chore(container): update image ghcr.io/siderolabs/imager to v1.14.0 by daddy-ro[bot] · Pull Request #2118 · jfroy/flatops

daddy-ro · 2026-08-04T13:32:51Z

This PR contains the following updates:

Package	Update	Change
ghcr.io/siderolabs/imager	minor	`v1.13.7` → `v1.14.0`

Release Notes

siderolabs/talos (ghcr.io/siderolabs/imager)

`v1.14.0`

Compare Source

39 commits

1ab88f743 fix: load the raid1 module for configured MD arrays
9e8568d26 fix: use inmem containerd for installs/upgrades
8cf28da5f fix: preserve kmsg reconciliation after config changes
311b6fde9 fix: make reset during boot phase more robust
945d1cdab feat: bump kernel to 6.18.41
4e77d40e8 fix: restore the systemd-timesync best-sample check in spike detection
4444a187d test: inspect host mount state from the current thread
b7c0497b0 fix: race between vol.cfg. and vol.mgr. ctrl
ef9a091ec feat: allow attaching extra disks to controlplane machines
a418c0e1e test: fix CRI restart event assertion race
a9bfdbdd4 fix: ignore insecure-only imager assets
54e3b20e8 fix: hold the darwin vmnet bridge open for the network lifetime
bc59389fa fix: drop the OOM config rule about overall system memory PSI
69be56ea9 chore: add some initial set of libvirt SELinux policies
6170ad8b9 fix: validate kubespan & discovery config correctly for multi-doc
6e58c6d5a test: fix ded. vol. plumbing in integration tests
b644d1640 fix: allow directory-backed volumes in reset api
28e7a8742 feat: bump etcd to v3.7.1
2c657c224 feat: bump kernel to 6.18.40
b1bdc8c07 test: restart qemu process several times on startup failures
7533057a7 feat: support route imports between BGP instances
a94783704 docs: remove duplicated docs in the markdown for CLI
6f17c5033 fix: verify the public key signed images correctly
570fe34f0 fix: generate backwards compatible etcd encryption config
f7790816e fix: use context without cancelation for etcd locks
67e61ef30 feat: add the fs_scrub controller
1c156458a fix: override DHCP search domains via explicit ResolverConfig domains
fd8dbd8a1 fix: skip pod check if desired number of pods is zero
9aede5429 feat: add kubeimportlinter for versioned k8s imports
ae93d1462 fix: redact resource specs in the merge controllers
fc5743cd0 feat: add GrubUseUKICmdline install option
6bba77724 feat: add named native BGP instances
c5ab22f1d feat: move Talos API access from Kubernetes config to multi-doc
b1abd9c03 fix: split the up/finished service events
644ecbc66 feat: add discovered volumes status controller
6be2b1384 feat: add veth pair support
7514401de fix: drop the controlplane static pod change
9a521f667 fix: preserve container tasks across CRI restarts
9048d4157 fix: fix a nil-map assignment panic in configpatcher

`v1.13.10`

Compare Source

Talos 1.13.10 (2026-09-03)

Welcome to the v1.13.10 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Component Updates

Linux: 6.18.48
CoreDNS: 1.14.7

Talos is built with Go 1.26.7

Contributors

Andrey Smirnov
Mateusz Urbanek
Noel Georgi
Dima Aratin
Ivan Demchuk
Maja Bojarska
Max Makarov
Utku Ozdemir
immanuwell

Changes

28 commits

@00ca4c9 release(v1.13.10): prepare release
@271ce0d fix: update DHCP library
@3c70f40 fix: harden the code around kubelet's client certificate handling
@40d7de4 fix: normalize image reference when passing to image verification flow
@cf30d6d fix: filter out passed metadata in API proxying
@cc556d9 fix: treat desired roles empty as error in Talos API access
@0d7a473 fix: allow CSI volumes to be mounted with an SELinux context
@17ab196 fix: validate received kubeconfig
@934ae8a chore: update etcd to v3.6.14
@df9b82d chore: update pkgs and tools
@591c53a fix: use os.Root in the talosctl extract path
@c36d990 fix: escape output in the talosctl dashboard
@fc355dc fix: add checks for meta key in the API path
@e950f65 feat: update COSI to 1.16.3
@20cafbd fix: route creation churning every 100ms
@c6fe78c chore: reduce verbosity of the grype scan
@b9696f9 fix: preserve special modes when extracting files
@865aaec fix: use os.Root in the untar path
@097fa18 fix: create parent directories when extracting tar archives
@c6edc39 chore: bump sigstore/rekor to v1.5.4
@6d062e1 fix: write the uploaded etcd snapshot atomically
@f6b7959 fix: skip selinux label for read-only/detached/external mounts
@bea850a fix: persist in-memory meta on fresh install
@dcf46c1 fix: reduce stalls in the etcd member promotion cycle
@0f4d08a feat: update CoreDNS to 1.14.7
@e091638 fix: watch IPv6 route changes in RouteSpecController
@92614ca fix: truncate files replaced by system extensions
@b7b27ec fix: skip target settings for external volume mounts

Changes from siderolabs/pkgs

5 commits

siderolabs/pkgs@9b044c5 feat: update kernel to 6.18.48
siderolabs/pkgs@de74a50 feat: bump kernel to 6.18.47
siderolabs/pkgs@bb15c62 chore: update toolchain and tools
siderolabs/pkgs@49c50f7 feat: bump kernel to 6.18.46
siderolabs/pkgs@2da2cdc feat: backport aes256k support (Ceph)

Changes from siderolabs/tools

3 commits

siderolabs/tools@c70be08 chore: update toolchain
siderolabs/tools@7791f48 feat: use kernel gnu mirrors
siderolabs/tools@d908dc0 fix: update OpenSSL to 3.6.4

Dependency Changes

github.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.1 -> v1.22.0
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.13.1 -> v1.14.0
github.com/aws/aws-sdk-go-v2 v1.41.7 -> v1.43.0
github.com/aws/aws-sdk-go-v2/config v1.32.17 -> v1.32.31
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.23 -> v1.18.31
github.com/aws/aws-sdk-go-v2/service/kms v1.52.0 -> v1.55.0
github.com/aws/smithy-go v1.25.1 -> v1.27.3
github.com/cosi-project/runtime v1.14.1 -> v1.16.3
github.com/docker/cli v29.4.3 -> v29.5.3
github.com/fatih/color v1.18.0 -> v1.19.0
github.com/google/go-containerregistry v0.21.6 -> v0.21.7
github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.3 -> v2.3.4
github.com/insomniacslk/dhcp 5adc3eb -> 234b974
github.com/klauspost/compress v1.18.7 -> v1.19.2
github.com/mattn/go-isatty v0.0.20 -> v0.0.24
github.com/prometheus/procfs v0.20.1 -> v0.22.0
github.com/siderolabs/pkgs v1.13.0-60-gf541ca4 -> v1.13.0-65-g9b044c5
github.com/siderolabs/talos/pkg/machinery v1.13.9 -> v1.13.10
github.com/siderolabs/tools v1.13.0-9-ga201d19 -> v1.13.0-12-gc70be08
github.com/sigstore/sigstore v1.10.8 -> v1.10.9
github.com/sirupsen/logrus v1.9.4 -> v1.10.2
github.com/stretchr/testify v1.11.1 -> v1.12.1
go.etcd.io/etcd/api/v3 v3.6.12 -> v3.6.14
go.etcd.io/etcd/client/pkg/v3 v3.6.12 -> v3.6.14
go.etcd.io/etcd/client/v3 v3.6.12 -> v3.6.14
go.etcd.io/etcd/etcdutl/v3 v3.6.12 -> v3.6.14
go.yaml.in/yaml/v4 v4.0.0-rc.4 -> v4.0.0-rc.6
google.golang.org/grpc v1.82.1 -> v1.83.2
google.golang.org/protobuf f2248ac -> v1.36.12

Previous release can be found at v1.13.9

Images

ghcr.io/siderolabs/flannel:0.28.8
registry.k8s.io/coredns/coredns:v1.14.7
registry.k8s.io/etcd:v3.6.14
registry.k8s.io/pause:3.10.1
registry.k8s.io/kube-apiserver:v1.36.3
registry.k8s.io/kube-controller-manager:v1.36.3
registry.k8s.io/kube-scheduler:v1.36.3
registry.k8s.io/kube-proxy:v1.36.3
ghcr.io/siderolabs/kubelet:v1.36.3
registry.k8s.io/networking/kube-network-policies:v1.1.0
ghcr.io/siderolabs/installer:v1.13.10
ghcr.io/siderolabs/installer-base:v1.13.10
ghcr.io/siderolabs/imager:v1.13.10
ghcr.io/siderolabs/talos:v1.13.10
ghcr.io/siderolabs/talosctl-all:v1.13.10
ghcr.io/siderolabs/overlays:v1.13.10
ghcr.io/siderolabs/extensions:v1.13.10

`v1.13.9`

Compare Source

Talos 1.13.9 (2026-08-19)

Welcome to the v1.13.9 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Component Updates

Linux: 6.18.44
containerd: 2.2.7
Kubernetes: 1.36.3

Talos is built with Go 1.26.6.

Contributors

Andrey Smirnov
Noel Georgi

Changes

7 commits

@3ebd10a release(v1.13.9): prepare release
@9ade215 feat: update Kubernetes to 1.36.3
@14343cd test: save the provision test logs
@b33e5fc fix: support try mode apply without prior config
@6a8f295 fix: share IPC namespace with the host for extension services
@b525b82 fix: size the receive/send buffers for nftables netlink
@7ac5264 feat: update Go to 1.26.6

Changes from siderolabs/pkgs

5 commits

siderolabs/pkgs@f541ca4 feat: bump kernel to 6.18.44
siderolabs/pkgs@a4f2c26 feat: bump kernel to 6.18.43
siderolabs/pkgs@79a7531 feat: update Linux firmware to 2026081
siderolabs/pkgs@89d76bf feat: update backportable dependencies
siderolabs/pkgs@af6c08a feat: update Go to 1.26.6

Changes from siderolabs/tools

1 commit

siderolabs/tools@a201d19 feat: update Go to 1.26.6

Dependency Changes

github.com/siderolabs/pkgs v1.13.0-55-gf677246 -> v1.13.0-60-gf541ca4
github.com/siderolabs/talos/pkg/machinery v1.13.8 -> v1.13.9
github.com/siderolabs/tools v1.13.0-8-gc2844e6 -> v1.13.0-9-ga201d19
golang.org/x/net v0.57.0 -> v0.58.0
golang.org/x/text v0.40.0 -> v0.41.0
k8s.io/api v0.36.2 -> v0.36.3
k8s.io/apiextensions-apiserver v0.36.2 -> v0.36.3
k8s.io/apimachinery v0.36.2 -> v0.36.3
k8s.io/apiserver v0.36.2 -> v0.36.3
k8s.io/client-go v0.36.2 -> v0.36.3
k8s.io/component-base v0.36.2 -> v0.36.3
k8s.io/cri-api v0.36.2 -> v0.36.3
k8s.io/kube-scheduler v0.36.2 -> v0.36.3
k8s.io/kubectl v0.36.2 -> v0.36.3
k8s.io/kubelet v0.36.2 -> v0.36.3
k8s.io/pod-security-admission v0.36.2 -> v0.36.3

Previous release can be found at v1.13.8

Images

ghcr.io/siderolabs/flannel:0.28.8
registry.k8s.io/coredns/coredns:v1.14.6
registry.k8s.io/etcd:v3.6.12
registry.k8s.io/pause:3.10.1
registry.k8s.io/kube-apiserver:v1.36.3
registry.k8s.io/kube-controller-manager:v1.36.3
registry.k8s.io/kube-scheduler:v1.36.3
registry.k8s.io/kube-proxy:v1.36.3
ghcr.io/siderolabs/kubelet:v1.36.3
registry.k8s.io/networking/kube-network-policies:v1.1.0
ghcr.io/siderolabs/installer:v1.13.9
ghcr.io/siderolabs/installer-base:v1.13.9
ghcr.io/siderolabs/imager:v1.13.9
ghcr.io/siderolabs/talos:v1.13.9
ghcr.io/siderolabs/talosctl-all:v1.13.9
ghcr.io/siderolabs/overlays:v1.13.9
ghcr.io/siderolabs/extensions:v1.13.9

`v1.13.8`

Compare Source

Talos 1.13.8 (2026-08-04)

Welcome to the v1.13.8 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Component Updates

Linux: 6.18.42
CoreDNS: 1.14.6
Flannel: 0.28.8

Talos is built with Go 1.26.5.

Contributors

Andrey Smirnov
Mateusz Urbanek
Noel Georgi
ctr49
imusmanmalik
kastakhov

Changes

14 commits

@3de4932 release(v1.13.8): prepare release
@76de777 chore: update dependencies
@77d5fe2 chore: update pkgs
@a7db9b2 fix: verify the public key signed images correctly
@d769389 fix: use context without cancelation for etcd locks
@3a2abc0 fix: redact resource specs in the merge controllers
@1531797 fix(machined): preserve health when services reach running
@fc75754 fix: race with PCR extensions and volume unlock
@2a51fb1 feat: update Flannel to 0.28.8
@05471d3 feat: update CoreDNS to 1.14.6
@9e0b1ca fix: volume mount race (third attempt) around service restart
@c5cb365 fix: ignore insecure-only imager assets
@c67b10d test: update Calico in canal reset test
@9eca6ea fix: preserve trailing rate-limited trigger events

Changes from siderolabs/pkgs

6 commits

siderolabs/pkgs@f677246 chore: update kernel
siderolabs/pkgs@6c5daf2 chore: replace gnu mirror
siderolabs/pkgs@4304e87 feat: bump kernel to 6.18.41
siderolabs/pkgs@e66edeb feat: enable PCF8523 RTC support for arm64
siderolabs/pkgs@b2e51fc feat: bump kernel to 6.18.40
siderolabs/pkgs@33195c5 feat: enable CONFIG_NFT_SOCKET in the kernel

Dependency Changes

github.com/google/cel-go v0.28.0 -> v0.29.0
github.com/gopacket/gopacket v1.5.0 -> v1.6.1
github.com/klauspost/compress v1.18.6 -> v1.18.7
github.com/siderolabs/pkgs v1.13.0-49-g91fe0a0 -> v1.13.0-55-gf677246
github.com/siderolabs/talos/pkg/machinery v1.13.7 -> v1.13.8
github.com/sigstore/sigstore-go v1.2.0 -> v1.2.1
golang.org/x/net v0.55.0 -> v0.57.0
golang.org/x/sync v0.20.0 -> v0.22.0
golang.org/x/sys v0.45.0 -> v0.47.0
golang.org/x/term v0.43.0 -> v0.45.0
golang.org/x/text v0.37.0 -> v0.40.0
google.golang.org/grpc v1.81.1 -> v1.82.1

Previous release can be found at v1.13.7

Images

ghcr.io/siderolabs/flannel:0.28.8
registry.k8s.io/coredns/coredns:v1.14.6
registry.k8s.io/etcd:v3.6.12
registry.k8s.io/pause:3.10.1
registry.k8s.io/kube-apiserver:v1.36.2
registry.k8s.io/kube-controller-manager:v1.36.2
registry.k8s.io/kube-scheduler:v1.36.2
registry.k8s.io/kube-proxy:v1.36.2
ghcr.io/siderolabs/kubelet:v1.36.2
registry.k8s.io/networking/kube-network-policies:v1.1.0
ghcr.io/siderolabs/installer:v1.13.8
ghcr.io/siderolabs/installer-base:v1.13.8
ghcr.io/siderolabs/imager:v1.13.8
ghcr.io/siderolabs/talos:v1.13.8
ghcr.io/siderolabs/talosctl-all:v1.13.8
ghcr.io/siderolabs/overlays:v1.13.8
ghcr.io/siderolabs/extensions:v1.13.8

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

daddy-ro · 2026-08-04T13:32:59Z

konflate — summary

Note

✅ No rendered changes.

View the full rendered diff →

_{konflate · rendered 7e2d8e0 · advisory, not a gate}

daddy-ro Bot added the type/patch label Aug 4, 2026

daddy-ro Bot changed the title ~~fix(container): update image ghcr.io/siderolabs/imager (v1.13.7 ➔ v1.13.8)~~ chore(container): update image ghcr.io/siderolabs/imager to v1.13.8 Aug 9, 2026

daddy-ro Bot force-pushed the renovate/ghcr.io-siderolabs-imager-1.x branch from 0bac607 to 7fd65b0 Compare August 19, 2026 08:02

daddy-ro Bot changed the title ~~chore(container): update image ghcr.io/siderolabs/imager to v1.13.8~~ chore(container): update image ghcr.io/siderolabs/imager to v1.13.9 Aug 19, 2026

daddy-ro Bot force-pushed the renovate/ghcr.io-siderolabs-imager-1.x branch from 7fd65b0 to a9b41c7 Compare September 3, 2026 07:03

daddy-ro Bot added type/minor and removed type/patch labels Sep 3, 2026

daddy-ro Bot changed the title ~~chore(container): update image ghcr.io/siderolabs/imager to v1.13.9~~ chore(container): update image ghcr.io/siderolabs/imager to v1.14.0 Sep 3, 2026

chore(container): update image ghcr.io/siderolabs/imager to v1.14.0

7e2d8e0

daddy-ro Bot force-pushed the renovate/ghcr.io-siderolabs-imager-1.x branch from a9b41c7 to 7e2d8e0 Compare September 4, 2026 11:06

Navigation Menu

chore(container): update image ghcr.io/siderolabs/imager to v1.14.0 - #2118

chore(container): update image ghcr.io/siderolabs/imager to v1.14.0#2118
daddy-ro[bot] wants to merge 1 commit into
mainfrom
renovate/ghcr.io-siderolabs-imager-1.x

daddy-ro Bot commented Aug 4, 2026 •

edited

Loading

Uh oh!

daddy-ro Bot commented Aug 4, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

daddy-ro Bot commented Aug 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v1.14.0

v1.13.10

Talos 1.13.10 (2026-09-03)

Component Updates

Contributors

Changes

Changes from siderolabs/pkgs

Changes from siderolabs/tools

Dependency Changes

Images

v1.13.9

Talos 1.13.9 (2026-08-19)

Component Updates

Contributors

Changes

Changes from siderolabs/pkgs

Changes from siderolabs/tools

Dependency Changes

Images

v1.13.8

Talos 1.13.8 (2026-08-04)

Component Updates

Contributors

Changes

Changes from siderolabs/pkgs

Dependency Changes

Images

Configuration

Uh oh!

daddy-ro Bot commented Aug 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

konflate — summary

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

daddy-ro Bot commented Aug 4, 2026 •

edited

Loading

`v1.14.0`

`v1.13.10`

`v1.13.9`

`v1.13.8`

daddy-ro Bot commented Aug 4, 2026 •

edited

Loading