chore(deps): update dependency talosctl to v1.11.2 #495
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Note
Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to
mend[bot]
.This notice will be removed on 2025-10-07.
This PR contains the following updates:
1.9.2
->1.11.2
Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
siderolabs/talos (talosctl)
v1.11.2
Compare Source
Talos 1.11.2 (2025-09-25)
Welcome to the v1.11.2 release of Talos!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Component Updates
runc: 1.3.1
Kubernetes: 1.34.1
Linux: 6.12.48
linux-firmware:
2025091
Talos is built with Go 1.24.6.
Contributors
Changes
17 commits
511b4d2
release(v1.11.2): prepare releaseac45257
fix: default gateway as string7cec0e0
fix: uefi boot entry handling logic637154e
docs: drop invalid v1.12 docsa6d2f65
chore(ci): rekres to use new runner groupscd82ee2
refactor: efivarfs mock and tests996d97d
chore: update pkgsbbf860c
docs: update component updates24c1bce
fix: bump trustd memory limit56d6d6f
chore: pass in github token to imager682df89
fix: use correct order to determine SideroV1 keys directory patha838881
fix: trim zero bytes in the DHCP host & domain response9c962ae
fix: re-create cgroups when restarting runnersde243f9
test: fix flakiness in RawVolumes testec8fde5
feat: update Kubernetes to 1.34.1797897d
test: improve test stability9827366
feat: update runc to 1.3.1Changes from siderolabs/pkgs
3 commits
f95c679
chore: update kernel to 6.12.480bd4cb9
chore: update linuxfirmware and rekres0c8a195
feat: update runc to 1.3.1Dependency Changes
Previous release can be found at v1.11.1
Images
v1.11.1
Compare Source
Welcome to the v1.6.0-alpha.2 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Kubelet Credential Provider Configuration
Talos now supports specifying the kubelet credential provider configuration in the Talos configuration file.
It can be set under
machine.kubelet.credentialProviderConfig
and kubelet will be automatically configured to with the correct flags.The credential binaries are expected to be present under
/usr/local/lib/kubelet/credentialproviders
.Talos System Extensions can be used to install the credential binaries.
Network Device Selectors
Previously, network device selectors only matched the first link, now the configuration is applied to all matching links.
Linux Firmware
Starting with Talos 1.6, there is no Linux firmware included in the initramfs.
Customers who need Linux firmware can pull them as extension during install time using the image factory service.
If the initial boot requires firmware, a custom iso can be built with the firmware included using the image factory service.
This also ensures that the linux-firmware is not tied to a specific Talos version.
Kube-Scheduler Configuration
Talos now supports specifying the kube-scheduler configuration in the Talos configuration file.
It can be set under
cluster.scheduler.config
and kube-scheduler will be automatically configured to with the correct flags.KubePrism
KubePrism is enabled by default on port 7445.
Sysctl
Talos now handles sysctl/sysfs key names in line with sysctl.conf(5):
Example (both sysctls are equivalent):
talosctl CLI
The command
images
deprecated in Talos 1.5 was removed, please usetalosctl images default
instead.Component Updates
Linux: 6.1.63
containerd: 1.7.9
CoreDNS: 1.11.1
Kubernetes: 1.29.0-alpha.3
Flannel: 0.22.3
etcd: 3.5.10
runc: 1.1.10
Talos is built with Go 1.21.4.
Contributors
Changes
177 commits
514e514ba
feat: update Linux 6.1.63, containerd 1.7.9aca8b5e17
fix: ignore kernel command line in container mode020a0eb63
docs: fix table formatting for bootstraprequest0eb245e04
docs: fix talosctl pcap example indentationde6caf534
docs: fix table formatting for machineservice api27d208c26
feat: implement OAuth2 device flow for machine config5c8fa2a80
chore: start containerd early in boot95a252cfc
docs: fix link in what is new page0d3c3ed71
feat: support kube scheduler config06941b7e5
fix: allow rootfs propagation configuration for extension services57dc796f3
docs: update lastRelease to v1.5.5 in _index.md21d944a64
docs: add timezone information4f1ad16c7
feat: support kubelet credentialprovider config71a3bf0e3
fix: allow extra kernel args for secureboot installerf38eaaab8
feat: rework secureboot and PCR signing key6eade3d5e
chore: add ability to rewrite uuids and set unique tokens for Talose9c7ac17a
fix: set max msg recv size when proxyinge22ab440d
feat: update Linux 6.1.61, containerd 1.7.8, runc 1.1.108245361f9
feat: show first 32 bytes of response body on download error75d3987c0
chore: drop sha1 from genereated pcr json6f32d2990
feat: add.der
outputtalosctl gen secureboot pcr
87c40da6c
fix: proper logging in machined on startupa54da5f64
fix: image build for nanopi_4s6f3cd0593
refactor: update packet capture to use 'afpacket' interface813442dd7
fix: don't validate machine.install if installeddff60069c
feat: update Kubernetes to 1.29.0-alpha.3c97db5dfe
chore: bump Go dependencies807a9950a
fix: use custom Talos/kernel version when generating UKIeb94468a6
docs: add documentation for Image Factory2e78513e1
refactor: drop the dependency link platform -> network ctrl6dc776b8a
fix: when writing to META in the installer/imager, use fixed name3703041e9
chore: remove uneeded codecbe6e7622
fix: generate images for SBCs using imager5dff164f1
fix: fix error output of cli action trackeref5056122
feat: update etcd to 3.5.1045ae80873
chore: bump go-api-signature dependency to v0.3.1ffa5e05cb
fix: make Talos work on Rockpi 4c boards again8eba4c599
feat: generate secrets bundle from the machine configc7de745f6
chore: drop deprecated codecc0c3ab69
docs: update rpi_generic.mda009f5c60
fix: accept sysctl paths with dots4919f6ee2
feat: add GOMEMLIMIT to shipped manifests with memory limits73ee576ea
chore: update sonobuouy library, drop the forkc23bc2f4a
chore: support OCI layout as a source for profile input154bbd70f
docs: fix talos version in guide for docker11d1f6163
release(v1.6.0-alpha.1): prepare release9dfae8467
chore: update dependencies38ce3c827
feat: nocloud prefer mac address401e89411
feat: customize image size865f08f86
docs: kubeadm migration guide improvementsc3e418200
refactor: use COSI runtime with new controller runtime DBc1ee24465
feat: update Kubernetes to v1.29.0-alpha.20ff7350ab
fix: oracle integration fixes675bada45
test: add config generation stability testsf9639fb53
test: fix 'talosctl gen' tests6142d87a0
feat: hostname configuration improvements on the NoCloud platform7bb205ebe
fix: don't use runtime-specs Mount struct in machine configd1b27926c
feat: update Go to 1.21.3b87092ab6
fix: handle secure boot state policy pcr digest error498aeb8c3
docs: fix incorrect image suffixc14a5d4f7
feat: support service account auth in cli336aee0fd
fix: use tpm2 hash algorithm constants and allow non-SHA-256 PCRs69d8054c9
chore: drop UpdateEndpointSuiteef7be16c8
fix: clear the encryption config in META when STATE is reset5fc60d2ca
feat: add Solarflare SFC9000 support9b5cfdd0b
chore: add tests for iscsib897764f8
docs: update proxmox.md159f45bde
docs: fix typos in CLI calls to endpoints0bd1bdd74
chore: allow insecure access to installer base image (imager)10ed13067
fix: the node IP for kubelet shouldn't change if nothing matchese7575ecaa
feat: support n-5 latest Kubernetes versionse71508ec1
chore: update dependencies6d7fa4668
docs: add metal network configuration guide2b548ad0d
feat: update containerd to 1.7.x62dcfe81e
fix: update kubernetes library to support 1.29 upgrades52caf0763
feat: update Kubernetes to 1.29.0-alpha.1390137447
feat: enable KubePrism by default1beb5e86e
docs: add KubePrism videoa52d3cda3
chore: update gen and COSI runtime29b201d61
feat: enable common h/w sensors9c2ba7c6f
chore: add tests for chelsio drivers5ca4d58dc
fix: generate of modules.dep when on the machine5efcccb6b
chore: bump kernel to 6.1.5429c767a02
docs: add control plane nodes as users of apid also for control plane nodes4874cfb95
chore: fix typo96f2a62ea
test: update upgrade tests versionsf3a370acb
feat: update Flannel to 0.22.3efdee6965
feat: update Kubernetes to 1.28.2e3b494058
fix: build CPU ucode correctly for early loaderc5bd0ac5c
refactor: reimplement the depmod extension rebuilder0b883f52a
docs: add notes about stable addressing3ef670a9e
chore: pull in dm modules8f4a36b0d
docs: update aws to add command to allow KubeSpan wireguard porta7edd0523
fix: set default route priority for hcloud platform87c1b3ddd
fix: calculate UKI ISO size dynamically9698e4547
fix: handle correctly change of listen address for maintenance servicea096f05a5
chore: update gRPC library and enable shared write buffers9e78fecca
chore: improve image signing processf00567e20
chore: add PKG_KERNEL arg to customize used kernel2960f93ba
feat: add readonly information to the disks API response735bf9ed0
feat: bring in Google vNIC driver3f5232075
feat: upgrade-k8s without commentse44875106
docs: update deploying-cilium.md7046cae43
chore: update gopacket to reduce init memory allocsda73b563d
chore: update Go to 1.21.15e11f08a6
fix: trim file path in the container image3d2dad4e6
chore: show securtiystate on dashboardb48510874
chore: e2e-aws cleanup1eebbce35
chore: add output flag for talosctl config info3fbed806c
chore: add tests for util-linux extensions7c514a1a6
docs: update header links6058c3602
fix: shorten VLAN link names to fit into the limit of 15 characters9c2f765c8
fix: allow network device selector to match multiple linksa04b98637
fix: update kubernetes library for 1.28 upgrade pre-checksf7473e477
feat: update default Kubernetes to 1.28.1d693604a1
chore: fix default image list in the release notesd91b5b3a3
feat: set environment variables early in the bootc918c0855
fix: set correct (1 year) talosconfig expiration79bbdf454
fix: set proper timeouts for KubePrism loadbalancerb8fb55d5c
fix: use a mount prefix when installing a bootloader44f59a804
feat: improve imager APIs2d3ac925e
refactor: update NTP spike detectoraf0cc70e3
test: update e2e-aws to use worker groupsd03dc7a8a
chore: validate new system extensionsbbeb489aa
chore: drop firmware from initramfs3c9f7a7de
chore: re-enable nolintlint and typecheck lintersc51e2c9b4
feat: update CoreDNS to 1.11.18670450d2
release(v1.6.0-alpha.0): prepare release6778ded29
feat: add e2e-aws for nvidia extensions74c07ed71
chore: update Go to 1.21a28d72e9c
fix: ova contents to be nameddisk.*
c0ea4d7ba
fix: properly calculate overal of node address with subnet filtersd6b2719e2
chore: drone: move extensions step to a function9608ef56d
chore: allow bridge traffic with DHCP broadcast trafficc99316457
docs: fix the installing system extensions doc833895940
chore: add tests for zfs extensioncb468c41c
fix: copy proper modules to arm64 squashfsea0d6e8c6
fix: prevent dashboard crashes when process info is not availablee9077a6fb
feat: filter the hostname to produce nodenamedc8361c1d
fix: properly GC images supplied with both tag and digestccfa8de11
fix: automatically changerpi_4
board on upgradeb56e8b7d9
fix: support 'List' type manifests574d48e54
fix: use image digest when starting a container175747cea
fix: ntp query error with bare IPv6 addressc8b507fb2
docs: fix kubeprism typo0cdcb2e0e
docs: restructure docs for nvidia drivers for v1.4676db9768
docs: fork docs for Talos 1.692ad18c18
fix: write correct capacity to the ovf6b0373ebe
chore: move bash tests to integration52b3d8d37
docs: make Talos 1.5 documentation the default onedc873df9b
chore: fix the filenames of openstack imagesb5c0e7b24
docs: update nvidia docs9606e871e
docs: update Jiva Pod Security Policya86ed4362
chore: update Kubernetes Go modules to 0.28.097b4e3e91
feat: update Kubernetes to 1.28.079ca1a3df
feat: e2e-aws using tf codebf3a5e011
chore: add version compatibility for Talos 1.6969e8097c
feat: update Kubernetes to 1.28.0-rc.1ca41b611e
chore: drone jsonnet cleanupbc198e98e
docs: retain cilium autoMount pending upstream hostPath fix86c94eff8
refactor: docgen and config examplesee6d639f6
fix: match routes on the priority properlybff0d8f32
chore: fix dependencies in the release pipelinee1b288679
refactor: compile regex in validation method on the first usedaa4c185a
docs: add what's new and documentation for Talos 1.5c4a1ca8d6
chore: remove <-errCh where possible in grpc methodse0f383598
chore: clean up the output of theimager
fb536af4d
chore: optimize memory usage oftcell
library on init7c86a365e
chore: publish systemd-boot and systemd-stub assets7d688ccfe
fix: make encryption config provider default toluks2
if not set80238a05a
chore: unify semver undergitproxy.zycloud.tk/blang/semver/v4
0f1920bdd
chore: provide a resource to peek into Linux clock adjustments4eab3017b
fix: calculate log2i properlybcf284530
fix: update providerid prefix for awsac2aff5cc
fix: fix azure portion of cloud uploader793dcedc9
fix: fast-wipe the system disk on talosctl reset76fa45afb
docs: update cilium instructionsChanges since v1.6.0-alpha.1
45 commits
514e514ba
feat: update Linux 6.1.63, containerd 1.7.9aca8b5e17
fix: ignore kernel command line in container mode020a0eb63
docs: fix table formatting for bootstraprequest0eb245e04
docs: fix talosctl pcap example indentationde6caf534
docs: fix table formatting for machineservice api27d208c26
feat: implement OAuth2 device flow for machine config5c8fa2a80
chore: start containerd early in boot95a252cfc
docs: fix link in what is new page0d3c3ed71
feat: support kube scheduler config06941b7e5
fix: allow rootfs propagation configuration for extension services57dc796f3
docs: update lastRelease to v1.5.5 in _index.md21d944a64
docs: add timezone information4f1ad16c7
feat: support kubelet credentialprovider config71a3bf0e3
fix: allow extra kernel args for secureboot installerf38eaaab8
feat: rework secureboot and PCR signing key6eade3d5e
chore: add ability to rewrite uuids and set unique tokens for Talose9c7ac17a
fix: set max msg recv size when proxyinge22ab440d
feat: update Linux 6.1.61, containerd 1.7.8, runc 1.1.108245361f9
feat: show first 32 bytes of response body on download error75d3987c0
chore: drop sha1 from genereated pcr json6f32d2990
feat: add.der
outputtalosctl gen secureboot pcr
87c40da6c
fix: proper logging in machined on startupa54da5f64
fix: image build for nanopi_4s6f3cd0593
refactor: update packet capture to use 'afpacket' interface813442dd7
fix: don't validate machine.install if installeddff60069c
feat: update Kubernetes to 1.29.0-alpha.3c97db5dfe
chore: bump Go dependencies807a9950a
fix: use custom Talos/kernel version when generating UKIeb94468a6
docs: add documentation for Image Factory2e78513e1
refactor: drop the dependency link platform -> network ctrl6dc776b8a
fix: when writing to META in the installer/imager, use fixed name3703041e9
chore: remove uneeded codecbe6e7622
fix: generate images for SBCs using imager5dff164f1
fix: fix error output of cli action trackeref5056122
feat: update etcd to 3.5.1045ae80873
chore: bump go-api-signature dependency to v0.3.1ffa5e05cb
fix: make Talos work on Rockpi 4c boards again8eba4c599
feat: generate secrets bundle from the machine configc7de745f6
chore: drop deprecated codecc0c3ab69
docs: update rpi_generic.mda009f5c60
fix: accept sysctl paths with dots4919f6ee2
feat: add GOMEMLIMIT to shipped manifests with memory limits73ee576ea
chore: update sonobuouy library, drop the forkc23bc2f4a
chore: support OCI layout as a source for profile input154bbd70f
docs: fix talos version in guide for dockerChanges from siderolabs/extras
7 commits
e8e801b
feat: update Go to 1.21.4d816a02
chore: move project to using kres3893789
chore: move to github workflows6d48418
feat: update Go to 1.21.309d7c3e
chore: update releasesa011245
feat: update Go to 1.21.1d3f54c7
feat: update Go to 1.20.8Changes from siderolabs/gen
2 commits
efca710
chore: addFilterInPlace
method to maps and update module36a3ae3
feat: update moduleChanges from siderolabs/go-kubernetes
7 commits
fa05430
chore: support kube-scheduler config version68bf392
feat: add dropped API resource for 1.2909fa006
fix: retry Windows connection errors3aa47a4
feat: support Kubernetes 1.29 upgradesae33a4a
feat: introduce support for Kubernetes version compatibility checkscf2754e
chore: update to use GHA44e26b3
feat: update removed feature gates for 1.28Changes from siderolabs/go-retry
1 commit
23b6fc2
fix: provider modern error unwrappingChanges from siderolabs/pkgs
32 commits
3aea711
feat: bump dependenciesd59cb3e
feat(lvm2): configure thin support252a59f
feat: bump dependencies0bb2a79
feat: update Go to 1.21.4f57b0a9
chore: fix kernel target to honorPLATFORM
5f84302
chore: move to using kresd7509f1
chore: bump deps3a66437
chore: add gh workflows2e892fd
feat: update versions37348d6
feat: update Go to 1.21.334f3c41
feat: add Solarflare SFC9000 support0c84090
feat: update releases19cdf71
feat: enable common sensorsacee18e
chore: bump kernel to 6.1.541d16fd2
feat: add Chelsio support4504f83
chore: rename kconfig-hardened-check847a9c3
chore: enable dm thin provisioning1401505
chore: drop-pkgs
for upstream kernel modulesa62471d
feat: add binfmt_misc support518c441
feat: add gVNIC support7d9e60e
feat: update Go to 1.21.1d3d7d29
chore: bump deps3b70656
chore: fix cacert permscca80b7
feat: update Linux to 6.1.462e1c0b9
fix: nonfree kmod pkg namecff5beb
feat: add btrfs support7717b7e
chore: bump deps2f19f18
feat: update containerd to 1.6.2330d4b74
feat: update Go to 1.21eda123d
feat: update runc to 1.1.930cd584
chore: enable pushing of non-free packagesfb247b5
chore: update kernel and microcodeChanges from siderolabs/siderolink
5 commits
5ab8f9d
feat: allow persistent keepalive to be set for the peer71dd308
chore: provide unique_token and Talos version in ProvisionRequest0ee5425
chore: revert sys moduel to 0.13.06be9ba7
chore: bump deps448cbe1
chore: bumpgolang.org/x/net
to 0.8.0Changes from siderolabs/tools
13 commits
ff7fe96
feat: update Go to 1.21.46216d64
fix: org name4334b92
chore: move to using kres024ef25
chore: bump deps5a22409
chore: refactor github actions9a05d12
feat: move to gh workflowa4a52e2
chore: add dummy gh workflow9c09b00
feat: update dependencies35948af
feat: update Go to 1.21.309023c1
feat: update OpenSSL to 3.1.37fa8bb5
feat: update releasesfa388de
feat: update Go to 1.21.133fb4b3
feat: update Go to 1.21Dependency Changes
32187aa
->18b9ba9
e79bddb
0f9eb93
->6a2c8fb
1c3f411
-> v1.1.0-rc.16cc0565
->7c9e464
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.