG7i3McAaBW6Fo= +k8s.io/cri-api v0.36.3/go.mod h1:1gMX7udEAiRCWGS4uxscdbxq6vufwhZt38Ri+XH6P00= k8s.io/klog/v2 v2.140.0 h1:Tf+J3AH7xnUzZyVVXhTgGhEKnFqye14aadWv7bzXdzc= k8s.io/klog/v2 v2.140.0/go.mod h1:o+/RWfJ6PwpnFn7OyAG3QnO47BFsymfEfrz6XyYSSp0= k8s.io/kube-openapi v0.0.0-20260319004828-5883c5ee87b9 h1:Sztf7ESG9tAXRW/ACJZjrj5jhdOUqS2KFRQT+CTvu78= k8s.io/kube-openapi v0.0.0-20260319004828-5883c5ee87b9/go.mod h1:uGBT7iTA6c6MvqUvSXIaYZo9ukscABYi2btjhvgKGZ0= -k8s.io/kube-scheduler v0.36.2 h1:Lf3j9NGNGA/MBFT11bLAWKZzFDS6IVRxOGP/Hw8YVLU= -k8s.io/kube-scheduler v0.36.2/go.mod h1:3Fb6kMLmawSKg8NQ6q2E6O1cQzVUIqTpn6h9AHz3hUU= -k8s.io/kubectl v0.36.2 h1:rpUGGpeL09XVOLep2yle5jrtk//JA1L6ZHfkQQtVEwk= -k8s.io/kubectl v0.36.2/go.mod h1:gVbQ3B/yb4bSR2ggQ7rd0W6icUSWs7sduH4e16Vii+0= -k8s.io/kubelet v0.36.2 h1:9x+Tf8TEFYCcHdClzYL+IgDpfqbi+qqSdIIcXVKvr7k= -k8s.io/kubelet v0.36.2/go.mod h1:APRnAz9lmKmKsQunzUrZgQOm0k0f+NG9YxIrFCYYxcU= -k8s.io/pod-security-admission v0.36.2 h1:mJ/3k6w8A01k/m9MRN6DPT8ldaDmkzMfzfrOquNDwUs= -k8s.io/pod-security-admission v0.36.2/go.mod h1:PTkT8i1jQ9YszlxWPa8TthuitZW68gCFRmjnmhRIrFM= -k8s.io/streaming v0.36.2 h1:NSKthPPg9UFSKsRauVJUVGH2Dvn8fhKmY4qrMkw/p98= -k8s.io/streaming v0.36.2/go.mod h1:z6fV3D+NVkoeqRMtWwlUZK6U17SY/LqNzOxWL6GyR/s= +k8s.io/kube-scheduler v0.36.3 h1:sc18quI2CgvH23oU1eJIQ21ivJENzjH4cxATqLSSubM= +k8s.io/kube-scheduler v0.36.3/go.mod h1:M7zaLPp1Q3S6ddqZYYLiQiGw21t5bLD0FaPRXyomP7c= +k8s.io/kubectl v0.36.3 h1:TesKp+XYQEjPYoFvuobcVnuvira2+/xAVlq//+kksaI= +k8s.io/kubectl v0.36.3/go.mod h1:W+NEb1CzBGmoaI1Nrpn2ETo9omNBl0AsyxnnMT40N6E= +k8s.io/kubelet v0.36.3 h1:dRzEnhHk35Opy6wjWR4YBcN5RI9lB2npUY37TghFuPU= +k8s.io/kubelet v0.36.3/go.mod h1:4USFGr21Ioka+b964Beq0NvV5b5aca3RWJ1/kfq+RLw= +k8s.io/pod-security-admission v0.36.3 h1:nWRx42eQwSkapa0TPwtho35adfSziRmPYuzwU+4xPpo= +k8s.io/pod-security-admission v0.36.3/go.mod h1:wYrV4tipwzgwUOFIy14KcpIfUKnJduVZPHZMgJEUbVg= +k8s.io/streaming v0.36.3 h1:9rAaqBk0C0Pc7+/fqGekj07NV+/Xrew58p647A0JT8w= +k8s.io/streaming v0.36.3/go.mod h1:z6fV3D+NVkoeqRMtWwlUZK6U17SY/LqNzOxWL6GyR/s= k8s.io/utils v0.0.0-20260319190234-28399d86e0b5 h1:kBawHLSnx/mYHmRnNUf9d4CpjREbeZuxoSGOX/J+aYM= k8s.io/utils v0.0.0-20260319190234-28399d86e0b5/go.mod h1:xDxuJ0whA3d0I4mf/C4ppKHxXynQ+fxnkmQH0vTHnuk= kernel.org/pub/linux/libs/security/libcap/cap v1.2.77 h1:iQtQTjFUOcTT19fI8sTCzYXsjeVs56et3D8AbKS2Uks= @@ -1277,8 +1277,8 @@ sigs.k8s.io/kustomize/kyaml v0.21.1/go.mod h1:hmxADesM3yUN2vbA5z1/YTBnzLJ1dajdqpQonwBL1FQ= sigs.k8s.io/randfill v1.0.0 h1:JfjMILfT8A6RbawdsK2JXGBR5AQVfd+9TbzrlneTyrU= sigs.k8s.io/randfill v1.0.0/go.mod h1:XeLlZ/jmk4i1HRopwe7/aU3H5n1zNUcX6TM94b3QxOY= -sigs.k8s.io/structured-merge-diff/v6 v6.3.2 h1:kwVWMx5yS1CrnFWA/2QHyRVJ8jM6dBA80uLmm0wJkk8= -sigs.k8s.io/structured-merge-diff/v6 v6.3.2/go.mod h1:M3W8sfWvn2HhQDIbGWj3S099YozAsymCo/wrT5ohRUE= +sigs.k8s.io/structured-merge-diff/v6 v6.3.3 h1:u08YRbVUi59ri4YD6cg0UqNM4Dimn0sIl+wldcx5PYw= +sigs.k8s.io/structured-merge-diff/v6 v6.3.3/go.mod h1:M3W8sfWvn2HhQDIbGWj3S099YozAsymCo/wrT5ohRUE= sigs.k8s.io/yaml v1.6.0 h1:G8fkbMSAFqgEFgh4b1wmtzDnioxFCUgTZhlbj5P9QYs= sigs.k8s.io/yaml v1.6.0/go.mod h1:796bPqUfzR/0jLAl6XjHl3Ck7MiyVv8dbTdyT3/pMf4= software.sslmate.com/src/go-pkcs12 v0.4.0 h1:H2g08FrTvSFKUj+D309j1DPfk5APnIdAQAB8aEykJ5k= diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/talosctl-1.13.8/hack/release.toml new/talosctl-1.13.9/hack/release.toml --- old/talosctl-1.13.8/hack/release.toml 2026-08-04 14:58:45.000000000 +0200 +++ new/talosctl-1.13.9/hack/release.toml 2026-08-18 16:14:19.000000000 +0200 @@ -7,7 +7,7 @@ ignore_deps = ["github.com/coredns/coredns"] # previous release -previous = "v1.13.7" +previous = "v1.13.8" pre_release = false @@ -18,11 +18,11 @@ [notes.updates] title = "Component Updates" description = """\ -Linux: 6.18.42 -CoreDNS: 1.14.6 -Flannel: 0.28.8 +Linux: 6.18.44 +containerd: 2.2.7 +Kubernetes: 1.36.3 -Talos is built with Go 1.26.5. +Talos is built with Go 1.26.6. """ [make_deps] diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/talosctl-1.13.8/hack/test/e2e.sh new/talosctl-1.13.9/hack/test/e2e.sh --- old/talosctl-1.13.8/hack/test/e2e.sh 2026-08-04 14:58:45.000000000 +0200 +++ new/talosctl-1.13.9/hack/test/e2e.sh 2026-08-18 16:14:19.000000000 +0200 @@ -33,7 +33,7 @@ # Kubernetes export KUBECONFIG="${TMP}/kubeconfig" -export KUBERNETES_VERSION=${KUBERNETES_VERSION:-1.36.2} +export KUBERNETES_VERSION=${KUBERNETES_VERSION:-1.36.3} export NAME_PREFIX="talos-e2e-${SHA}-${PLATFORM}" export TIMEOUT=1200 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/talosctl-1.13.8/internal/app/machined/pkg/controllers/network/nftables_chain.go new/talosctl-1.13.9/internal/app/machined/pkg/controllers/network/nftables_chain.go --- old/talosctl-1.13.8/internal/app/machined/pkg/controllers/network/nftables_chain.go 2026-08-04 14:58:45.000000000 +0200 +++ new/talosctl-1.13.9/internal/app/machined/pkg/controllers/network/nftables_chain.go 2026-08-18 16:14:19.000000000 +0200 @@ -14,6 +14,7 @@ "github.com/cosi-project/runtime/pkg/safe" "github.com/google/nftables" "github.com/google/nftables/expr" + "github.com/mdlayher/netlink" "go.uber.org/zap" networkadapter "github.com/siderolabs/talos/internal/app/machined/pkg/adapters/network" @@ -21,6 +22,21 @@ "github.com/siderolabs/talos/pkg/machinery/resources/network" ) +// nfTablesSocketBufferSize is the netlink socket send/receive buffer size for the nftables connection. +// +// The whole ruleset is committed as a single netlink batch, which runs into two independent kernel +// limits if the socket is left at the 208 KiB defaults (`net.core.{r,w}mem_default`): +// +// - the batch is written with one `sendmsg`, which the kernel rejects with EMSGSIZE once the batch +// exceeds `sk_sndbuf - 32`; +// - the kernel queues an ACK for every message in the batch before that `sendmsg` returns, and +// accounts them by skb `truesize` (~768 B floor each), so the receive queue overruns and the +// failure surfaces as ENOBUFS on the following `recvmsg`. +// +// The receive side is the tighter of the two by roughly 5x, since ACKs echo the request back and the +// `truesize` floor inflates the small messages the ruleset is made of. +const nfTablesSocketBufferSize = 8 * 1024 * 1024 + // NfTablesChainController applies network.NfTablesChain to the Linux nftables interface. type NfTablesChainController struct { TableName string @@ -55,6 +71,23 @@ ctrl.TableName = constants.DefaultNfTablesTableName } + conn, err := nftables.New( + nftables.AsLasting(), + nftables.WithSockOptions(func(nc *netlink.Conn) error { + // these try SO_{RCV,SND}BUFFORCE first, so they are not capped by `net.core.{r,w}mem_max`. + if err := nc.SetReadBuffer(nfTablesSocketBufferSize); err != nil { + return err + } + + return nc.SetWriteBuffer(nfTablesSocketBufferSize) + }), + ) + if err != nil { + return fmt.Errorf("error creating nftables connection: %w", err) + } + + defer conn.CloseLasting() //nolint:errcheck + for { select { case <-ctx.Done(): @@ -62,9 +95,7 @@ case <-r.EventCh(): } - var conn nftables.Conn - - if err := ctrl.preCreateIptablesNFTable(logger, &conn); err != nil { + if err := ctrl.preCreateIptablesNFTable(logger, conn); err != nil { return fmt.Errorf("error pre-creating iptables-nft table: %w", err) } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/talosctl-1.13.8/internal/app/machined/pkg/controllers/network/nftables_chain_test.go new/talosctl-1.13.9/internal/app/machined/pkg/controllers/network/nftables_chain_test.go --- old/talosctl-1.13.8/internal/app/machined/pkg/controllers/network/nftables_chain_test.go 2026-08-04 14:58:45.000000000 +0200 +++ new/talosctl-1.13.9/internal/app/machined/pkg/controllers/network/nftables_chain_test.go 2026-08-18 16:14:19.000000000 +0200 @@ -635,6 +635,44 @@ }`) } +// TestLargeRuleset verifies that a ruleset too big for the default netlink socket buffers still +// gets applied, as the whole ruleset is committed in a single netlink batch. +// +// With the 208 KiB defaults this trips both of the limits described on nfTablesSocketBufferSize: +// ENOBUFS on the receive side past ~91 rules, and EMSGSIZE on the send side past ~443. +// +// See https://github.com/siderolabs/talos/issues/14001. +func (s *NfTablesChainSuite) TestLargeRuleset() { + // each rule carries an anonymous set, costing two netlink messages on top of the rule itself: + // ~1500 messages and ~240 KB on the wire, past both limits + const numRules = 500 + + chain := network.NewNfTablesChain(network.NamespaceName, "test1") + chain.TypedSpec().Type = nethelpers.ChainTypeFilter + chain.TypedSpec().Hook = nethelpers.ChainHookInput + chain.TypedSpec().Priority = nethelpers.ChainPriorityFilter + chain.TypedSpec().Policy = nethelpers.VerdictAccept + chain.TypedSpec().Rules = make([]network.NfTablesRule, 0, numRules) + + for i := range numRules { + chain.TypedSpec().Rules = append(chain.TypedSpec().Rules, network.NfTablesRule{ + MatchSourceAddress: &network.NfTablesAddressMatch{ + IncludeSubnets: []netip.Prefix{ + netip.PrefixFrom(netip.AddrFrom4([4]byte{10, byte(i >> 8), byte(i), 0}), 24), + }, + }, + Verdict: new(nethelpers.VerdictAccept), + }) + } + + s.Require().NoError(s.State().Create(s.Ctx(), chain)) + + // the ruleset is too large to compare verbatim, so just check that every rule made it through + s.Eventually(func() bool { + return strings.Count(s.nftOutput(), "ip saddr") == numRules + }, 5*time.Second, 100*time.Millisecond) +} + func TestNftablesChainSuite(t *testing.T) { if os.Geteuid() != 0 { t.Skip("requires root") diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/talosctl-1.13.8/internal/app/machined/pkg/runtime/v1alpha2/v1alpha2_state.go new/talosctl-1.13.9/internal/app/machined/pkg/runtime/v1alpha2/v1alpha2_state.go --- old/talosctl-1.13.8/internal/app/machined/pkg/runtime/v1alpha2/v1alpha2_state.go 2026-08-04 14:58:45.000000000 +0200 +++ new/talosctl-1.13.9/internal/app/machined/pkg/runtime/v1alpha2/v1alpha2_state.go 2026-08-18 16:14:19.000000000 +0200 @@ -305,6 +305,15 @@ func (s *State) SetConfig(ctx context.Context, id string, cfg talosconfig.Provider) error { cfgResource := config.NewMachineConfigWithID(cfg, id) + if cfg == nil { + err := s.resources.Destroy(ctx, cfgResource.Metadata()) + if err != nil && !state.IsNotFoundError(err) { + return err + } + + return nil + } + oldCfg, err := s.resources.Get(ctx, cfgResource.Metadata()) if err != nil { if state.IsNotFoundError(err) { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/talosctl-1.13.8/internal/app/machined/pkg/system/services/extension.go new/talosctl-1.13.9/internal/app/machined/pkg/system/services/extension.go --- old/talosctl-1.13.8/internal/app/machined/pkg/system/services/extension.go 2026-08-04 14:58:45.000000000 +0200 +++ new/talosctl-1.13.9/internal/app/machined/pkg/system/services/extension.go 2026-08-18 16:14:19.000000000 +0200 @@ -127,6 +127,7 @@ containerd.WithRootfsPropagation(svc.Spec.Container.Security.RootfsPropagation), oci.WithMounts(mounts), oci.WithHostNamespace(specs.NetworkNamespace), + oci.WithHostNamespace(specs.IPCNamespace), oci.WithSelinuxLabel(""), oci.WithApparmorProfile(""), oci.WithCapabilities(capability.AllGrantableCapabilities()), diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/talosctl-1.13.8/internal/integration/provision/maintenance_basic.go new/talosctl-1.13.9/internal/integration/provision/maintenance_basic.go --- old/talosctl-1.13.8/internal/integration/provision/maintenance_basic.go 2026-08-04 14:58:45.000000000 +0200 +++ new/talosctl-1.13.9/internal/integration/provision/maintenance_basic.go 2026-08-18 16:14:19.000000000 +0200 @@ -15,12 +15,14 @@ "slices" "time" + "github.com/cosi-project/runtime/pkg/resource/rtestutils" "github.com/cosi-project/runtime/pkg/safe" "github.com/stretchr/testify/assert" "google.golang.org/grpc" "google.golang.org/grpc/codes" "google.golang.org/grpc/credentials" "google.golang.org/grpc/status" + "google.golang.org/protobuf/types/known/durationpb" "google.golang.org/protobuf/types/known/emptypb" "github.com/siderolabs/talos/cmd/talosctl/pkg/mgmt/helpers" @@ -30,6 +32,8 @@ "github.com/siderolabs/talos/pkg/machinery/api/machine" "github.com/siderolabs/talos/pkg/machinery/api/storage" "github.com/siderolabs/talos/pkg/machinery/client" + "github.com/siderolabs/talos/pkg/machinery/config/container" + networkcfg "github.com/siderolabs/talos/pkg/machinery/config/types/network" "github.com/siderolabs/talos/pkg/machinery/constants" "github.com/siderolabs/talos/pkg/machinery/nethelpers" "github.com/siderolabs/talos/pkg/machinery/resources/network" @@ -111,6 +115,51 @@ }, time.Minute, time.Second, "version API should be available") }) + suite.Run("testing machine config apply try with no prior config", func() { + // it doesn't matter which machine to use, as they are all same in maintenance mode right now + maintenanceClient := maintenanceClients[0] + + hostnameConfig := networkcfg.NewHostnameConfigV1Alpha1() + hostnameConfig.ConfigHostname = "my-node" + hostnameConfig.ConfigAuto = new(nethelpers.AutoHostnameKindOff) + + machineConfig, err := container.New(hostnameConfig) + suite.Require().NoError(err) + + machineConfigBytes, err := machineConfig.Bytes() + suite.Require().NoError(err) + + const tryModeTimeout = 5 * time.Second + + // apply with short try mode interval + _, err = maintenanceClient.ApplyConfiguration(suite.ctx, &machine.ApplyConfigurationRequest{ + Data: machineConfigBytes, + Mode: machine.ApplyConfigurationRequest_TRY, + TryModeTimeout: durationpb.New(tryModeTimeout), + }) + suite.Require().NoError(err) + + // now hostname should be as we set + rtestutils.AssertResource( + suite.ctx, suite.T(), maintenanceClient.COSI, network.HostnameID, + func(hs *network.HostnameStatus, asrt *assert.Assertions) { + asrt.Equal("my-node", hs.TypedSpec().Hostname) + }, + ) + + // give the test twice the try mode timeout to ensure that the config is rolled back + waitCtx, cancel := context.WithTimeout(suite.ctx, 2*tryModeTimeout) + defer cancel() + + // eventually, config should be rolled back, and hostname should change back + rtestutils.AssertResource( + waitCtx, suite.T(), maintenanceClient.COSI, network.HostnameID, + func(hs *network.HostnameStatus, asrt *assert.Assertions) { + asrt.NotEqual("my-node", hs.TypedSpec().Hostname) + }, + ) + }) + suite.Run("testing basic maintenance APIs", func() { // it doesn't matter which machine to use, as they are all same in maintenance mode right now maintenanceClient := maintenanceClients[0] diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/talosctl-1.13.8/internal/integration/provision/provision.go new/talosctl-1.13.9/internal/integration/provision/provision.go --- old/talosctl-1.13.8/internal/integration/provision/provision.go 2026-08-04 14:58:45.000000000 +0200 +++ new/talosctl-1.13.9/internal/integration/provision/provision.go 2026-08-18 16:14:19.000000000 +0200 @@ -168,7 +168,18 @@ } if suite.Cluster != nil { - suite.Assert().NoError(suite.provisioner.Destroy(suite.ctx, suite.Cluster)) + // Save logs and support archives under /tmp/{logs,support}-<cluster>.{tar.gz,zip} + // so the kres save-talos-logs step (artifactPath: /tmp/logs-*.tar.gz, + // additionalArtifacts: /tmp/support-*.zip) can upload them on failure. + clusterName := suite.Cluster.Info().ClusterName + + suite.Assert().NoError( + suite.provisioner.Destroy( + suite.ctx, suite.Cluster, + provision.WithSaveClusterLogsArchivePath(fmt.Sprintf("/tmp/logs-%s.tar.gz", clusterName)), + provision.WithSaveSupportArchivePath(fmt.Sprintf("/tmp/support-%s.zip", clusterName)), + ), + ) } suite.ctxCancel() diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/talosctl-1.13.8/pkg/machinery/client/reply.go new/talosctl-1.13.9/pkg/machinery/client/reply.go --- old/talosctl-1.13.8/pkg/machinery/client/reply.go 2026-08-04 14:58:45.000000000 +0200 +++ new/talosctl-1.13.9/pkg/machinery/client/reply.go 2026-08-18 16:14:19.000000000 +0200 @@ -61,7 +61,7 @@ } respStructPtr := reflect.ValueOf(resp) - if respStructPtr.Kind() != reflect.Ptr { + if respStructPtr.Kind() != reflect.Pointer { panic("response should be pointer to struct") } @@ -87,7 +87,7 @@ for i := 0; i < messagesField.Len(); { MessagesPtr := messagesField.Index(i) - if MessagesPtr.Kind() != reflect.Ptr { + if MessagesPtr.Kind() != reflect.Pointer { panic("Messages slice should container pointers") } @@ -101,7 +101,7 @@ panic("Messages metadata field missing") } - if metadataField.Kind() != reflect.Ptr { + if metadataField.Kind() != reflect.Pointer { panic("Messages metadata field should be a pointer") } @@ -140,12 +140,12 @@ panic("metadata.Status field missing") } - if statusField.Kind() != reflect.Ptr { + if statusField.Kind() != reflect.Pointer { panic("metadata.Status should be pointer") } if !statusField.IsZero() { - statusValue, ok := statusField.Interface().(*rpcstatus.Status) + statusValue, ok := reflect.TypeAssert[*rpcstatus.Status](statusField) if !ok { panic("metadata.Status should be of type *status.Status") } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/talosctl-1.13.8/pkg/machinery/config/configloader/internal/decoder/selector.go new/talosctl-1.13.9/pkg/machinery/config/configloader/internal/decoder/selector.go --- old/talosctl-1.13.8/pkg/machinery/config/configloader/internal/decoder/selector.go 2026-08-04 14:58:45.000000000 +0200 +++ new/talosctl-1.13.9/pkg/machinery/config/configloader/internal/decoder/selector.go 2026-08-18 16:14:19.000000000 +0200 @@ -263,7 +263,7 @@ // if the field value implements Stringer, use it for comparison instead of the default string conversion if fieldVal.CanInterface() { - if stringer, ok := fieldVal.Interface().(fmt.Stringer); ok { + if stringer, ok := reflect.TypeAssert[fmt.Stringer](fieldVal); ok { fieldStr = stringer.String() } } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/talosctl-1.13.8/pkg/machinery/constants/constants.go new/talosctl-1.13.9/pkg/machinery/constants/constants.go --- old/talosctl-1.13.8/pkg/machinery/constants/constants.go 2026-08-04 14:58:45.000000000 +0200 +++ new/talosctl-1.13.9/pkg/machinery/constants/constants.go 2026-08-18 16:14:19.000000000 +0200 @@ -13,7 +13,7 @@ const ( // DefaultKernelVersion is the default Linux kernel version. - DefaultKernelVersion = "6.18.42-talos" + DefaultKernelVersion = "6.18.44-talos" // KernelParamConfig is the kernel parameter name for specifying the URL. // to the config. @@ -363,7 +363,7 @@ // DefaultKubernetesVersion is the default target version of the control plane. // renovate: datasource=github-releases depName=kubernetes/kubernetes - DefaultKubernetesVersion = "1.36.2" + DefaultKubernetesVersion = "1.36.3" // SupportedKubernetesVersions is the number of Kubernetes versions supported by Talos starting from DefaultKubernetesVersion going backwards. SupportedKubernetesVersions = 6 @@ -523,7 +523,7 @@ TrustdUserID = 51 // DefaultContainerdVersion is the default container runtime version. - DefaultContainerdVersion = "2.2.6" + DefaultContainerdVersion = "2.2.7" // RuncVersion is the runc version. RuncVersion = "1.4.3" @@ -1108,7 +1108,7 @@ DBusClientSocketLabel = "system_u:object_r:dbus_client_socket_t:s0" // GoVersion is the version of Go compiler this release was built with. - GoVersion = "go1.26.5" + GoVersion = "go1.26.6" // KubernetesTalosAPIServiceName is the name of the Kubernetes service to access Talos API. KubernetesTalosAPIServiceName = "talos" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/talosctl-1.13.8/pkg/machinery/gendata/data/pkgs new/talosctl-1.13.9/pkg/machinery/gendata/data/pkgs --- old/talosctl-1.13.8/pkg/machinery/gendata/data/pkgs 2026-08-04 14:58:45.000000000 +0200 +++ new/talosctl-1.13.9/pkg/machinery/gendata/data/pkgs 2026-08-18 16:14:19.000000000 +0200 @@ -1 +1 @@ -v1.13.0-55-gf677246 \ No newline at end of file +v1.13.0-60-gf541ca4 \ No newline at end of file diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/talosctl-1.13.8/pkg/machinery/gendata/data/tag new/talosctl-1.13.9/pkg/machinery/gendata/data/tag --- old/talosctl-1.13.8/pkg/machinery/gendata/data/tag 2026-08-04 14:58:45.000000000 +0200 +++ new/talosctl-1.13.9/pkg/machinery/gendata/data/tag 2026-08-18 16:14:19.000000000 +0200 @@ -1 +1 @@ -v1.13.8 \ No newline at end of file +v1.13.9 \ No newline at end of file diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/talosctl-1.13.8/pkg/machinery/gendata/data/tools new/talosctl-1.13.9/pkg/machinery/gendata/data/tools --- old/talosctl-1.13.8/pkg/machinery/gendata/data/tools 2026-08-04 14:58:45.000000000 +0200 +++ new/talosctl-1.13.9/pkg/machinery/gendata/data/tools 2026-08-18 16:14:19.000000000 +0200 @@ -1 +1 @@ -v1.13.0-8-gc2844e6 \ No newline at end of file +v1.13.0-9-ga201d19 \ No newline at end of file diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/talosctl-1.13.8/pkg/machinery/go.mod new/talosctl-1.13.9/pkg/machinery/go.mod --- old/talosctl-1.13.8/pkg/machinery/go.mod 2026-08-04 14:58:45.000000000 +0200 +++ new/talosctl-1.13.9/pkg/machinery/go.mod 2026-08-18 16:14:19.000000000 +0200 @@ -1,6 +1,6 @@ module github.com/siderolabs/talos/pkg/machinery -go 1.26.5 +go 1.26.6 // forked ethtool introduces missing APIs replace github.com/mdlayher/ethtool => github.com/siderolabs/ethtool v0.4.0-sidero diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/talosctl-1.13.8/pkg/machinery/version/os-release new/talosctl-1.13.9/pkg/machinery/version/os-release --- old/talosctl-1.13.8/pkg/machinery/version/os-release 2026-08-04 14:58:45.000000000 +0200 +++ new/talosctl-1.13.9/pkg/machinery/version/os-release 2026-08-18 16:14:19.000000000 +0200 @@ -1,7 +1,7 @@ NAME="Talos" ID=talos -VERSION_ID=v1.13.8 -PRETTY_NAME="Talos (v1.13.8)" +VERSION_ID=v1.13.9 +PRETTY_NAME="Talos (v1.13.9)" HOME_URL="https://www.talos.dev/"; BUG_REPORT_URL="https://github.com/siderolabs/talos/issues"; VENDOR_NAME="Sidero Labs" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/talosctl-1.13.8/tools/go.mod new/talosctl-1.13.9/tools/go.mod --- old/talosctl-1.13.8/tools/go.mod 2026-08-04 14:58:45.000000000 +0200 +++ new/talosctl-1.13.9/tools/go.mod 2026-08-18 16:14:19.000000000 +0200 @@ -2,7 +2,7 @@ // upgrading all tools: go get tool -go 1.26.0 +go 1.26.6 tool ( github.com/aarzilli/whydeadcode @@ -551,19 +551,19 @@ go.yaml.in/yaml/v3 v3.0.4 // indirect go.yaml.in/yaml/v4 v4.0.0-rc.4 // indirect go4.org v0.0.0-20260112195520-a5071408f32f // indirect - golang.org/x/crypto v0.50.0 // indirect + golang.org/x/crypto v0.55.0 // indirect golang.org/x/exp v0.0.0-20260410095643-746e56fc9e2f // indirect golang.org/x/exp/typeparams v0.0.0-20260218203240-3dfff04db8fa // indirect - golang.org/x/mod v0.35.0 // indirect - golang.org/x/net v0.53.0 // indirect + golang.org/x/mod v0.40.0 // indirect + golang.org/x/net v0.58.0 // indirect golang.org/x/oauth2 v0.36.0 // indirect - golang.org/x/sync v0.20.0 // indirect - golang.org/x/sys v0.43.0 // indirect - golang.org/x/telemetry v0.0.0-20260409153401-be6f6cb8b1fa // indirect - golang.org/x/term v0.42.0 // indirect - golang.org/x/text v0.36.0 // indirect + golang.org/x/sync v0.22.0 // indirect + golang.org/x/sys v0.47.0 // indirect + golang.org/x/telemetry v0.0.0-20260811182544-a038080d80e5 // indirect + golang.org/x/term v0.45.0 // indirect + golang.org/x/text v0.41.0 // indirect golang.org/x/time v0.15.0 // indirect - golang.org/x/tools v0.44.0 // indirect + golang.org/x/tools v0.49.0 // indirect golang.org/x/vuln v1.2.0 // indirect golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da // indirect gonum.org/v1/gonum v0.17.0 // indirect diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/talosctl-1.13.8/tools/go.sum new/talosctl-1.13.9/tools/go.sum --- old/talosctl-1.13.8/tools/go.sum 2026-08-04 14:58:45.000000000 +0200 +++ new/talosctl-1.13.9/tools/go.sum 2026-08-18 16:14:19.000000000 +0200 @@ -1585,8 +1585,8 @@ golang.org/x/crypto v0.0.0-20210817164053-32db794688a5/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc= golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc= golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4= -golang.org/x/crypto v0.50.0 h1:zO47/JPrL6vsNkINmLoo/PH1gcxpls50DNogFvB5ZGI= -golang.org/x/crypto v0.50.0/go.mod h1:3muZ7vA7PBCE6xgPX7nkzzjiUq87kRItoJQM1Yo8S+Q= +golang.org/x/crypto v0.55.0 h1:+KWHjbgOaAQ66dh/YlkZKHlz9ZUlq61AFirAR9ntP8M= +golang.org/x/crypto v0.55.0/go.mod h1:uq0V9dE/fzQuJtbnL+2EhWOE63vo164FY8xqEnV9xis= golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8= @@ -1632,8 +1632,8 @@ golang.org/x/mod v0.6.0-dev.0.20220106191415-9b9b3d81d5e3/go.mod h1:3p9vT2HGsQu2K1YbXdKPJLVgG5VJdoTa1poYQBtP1AY= golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4= golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs= -golang.org/x/mod v0.35.0 h1:Ww1D637e6Pg+Zb2KrWfHQUnH2dQRLBQyAtpr/haaJeM= -golang.org/x/mod v0.35.0/go.mod h1:+GwiRhIInF8wPm+4AoT6L0FA1QWAad3OMdTRx4tFYlU= +golang.org/x/mod v0.40.0 h1:hUv+3cXcdRHz08UmSiOob7sadHig73uo5bkXxQ/tvUs= +golang.org/x/mod v0.40.0/go.mod h1:0/weTWkPWGBikyTWAX3dkjVztMmBA5hM0DH6BElSupE= golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= golang.org/x/net v0.0.0-20181023162649-9b4f9f5ad519/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= @@ -1679,8 +1679,8 @@ golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y= golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c= golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs= -golang.org/x/net v0.53.0 h1:d+qAbo5L0orcWAr0a9JweQpjXF19LMXJE8Ey7hwOdUA= -golang.org/x/net v0.53.0/go.mod h1:JvMuJH7rrdiCfbeHoo3fCQU24Lf5JJwT9W3sJFulfgs= +golang.org/x/net v0.58.0 h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To= +golang.org/x/net v0.58.0/go.mod h1:YwCddHnFlT7eLQqVprV19OnhLGtc5xOKgE0RyqgfWAU= golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U= golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw= golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw= @@ -1713,8 +1713,8 @@ golang.org/x/sync v0.0.0-20210220032951-036812b2e83c/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= -golang.org/x/sync v0.20.0 h1:e0PTpb7pjO8GAtTs2dQ6jYa5BWYlMuX047Dco/pItO4= -golang.org/x/sync v0.20.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0= +golang.org/x/sync v0.22.0 h1:SZjpbeLmrCk4xhRSZFNZW5gFUeCeFgjekvI/+gfScek= +golang.org/x/sync v0.22.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0= golang.org/x/sys v0.0.0-20180823144017-11551d06cbcc/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20180905080454-ebe1bf3edb33/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= @@ -1791,15 +1791,15 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= -golang.org/x/sys v0.43.0 h1:Rlag2XtaFTxp19wS8MXlJwTvoh8ArU6ezoyFsMyCTNI= -golang.org/x/sys v0.43.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= -golang.org/x/telemetry v0.0.0-20260409153401-be6f6cb8b1fa h1:efT73AJZfAAUV7SOip6pWGkwJDzIGiKBZGVzHYa+ve4= -golang.org/x/telemetry v0.0.0-20260409153401-be6f6cb8b1fa/go.mod h1:kHjTxDEnAu6/Nl9lDkzjWpR+bmKfxeiRuSDlsMb70gE= +golang.org/x/sys v0.47.0 h1:o7XGOvZQCADBQQ4Y7VNq2dRWQR7JmOUW8Kxx4ZsNgWs= +golang.org/x/sys v0.47.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= +golang.org/x/telemetry v0.0.0-20260811182544-a038080d80e5 h1:ZUSxONxc981v7AW7QUg+I9WwZzSTTJ019ENBYr5pV/Q= +golang.org/x/telemetry v0.0.0-20260811182544-a038080d80e5/go.mod h1:LVehoXe41cL5SCVQilsV7Gg6BNG+Js6P9PhSbYTIUkQ= golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k= -golang.org/x/term v0.42.0 h1:UiKe+zDFmJobeJ5ggPwOshJIVt6/Ft0rcfrXZDLWAWY= -golang.org/x/term v0.42.0/go.mod h1:Dq/D+snpsbazcBG5+F9Q1n2rXV8Ma+71xEjTRufARgY= +golang.org/x/term v0.45.0 h1:NwWyBmoJCbfTHpxrWoZ9C6/VxOf7ic219I8xZZFdrf0= +golang.org/x/term v0.45.0/go.mod h1:9aqxs0blBcrm/n0L9QW0aRVD+ktan8ssZromtqJC43w= golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= @@ -1811,8 +1811,8 @@ golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ= golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8= golang.org/x/text v0.11.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE= -golang.org/x/text v0.36.0 h1:JfKh3XmcRPqZPKevfXVpI1wXPTqbkE5f7JA92a55Yxg= -golang.org/x/text v0.36.0/go.mod h1:NIdBknypM8iqVmPiuco0Dh6P5Jcdk8lJL0CUebqK164= +golang.org/x/text v0.41.0 h1:vz/seA0lnX87Othu2f/0L24RcgrXD9/YFTSuGjj3rH8= +golang.org/x/text v0.41.0/go.mod h1:jvf1O8ajNzZqhSrQBPbutR/EB83Cc0CFrezNQIwbb5M= golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= golang.org/x/time v0.0.0-20191024005414-555d28b269f0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= @@ -1880,8 +1880,8 @@ golang.org/x/tools v0.1.10/go.mod h1:Uh6Zz+xoGYZom868N8YTex3t7RhtHDBrE8Gzo9bV56E= golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc= golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU= -golang.org/x/tools v0.44.0 h1:UP4ajHPIcuMjT1GqzDWRlalUEoY+uzoZKnhOjbIPD2c= -golang.org/x/tools v0.44.0/go.mod h1:KA0AfVErSdxRZIsOVipbv3rQhVXTnlU6UhKxHd1seDI= +golang.org/x/tools v0.49.0 h1:3NI7VXzL9+1WZD52Dx2ttoPwD5DWrFGpl9mFZDlmisI= +golang.org/x/tools v0.49.0/go.mod h1:SJNXV9DBKT0UbdttsQjbfJlAE/q+y36++zo3uL3N0Oo= golang.org/x/tools/go/expect v0.1.1-deprecated h1:jpBZDwmgPhXsKZC6WhL20P4b/wmnpsEAGHaNy0n/rJM= golang.org/x/tools/go/expect v0.1.1-deprecated/go.mod h1:eihoPOH+FgIqa3FpoTwguz/bVUSGBlGQU67vpBeOrBY= golang.org/x/tools/go/packages/packagestest v0.1.1-deprecated h1:1h2MnaIAIXISqTFKdENegdpAgUXz6NrPEsbIeWaBRvM= diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/talosctl-1.13.8/tools/redactgen/go.mod new/talosctl-1.13.9/tools/redactgen/go.mod --- old/talosctl-1.13.8/tools/redactgen/go.mod 2026-08-04 14:58:45.000000000 +0200 +++ new/talosctl-1.13.9/tools/redactgen/go.mod 2026-08-18 16:14:19.000000000 +0200 @@ -1,10 +1,10 @@ module github.com/siderolabs/talos/tools/redactgen -go 1.26.5 +go 1.26.6 -require golang.org/x/tools v0.48.0 +require golang.org/x/tools v0.49.0 require ( - golang.org/x/mod v0.38.0 // indirect + golang.org/x/mod v0.40.0 // indirect golang.org/x/sync v0.22.0 // indirect ) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/talosctl-1.13.8/tools/redactgen/go.sum new/talosctl-1.13.9/tools/redactgen/go.sum --- old/talosctl-1.13.8/tools/redactgen/go.sum 2026-08-04 14:58:45.000000000 +0200 +++ new/talosctl-1.13.9/tools/redactgen/go.sum 2026-08-18 16:14:19.000000000 +0200 @@ -1,8 +1,8 @@ github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI= github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY= -golang.org/x/mod v0.38.0 h1:MECBjubtXD7yj4HrhIUcywNaGeNVUdfVnxmPajOk4yk= -golang.org/x/mod v0.38.0/go.mod h1:V6Xz0pq8TQ3dGqVQ1FVHuelZpAL0uNhSkk9ogYP3c40= +golang.org/x/mod v0.40.0 h1:hUv+3cXcdRHz08UmSiOob7sadHig73uo5bkXxQ/tvUs= +golang.org/x/mod v0.40.0/go.mod h1:0/weTWkPWGBikyTWAX3dkjVztMmBA5hM0DH6BElSupE= golang.org/x/sync v0.22.0 h1:SZjpbeLmrCk4xhRSZFNZW5gFUeCeFgjekvI/+gfScek= golang.org/x/sync v0.22.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0= -golang.org/x/tools v0.48.0 h1:3+hClM1aLL5mjMKm5ovokw9epgRXPuu2tILgismM6RE= -golang.org/x/tools v0.48.0/go.mod h1:08xX0orndb/F7jJxGDicx061tyd5pcMto75YMAXr6lk= +golang.org/x/tools v0.49.0 h1:3NI7VXzL9+1WZD52Dx2ttoPwD5DWrFGpl9mFZDlmisI= +golang.org/x/tools v0.49.0/go.mod h1:SJNXV9DBKT0UbdttsQjbfJlAE/q+y36++zo3uL3N0Oo= diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/talosctl-1.13.8/tools/structprotogen/go.mod new/talosctl-1.13.9/tools/structprotogen/go.mod --- old/talosctl-1.13.8/tools/structprotogen/go.mod 2026-08-04 14:58:45.000000000 +0200 +++ new/talosctl-1.13.9/tools/structprotogen/go.mod 2026-08-18 16:14:19.000000000 +0200 @@ -5,13 +5,13 @@ require ( github.com/fatih/structtag v1.2.0 github.com/spf13/cobra v1.10.2 - golang.org/x/tools v0.43.0 + golang.org/x/tools v0.49.0 gopkg.in/typ.v4 v4.4.0 ) require ( github.com/inconshreveable/mousetrap v1.1.0 // indirect github.com/spf13/pflag v1.0.9 // indirect - golang.org/x/mod v0.34.0 // indirect - golang.org/x/sync v0.20.0 // indirect + golang.org/x/mod v0.40.0 // indirect + golang.org/x/sync v0.22.0 // indirect ) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/talosctl-1.13.8/tools/structprotogen/go.sum new/talosctl-1.13.9/tools/structprotogen/go.sum --- old/talosctl-1.13.8/tools/structprotogen/go.sum 2026-08-04 14:58:45.000000000 +0200 +++ new/talosctl-1.13.9/tools/structprotogen/go.sum 2026-08-18 16:14:19.000000000 +0200 @@ -11,12 +11,12 @@ github.com/spf13/pflag v1.0.9 h1:9exaQaMOCwffKiiiYk6/BndUBv+iRViNW+4lEMi0PvY= github.com/spf13/pflag v1.0.9/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg= go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg= -golang.org/x/mod v0.34.0 h1:xIHgNUUnW6sYkcM5Jleh05DvLOtwc6RitGHbDk4akRI= -golang.org/x/mod v0.34.0/go.mod h1:ykgH52iCZe79kzLLMhyCUzhMci+nQj+0XkbXpNYtVjY= -golang.org/x/sync v0.20.0 h1:e0PTpb7pjO8GAtTs2dQ6jYa5BWYlMuX047Dco/pItO4= -golang.org/x/sync v0.20.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0= -golang.org/x/tools v0.43.0 h1:12BdW9CeB3Z+J/I/wj34VMl8X+fEXBxVR90JeMX5E7s= -golang.org/x/tools v0.43.0/go.mod h1:uHkMso649BX2cZK6+RpuIPXS3ho2hZo4FVwfoy1vIk0= +golang.org/x/mod v0.40.0 h1:hUv+3cXcdRHz08UmSiOob7sadHig73uo5bkXxQ/tvUs= +golang.org/x/mod v0.40.0/go.mod h1:0/weTWkPWGBikyTWAX3dkjVztMmBA5hM0DH6BElSupE= +golang.org/x/sync v0.22.0 h1:SZjpbeLmrCk4xhRSZFNZW5gFUeCeFgjekvI/+gfScek= +golang.org/x/sync v0.22.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0= +golang.org/x/tools v0.49.0 h1:3NI7VXzL9+1WZD52Dx2ttoPwD5DWrFGpl9mFZDlmisI= +golang.org/x/tools v0.49.0/go.mod h1:SJNXV9DBKT0UbdttsQjbfJlAE/q+y36++zo3uL3N0Oo= gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= gopkg.in/typ.v4 v4.4.0 h1:O9vTueEmZd0iA9DF+g2wXeNCeloN2TOpxu6FXKl3AqM= gopkg.in/typ.v4 v4.4.0/go.mod h1:wolXe8DlewxRCjA7SOiT3zjrZ0eQJZcr8cmV6bQWJUM= diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/talosctl-1.13.8/website/content/v1.13/reference/cli.md new/talosctl-1.13.9/website/content/v1.13/reference/cli.md --- old/talosctl-1.13.8/website/content/v1.13/reference/cli.md 2026-08-04 14:58:45.000000000 +0200 +++ new/talosctl-1.13.9/website/content/v1.13/reference/cli.md 2026-08-18 16:14:19.000000000 +0200 @@ -134,7 +134,7 @@ --bad-rtc launch VM with bad RTC state --cidr string CIDR of the cluster network (IPv4, ULA network for IPv6 is derived in automated way) (default "10.5.0.0/24") --cni-bin-path strings search path for CNI binaries (default [/home/user/.talos/cni/bin]) - --cni-bundle-url string URL to download CNI bundle from (default "https://github.com/siderolabs/talos/releases/download/v1.13.8/talosctl-cni-bundle-${ARCH}.tar.gz";) + --cni-bundle-url string URL to download CNI bundle from (default "https://github.com/siderolabs/talos/releases/download/v1.13.9/talosctl-cni-bundle-${ARCH}.tar.gz";) --cni-cache-dir string CNI cache directory path (default "/home/user/.talos/cni/cache") --cni-conf-dir string CNI config directory path (default "/home/user/.talos/cni/conf.d") --config-injection-method string a method to inject machine config: default is HTTP server, 'metal-iso' to mount an ISO @@ -177,7 +177,7 @@ --ipxe-boot-script string iPXE boot script (URL) to use --iso-path string the ISO path to use for the initial boot --kubeprism-port int KubePrism port (set to 0 to disable) (default 7445) - --kubernetes-version string desired kubernetes version to run (default "1.36.2") + --kubernetes-version string desired kubernetes version to run (default "1.36.3") --memory string(mb,gb) the limit on memory usage for each control plane/VM (default 2.0GiB) --memory-workers string(mb,gb) the limit on memory usage for each worker/VM (default 2.0GiB) --mtu int MTU of the cluster network (default 1500) @@ -255,7 +255,7 @@ -h, --help help for docker --host-ip string Host IP to forward exposed ports to (default "0.0.0.0") --image string the talos image to run (default "ghcr.io/siderolabs/talos:latest") - --kubernetes-version string desired kubernetes version to run (default "1.36.2") + --kubernetes-version string desired kubernetes version to run (default "1.36.3") --memory-controlplanes string(mb,gb) the limit on memory usage for each control plane/VM (default 2.0GiB) --memory-workers string(mb,gb) the limit on memory usage for each worker/VM (default 2.0GiB) --mount mount attach a mount to the container (docker --mount syntax) @@ -311,7 +311,7 @@ -h, --help help for qemu --image-factory-auth string username:password for authenticating with the Image Factory --image-factory-url string Image Factory url (default "https://factory.talos.dev/";) - --kubernetes-version string desired kubernetes version to run (default "1.36.2") + --kubernetes-version string desired kubernetes version to run (default "1.36.3") --memory-controlplanes string(mb,gb) the limit on memory usage for each control plane/VM (default 2.0GiB) --memory-workers string(mb,gb) the limit on memory usage for each worker/VM (default 2.0GiB) --omni-api-endpoint string the Omni API endpoint (must include a scheme, a hostname and a join token, e.g. 'https://siderolink.omni.example?jointoken=foobar') @@ -349,7 +349,7 @@ --bad-rtc launch VM with bad RTC state --cidr string CIDR of the cluster network (IPv4, ULA network for IPv6 is derived in automated way) (default "10.5.0.0/24") --cni-bin-path strings search path for CNI binaries (default [/home/user/.talos/cni/bin]) - --cni-bundle-url string URL to download CNI bundle from (default "https://github.com/siderolabs/talos/releases/download/v1.13.8/talosctl-cni-bundle-${ARCH}.tar.gz";) + --cni-bundle-url string URL to download CNI bundle from (default "https://github.com/siderolabs/talos/releases/download/v1.13.9/talosctl-cni-bundle-${ARCH}.tar.gz";) --cni-cache-dir string CNI cache directory path (default "/home/user/.talos/cni/cache") --cni-conf-dir string CNI config directory path (default "/home/user/.talos/cni/conf.d") --config-injection-method string a method to inject machine config: default is HTTP server, 'metal-iso' to mount an ISO @@ -392,7 +392,7 @@ --ipxe-boot-script string iPXE boot script (URL) to use --iso-path string the ISO path to use for the initial boot --kubeprism-port int KubePrism port (set to 0 to disable) (default 7445) - --kubernetes-version string desired kubernetes version to run (default "1.36.2") + --kubernetes-version string desired kubernetes version to run (default "1.36.3") --memory string(mb,gb) the limit on memory usage for each control plane/VM (default 2.0GiB) --memory-workers string(mb,gb) the limit on memory usage for each worker/VM (default 2.0GiB) --mtu int MTU of the cluster network (default 1500) @@ -470,7 +470,7 @@ -h, --help help for docker --host-ip string Host IP to forward exposed ports to (default "0.0.0.0") --image string the talos image to run (default "ghcr.io/siderolabs/talos:latest") - --kubernetes-version string desired kubernetes version to run (default "1.36.2") + --kubernetes-version string desired kubernetes version to run (default "1.36.3") --memory-controlplanes string(mb,gb) the limit on memory usage for each control plane/VM (default 2.0GiB) --memory-workers string(mb,gb) the limit on memory usage for each worker/VM (default 2.0GiB) --mount mount attach a mount to the container (docker --mount syntax) @@ -526,7 +526,7 @@ -h, --help help for qemu --image-factory-auth string username:password for authenticating with the Image Factory --image-factory-url string Image Factory url (default "https://factory.talos.dev/";) - --kubernetes-version string desired kubernetes version to run (default "1.36.2") + --kubernetes-version string desired kubernetes version to run (default "1.36.3") --memory-controlplanes string(mb,gb) the limit on memory usage for each control plane/VM (default 2.0GiB) --memory-workers string(mb,gb) the limit on memory usage for each worker/VM (default 2.0GiB) --omni-api-endpoint string the Omni API endpoint (must include a scheme, a hostname and a join token, e.g. 'https://siderolink.omni.example?jointoken=foobar') @@ -1879,7 +1879,7 @@ -h, --help help for config --install-disk string the disk to install to (default "/dev/sda") --install-image string the image used to perform an installation (default "ghcr.io/siderolabs/installer:latest") - --kubernetes-version string desired kubernetes version to run (default "1.36.2") + --kubernetes-version string desired kubernetes version to run (default "1.36.3") -o, --output string destination to output generated files. when multiple output types are specified, it must be a directory. for a single output type, it must either be a file path, or "-" for stdout -t, --output-types strings types of outputs to be generated. valid types are: ["controlplane" "worker" "talosconfig"] (default [controlplane,worker,talosconfig]) --registry-mirror strings list of registry mirrors to use in format: <registry host>=<mirror URL> @@ -2282,7 +2282,7 @@ ### Examples ``` -talosctl images cache-create --images=ghcr.io/siderolabs/kubelet:v1.36.2 --image-cache-path=/tmp/talos-image-cache +talosctl images cache-create --images=ghcr.io/siderolabs/kubelet:v1.36.3 --image-cache-path=/tmp/talos-image-cache Alternatively, stdin can be piped to the command: talosctl images default | talosctl images cache-create --image-cache-path=/tmp/talos-image-cache --images=- @@ -2373,7 +2373,7 @@ --etcd-version semver ETCD semantic version (default v3.6.12) --flannel-version semver Flannel CNI semantic version (default 0.28.8) -h, --help help for k8s-bundle - --k8s-version semver Kubernetes semantic version (default v1.36.2) + --k8s-version semver Kubernetes semantic version (default v1.36.3) --kube-network-policies-version semver kube-network-policies semantic version (default v1.1.0) ``` @@ -3454,7 +3454,7 @@ --drain-timeout duration timeout for draining the Kubernetes node (default 5m0s) -e, --endpoints strings override default endpoints in Talos configuration -h, --help help for upgrade - -i, --image string the container image to use for performing the install (default "ghcr.io/siderolabs/installer:v1.13.8") + -i, --image string the container image to use for performing the install (default "ghcr.io/siderolabs/installer:v1.13.9") --legacy force use of legacy upgrade method --namespace string namespace to use: "system" (etcd and kubelet images), "cri" for all Kubernetes workloads, "inmem" for in-memory containerd instance (default "system") --no-reboot do not reboot the node after upgrade (skip reboot and drain) @@ -3506,7 +3506,7 @@ --scheduler-image string kube-scheduler image to use (default "registry.k8s.io/kube-scheduler") --siderov1-keys-dir string The path to the SideroV1 auth PGP keys directory. Defaults to 'SIDEROV1_KEYS_DIR' env variable if set, otherwise '$HOME/.talos/keys'. Only valid for Contexts that use SideroV1 auth. --talosconfig string The path to the Talos configuration file. Defaults to 'TALOSCONFIG' env variable if set, otherwise '$HOME/.talos/config' and '/var/run/secrets/talos.dev/config' in order. - --to string the Kubernetes control plane version to upgrade to (default "1.36.2") + --to string the Kubernetes control plane version to upgrade to (default "1.36.3") --upgrade-kubelet upgrade kubelet service (default true) --with-docs patch all machine configs adding the documentation for each field (default true) --with-examples patch all machine configs with the commented examples (default true) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/talosctl-1.13.8/website/content/v1.13/reference/configuration/v1alpha1/config.md new/talosctl-1.13.9/website/content/v1.13/reference/configuration/v1alpha1/config.md --- old/talosctl-1.13.8/website/content/v1.13/reference/configuration/v1alpha1/config.md 2026-08-04 14:58:45.000000000 +0200 +++ new/talosctl-1.13.9/website/content/v1.13/reference/configuration/v1alpha1/config.md 2026-08-18 16:14:19.000000000 +0200 @@ -83,7 +83,7 @@ {{< /highlight >}}</details> | | |`kubelet` |<a href="#Config.machine.kubelet">KubeletConfig</a> |Used to provide additional options to the kubelet. <details><summary>Show example(s)</summary>Kubelet definition example.:{{< highlight yaml >}} kubelet: - image: ghcr.io/siderolabs/kubelet:v1.36.2 # The `image` field is an optional reference to an alternative kubelet image. + image: ghcr.io/siderolabs/kubelet:v1.36.3 # The `image` field is an optional reference to an alternative kubelet image. # The `extraArgs` field is used to provide additional flags to the kubelet. extraArgs: feature-gates: ServerSideApply=true @@ -314,7 +314,7 @@ {{< highlight yaml >}} machine: kubelet: - image: ghcr.io/siderolabs/kubelet:v1.36.2 # The `image` field is an optional reference to an alternative kubelet image. + image: ghcr.io/siderolabs/kubelet:v1.36.3 # The `image` field is an optional reference to an alternative kubelet image. # The `extraArgs` field is used to provide additional flags to the kubelet. extraArgs: feature-gates: ServerSideApply=true @@ -367,7 +367,7 @@ | Field | Type | Description | Value(s) | |-------|------|-------------|----------| |`image` |string |The `image` field is an optional reference to an alternative kubelet image. <details><summary>Show example(s)</summary>{{< highlight yaml >}} -image: ghcr.io/siderolabs/kubelet:v1.36.2 +image: ghcr.io/siderolabs/kubelet:v1.36.3 {{< /highlight >}}</details> | | |`clusterDNS` |[]string |The `ClusterDNS` field is an optional reference to an alternative kubelet clusterDNS ip list. <details><summary>Show example(s)</summary>{{< highlight yaml >}} clusterDNS: @@ -1021,7 +1021,7 @@ {{< /highlight >}}</details> | | |`apiServer` |<a href="#Config.cluster.apiServer">APIServerConfig</a> |API server specific configuration options. <details><summary>Show example(s)</summary>{{< highlight yaml >}} apiServer: - image: registry.k8s.io/kube-apiserver:v1.36.2 # The container image used in the API server manifest. + image: registry.k8s.io/kube-apiserver:v1.36.3 # The container image used in the API server manifest. # Extra arguments to supply to the API server. extraArgs: feature-gates: ServerSideApply=true @@ -1086,14 +1086,14 @@ {{< /highlight >}}</details> | | |`controllerManager` |<a href="#Config.cluster.controllerManager">ControllerManagerConfig</a> |Controller manager server specific configuration options. <details><summary>Show example(s)</summary>{{< highlight yaml >}} controllerManager: - image: registry.k8s.io/kube-controller-manager:v1.36.2 # The container image used in the controller manager manifest. + image: registry.k8s.io/kube-controller-manager:v1.36.3 # The container image used in the controller manager manifest. # Extra arguments to supply to the controller manager. extraArgs: feature-gates: ServerSideApply=true {{< /highlight >}}</details> | | |`proxy` |<a href="#Config.cluster.proxy">ProxyConfig</a> |Kube-proxy server-specific configuration options <details><summary>Show example(s)</summary>{{< highlight yaml >}} proxy: - image: registry.k8s.io/kube-proxy:v1.36.2 # The container image used in the kube-proxy manifest. + image: registry.k8s.io/kube-proxy:v1.36.3 # The container image used in the kube-proxy manifest. mode: ipvs # proxy mode of kube-proxy. # Extra arguments to supply to kube-proxy. extraArgs: @@ -1104,7 +1104,7 @@ {{< /highlight >}}</details> | | |`scheduler` |<a href="#Config.cluster.scheduler">SchedulerConfig</a> |Scheduler server specific configuration options. <details><summary>Show example(s)</summary>{{< highlight yaml >}} scheduler: - image: registry.k8s.io/kube-scheduler:v1.36.2 # The container image used in the scheduler manifest. + image: registry.k8s.io/kube-scheduler:v1.36.3 # The container image used in the scheduler manifest. # Extra arguments to supply to the scheduler. extraArgs: feature-gates: AllBeta=true @@ -1321,7 +1321,7 @@ {{< highlight yaml >}} cluster: apiServer: - image: registry.k8s.io/kube-apiserver:v1.36.2 # The container image used in the API server manifest. + image: registry.k8s.io/kube-apiserver:v1.36.3 # The container image used in the API server manifest. # Extra arguments to supply to the API server. extraArgs: feature-gates: ServerSideApply=true @@ -1389,7 +1389,7 @@ | Field | Type | Description | Value(s) | |-------|------|-------------|----------| |`image` |string |The container image used in the API server manifest. <details><summary>Show example(s)</summary>{{< highlight yaml >}} -image: registry.k8s.io/kube-apiserver:v1.36.2 +image: registry.k8s.io/kube-apiserver:v1.36.3 {{< /highlight >}}</details> | | |`extraArgs` |Args |Extra arguments to supply to the API server. | | |`extraVolumes` |<a href="#Config.cluster.apiServer.extraVolumes.">[]VolumeMountConfig</a> |Extra volumes to mount to the API server static pod. | | @@ -1600,7 +1600,7 @@ {{< highlight yaml >}} cluster: controllerManager: - image: registry.k8s.io/kube-controller-manager:v1.36.2 # The container image used in the controller manager manifest. + image: registry.k8s.io/kube-controller-manager:v1.36.3 # The container image used in the controller manager manifest. # Extra arguments to supply to the controller manager. extraArgs: feature-gates: ServerSideApply=true @@ -1610,7 +1610,7 @@ | Field | Type | Description | Value(s) | |-------|------|-------------|----------| |`image` |string |The container image used in the controller manager manifest. <details><summary>Show example(s)</summary>{{< highlight yaml >}} -image: registry.k8s.io/kube-controller-manager:v1.36.2 +image: registry.k8s.io/kube-controller-manager:v1.36.3 {{< /highlight >}}</details> | | |`extraArgs` |Args |Extra arguments to supply to the controller manager. | | |`extraVolumes` |<a href="#Config.cluster.controllerManager.extraVolumes.">[]VolumeMountConfig</a> |Extra volumes to mount to the controller manager static pod. | | @@ -1680,7 +1680,7 @@ {{< highlight yaml >}} cluster: proxy: - image: registry.k8s.io/kube-proxy:v1.36.2 # The container image used in the kube-proxy manifest. + image: registry.k8s.io/kube-proxy:v1.36.3 # The container image used in the kube-proxy manifest. mode: ipvs # proxy mode of kube-proxy. # Extra arguments to supply to kube-proxy. extraArgs: @@ -1697,7 +1697,7 @@ disabled: false {{< /highlight >}}</details> | | |`image` |string |The container image used in the kube-proxy manifest. <details><summary>Show example(s)</summary>{{< highlight yaml >}} -image: registry.k8s.io/kube-proxy:v1.36.2 +image: registry.k8s.io/kube-proxy:v1.36.3 {{< /highlight >}}</details> | | |`mode` |string |proxy mode of kube-proxy.<br>The default is 'iptables'. | | |`extraArgs` |Args |Extra arguments to supply to kube-proxy. | | @@ -1716,7 +1716,7 @@ {{< highlight yaml >}} cluster: scheduler: - image: registry.k8s.io/kube-scheduler:v1.36.2 # The container image used in the scheduler manifest. + image: registry.k8s.io/kube-scheduler:v1.36.3 # The container image used in the scheduler manifest. # Extra arguments to supply to the scheduler. extraArgs: feature-gates: AllBeta=true @@ -1726,7 +1726,7 @@ | Field | Type | Description | Value(s) | |-------|------|-------------|----------| |`image` |string |The container image used in the scheduler manifest. <details><summary>Show example(s)</summary>{{< highlight yaml >}} -image: registry.k8s.io/kube-scheduler:v1.36.2 +image: registry.k8s.io/kube-scheduler:v1.36.3 {{< /highlight >}}</details> | | |`extraArgs` |Args |Extra arguments to supply to the scheduler. | | |`extraVolumes` |<a href="#Config.cluster.scheduler.extraVolumes.">[]VolumeMountConfig</a> |Extra volumes to mount to the scheduler static pod. | | ++++++ talosctl.obsinfo ++++++ --- /var/tmp/diff_new_pack.1KUjU1/_old 2026-08-28 19:52:50.065410754 +0200 +++ /var/tmp/diff_new_pack.1KUjU1/_new 2026-08-28 19:52:50.079411244 +0200 @@ -1,5 +1,5 @@ name: talosctl -version: 1.13.8 -mtime: 1785848325 -commit: 3de4932272a820af6de3852691a35645565c33b3 +version: 1.13.9 +mtime: 1787062459 +commit: 3ebd10a7c1bd0f81742bdcd0c3fe56d727db7401 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/talosctl/vendor.tar.gz /work/SRC/openSUSE:Factory/.talosctl.new.1265/vendor.tar.gz differ: char 133, line 1
