v1.5.8

Omni 1.5.8 (2026-02-27)

Welcome to the v1.5.8 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Contributors

• Andrey Smirnov
• Kevin Tijssen
• Noel Georgi
• Artem Chernyshev
• Mateusz Urbanek
• Orzelius
• Oguz Kilcan
• Tim Jones
• Daddie0
• Dmitrii Sharshakov
• greenpsi

Changes

2 commits

• 311657f3 release(v1.5.8): prepare release
• 865e60da chore: bump deps, rekres and fix linters

Changes from siderolabs/discovery-api

2 commits

• 9c06846 feat: change the way excluded addresses are specified
• f71a14a feat: add advertised filters to discovery data

Changes from siderolabs/discovery-client

2 commits

• 854400f feat: bump discovery API to v0.1.8
• 0a4c6fd chore: update dependencies and rekres

Changes from siderolabs/discovery-service

2 commits

• 8863fd8 release(v1.0.14): prepare release
• e0c8062 chore: rekres and update dependencies

Changes from siderolabs/go-debug

1 commit

• 47fce68 feat: support Go 1.26, rekres

Changes from siderolabs/go-kubernetes

9 commits

• a95f3bf chore: add helper functions for CLI applications
• f2c063b test: add integration tests for ssa logic
• 9de92cf refactor: drop k8s.io/utils
• 8e6f068 fix: bring back legacy sync
• de675a0 fix: stop using custom dialer for Kubernetes client
• e7a89c3 refactor: use fluxcd/ssa instead of kubernetes cli-utils for ssa
• 0a235c0 feat: add early support for Kubernetes 1.36
• 3bea212 fix: use new Myers diff algorithm
• 604c56b chore: extract common code to the go-kubernetes package

Changes from siderolabs/image-factory

37 commits

• f0c7a7b release(v1.0.3): prepare release
• dd92631 docs: correct path to hack/copy-artifacts.sh
• ddc1a83 fix: update Talos to fix rpi_5 build
• b3d07e5 docs: remove redundant Kubernetes version prerequisite
• 9666795 fix: values.schema.json
• 8a8da46 feat: adjust security context for user namespace mode
• bc631dc fix: values.schema.json
• 8ea6fe9 feat: add user namespace support with Kubernetes version validation
• 324c464 fix: skip initializing TUF if keyless signing is disabled
• a42b9d9 release(v1.0.2): prepare release
• 80d1ba3 fix: pass nameoptions to verify bundle too
• eec01d1 release(v1.0.1): prepare release
• ec1c0a7 fix: pass insecure to the cosign new bundle verifier
• 14d0f2a release(v1.0.0): prepare release
• a90529c feat: add more security contexts
• ec69fe2 fix: extra kernel args for overlays
• aa325ee feat: add Helm docs and schema
• 3c18e05 feat: add Sidero google service account email also to verfiers
• 151feb5 fix: docs url
• 42a1c45 feat: add helm to kres
• ac4718a feat: update Talos and pkgs
• 1d6468e feat: add helm e2e to CI
• 2f0499c feat: added e2e tests
• 2eccf98 fix: made changes on the recommendation of copilot
• e27ea36 feat: Added E2E with KUTTL
• 9f6b9e7 feat: Added additional tests
• 4939747 feat: Added helm unittests
• dcaa1db feat: added helmchart
• 1f85622 feat: add cloudflare credentials helper
• 852856d fix: installer internal config
• c8c6576 release(v1.0.0-beta.0): prepare release
• 56bd21b fix: allow Cache-Control header in CORS
• 83f4d91 fix: clarify bootloader selection
• c8c5faa feat: allow using image GET/HEAD API by the JS code on any domains
• e732d90 feat: support acm for secureboot
• 5f103c1 feat: support copying to clipboard
• c3532c4 feat: update Talos with GRUB and other fixes

Changes from siderolabs/kms-client

3 commits

• 296bf9a feat: add logging to the KMS server
• 2d6b082 feat: add TLS support for KMS server
• 4233ecd chore: bump deps, rekres

Dependency Changes

• github.com/aws/aws-sdk-go-v2 v1.41.1 -> v1.41.2
• github.com/aws/aws-sdk-go-v2/config v1.32.7 -> v1.32.10
• github.com/aws/aws-sdk-go-v2/credentials v1.19.7 -> v1.19.10
• github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.20.19 -> v1.22.4
• github.com/aws/aws-sdk-go-v2/service/s3 v1.95.1 -> v1.96.2
• github.com/aws/smithy-go v1.24.0 -> v1.24.1
• github.com/cosi-project/runtime 2b3357ea6788 -> v1.14.0
• github.com/google/go-containerregistry v0.20.7 -> v0.21.1
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.4 -> v2.28.0
• github.com/johannesboyne/gofakes3 ebf3e50324d3 -> 4c385a1f6a73
• github.com/siderolabs/discovery-api v0.1.6 -> v0.1.8
• github.com/siderolabs/discovery-client v0.1.13 -> v0.1.15
• github.com/siderolabs/discovery-service v1.0.13 -> v1.0.14
• github.com/siderolabs/go-debug v0.6.1 -> v0.6.2
• github.com/siderolabs/go-kubernetes v0.2.30 -> v0.2.33
• github.com/siderolabs/image-factory b5ba6630ed93 -> v1.0.3
• github.com/siderolabs/kms-client v0.1.0 -> v0.2.0
• github.com/siderolabs/omni/client v1.4.7 -> v1.5.7
• github.com/siderolabs/talos/pkg/machinery e00aed0f6694 -> cc636f1dd1f1
• go.etcd.io/etcd/client/pkg/v3 v3.6.7 -> v3.6.8
• go.etcd.io/etcd/client/v3 v3.6.7 -> v3.6.8
• go.etcd.io/etcd/server/v3 v3.6.7 -> v3.6.8
• golang.org/x/net v0.50.0 -> v0.51.0
• golang.org/x/oauth2 v0.34.0 -> v0.35.0
• golang.org/x/tools v0.41.0 -> v0.42.0
• google.golang.org/grpc v1.78.0 -> v1.79.1
• google.golang.org/protobuf v1.36.11 -> f2248ac996af
• k8s.io/api v0.35.0 -> v0.35.2
• k8s.io/client-go v0.35.0 -> v0.35.2
• modernc.org/sqlite v1.44.1 -> v1.46.1

Previous release can be found at v1.5.7