Skip to content

fix(deps): update module github.com/siderolabs/talos/pkg/machinery v1.13.0-alpha.0 → v1.13.0-alpha.1 #82

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
truecharts-admin wants to merge 1 commit into from
Closed

fix(deps): update module github.com/siderolabs/talos/pkg/machinery v1.13.0-alpha.0 → v1.13.0-alpha.1 #82

truecharts-admin wants to merge 1 commit into from

Conversation

@truecharts-admin
Copy link
Contributor

@truecharts-admin truecharts-admin commented Feb 3, 2026 •
edited
Loading

This PR contains the following updates:

Package Change Age Confidence
github.com/siderolabs/talos/pkg/machinery v1.13.0-alpha.0 -> v1.13.0-alpha.1 age confidence

Release Notes

siderolabs/talos (github.com/siderolabs/talos/pkg/machinery)

v1.13.0-alpha.1

Compare Source

Talos 1.13.0-alpha.1 (2026-02-03)

Welcome to the v1.13.0-alpha.1 release of Talos!
This is a pre-release of Talos

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Environment Configuration Document

A new EnvironmentConfig document has been introduced to allow users to specify environment variables for Talos components.
It replaces and deprecates the previous method of setting environment variables via the .machine.env field.

Multiple values for the same environment variable will replace previous values, with the last one taking precedence.

To remove an environment variable, remove it from the EnvironmentConfig document and restart the node.

External Volumes

Talos now supports virtiofs-based external volumes via the new
ExternalVolumeConfig
document.

These virtiofs external volumes are not supported when SELinux is running
in enforcing mode.

Extra Arguments accept slices in addition to strings

Several Talos configuration fields that previously accepted single string values for extra arguments have been updated to accept slices of strings as well.
This includes fields such as .cluster.apiServer.extraArgs.

BREAKING: If you were relying on the resources EtcdConfigs, KubeletConfigs, ControllerManagerConfigs, SchedulerConfigs or APIServerConfigs, the protobuf format has changed from map<string,string> to map<string,message>.

Talos Imager Enhancements

Talos imager now supports running rootless. --privileged and -v /dev:/dev are no longer required.

Talosctl images k8s-bundle subcommand accepts version parameter

The talosctl images k8s-bundle command now accepts an optional version overrides arguments.

Kubernetes server-side apply

Talos now uses inventory backed server-side apply when applying bootsrap manifests (including extraManifests and inlineManifests).
Purging of unneeded manifests is automatically performed.
The switch and inventory backfill is automatic and no action is needed from the user.

KubeSpan Configuration

A new KubeSpanConfig document has been introduced to configure KubeSpan settings.
It replaces and deprecates the previous method of configuring KubeSpan via the .machine.network.kubespan field.

The old configuration field will continue to work for backward compatibility.

Negative Max Volume Size

Negative max size represents the amount of space to be left free on the device, rather than the size the volume should consume.
For example:
* a max size of "-10GiB" means the volume can grow to the available space minus 10GiB.
* a max size of "-25%" means the volume can grow to the available space minus 25%.

Container Image Decompression

Talos now ships with igzip (amd64) and pigz (arm64) to speed up container image decompression.

ProbeConfig

The TCPProbeConfig configuration document allows to configure TCP probes for network reachability checks.
This allows to define a custom connectivity condition.

/proc/PID/mem Access Hardening

A new kernel parameter proc_mem.force_override=never has been introduced by default to enhance system security
by preventing unwanted writes to protected process memory via /proc/PID/mem.
If the kernel parameter is removed, default behavior is restored, allowing access only if the process is traced.

Reproducible Disk Images

Talos disk images are now reproducible. Building the same version of Talos multiple times will yield
identical disk images.

Note: VHD and VMDK (Azure and VMware) images are not currently reproducible due to limitations in the underlying image creation tools.
Users verifying reproducible images should use raw images, verify checksums, and convert them to VHD/VMDK as needed.

ResolverConfig

The nameservers configuration in machine configuration now overwrites any previous layers (defaults, platform, etc.) when specified.
Previously a smart merge was performed to keep IPv4/IPv6 nameservers from lower layers if the machine configuration specified only one type.

Service Account Issuer configuration

In API Server, passing extra args with service-account-issuer will append them after default value.
This allows easy migration, e.g. by changing .cluster.controlPlane.endpoint to new value, and keeping the old value in
.cluster.apiServer.extraArgs["service-account-issuer"].

talosctl images talos-bundle can ignore reaching to the registry

The talosctl images talos-bundle command now accepts optional --overlays and --extensions flags.
If those are set to false, the command will not attempt to reach out to the container registry to fetch the latest versions and digests of the overlays and extensions.

Component Updates

Linux: 6.18.8
containerd: 2.2.1
etcd: 3.6.7
CoreDNS: 1.13.2
Kubernetes: 1.35.0
Flannel CNI plugin: v1.9.0-flannel1
LVM2: 2_03_38
runc: 1.4.0
systemd: 259
cryptsetup: 2.8.3

Talos is built with Go 1.25.6.

VM Hot-Add Support

Talos now includes udev rules to support hot-adding of CPUs in virtualized environments.

Contributors
  • Andrey Smirnov
  • Mateusz Urbanek
  • Noel Georgi
  • Dmitrii Sharshakov
  • Orzelius
  • Laura Brehm
  • Bryan Lee
  • Edward Sammut Alessi
  • Alexis La Goutte
  • Andras BALI
  • Andrei Kvapil
  • Artem Chernyshev
  • Birger Johan Nordølum
  • Camillo Rossi
  • Christopher Puschmann
  • Florian Ströger
  • Gregor Gruener
  • Jaakko Sirén
  • Jean-Francois Roy
  • Joakim Nohlgård
  • Jonas Lammler
  • Justin Garrison
  • Lennard Klein
  • Matthew Sanabria
  • Max Makarov
  • Michal Baumgartner
  • Mickaël Canévet
  • Olav Thoresen
  • Pranav Patil
  • Serge van Ginderachter
  • Skye Soss
  • Spencer Smith
  • Tim Jones
  • dataprolet
  • eseiker
  • pranav767
Changes
177 commits

Changes since v1.13.0-alpha.0
81 commits

  • @​055add7 release(v1.13.0-alpha.1): prepare release
  • @​900516e chore: update image signer
  • @​938de56 feat: bump kernel
  • @​388cec7 feat(overlays): add new overlays
  • @​9f2dd63 refactor: api tests
  • @​a907831 feat: add a helper module to generate standard patches
  • @​1fec5b2 fix: implement merger for PercentageSize
  • @​8b245b8 feat: implement new image service APIs
  • @​d90c775 chore: rename internal talosctl debug air-gapped
  • @​2165280 refactor: change the way one2many proxying is picked
  • @​b1b703d chore: move sync logging code to go-kubernetes package
  • @​e48c6d7 fix: allow to expose a port multiple times in Docker
  • @​410d8cb fix: undo CRLF on Windows (talosctl edit)
  • @​859d3f0 feat: add RPi5 to the list of supported SBCs
  • @​0bd48bb fix(talosctl): pass --k8s-endpoint flag to rotate-ca kubernetes rotation
  • @​b9e27eb feat: update Linux kernel with dm-integrity
  • @​6aa9b06 fix: skip empty documents on config decoding
  • @​4944924 fix: always set advertised peer URLs
  • @​782cc50 fix: open the filesystem as read-only
  • @​28e61a7 fix: set GRUB prefix correctly on arm64
  • @​a4f1c52 feat: update GRUB to 2.14
  • @​5629207 fix: use node podCIDRs for kubespan advertiseKubernetesNetworks
  • @​3946036 feat: implement layering for ProbeSpec
  • @​b5c760f feat: add ProbeConfig for network connectivity probes
  • @​4b274f7 feat: support aws cert manager in imager
  • @​4172095 fix: fallback to /proc/meminfo for memory modules
  • @​7f1147b fix: add warnings to 802.3ad bond
  • @​ddd6b18 refactor: generate GRUB images
  • @​c7aa266 fix: overwrite resolver config with machine config
  • @​cf70f05 fix: oracle platform file format
  • @​8c7b8f5 feat: add support for negative max size
  • @​77bc3d2 fix: marshal of FailOverMac property
  • @​38e280c fix: make OOM expression a bit less sensitive
  • @​3d13016 fix: wipe the first/last 1MiB in addition to wiping by signatures
  • @​1aa6528 fix: make OOM controller more precise by considering separate cgroup PSI
  • @​f7072c0 fix: check if the device is not mounted when wiping
  • @​743c3b9 fix: use correct containerd import path
  • @​f2dd085 feat: report image pull progress in the console
  • @​72fe98a fix: boot with GRUB
  • @​d4ed13d fix: add talos version to Hetzner Cloud client user agent
  • @​150c41c feat: update Linux to 6.18.5
  • @​01a3678 fix: use append instead of prepend in service-account-issuer
  • @​d195427 feat: add extraArgs from service-account-issuer
  • @​91b88f7 feat: support multiple values for extraArgs
  • @​96e6048 fix: add hostname to endpoints
  • @​7033275 refactor: move BootloaderKind into machinery
  • @​71adaf0 fix: sort mirrors and tls configs when generating the machine config
  • @​34f09a3 feat: add VLAN support to OpenStack platform
  • @​5127ef7 fix: wipe disk by signatures
  • @​415bfae fix: panic in configpatcher when the whole section is missing
  • @​e5aca71 fix: fix healthcheck timeout
  • @​634b71e docs: move talosctl pcap example to Example Block
  • @​8184927 feat: implement KubeSpan multi-document configuration
  • @​4d0604b chore: remove unrelated machineconfig
  • @​e368634 feat: add it87 hwmon module
  • @​308c750 fix: resolve SideroLink Wireguard endpoint on reconnect
  • @​e4ef494 fix: drop the persist config flag from gen config
  • @​c3176ad feat: add EnvironmentConfig document
  • @​c839b38 feat: expose more SSA options in the upgrade-k8s command
  • @​b8ff967 fix: handle correctly incomplete RegistryTLSConfig
  • @​99f2dda fix: bond config via platform
  • @​2449ffe fix: allow HostnameConfig to be used with incomplete machine config
  • @​35fc520 fix: lock down etcd listen address to IPv4 localhost
  • @​27253d7 feat: use new xfs config file
  • @​c9d84ae fix: generate OCI-compliant image config
  • @​7a4b2b3 fix: update VIP config example
  • @​080efcb feat: add k8s-version parameter to k8s-bundle
  • @​b764f5f fix: skip sync test when kube-proxy is disabled
  • @​70e6778 feat: imager: populate filesystems with root owned files
  • @​7416dca fix: print talosctl images to release notes
  • @​dc2009e chore: use context when creating filesystems
  • @​85f7be6 chore: update slack links
  • @​1549521 fix: disable swap for system services
  • @​d98b415 fix: drop more non-overlay SBC stuff
  • @​226cd6b fix: do not allocate for the actual disk image file
  • @​53f5bf8 fix: overlay installers
  • @​10d0cfd fix: overlay install in image mode
  • @​7708669 fix: partition data population
  • @​4d5657b fix: drop SBC board code
  • @​c4f3f6d feat: implement kubernetes server-side apply
  • @​f12fd2b test: bump Image Factory tests

Changes from siderolabs/go-kubernetes
3 commits

Changes from siderolabs/pkgs
53 commits

Changes from siderolabs/proto-codec
1 commit

Changes from siderolabs/tools
13 commits

Dependency Changes
  • github.com/aws/aws-sdk-go-v2/config v1.31.20 -> v1.32.6
  • github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.13 -> v1.18.16
  • github.com/aws/aws-sdk-go-v2/service/acm v1.37.19 new
  • github.com/aws/aws-sdk-go-v2/service/kms v1.46.0 -> v1.49.4
  • github.com/aws/smithy-go v1.23.2 -> v1.24.0
  • github.com/containerd/cgroups/v3 v3.0.5 -> v3.1.0
  • github.com/containerd/containerd/api v1.9.0 -> v1.10.0
  • github.com/containerd/containerd/v2 v2.1.5 -> v2.2.0
  • github.com/containerd/platforms v1.0.0-rc.1 -> v1.0.0-rc.2
  • github.com/cosi-project/runtime v1.12.0 -> v1.13.0
  • github.com/diskfs/go-diskfs fc569a0 new
  • github.com/docker/cli v29.0.0 -> v29.1.3
  • github.com/gdamore/tcell/v2 v2.9.0 -> v2.13.4
  • github.com/godbus/dbus/v5 v5.1.0 -> v5.2.0
  • github.com/google/cadvisor v0.53.0 -> v0.54.1
  • github.com/google/go-containerregistry v0.20.6 -> v0.20.7
  • github.com/hetznercloud/hcloud-go/v2 v2.30.0 -> v2.32.0
  • github.com/klauspost/compress v1.18.1 -> v1.18.3
  • github.com/linode/go-metadata v0.2.2 -> v0.2.3
  • github.com/mdlayher/ethtool v0.4.0 -> v0.5.0
  • github.com/miekg/dns v1.1.68 -> v1.1.69
  • github.com/moby/moby/client v0.1.0 -> v0.2.1
  • github.com/siderolabs/go-blockdevice/v2 v2.0.20 -> v2.0.23
  • github.com/siderolabs/go-kubernetes v0.2.28 -> v0.2.31
  • github.com/siderolabs/pkgs v1.12.0-23-ge0b78b8 -> v1.13.0-alpha.0-44-gdc737a6
  • github.com/siderolabs/proto-codec v0.1.2 -> v0.1.3
  • github.com/siderolabs/talos/pkg/machinery v1.12.0 -> v1.13.0-alpha.1
  • github.com/siderolabs/tools v1.12.0-2-g7d57df0 -> v1.13.0-alpha.0-12-gca26e1c
  • github.com/sirupsen/logrus v1.9.3 -> dd1b4c2
  • go.etcd.io/etcd/api/v3 v3.6.6 -> v3.6.7
  • go.etcd.io/etcd/client/pkg/v3 v3.6.6 -> v3.6.7
  • go.etcd.io/etcd/client/v3 v3.6.6 -> v3.6.7
  • go.etcd.io/etcd/etcdutl/v3 v3.6.6 -> v3.6.7
  • go.uber.org/zap v1.27.0 -> v1.27.1
  • golang.org/x/net v0.47.0 -> v0.48.0
  • golang.org/x/oauth2 v0.33.0 -> v0.34.0
  • golang.org/x/sync v0.18.0 -> v0.19.0
  • golang.org/x/sys v0.38.0 -> v0.40.0
  • golang.org/x/term v0.37.0 -> v0.38.0
  • golang.org/x/text v0.31.0 -> v0.33.0
  • google.golang.org/grpc v1.76.0 -> v1.77.0
  • google.golang.org/protobuf v1.36.10 -> v1.36.11
  • sigs.k8s.io/cli-utils 77c836a new

Previous release can be found at v1.12.0

Images

ghcr.io/siderolabs/flannel:v0.27.4
registry.k8s.io/coredns/coredns:v1.13.2
registry.k8s.io/etcd:v3.6.7
registry.k8s.io/pause:3.10.1
registry.k8s.io/kube-apiserver:v1.35.0
registry.k8s.io/kube-controller-manager:v1.35.0
registry.k8s.io/kube-scheduler:v1.35.0
registry.k8s.io/kube-proxy:v1.35.0
ghcr.io/siderolabs/kubelet:v1.35.0
ghcr.io/siderolabs/installer:v1.13.0-alpha.1
ghcr.io/siderolabs/installer-base:v1.13.0-alpha.1
ghcr.io/siderolabs/imager:v1.13.0-alpha.1
ghcr.io/siderolabs/talos:v1.13.0-alpha.1
ghcr.io/siderolabs/talosctl-all:v1.13.0-alpha.1
ghcr.io/siderolabs/overlays:v1.13.0-alpha.1
ghcr.io/siderolabs/extensions:v1.13.0-alpha.1

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@truecharts-admin truecharts-admin enabled auto-merge (squash) February 3, 2026 15:09
PrivatePuffin
PrivatePuffin approved these changes Feb 3, 2026
View reviewed changes
Copy link
Member

@PrivatePuffin PrivatePuffin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto approved automated PR

@alfi0812 alfi0812 force-pushed the renovate/github.com-siderolabs-talos-pkg-machinery-1.13.x branch from 774e265 to 5903bb6 Compare February 4, 2026 10:52
@alfi0812 alfi0812 closed this Feb 4, 2026
auto-merge was automatically disabled February 4, 2026 16:14

Pull request was closed

@truecharts-admin truecharts-admin deleted the renovate/github.com-siderolabs-talos-pkg-machinery-1.13.x branch February 4, 2026 16:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@PrivatePuffin PrivatePuffin PrivatePuffin approved these changes

@alfi0812 alfi0812 Awaiting requested review from alfi0812 alfi0812 is a code owner

Assignees

No one assigned

Labels

app/ renovate/container type/patch

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@truecharts-admin @PrivatePuffin @alfi0812