grachevko/home-ops
Watch
1
0
Fork
You've already forked home-ops
 0
Code Issues 11 Pull requests 3 Activity Actions

chore(github-release): update talos group #467

Merged
renovate merged 1 commit from renovate-talos into main 2026-10-30 02:03:12 +00:00
Conversation 0 Commits 1 Files changed 3 +15 -15
renovate commented 2026-10-30 02:02:59 +00:00
Collaborator

This PR contains the following updates:

Package Type Update Change
siderolabs/talos patch v1.14.4 → v1.14.5
talosctl tools patch 1.14.4 → 1.14.5

Release Notes

siderolabs/talos

v1.14.5

Compare Source

Talos 1.14.5 (2026-10-26)

Welcome to the v1.14.5 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

On-demand Kernel Module Loading

The kernel can once again ask Talos to load a module on demand (request_module()), e.g. when a driver loads a helper module while probing a device,
or when DRBD loads its transport module.
Talos handles the kernel's modprobe usermode helper call and loads the module (shipped with Talos or a system extension) by the requested name,
applying the parameters from KernelModuleConfig if the module is listed in the machine config.
Such modules no longer need to be listed in the machine config, and the order of the listed modules is not important.

Requests via subsystem aliases (e.g. fs-*, net-pf-*, crypto-*), which userspace can trigger via mounts, sockets, etc., are refused,
so on-demand loading can't be used to load arbitrary modules from workloads.
The outcome of each request is logged to the kernel log (talosctl dmesg).

Component Updates

Linux: 6.18.58
etcd: 3.7.3

Talos is built with Go 1.26.10.

Contributors
  • Andrey Smirnov
  • Mateusz Urbanek
  • immanuwell
  • Daniel Chaplin
  • Erwan Leboucher
  • Kyle Tse
  • Michał Małyska
  • Nicolas Brainez
  • Orzelius
  • sasha-sup
Changes
25 commits

  • @​dad8d3e release(v1.14.5): prepare release
  • @​2f97b6a test: verify on-demand kernel module loading end-to-end
  • @​c35fd8c feat: load kernel modules on demand via the modprobe usermode helper
  • @​bf34a0e feat: add EDAC_10NM kernel module
  • @​25c1676 fix: race with platform accessing metadata volumes
  • @​b88cda9 feat: update etcd to 3.7.3
  • @​34d4080 fix: pull images over HTTP/1.1
  • @​2dc3686 fix: preserve project quotas on temporary growfs mounts
  • @​bffcf9b fix: correctly pass hostname to the proxy in gRPC dial
  • @​6b3ea90 fix: preserve rejected edits in talosctl edit
  • @​b6e5fa2 feat: implement RAID1 (md-raid) support in BIOS mode
  • @​fb2b077 fix: ignore netlink recoverable errors in watchers
  • @​2f7efe8 fix: skip kexec when the kernel finds no free memory region
  • @​d648845 fix: provide proper concurrency for health checks
  • @​0307531 fix: preserve omitted CEL expressions when patching configs
  • @​aca5abc fix: skip EFI boot entries that cannot be decoded
  • @​9c69456 fix: read VMware guestinfo with SecureBoot enabled
  • @​6c6fec7 fix: parse EFI load options with an empty description
  • @​e000232 fix: route pod CIDRs matching the KubeSpan ULA purpose byte
  • @​449f82d fix: wait for inactive MD arrays before volume discovery
  • @​824b0f9 test: reproduce degraded md boot array reboot
  • @​ce2fa41 fix: high cpu usage by the bridge keepalive dummy qemu vm
  • @​51eda9a chore: add qemu-ip-family integration suite
  • @​e700de0 feat: update Linux 6.18.58, Go 1.26.10
  • @​3fb46c3 release(v1.14.4): prepare release

Changes since v1.14.4
24 commits

  • @​dad8d3e release(v1.14.5): prepare release
  • @​2f97b6a test: verify on-demand kernel module loading end-to-end
  • @​c35fd8c feat: load kernel modules on demand via the modprobe usermode helper
  • @​bf34a0e feat: add EDAC_10NM kernel module
  • @​25c1676 fix: race with platform accessing metadata volumes
  • @​b88cda9 feat: update etcd to 3.7.3
  • @​34d4080 fix: pull images over HTTP/1.1
  • @​2dc3686 fix: preserve project quotas on temporary growfs mounts
  • @​bffcf9b fix: correctly pass hostname to the proxy in gRPC dial
  • @​6b3ea90 fix: preserve rejected edits in talosctl edit
  • @​b6e5fa2 feat: implement RAID1 (md-raid) support in BIOS mode
  • @​fb2b077 fix: ignore netlink recoverable errors in watchers
  • @​2f7efe8 fix: skip kexec when the kernel finds no free memory region
  • @​d648845 fix: provide proper concurrency for health checks
  • @​0307531 fix: preserve omitted CEL expressions when patching configs
  • @​aca5abc fix: skip EFI boot entries that cannot be decoded
  • @​9c69456 fix: read VMware guestinfo with SecureBoot enabled
  • @​6c6fec7 fix: parse EFI load options with an empty description
  • @​e000232 fix: route pod CIDRs matching the KubeSpan ULA purpose byte
  • @​449f82d fix: wait for inactive MD arrays before volume discovery
  • @​824b0f9 test: reproduce degraded md boot array reboot
  • @​ce2fa41 fix: high cpu usage by the bridge keepalive dummy qemu vm
  • @​51eda9a chore: add qemu-ip-family integration suite
  • @​e700de0 feat: update Linux 6.18.58, Go 1.26.10

Changes from siderolabs/pkgs
6 commits

Changes from siderolabs/tools
2 commits

Dependency Changes
  • github.com/siderolabs/pkgs v1.14.0-42-g5fa47d1 -> v1.14.0-48-gf4bda77
  • github.com/siderolabs/talos/pkg/machinery v1.14.3 -> v1.14.5
  • github.com/siderolabs/tools v1.14.0-9-g6b71647 -> v1.14.0-11-g8dad45e
  • go.etcd.io/etcd/api/v3 v3.7.2 -> v3.7.3
  • go.etcd.io/etcd/client/pkg/v3 v3.7.2 -> v3.7.3
  • go.etcd.io/etcd/client/v3 v3.7.2 -> v3.7.3
  • go.etcd.io/etcd/etcdutl/v3 v3.7.2 -> v3.7.3
  • golang.org/x/net v0.60.0 -> v0.61.0
  • golang.org/x/sync v0.23.0 -> v0.24.0
  • golang.org/x/sys v0.48.0 -> v0.49.0
  • golang.org/x/term v0.46.0 -> v0.47.0
  • golang.org/x/text v0.42.0 -> v0.43.0

Previous release can be found at v1.14.3

Images
ghcr.io/siderolabs/flannel:0.28.9
registry.k8s.io/coredns/coredns:v1.14.7
registry.k8s.io/etcd:v3.7.3
registry.k8s.io/pause:3.10.2
registry.k8s.io/kube-apiserver:v1.37.1
registry.k8s.io/kube-controller-manager:v1.37.1
registry.k8s.io/kube-scheduler:v1.37.1
registry.k8s.io/kube-proxy:v1.37.1
ghcr.io/siderolabs/kubelet:v1.37.1
registry.k8s.io/networking/kube-network-policies:v1.1.2
ghcr.io/siderolabs/installer-base:v1.14.5
ghcr.io/siderolabs/imager:v1.14.5
ghcr.io/siderolabs/talos:v1.14.5
ghcr.io/siderolabs/talosctl-all:v1.14.5
ghcr.io/siderolabs/overlays:v1.14.5
ghcr.io/siderolabs/extensions:v1.14.5

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [siderolabs/talos](https://github.com/siderolabs/talos) | | patch | `v1.14.4` → `v1.14.5` | | [talosctl](https://github.com/siderolabs/talos) | tools | patch | `1.14.4` → `1.14.5` | --- ### Release Notes <details> <summary>siderolabs/talos</summary> ### [`v1.14.5`](https://github.com/siderolabs/talos/releases/tag/v1.14.5) [Compare Source](https://github.com/siderolabs/talos/compare/v1.14.4...v1.14.5) ##### [Talos 1.14.5](https://github.com/siderolabs/talos/releases/tag/v1.14.5) (2026-10-26) Welcome to the v1.14.5 release of Talos! Please try out the release binaries and report any issues at <https://github.com/siderolabs/talos/issues>. ##### On-demand Kernel Module Loading The kernel can once again ask Talos to load a module on demand (`request_module()`), e.g. when a driver loads a helper module while probing a device, or when DRBD loads its transport module. Talos handles the kernel's `modprobe` usermode helper call and loads the module (shipped with Talos or a system extension) by the requested name, applying the parameters from `KernelModuleConfig` if the module is listed in the machine config. Such modules no longer need to be listed in the machine config, and the order of the listed modules is not important. Requests via subsystem aliases (e.g. `fs-*`, `net-pf-*`, `crypto-*`), which userspace can trigger via mounts, sockets, etc., are refused, so on-demand loading can't be used to load arbitrary modules from workloads. The outcome of each request is logged to the kernel log (`talosctl dmesg`). ##### Component Updates Linux: 6.18.58 etcd: 3.7.3 Talos is built with Go 1.26.10. ##### Contributors - Andrey Smirnov - Mateusz Urbanek - immanuwell - Daniel Chaplin - Erwan Leboucher - Kyle Tse - Michał Małyska - Nicolas Brainez - Orzelius - sasha-sup ##### Changes <details><summary>25 commits</summary> <p> - [@&#8203;`dad8d3e`](https://github.com/siderolabs/talos/commit/dad8d3edf) release(v1.14.5): prepare release - [@&#8203;`2f97b6a`](https://github.com/siderolabs/talos/commit/2f97b6a4b) test: verify on-demand kernel module loading end-to-end - [@&#8203;`c35fd8c`](https://github.com/siderolabs/talos/commit/c35fd8cef) feat: load kernel modules on demand via the modprobe usermode helper - [@&#8203;`bf34a0e`](https://github.com/siderolabs/talos/commit/bf34a0ebb) feat: add EDAC_10NM kernel module - [@&#8203;`25c1676`](https://github.com/siderolabs/talos/commit/25c16761c) fix: race with platform accessing metadata volumes - [@&#8203;`b88cda9`](https://github.com/siderolabs/talos/commit/b88cda936) feat: update etcd to 3.7.3 - [@&#8203;`34d4080`](https://github.com/siderolabs/talos/commit/34d408094) fix: pull images over HTTP/1.1 - [@&#8203;`2dc3686`](https://github.com/siderolabs/talos/commit/2dc3686b1) fix: preserve project quotas on temporary growfs mounts - [@&#8203;`bffcf9b`](https://github.com/siderolabs/talos/commit/bffcf9b48) fix: correctly pass hostname to the proxy in gRPC dial - [@&#8203;`6b3ea90`](https://github.com/siderolabs/talos/commit/6b3ea905b) fix: preserve rejected edits in talosctl edit - [@&#8203;`b6e5fa2`](https://github.com/siderolabs/talos/commit/b6e5fa2e2) feat: implement RAID1 (md-raid) support in BIOS mode - [@&#8203;`fb2b077`](https://github.com/siderolabs/talos/commit/fb2b077b5) fix: ignore netlink recoverable errors in watchers - [@&#8203;`2f7efe8`](https://github.com/siderolabs/talos/commit/2f7efe81b) fix: skip kexec when the kernel finds no free memory region - [@&#8203;`d648845`](https://github.com/siderolabs/talos/commit/d6488456b) fix: provide proper concurrency for health checks - [@&#8203;`0307531`](https://github.com/siderolabs/talos/commit/03075319b) fix: preserve omitted CEL expressions when patching configs - [@&#8203;`aca5abc`](https://github.com/siderolabs/talos/commit/aca5abc16) fix: skip EFI boot entries that cannot be decoded - [@&#8203;`9c69456`](https://github.com/siderolabs/talos/commit/9c69456c9) fix: read VMware guestinfo with SecureBoot enabled - [@&#8203;`6c6fec7`](https://github.com/siderolabs/talos/commit/6c6fec7d5) fix: parse EFI load options with an empty description - [@&#8203;`e000232`](https://github.com/siderolabs/talos/commit/e0002327b) fix: route pod CIDRs matching the KubeSpan ULA purpose byte - [@&#8203;`449f82d`](https://github.com/siderolabs/talos/commit/449f82d46) fix: wait for inactive MD arrays before volume discovery - [@&#8203;`824b0f9`](https://github.com/siderolabs/talos/commit/824b0f976) test: reproduce degraded md boot array reboot - [@&#8203;`ce2fa41`](https://github.com/siderolabs/talos/commit/ce2fa4132) fix: high cpu usage by the bridge keepalive dummy qemu vm - [@&#8203;`51eda9a`](https://github.com/siderolabs/talos/commit/51eda9a51) chore: add qemu-ip-family integration suite - [@&#8203;`e700de0`](https://github.com/siderolabs/talos/commit/e700de0c0) feat: update Linux 6.18.58, Go 1.26.10 - [@&#8203;`3fb46c3`](https://github.com/siderolabs/talos/commit/3fb46c378) release(v1.14.4): prepare release </p> </details> ##### Changes since v1.14.4 <details><summary>24 commits</summary> <p> - [@&#8203;`dad8d3e`](https://github.com/siderolabs/talos/commit/dad8d3edf) release(v1.14.5): prepare release - [@&#8203;`2f97b6a`](https://github.com/siderolabs/talos/commit/2f97b6a4b) test: verify on-demand kernel module loading end-to-end - [@&#8203;`c35fd8c`](https://github.com/siderolabs/talos/commit/c35fd8cef) feat: load kernel modules on demand via the modprobe usermode helper - [@&#8203;`bf34a0e`](https://github.com/siderolabs/talos/commit/bf34a0ebb) feat: add EDAC_10NM kernel module - [@&#8203;`25c1676`](https://github.com/siderolabs/talos/commit/25c16761c) fix: race with platform accessing metadata volumes - [@&#8203;`b88cda9`](https://github.com/siderolabs/talos/commit/b88cda936) feat: update etcd to 3.7.3 - [@&#8203;`34d4080`](https://github.com/siderolabs/talos/commit/34d408094) fix: pull images over HTTP/1.1 - [@&#8203;`2dc3686`](https://github.com/siderolabs/talos/commit/2dc3686b1) fix: preserve project quotas on temporary growfs mounts - [@&#8203;`bffcf9b`](https://github.com/siderolabs/talos/commit/bffcf9b48) fix: correctly pass hostname to the proxy in gRPC dial - [@&#8203;`6b3ea90`](https://github.com/siderolabs/talos/commit/6b3ea905b) fix: preserve rejected edits in talosctl edit - [@&#8203;`b6e5fa2`](https://github.com/siderolabs/talos/commit/b6e5fa2e2) feat: implement RAID1 (md-raid) support in BIOS mode - [@&#8203;`fb2b077`](https://github.com/siderolabs/talos/commit/fb2b077b5) fix: ignore netlink recoverable errors in watchers - [@&#8203;`2f7efe8`](https://github.com/siderolabs/talos/commit/2f7efe81b) fix: skip kexec when the kernel finds no free memory region - [@&#8203;`d648845`](https://github.com/siderolabs/talos/commit/d6488456b) fix: provide proper concurrency for health checks - [@&#8203;`0307531`](https://github.com/siderolabs/talos/commit/03075319b) fix: preserve omitted CEL expressions when patching configs - [@&#8203;`aca5abc`](https://github.com/siderolabs/talos/commit/aca5abc16) fix: skip EFI boot entries that cannot be decoded - [@&#8203;`9c69456`](https://github.com/siderolabs/talos/commit/9c69456c9) fix: read VMware guestinfo with SecureBoot enabled - [@&#8203;`6c6fec7`](https://github.com/siderolabs/talos/commit/6c6fec7d5) fix: parse EFI load options with an empty description - [@&#8203;`e000232`](https://github.com/siderolabs/talos/commit/e0002327b) fix: route pod CIDRs matching the KubeSpan ULA purpose byte - [@&#8203;`449f82d`](https://github.com/siderolabs/talos/commit/449f82d46) fix: wait for inactive MD arrays before volume discovery - [@&#8203;`824b0f9`](https://github.com/siderolabs/talos/commit/824b0f976) test: reproduce degraded md boot array reboot - [@&#8203;`ce2fa41`](https://github.com/siderolabs/talos/commit/ce2fa4132) fix: high cpu usage by the bridge keepalive dummy qemu vm - [@&#8203;`51eda9a`](https://github.com/siderolabs/talos/commit/51eda9a51) chore: add qemu-ip-family integration suite - [@&#8203;`e700de0`](https://github.com/siderolabs/talos/commit/e700de0c0) feat: update Linux 6.18.58, Go 1.26.10 </p> </details> ##### Changes from siderolabs/pkgs <details><summary>6 commits</summary> <p> - [siderolabs/pkgs@`f4bda77`](https://github.com/siderolabs/pkgs/commit/f4bda77) feat: update Linux to 6.18.58 - [siderolabs/pkgs@`a068a03`](https://github.com/siderolabs/pkgs/commit/a068a03) feat: enable EDAC_10NM kernel option - [siderolabs/pkgs@`ec11950`](https://github.com/siderolabs/pkgs/commit/ec11950) fix: restore ACPI power button - [siderolabs/pkgs@`42b6fe2`](https://github.com/siderolabs/pkgs/commit/42b6fe2) feat: update tools/toolchain - [siderolabs/pkgs@`2ec10eb`](https://github.com/siderolabs/pkgs/commit/2ec10eb) chore: update DRBD compat - [siderolabs/pkgs@`643b731`](https://github.com/siderolabs/pkgs/commit/643b731) feat: update Linux to 6.18.57 </p> </details> ##### Changes from siderolabs/tools <details><summary>2 commits</summary> <p> - [siderolabs/tools@`8dad45e`](https://github.com/siderolabs/tools/commit/8dad45e) feat: update ca-certificates to 2026-10-20 - [siderolabs/tools@`c6b3f5c`](https://github.com/siderolabs/tools/commit/c6b3f5c) chore: update the toolchain </p> </details> ##### Dependency Changes - **github.com/siderolabs/pkgs** v1.14.0-42-g5fa47d1 -> v1.14.0-48-gf4bda77 - **github.com/siderolabs/talos/pkg/machinery** v1.14.3 -> v1.14.5 - **github.com/siderolabs/tools** v1.14.0-9-g6b71647 -> v1.14.0-11-g8dad45e - **go.etcd.io/etcd/api/v3** v3.7.2 -> v3.7.3 - **go.etcd.io/etcd/client/pkg/v3** v3.7.2 -> v3.7.3 - **go.etcd.io/etcd/client/v3** v3.7.2 -> v3.7.3 - **go.etcd.io/etcd/etcdutl/v3** v3.7.2 -> v3.7.3 - **golang.org/x/net** v0.60.0 -> v0.61.0 - **golang.org/x/sync** v0.23.0 -> v0.24.0 - **golang.org/x/sys** v0.48.0 -> v0.49.0 - **golang.org/x/term** v0.46.0 -> v0.47.0 - **golang.org/x/text** v0.42.0 -> v0.43.0 Previous release can be found at [v1.14.3](https://github.com/siderolabs/talos/releases/tag/v1.14.3) ##### Images ``` ghcr.io/siderolabs/flannel:0.28.9 registry.k8s.io/coredns/coredns:v1.14.7 registry.k8s.io/etcd:v3.7.3 registry.k8s.io/pause:3.10.2 registry.k8s.io/kube-apiserver:v1.37.1 registry.k8s.io/kube-controller-manager:v1.37.1 registry.k8s.io/kube-scheduler:v1.37.1 registry.k8s.io/kube-proxy:v1.37.1 ghcr.io/siderolabs/kubelet:v1.37.1 registry.k8s.io/networking/kube-network-policies:v1.1.2 ghcr.io/siderolabs/installer-base:v1.14.5 ghcr.io/siderolabs/imager:v1.14.5 ghcr.io/siderolabs/talos:v1.14.5 ghcr.io/siderolabs/talosctl-all:v1.14.5 ghcr.io/siderolabs/overlays:v1.14.5 ghcr.io/siderolabs/extensions:v1.14.5 ``` </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODAuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9naXRodWItcmVsZWFzZSIsInR5cGUvcGF0Y2giXX0=-->
chore(github-release): update talos group
All checks were successful
LLM Review / LLM Review (pull_request) Has been skipped
Details
renovate/stability-days Updates have met minimum release age requirement
Details
LLM Review / LLM Review - Success (pull_request) Successful in 4s
Details
Flate / Flate - Success (pull_request) Successful in 3s
Details
Flate / Flate - Filter (pull_request) Successful in 4s
Details
Flate / Flate (pull_request) Has been skipped
Details
c8b5f7d2d9
renovate scheduled this pull request to auto merge when all checks succeed 2026-10-30 02:03:00 +00:00
renovate deleted branch renovate-talos 2026-10-30 02:03:12 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
grachevko/home-ops!467
No description provided.