chore: update dependencies #26
Open
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Author
|
renovate
bot
force-pushed
the
renovate/dependencies
branch
4 times, most recently
from
e694772 to
2f4a9a3
Compare
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
renovate
bot
force-pushed
the
renovate/dependencies
branch
from
2f4a9a3 to
ba14153
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Update Request | Renovate Bot
This PR contains the following updates:
79df5c4->ba97887v1.3.0-beta.1.0.20251117095803-519b46d66b1b->v1.3.4v1.12.0-alpha.2.0.20251104112157-92eeaa4826cf->v1.12.0-beta.0v1.27.0->v1.27.1v4.0.0-rc.2->v4.0.0-rc.3Release Notes
siderolabs/omni (github.com/siderolabs/omni/client)
v1.3.4Compare Source
Omni 1.3.4 (2025-11-20)
Welcome to the v1.3.4 release of Omni!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.
Contributors
Changes
2 commits
f8694b22release(v1.3.4): prepare release807b218bchore: remove nonce from the index.htmlDependency Changes
This release has no dependency changes
Previous release can be found at v1.3.3
v1.3.3Compare Source
Omni 1.3.3 (2025-11-20)
Welcome to the v1.3.3 release of Omni!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.
Contributors
Changes
9 commits
0558c18brelease(v1.3.3): prepare releaseef68e7dbtest: pick UKI and non-UKI machines correctly1e6843f7test: remove nonce CSP header test85bf6a6dfix: do not allow downloading deprecated Talos versions in the UI8fa28e76refactor: use template instead of bytes replace for noncef648ba20fix: add nonce for userpilot scripts145a3ae5fix(frontend): keep use_embedded_discovery_service state when scaling1b92fd1efix: fix typos across the projectef9c9861fix: do not clear schematic meta values for non-UKI machinesDependency Changes
This release has no dependency changes
Previous release can be found at v1.3.2
v1.3.2Compare Source
Omni 1.3.2 (2025-11-14)
Welcome to the v1.3.2 release of Omni!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.
Contributors
Changes
9 commits
0b9a38a1release(v1.3.2): prepare release42848316fix(frontend): fix exposed services sidebar not appearing5dfe4d55fix: reduce usage of cached state to avoid stale readsbecf6bd6test: fix flaky etcd backup tests11f3b039test: fix flakyMachineUpgradeStatusControllertestd7dc7788fix: use deterministic order for machine extensions8df8997afix: keep existing cluster level system extensions config in the UI394efd91fix: ignoreMachineSetswhich reference non-existing clusters04f2f465fix(frontend): remove double scrollbar on machines listDependency Changes
This release has no dependency changes
Previous release can be found at v1.3.1
v1.3.1Compare Source
Omni 1.3.1 (2025-11-07)
Welcome to the v1.3.1 release of Omni!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.
Contributors
Changes
4 commits
58332e84release(v1.3.1): prepare release35d75747fix: preventMachineSetStatusfrom going into create/destroy loopcf3c84e1fix: do not skip creating schematic config in agent mode50f6c048fix(frontend): only show label outline if selectedDependency Changes
This release has no dependency changes
Previous release can be found at v1.3.0
v1.3.0Compare Source
Omni 1.3.0 (2025-11-07)
Welcome to the v1.3.0 release of Omni!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.
Shortened Auth0 Token Lifetime
Auth0 authentication tokens now expire after 2 minutes. Users without valid PGP keys will need to reauthenticate once tokens expire.
Cluster Import (Experimental)
Omni introduces an experimental feature that allows users to import existing Talos clusters to be managed by Omni.
Documentation on how to use this feature can be found here: https://docs.siderolabs.com/omni/cluster-management/importing-talos-clusters
Multi-Select for Pending Machines
You can now accept or reject multiple pending machines at once, simplifying large-scale approvals.
Stripe Link in Settings Sidebar
A Stripe link is now shown in the Omni settings sidebar when Stripe integration is enabled.
Display Unsupported Kubernetes Versions
Unsupported Kubernetes versions are now shown in the update modal as disabled entries with explanatory messages.
Improved Kubernetes Update Modal
The Kubernetes update modal now displays only upgradeable minor versions and explains why certain versions are not upgradeable.
Enhanced CPU Information in Machine Status
Machines now report processor details when either core count or frequency is available, improving visibility into hardware specs.
Support for Modifying Kernel Arguments
Omni now supports modifying kernel arguments for the existing machines.
Documentation on how to use this feature can be found here: https://docs.siderolabs.com/omni/infrastructure-and-extensions/modify-kernel-arguments
Contributors
Changes
88 commits
3a47a7eerelease(v1.3.0): prepare release4b81c5e5fix: remove KernelArgs resource when a machine is removede51ef57atest: fix install extra kernel args in infra test8a24c83dfix: updateMachineRequestStatusresource when we populate UUIDa3d47daechore: exposeenable-talos-pre-release-versionsflag in theFeaturesConfiga1ab057brelease(v1.3.0-beta.2): prepare release13af8506fix: prevent stale reads of kernel args in schematic id calculationa243fa88fix(frontend): never add install disk for default diskaf202c46refactor(frontend): create a docs link generator084e813arefactor(frontend): refactor tselectlist with reka-ui0aba0fc7fix(frontend): ignore invalid signature error on logout516d2debfeat: permit MetaWrite/MetaDelete Talos APIsbacf80b5refactor(frontend): introduce tw-animate-css74a20773release(v1.3.0-beta.1): prepare release3f2021b0fix(frontend): remove network error toasts31d42130fix: remove non-machinery Talos import, fix changelogbb582359release(v1.3.0-beta.0): prepare releasec2cbf34bfix: get rid of an extra call of the final provision stepff79e024feat(installation-media): replace modal with link8dde49d4refactor(frontend): replace .prettierrc with prettier.config.ts9d3ae445chore(frontend): update node to latest ltsa6da9dbffeat(installation-media): add placeholder stepsafbc02f6feat(installation-media): integrate stepper into create page15dedddefeat: implement extra kernel args support832beba9fix: change the order of operations in the common infra provider libf70d78eefix: make sidebar menus which do not open routes expand the submenus52234c15fix(frontend): add missing gap in some modals0fa7d0a5fix(frontend): only clamp min/max tinput values on blur9794f6f0fix(frontend): correct the icon colors on tstatus02425267test: improve integration testsa91eabdffix: make sure that machine state is nevernilin deprovision calls4e120167fix: properly check tracking state to show user consent form25d58187feat(installation-media): add initial page for creating installation mediad9c41f11feat(installation-media): add a stepper component6d941f8afix: remove https from URL in values frile for auth0df301c98fix: make workload proxy cookies HTTP only32f72f76refactor(frontend): merge all sidebars into one sidebar4490490dfix(frontend): hide sidebar during oidc authc0e07b76fix(frontend): fix sidebar children toggle behaviorf997e541feat(frontend): add a radio group component3c139b23chore(deps): update frontend depsba821e93chore(readme): clarify readme and add a comment in vite.config about allowedHosts6e3019e2feat: add new label style to tinput20f6be0efix: correctly fetch user ID for service accounts on the role edit pageb5765d8dtest: use bridge IP for WireGuard in CI43ac1227chore: add stories for tinput and cleanupd87574a4feat(auth): make auth0 tokens only be valid for 2 minutese60c8211test: add more tests for the frontend APId0c8b166chore: bump Talos to 1.11.3, reorder CI workflow jobsf28de89afix: allow aborting kubernetes upgradesa4a91a96fix: hide cancel button on minor kubernetes upgradesa7df08aafix: honor lock status for machines during kubernetes upgradeeaa97c61chore: move image package to client2e77f37efix(frontend): correctly set the size of the lock icon for clusters90bd23a1feat(frontend): create a generic table component049ab877chore: revert 'feat: add support for updating kernel args'3139557brefactor: drop extra input finalizers0d58ade7feat: implement cluster import6ffdae00fix: remove debug codeb2fbf900feat(installation-media): add route for installation media page4eee58fbfeat(storybook): add ticon storiesc57c89e8refactor(tbutton): separate type and size styles in tbuttonaaf45de0refactor(routes): normalise /machine and /machines into /machinesc88503dcchore: bump default Talos version, deps, rekres, re-generatea9986eabfeat(frontend): clarify information inside update kubernetes modal32a69827feat(frontend): allow multi-select for pending machinesef6584f9chore(frontend): update dependencies6838947dfeat(frontend): show unsupported k8s version in modald27624abchore: rekres and bump go to 1.25.2b8b3f356feat: show cpus if they have cores or frequencyae9d7ccafeat: add support for updating kernel argse380ea45fix: typo in Helm chart readme service name for API Ingress exampleaf3eeaf4feat(frontend): add stripe link to settings sidebaref84a4carefactor: use TalosVersion compatibility in Kubernetes upgrades3675826efix(frontend): resize cluster machines correctly during deletion3cff7a60fix: update WireGuard wording to SideroLinka6562dc2fix(frontend): fix alignment of provisioning machines543f831fchore(storybook): write a story for clusters page18a8f0b0feat(frontend): add a skip parameter to skip watch dynamically3d0d0cf6fix(frontend): fix locked icon not showing when cluster is locked626e6e26refactor(msw): simplify msw handlers in storybookffd695fbfix: remove dangling cluster taints66c7d43arefactor(checkbox): change t-checkbox to use v-modelcf9c93f7feat: introduce storybook for omni frontendf1a0ce72chore: bump min Talos versionc91bd784refactor(frontend): use auth flow constants2965a614chore(ci): sops update keys12a0a6e4chore(frontend): update dependenciesChanges since v1.3.0-beta.2
5 commits
3a47a7eerelease(v1.3.0): prepare release4b81c5e5fix: remove KernelArgs resource when a machine is removede51ef57atest: fix install extra kernel args in infra test8a24c83dfix: updateMachineRequestStatusresource when we populate UUIDa3d47daechore: exposeenable-talos-pre-release-versionsflag in theFeaturesConfigChanges from siderolabs/crypto
2 commits
4154a77feat: implement dynamic certificate reloaderdae07fachore: update to Go 1.25Changes from siderolabs/go-api-signature
2 commits
876da9afeat: add method for revoking public key184f94dchore: rekres and bump go to 1.25.2Changes from siderolabs/go-debug
1 commit
d51e25achore: rekres, bump deps and goDependency Changes
6555d31->ebf3e50Previous release can be found at v1.2.0
siderolabs/talos (github.com/siderolabs/talos/pkg/machinery)
v1.12.0-beta.0Compare Source
Talos 1.12.0-beta.0 (2025-11-14)
Welcome to the v1.12.0-beta.0 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
New User Volume type - bind
New field in UserVolumeConfig -
volumeTypethat defaults topartition, but can be set todirectory.When set to
directory, provisioning and filesystem operations are skipped and a directory is created under/var/mnt/<name>.The
directorytype enables lightweight storage volumes backed by a host directory, instead of requiring a full block device partition.When
volumeType = "directory":/var/mnt/<metadata.name>;provisioning,filesystemandencryptionare prohibited.Note: this mode does not provide filesystem-level isolation and inherits the EPHEMERAL partition capacity limits.
It should not be used for workloads requiring predictable storage quotas.
Disk Encryption
Talos versions prior to v1.12 used the state of PCR 7 and signed policies locked to PCR 11 for TPM based disk encryption.
Talos now supports configuring which PCRs states are to be used for TPM based disk encryption via the
options.pcrsfield in the
tpmsection of the disk encryption configuration.If user doesn't specify any options Talos defaults to using PCR 7 for backwards compatibility with existing installations.
This change was made to improve compatibility with systems that may have varying states in PCR 7 due to UEFI Secure Boot configurations
and users may wish to disable locking to PCR 7 state entirely.
Signed PCR policies will still be bound to PCR 11.
The currently used PCR's can be seen with
talosctl get volumestatus <volume> -o yamlcommand.New User Volume type - disk
volumeTypein UserVolumeConfig can be set todisk.When set to
disk, a full block device is used for the volume.When
volumeType = "disk":minSize,maxSize,grow).Embedded Config
Talos Linux now supports embedding the machine configuration directly into the boot image.
etcd
etcd container image is now pulled from
registry.k8s.io/etcdinstead ofgcr.io/etcd-development/etcd.Ethernet Configuration
The Ethernet configuration now includes a
wakeOnLANfield to enable Wake-on-LAN (WOL) support.This field can be set to enable WOL and specify the desired WOL modes.
Extra Binaries
Talos Linux now ships with
nftbinary in the rootfs to support CNIs which shell out tonftcommand.Feature Lock
Talos now ignores the following machine configuration fields:
machine.features.rbac(locked to true)machine.features.apidCheckExtKeyUsage(locked to true)cluster.apiServer.disablePodSecurityPolicy(locked to false)These fields were removed from the default machine configuration schema in v1.12 and are now always set to the locked values above.
Talos force reboot
Talos now supports a "force" reboot mode, which allows skipping the graceful userland termination.
It can be used in situations where a userland service (e.g. the kubelet) gets stuck during graceful shutdown, causing the regular reboot flow to fail.
In addition,
talosctlwas updated to support this feature viatalosctl reboot --mode force.GRUB
Talos Linux introduces new machine configuration option
.machine.install.grubUseUKICmdlineto control whether GRUB should use the kernel command lineprovided by the boot assets (UKI) or to use the command line constructed by Talos itself (legacy behavior).
This option defaults to
truefor new installations, which means that GRUB will use the command line from the UKI, making it easier to customize kernel parameters via boot asset generation.For existing installations upgrading to v1.12, this option will default to
falseto preserve the legacy behavior.Kernel Module
Talos now supports optionally disabling kernel module signature verification by setting
module.sig_enforce=0kernel parameter.By default module signature verification is enabled (
module.sig_enforce=1).When using Factory or Imager supply as
-module.sig_enfore module.sig_enforce=0kernel parameters to disable module signature enforcement.Kernel Security Posture Profile (KSPP)
Talos now enables a stricter set of KSPP sysctl settings by default.
The list of overridden settings is available with
talosctl get kernelparamstatuscommand.Encrypted Volumes
Talos Linux now consistently provides mapped names for encrypted volumes in the format
/dev/mapper/luks2-<volume-id>.This change should not affect system or user volumes, but might allow easier identification of encrypted volumes,
and specifically for raw encrypted volumes.
Network Configuration
The network configuration under
.machine.network(with the exception of KubeSpan) has been deprecated, but it is still supported for backwards compatibility.New configuration documents were created to replace it, they will be documented in the future.
CRI Registry Configuration
The CRI registry configuration in v1apha1 legacy machine configuration under
.machine.registriesis now deprecated, but still supported for backwards compatibility.New configuration documents
RegistryMirrorConfig,RegistryAuthConfigandRegistryTLSConfigshould be used instead.talosctl image cache-serve
talosctlincludes new subcommandimage cache-serve.It allows serving the created OCI image registry over HTTP/HTTPS.
It is a read-only registry, meaning images cannot be pushed to it, but the backing storage can be updated by re-running the
cache-createcommand;Additionally
talosctl image cache-createhas some changes:--layout:oci(default),flat:ocipreserves current behavior;flatdoes not repack artifact layer, but moves it to a destination directory, allowing it to be served bytalosctl image cache-serve;--platform: now can accept multiple os/arch combinations:--platform=linux/amd64,linux/arm64);--platform=linux/amd64 --platform=linux/arm64);UEFI Boot
When using UEFI boot with systemd-boot as bootloader (on new installs of Talos from 1.10+ onwards), Talos will now not touch the UEFI boot order.
Talos 1.11 made a fix to create UEFI boot entry and set the boot order as first entry, but this behavior caused issues on some systems.
To avoid further issues, Talos will now only create the UEFI boot entry if it does not exist, but will not modify the boot order.
Component Updates
Linux: 6.17.7
Kubernetes: 1.35.0-alpha.3
CNI Plugins: 1.8.0
cryptsetup: 2.8.1
LVM2: 2_03_34
systemd-udevd: 257.8
runc: 1.3.2
CoreDNS: 1.13.1
etcd: 3.6.5
Flannel: 0.27.4
Flannel CNI plugin: v1.8.0-flannel2
runc: 1.3.3
containerd: 2.1.5
Talos is built with Go 1.25.4.
Contributors
Changes
291 commits
3d997d7release(v1.12.0-beta.0): prepare releasee62384bfix: re-creating STATE after partition drop6919d23docs: update kernel args size887b296test: randomize MAC addresses used in the unit-tests6063fbffeat: update dependencies542a67afeat: add riscv64 build of talosctl68560b5fix: split volume/disk locators2c3d30edocs: fix image-cache-path flag description93f2e87feat: shorthand for generating secrets to stdout5e1de00feat: implement time and resolvers multi-doc configuration399240bfeat: drop partitions on reset with system partitions wipe5cca966feat: add new rockchip sbcs00fe50dfix: uefi bootorder setting3a88118chore: improve error handling for system disk reset859194echore: extract system+user volume config transformers, test308c6bcfeat: add full disk volumes82ac111feat: implement new registry configuration106f457feat: update Linux kernel with userfaultfd/VDPA721a1e0chore: rename+improveclient.ErrEventNotSupported43f4e31fix: race between VolumeConfigController and UserVolumeConfigController66c01a7chore: deprecate interactive installer mode957770ffeat(machined): add panic/force mode reboot60be0dafeat: implement multi-doc Wireguard configcf014cbfix: only set default bootloader if none is sete9b016ffix: use strict platform match when pulling imagesfafab39feat: update Kubernetes to 1.35.0-alpha.37bf3aacfeat: allow glibc aarch64 so files in extensionsc8561eefeat: implement bridge multi-document configf4ad307feat: implement bond multi-doc configuration75fe475fix: stop attaching to tearing down mount parentsc93a9c6fix: improve OOM controller stability and make test strict on false positives021bbfefeat: update Go 1.25.4, containerd 2.1.5e25db48test: disable parallelism in Longhorn tests54b93affeat: update Linux 6.17.7, runc 1.3.32af69fffix: provide minimal platform metadata always92eeaa4fix: update YAML libraryaa24da9fix: bump kubelet credendial provider config to v1335f917feat: add short -c flag for --cluster4c09528fix: set a timeout for SideroLink provision API call75e4c4afix: log duplication on log senderse3cbc92fix: add video kernel module to armd69305afix: userspace wireguard handlingee5fee7fix: image-signer commandsbe028b6feat: add support for multi-doc VLAN configf3df0f8feat: add directory backed UserVolumes0327e77feat: add support for dashboard custom console parameterfed948brelease(v1.12.0-alpha.2): prepare releasefb4bfe8chore: fix LVM testf4ee0d1chore: disable VIP operator test288f638feat: bump depsb66482cfeat: allow disabling injection of extra cmdline in cluster create704b5f9feat: update Kubernetes to 1.35.0-alpha.21dffa5dfeat: implement virtual IP operator config43b1d75fix: validate provisioner when destroying local clustersb494c54fix: talos import on non-linux61e95cbfeat: support bootloader option for ISOd110727fix: provide offset for partitions in discovered volumes39eeae9feat: update dependencies9890a9atest: fix OOM testc0772b8feat: add airgapped mode to QEMU backed talosac60a9efix: update test for PCI driver rebind/IOMMU6c98f4cfeat: implement new DHCP network configurationda92a75fix: drop 'ro' falg from defaults28fd239fix: imager build on arm644e12df8test: integration test for OOM controller7e498fafeat: use image signereccb21dfeat: add presets to the 'cluster create qemu' commandec0a813feat: unify cmdline handling GRUB/systemd-boot37e4c40fix: skip module signature tests on docker provisioner only8124efbfix: cache e2e4adcda0fix: reserve the apid and trustd ports from the ephemeral port rangeced57b0feat: support optionally disabling module sig verification1e5c4edfix: build talosctl image cache-serve non-linuxdbdd2b2feat: add static registry to talosctl77d8cc7chore: pushlatesttag only on main59d9b1cfeat: update dependenciesbf6ad51feat: add back install scriptda451c5chore: drop documentation except for fresh reference2f23fedfix: file leak in reading cgroupsb412ffddocs: update README.md for docs link8dc51bafeat: add drm_gpuvm and drm_gpusvm_helper modules4ca58aefix: make Akamai platform usable061f8e7feat: bump pkgsa9fa852feat: update uefi image to talos linux logo04753bafeat: update go to 1.25.29a42b05feat: implement link aliasingd732bd0chore(ci): run only nvidia tests for NVIDIA workflows8d14682fix: stop populating apiserver cert SANs0247324fix: wait for mount status to be proper mode825622dfix: resource proto definitions2c6003edocs: add Project Calico installation in two mode4fb4c86feat: add disk.EnableUUID to generated ova33fb48ffix: add dashboard spinner053fd0bfeat: update Linux to 6.1734e107edocs: fix broken linkdfbece5docs: update the kubespan docs8b041a7docs: update scaleway.md435dcbffix: provide nocloud metadata with missing network configec3bd87refactor: remove the go-blockdevice v1 completely33544bdfix: minor improvements to fsfd2eebffeat: create merge patch from diff of two machine configseadbddafix: uefi boot order settingcd9fb27fix: support secure HTTP proxy with gRPC dialadf87b4feat: update Flannel to v0.27.45dfb7e1feat: serve etcd image from registry.k8s.io5ca8418fix: nftables flaky testa940e45feat: generate list of images required to build talos3472d6efix: revert "chore: use new mount/v3 package in efivarfs"42c0bdbfeat: add provisioner flag to images default command6bc0b1bfeat: drop and lock deprecated features362a8e6fix: change the compression format6e58f58fix: mkdir artifacts path3165a2brelease(v1.12.0-alpha.1): prepare releasee455c7echore: use testing/synctest in tests7f048e9feat: update dependenciesfe36b3dfix: stop returning EINVAL on remount of detached mountsc6279e0chore: use new mount/v3 package in efivarfsd5197effeat: update etcd 3.6.5, CoreDNS 1.12.433714b7feat: release cloud image using factoryd10a274docs: deprecate JSON6902 patches and interactive installer1e604cbfix: don't set broadcast for /31 and /32 addresses65a6609refactor: split cluster create logic into smaller partsab84731fix: provide refreshing CA pool (resolvers)d63c3eddocs: update secureboot docs493f7edfeat: support embedded config251df70feat: add a userspace OOM controller7bae5b4feat: implement link configuration724857dfix(ci): skip netbird extension for testse06a086fix: default gateway as string7ed0741fix: uefi boot entry handling logicea4ed16refactor: efivarfs mock and tests1fca111feat: support setting wake-on-lan for Ethernet94f78dbdocs: add a documentation for running Talos in KVM46902f8docs: add TrueFullstaq to adoptersa28e5cbchore: update pkgs and tools7cf403d](https://redirect.github.com/siderolabs/talos/commConfiguration
📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.