From af21e15784665f9e232b933927467b0951bb3e31 Mon Sep 17 00:00:00 2001
From: TrueCharts Bot <bot@truecharts.org>
Date: Wed, 5 Mar 2025 13:10:16 +0100
Subject: [PATCH] =?UTF-8?q?fix(deps):=20update=20module=20github.com/sider?=
 =?UTF-8?q?olabs/talos/pkg/machinery=20v1.10.0-alpha.1.0.20250203100439-e2?=
 =?UTF-8?q?aa7c98cceb=20=E2=86=92=20v1.10.0-alpha.2=20(clustertool)=20(#32?=
 =?UTF-8?q?875)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/siderolabs/talos/pkg/machinery](https://redirect.github.com/siderolabs/talos)
| require | patch | `v1.10.0-alpha.1.0.20250203100439-e2aa7c98cceb` ->
`v1.10.0-alpha.2` |

---

### Release Notes

<details>
<summary>siderolabs/talos
(github.com/siderolabs/talos/pkg/machinery)</summary>

###
[`v1.10.0-alpha.2`](https://redirect.github.com/siderolabs/talos/releases/tag/v1.10.0-alpha.2)

[Compare
Source](https://redirect.github.com/siderolabs/talos/compare/v1.10.0-alpha.1...v1.10.0-alpha.2)

#### [Talos
1.10.0-alpha.2](https://redirect.github.com/siderolabs/talos/releases/tag/v1.10.0-alpha.2)
(2025-03-05)

Welcome to the v1.10.0-alpha.2 release of Talos!\
*This is a pre-release of Talos*

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

##### auditd

Kernel parameter `talos.auditd.disabled=1` can be used to disable Talos
built-in `auditd` service.

##### cgroups v1

Talos Linux no longer supports `cgroupsv1` when running in non-container
mode.
The kernel argument `talos.unified_cgroup_hierarchy` is now ignored.

##### Disk Image

Talos starting with 1.10 will have disk images that will use GRUB only
for legacy BIOS and systemd-boot for modern UEFI systems.
On first boot Talos determines the boot method and will wipe the unused
bootloader.

Secureboot disk-images will be sd-boot only.

For ARM64 imager will still generate GRUB bootloader for Talos < 1.10
and for Talos >= 1.10 all ARM64 boot assets will use systemd-boot.

Imager supports overwriting bootloader when generating a disk image via
the Imager profile `output` option.

Eg:

```yaml
output:
  kind: image
  imageOptions:
    bootloader: sd-boot # supported options are sd-boot, grub, dual-boot
```

##### Driver Rebind

Talos 1.10 now supports a new machine config document named
`PCIDriverRebindConfig` that allows rebinding the driver of a PCI device
to a different target driver.
See the
[documentation](https://www.talos.dev/v1.10/reference/configuration/hardware/pcidriverrebindconfig/)
for more information.

##### Ethernet

Talos now provides `ethtool`-style Ethernet low-level configuration via
`network/EthernetConfig` documents.
Current status of the interface can be read by `talosctl get
ethernetstatus`.

##### Ingress Firewall

Talos Ingress Firewall now filters access to Kubernetes NodePort
services correctly.

##### iSCSI Initiator

Talos now generates `/etc/iscsi/initiatorname.iscsi` file based on the
node identity which is tied to the lifecycle of the node.
If using `iscsi-tools` extension, starting with Talos 1.10 would have a
more deterministic IQN for the initiator node.
Make sure to update any iSCSI targets to use the new initiator IQN.

The iqn can be read by `talosctl read /etc/iscsi/initiatorname.iscsi`

##### ISO

Talos starting with 1.10 will have ISO's that will use GRUB only for
legacy BIOS and systemd-boot for modern UEFI systems.

##### kube-apiserver Authorization Config

When using `.cluster.apiServer.authorizationConfig` the user provided
order for the authorizers is honoured and `Node` and `RBAC` authorizers
are always added to the end if not explicitly specified.

Eg: If user provides only `Webhook` authorizer, the final order will be
`Webhook`, `Node`, `RBAC`.

To provide a specific order for `Node` or `RBAC` explicitly, user can
provide the authorizer in the order they want.

Eg:

```yaml
cluster:
  apiServer:
    authorizationConfig:
      - type: Node
        name: Node
      - type: Webhook
        name: Webhook
        webhook:
          connectionInfo:
            type: InClusterConfig
        ...
      - type: RBAC
        name: rbac
```

Usage of `authorization-mode` CLI argument will not support this form of
customization.

##### NVMe NQN

Talos now generates `/etc/nvme/hostnqn` and `/etc/nvme/hostid` files
based on the node identity which is tied to the lifecycle of the node.

The NQN can be read by `talosctl read /etc/nvme/hostnqn`

##### Fully bootstrapped builds

Talos 1.10 is built with a toolchain based on
[\[Stageˣ\]](https://stagex.tools/), which is a project building fully
bootstrapped software.
This change increases reproducibility, auditability and security of
Talos builds.

This also changes Talos root filesystem structure for unified /usr, with
other directories symlinking to /usr/bin and /usr/lib.
System extensions must move their directories accordingly for 1.10.

##### Component Updates

-   Linux: 6.12.17
-   CNI plugins: 1.6.2
-   runc: 1.2.5
-   containerd: 2.0.3
-   etcd: 3.5.18
-   Flannel: 0.26.4
-   Kubernetes: 1.33.0-alpha.2

Talos is built with Go 1.24.0.

##### Contributors

-   Andrey Smirnov
-   Noel Georgi
-   Dmitry Sharshakov
-   Dmitriy Matrenichev
-   Dmitrii Sharshakov
-   Justin Garrison
-   Mathspy
-   Nico Berlee
-   Skyler Mäntysaari
-   Utku Ozdemir
-   ihelmer07
-   459below
-   Alexis La Goutte
-   Andrew Longwill
-   Andrew Symington
-   Christian Luetke-Stetzkamp
-   Christoph Hoopmann
-   Devin Buhl
-   Dominik Masur
-   Florian Grignon
-   Ganawa Juanah
-   Jason Benedicic
-   Joakim Nohlgård
-   K Birt
-   KillianCdP
-   L.J. Hanson
-   Louis SCHNEIDER
-   Marcel Hamer
-   Mikhail Petrov
-   Motte
-   Natalie Romana Albers
-   Orzelius
-   PRIHLOP
-   Ram
-   Robin Elfrink
-   Ryan Jacobs
-   Serge Logvinov
-   Thomas Gosteli
-   Tim Olson
-   Tine Jozelj
-   TomyLobo
-   bzub
-   greenpsi
-   sflotat2607
-   suse-coder

##### Changes

<details><summary>221 commits</summary>
<p>

-
[@&#8203;`ab6cb3d`](https://redirect.github.com/siderolabs/talos/commit/ab6cb3dfa)
chore: disable azure upload
-
[@&#8203;`2355218`](https://redirect.github.com/siderolabs/talos/commit/2355218e4)
release(v1.10.0-alpha.2): prepare release
-
[@&#8203;`d4e3e95`](https://redirect.github.com/siderolabs/talos/commit/d4e3e957c)
fix(ci): fix integration tests
-
[@&#8203;`1849b53`](https://redirect.github.com/siderolabs/talos/commit/1849b5388)
feat: update dependencies
-
[@&#8203;`88fc6bb`](https://redirect.github.com/siderolabs/talos/commit/88fc6bbeb)
test: fix UKI preserving talos.config and image cache
-
[@&#8203;`ba8cd30`](https://redirect.github.com/siderolabs/talos/commit/ba8cd304d)
test: enable image-cache in the cron
-
[@&#8203;`28b5dc7`](https://redirect.github.com/siderolabs/talos/commit/28b5dc738)
test: fix reproduciblity test
-
[@&#8203;`5099803`](https://redirect.github.com/siderolabs/talos/commit/50998038b)
feat: prefer sd-boot for UEFI
-
[@&#8203;`e831e52`](https://redirect.github.com/siderolabs/talos/commit/e831e52e0)
feat: add support for qla2xx
-
[@&#8203;`ec5c049`](https://redirect.github.com/siderolabs/talos/commit/ec5c049a5)
feat: update Kubernetes to 1.33.0-alpha.2
-
[@&#8203;`ebfa82f`](https://redirect.github.com/siderolabs/talos/commit/ebfa82f35)
docs: update deprecated command
-
[@&#8203;`d79059a`](https://redirect.github.com/siderolabs/talos/commit/d79059a2c)
chore: fix shutdown typo in shutdown sequence
-
[@&#8203;`a3f88d2`](https://redirect.github.com/siderolabs/talos/commit/a3f88d2ef)
fix: block NodePort services with ingress firewall
-
[@&#8203;`fd8131c`](https://redirect.github.com/siderolabs/talos/commit/fd8131cb8)
feat: generate unified installer
-
[@&#8203;`ebfdb91`](https://redirect.github.com/siderolabs/talos/commit/ebfdb91b4)
fix: handle dynamic HTTP proxy settings for discovery client
-
[@&#8203;`d45eaeb`](https://redirect.github.com/siderolabs/talos/commit/d45eaeb74)
fix: correctly map link names/aliases when using VIP operator
-
[@&#8203;`7c4e47c`](https://redirect.github.com/siderolabs/talos/commit/7c4e47c0c)
chore: stop doing generate on each build
-
[@&#8203;`b1d410c`](https://redirect.github.com/siderolabs/talos/commit/b1d410cb6)
feat: dual boot disk image
-
[@&#8203;`468e318`](https://redirect.github.com/siderolabs/talos/commit/468e318ba)
fix: multiple fixes for dashboard/no data
-
[@&#8203;`3dd8d9a`](https://redirect.github.com/siderolabs/talos/commit/3dd8d9aed)
docs: update resetting-a-machine.md to include example of reset
-
[@&#8203;`7af8f6b`](https://redirect.github.com/siderolabs/talos/commit/7af8f6b2f)
feat: validate docker image references in upgrade options
-
[@&#8203;`c949f55`](https://redirect.github.com/siderolabs/talos/commit/c949f55e6)
docs: remove typo on resetting a machine page
-
[@&#8203;`f5c0970`](https://redirect.github.com/siderolabs/talos/commit/f5c097041)
feat: add description to schema object defs
-
[@&#8203;`79ee304`](https://redirect.github.com/siderolabs/talos/commit/79ee304e1)
chore: update enumer to a version that fixes Go 1.24 compatibility
-
[@&#8203;`46d67fe`](https://redirect.github.com/siderolabs/talos/commit/46d67fe44)
chore: update Go to 1.24, update pkgs
-
[@&#8203;`7f1dd26`](https://redirect.github.com/siderolabs/talos/commit/7f1dd2669)
fix(ci): fix integration-misc crons
-
[@&#8203;`26a773d`](https://redirect.github.com/siderolabs/talos/commit/26a773d3f)
docs: add a note about syslog sending messages to services
-
[@&#8203;`7ce0536`](https://redirect.github.com/siderolabs/talos/commit/7ce053638)
fix: ignore digest part of images when checking version
-
[@&#8203;`ae1b003`](https://redirect.github.com/siderolabs/talos/commit/ae1b00354)
feat: support noclooud instance-id from dmi
-
[@&#8203;`58661de`](https://redirect.github.com/siderolabs/talos/commit/58661dea7)
docs: update getting-started.md
-
[@&#8203;`94cf9fb`](https://redirect.github.com/siderolabs/talos/commit/94cf9fb84)
chore: fix spurious generate failures
-
[@&#8203;`32a3479`](https://redirect.github.com/siderolabs/talos/commit/32a34791e)
fix: typo in Makefile target talosctl-freebsd-arm64
-
[@&#8203;`1b4464c`](https://redirect.github.com/siderolabs/talos/commit/1b4464c8a)
feat: update Kubernetes to 1.32.2
-
[@&#8203;`9463ac2`](https://redirect.github.com/siderolabs/talos/commit/9463ac23e)
fix: make ingress firewall filter traffic to nodeports
-
[@&#8203;`8531d91`](https://redirect.github.com/siderolabs/talos/commit/8531d91a1)
fix: blockdevice transport detection
-
[@&#8203;`ce616d9`](https://redirect.github.com/siderolabs/talos/commit/ce616d93a)
fix: path for ca-certificates
-
[@&#8203;`f35b587`](https://redirect.github.com/siderolabs/talos/commit/f35b58779)
fix: fix diff printing
-
[@&#8203;`bf0f910`](https://redirect.github.com/siderolabs/talos/commit/bf0f910a1)
chore: provide more logging for dns requests
-
[@&#8203;`607998b`](https://redirect.github.com/siderolabs/talos/commit/607998ba2)
feat: support uki profiles via imager
-
[@&#8203;`711cf2d`](https://redirect.github.com/siderolabs/talos/commit/711cf2d99)
fix: ignore errors to stop pods
-
[@&#8203;`142d754`](https://redirect.github.com/siderolabs/talos/commit/142d75483)
fix: handle empty registry config
-
[@&#8203;`47f377b`](https://redirect.github.com/siderolabs/talos/commit/47f377b21)
feat: implement the last ethtool feature - channels
-
[@&#8203;`88cf69b`](https://redirect.github.com/siderolabs/talos/commit/88cf69b8c)
feat: multi profile UKIs
-
[@&#8203;`557faad`](https://redirect.github.com/siderolabs/talos/commit/557faad75)
feat: update Linux to 6.12.13
-
[@&#8203;`5dbf9e3`](https://redirect.github.com/siderolabs/talos/commit/5dbf9e350)
refactor: implement volume mount controller
-
[@&#8203;`aa11e9a`](https://redirect.github.com/siderolabs/talos/commit/aa11e9abb)
fix: make image cache volume management less strict
-
[@&#8203;`26a62e3`](https://redirect.github.com/siderolabs/talos/commit/26a62e342)
docs: fix typo in Wireguard docs
-
[@&#8203;`0419f5d`](https://redirect.github.com/siderolabs/talos/commit/0419f5d8b)
feat: implement features in `ethtool`-like support
-
[@&#8203;`cd66fc6`](https://redirect.github.com/siderolabs/talos/commit/cd66fc6e8)
feat: use bootstrapped packages for building Talos
-
[@&#8203;`2b5bd5d`](https://redirect.github.com/siderolabs/talos/commit/2b5bd5d1d)
chore: upgrade siderolabs/go-loadbalancer
-
[@&#8203;`15191aa`](https://redirect.github.com/siderolabs/talos/commit/15191aa3e)
fix: extract cmdline multi profile UKIs
-
[@&#8203;`716f700`](https://redirect.github.com/siderolabs/talos/commit/716f700da)
feat: provide initial support for ethtool configuration
-
[@&#8203;`b726e2f`](https://redirect.github.com/siderolabs/talos/commit/b726e2f9f)
feat: update Flannel to 0.26.4
-
[@&#8203;`98d56d4`](https://redirect.github.com/siderolabs/talos/commit/98d56d4d6)
chore: track opened grpc connections
-
[@&#8203;`5e28c8e`](https://redirect.github.com/siderolabs/talos/commit/5e28c8e03)
fix: image cache volume provisioning
-
[@&#8203;`c966781`](https://redirect.github.com/siderolabs/talos/commit/c9667813d)
chore: remove containerd importer
-
[@&#8203;`270ffb6`](https://redirect.github.com/siderolabs/talos/commit/270ffb69a)
fix: duplicate qemu drive ids
-
[@&#8203;`71ec41b`](https://redirect.github.com/siderolabs/talos/commit/71ec41be1)
fix: build of Talos on non-Linux host
-
[@&#8203;`e2aa7c9`](https://redirect.github.com/siderolabs/talos/commit/e2aa7c98c)
fix: installer with SecureBoot should contain UKIs
-
[@&#8203;`6e22c06`](https://redirect.github.com/siderolabs/talos/commit/6e22c06c3)
release(v1.10.0-alpha.1): prepare release
-
[@&#8203;`3a2d986`](https://redirect.github.com/siderolabs/talos/commit/3a2d9867b)
fix: do not close client.Client.conn with finalizer
-
[@&#8203;`73f30ff`](https://redirect.github.com/siderolabs/talos/commit/73f30ff25)
feat: bump pkgs for udev update
-
[@&#8203;`aea90cb`](https://redirect.github.com/siderolabs/talos/commit/aea90cb8f)
docs: update hyper-v
-
[@&#8203;`b716561`](https://redirect.github.com/siderolabs/talos/commit/b7165615f)
fix: use local NTP for AWS platform
-
[@&#8203;`673ca4b`](https://redirect.github.com/siderolabs/talos/commit/673ca4bcb)
fix: ensure proper closure of client.Client.conn with finalizer
-
[@&#8203;`19040ff`](https://redirect.github.com/siderolabs/talos/commit/19040ffd6)
fix: handle of PE sections with duplicate names
-
[@&#8203;`83489d3`](https://redirect.github.com/siderolabs/talos/commit/83489d348)
docs: add note about vmxnet and flannel conflict
-
[@&#8203;`f1292f5`](https://redirect.github.com/siderolabs/talos/commit/f1292f5e7)
docs: add iscsi-tools extension to prerequisites
-
[@&#8203;`93b4a37`](https://redirect.github.com/siderolabs/talos/commit/93b4a3740)
test: bump timeout on rotate CA test
-
[@&#8203;`42e1669`](https://redirect.github.com/siderolabs/talos/commit/42e166984)
feat: support kexec from uki
-
[@&#8203;`8da2649`](https://redirect.github.com/siderolabs/talos/commit/8da264946)
docs: add Orange Pi 5 to Image Factory platforms and documentation
-
[@&#8203;`c5fb62e`](https://redirect.github.com/siderolabs/talos/commit/c5fb62e2e)
feat: update Linux to 6.2.11
-
[@&#8203;`83d007c`](https://redirect.github.com/siderolabs/talos/commit/83d007c16)
feat: update etcd to 3.5.18
-
[@&#8203;`edf7c32`](https://redirect.github.com/siderolabs/talos/commit/edf7c3288)
fix: pe uki extract
-
[@&#8203;`70f72c5`](https://redirect.github.com/siderolabs/talos/commit/70f72c5b0)
docs: update multus.md
-
[@&#8203;`807a3cd`](https://redirect.github.com/siderolabs/talos/commit/807a3cd29)
refactor: all network merge controllers
-
[@&#8203;`ec8c466`](https://redirect.github.com/siderolabs/talos/commit/ec8c4660e)
docs: update vmware.md
-
[@&#8203;`baf81cd`](https://redirect.github.com/siderolabs/talos/commit/baf81cd49)
fix(ci): k8s integration suite wait for resource
-
[@&#8203;`cd5e549`](https://redirect.github.com/siderolabs/talos/commit/cd5e54903)
feat: generate iso's with both UKI and grub
-
[@&#8203;`75673b6`](https://redirect.github.com/siderolabs/talos/commit/75673b6a3)
feat: provide stable symlinks in disk resources
-
[@&#8203;`f407c88`](https://redirect.github.com/siderolabs/talos/commit/f407c88e4)
fix(ci): wait for longhorn node resource
-
[@&#8203;`601cdcc`](https://redirect.github.com/siderolabs/talos/commit/601cdccb9)
feat: extract kernel/initrd from uki for grub
-
[@&#8203;`ff175b9`](https://redirect.github.com/siderolabs/talos/commit/ff175b9fb)
docs: update disk-encryption.md
-
[@&#8203;`a8d84e3`](https://redirect.github.com/siderolabs/talos/commit/a8d84e315)
docs: fix typos and add more explanations in docs
-
[@&#8203;`3a38424`](https://redirect.github.com/siderolabs/talos/commit/3a384240e)
fix: invalid date field in iqn/nqn
-
[@&#8203;`82c9ec1`](https://redirect.github.com/siderolabs/talos/commit/82c9ec158)
chore(ci): add tests with longhorn v2 engine
-
[@&#8203;`689ea1d`](https://redirect.github.com/siderolabs/talos/commit/689ea1dbf)
fix: bring back disk UUID
-
[@&#8203;`7a712fa`](https://redirect.github.com/siderolabs/talos/commit/7a712fad2)
fix: disks with 4k sector size and systemd-boot
-
[@&#8203;`d62a34a`](https://redirect.github.com/siderolabs/talos/commit/d62a34aaf)
feat: update tools/pkgs/extras
-
[@&#8203;`b9a8ad6`](https://redirect.github.com/siderolabs/talos/commit/b9a8ad6ac)
chore: de-hardcode list of extra images for image-cache test
-
[@&#8203;`683153a`](https://redirect.github.com/siderolabs/talos/commit/683153a33)
docs: remove the last mentions of `preserve` flag for Talos 1.8+
-
[@&#8203;`33c7f41`](https://redirect.github.com/siderolabs/talos/commit/33c7f4195)
docs: fix typo an MacOS to on MacOS
-
[@&#8203;`21cff39`](https://redirect.github.com/siderolabs/talos/commit/21cff3919)
chore(ci): fio benchmark results as separate artifacts
-
[@&#8203;`0b7fc7c`](https://redirect.github.com/siderolabs/talos/commit/0b7fc7cdf)
fix: abort node watch on hostname change
-
[@&#8203;`99ba539`](https://redirect.github.com/siderolabs/talos/commit/99ba53941)
docs: remove the mention of `preserve` flag for Talos 1.8+
-
[@&#8203;`bde516f`](https://redirect.github.com/siderolabs/talos/commit/bde516fde)
chore(ci): rework iscsi-tools extensions test
-
[@&#8203;`e1efbf6`](https://redirect.github.com/siderolabs/talos/commit/e1efbf656)
refactor: extract platform metadata into Talos machinery
-
[@&#8203;`79987c0`](https://redirect.github.com/siderolabs/talos/commit/79987c05d)
feat: generate iqn and nqn files
-
[@&#8203;`0cab6ed`](https://redirect.github.com/siderolabs/talos/commit/0cab6ed17)
docs: update troubleshooting.md
-
[@&#8203;`921e102`](https://redirect.github.com/siderolabs/talos/commit/921e10254)
chore: update Go to 1.23.5
-
[@&#8203;`399d53b`](https://redirect.github.com/siderolabs/talos/commit/399d53b54)
fix: ignore forbidden error when waiting for pod eviction
-
[@&#8203;`8dea57a`](https://redirect.github.com/siderolabs/talos/commit/8dea57a81)
fix: make etc binds read-only
-
[@&#8203;`63157dc`](https://redirect.github.com/siderolabs/talos/commit/63157dcb4)
docs: update SideroLinkConfig example
-
[@&#8203;`fc7080e`](https://redirect.github.com/siderolabs/talos/commit/fc7080e34)
chore: clear cache after updating upstreams
-
[@&#8203;`51e0f27`](https://redirect.github.com/siderolabs/talos/commit/51e0f273f)
docs: update documentation for Talos 1.9.2
-
[@&#8203;`e06b141`](https://redirect.github.com/siderolabs/talos/commit/e06b14112)
feat: update Kubernetes to 1.32.1
-
[@&#8203;`4310b29`](https://redirect.github.com/siderolabs/talos/commit/4310b290d)
fix: generate UKI only if actually needed
-
[@&#8203;`a8cd991`](https://redirect.github.com/siderolabs/talos/commit/a8cd99102)
docs: update OpenEBS Mayastor installation
-
[@&#8203;`cf45f47`](https://redirect.github.com/siderolabs/talos/commit/cf45f4764)
docs: add Radxa ROCK 5B docs to Single Board Computer section
-
[@&#8203;`b21bdc5`](https://redirect.github.com/siderolabs/talos/commit/b21bdc5e5)
chore(ci): save csi tests fio results
-
[@&#8203;`01c8683`](https://redirect.github.com/siderolabs/talos/commit/01c86832c)
chore(ci): add test for OpenEBS MayaStor
-
[@&#8203;`c774835`](https://redirect.github.com/siderolabs/talos/commit/c77483510)
test: update `talosctl debug air-gapped`
-
[@&#8203;`ddd695d`](https://redirect.github.com/siderolabs/talos/commit/ddd695d93)
feat: update containerd to 2.0.2
-
[@&#8203;`da2e811`](https://redirect.github.com/siderolabs/talos/commit/da2e81120)
fix: add informer resync period for node status watcher
-
[@&#8203;`9b957df`](https://redirect.github.com/siderolabs/talos/commit/9b957df64)
chore: uki code restructure
-
[@&#8203;`e41a995`](https://redirect.github.com/siderolabs/talos/commit/e41a99525)
fix: kube-apiserver authorizers order
-
[@&#8203;`db4ca56`](https://redirect.github.com/siderolabs/talos/commit/db4ca5668)
feat: add a kernel parameter to disable built-in auditd
-
[@&#8203;`faa1490`](https://redirect.github.com/siderolabs/talos/commit/faa149003)
feat: update Linux to 6.12.9
-
[@&#8203;`8de1975`](https://redirect.github.com/siderolabs/talos/commit/8de19758d)
fix: a couple of imager panics/crashes
-
[@&#8203;`5bc3e34`](https://redirect.github.com/siderolabs/talos/commit/5bc3e34cb)
fix: detect GPT before ZFS
-
[@&#8203;`ed7e47d`](https://redirect.github.com/siderolabs/talos/commit/ed7e47d15)
refactor: drop usage of objcopy to generate UKIs
-
[@&#8203;`edf5c5e`](https://redirect.github.com/siderolabs/talos/commit/edf5c5e29)
fix: extfs repair and resize
-
[@&#8203;`6e32ea5`](https://redirect.github.com/siderolabs/talos/commit/6e32ea5b7)
fix: merge of VolumeConfig documents with sizes
-
[@&#8203;`1be5f8f`](https://redirect.github.com/siderolabs/talos/commit/1be5f8ff2)
feat: update Linux to 6.12.8
-
[@&#8203;`e6a4583`](https://redirect.github.com/siderolabs/talos/commit/e6a4583ba)
feat: support generating unsigned UKIs
-
[@&#8203;`bbd6067`](https://redirect.github.com/siderolabs/talos/commit/bbd6067d4)
fix: partition alignment on disks with 4k sectors
-
[@&#8203;`84fcc97`](https://redirect.github.com/siderolabs/talos/commit/84fcc976f)
fix: yet another dashboard panic
-
[@&#8203;`6d605fc`](https://redirect.github.com/siderolabs/talos/commit/6d605fc85)
fix: disable NRI plugin in a different way
-
[@&#8203;`499695e`](https://redirect.github.com/siderolabs/talos/commit/499695e24)
fix: request previous IP address in discovery
-
[@&#8203;`cc84caf`](https://redirect.github.com/siderolabs/talos/commit/cc84caf8c)
docs: update Cilium documentation
-
[@&#8203;`fa5300d`](https://redirect.github.com/siderolabs/talos/commit/fa5300d91)
chore: revert: drop deprecated allowSchedulingOnMasters
-
[@&#8203;`0abb3da`](https://redirect.github.com/siderolabs/talos/commit/0abb3dabf)
docs: fix command to wait for ceph-rook HEALTH_OK
-
[@&#8203;`32c67c2`](https://redirect.github.com/siderolabs/talos/commit/32c67c27c)
chore: drop deprecated allowSchedulingOnMasters
-
[@&#8203;`ae6d065`](https://redirect.github.com/siderolabs/talos/commit/ae6d065be)
fix: mount selinuxfs only when SELinux is enabled
-
[@&#8203;`5ccbf4b`](https://redirect.github.com/siderolabs/talos/commit/5ccbf4bcd)
feat: enable `configfs`
-
[@&#8203;`5958249`](https://redirect.github.com/siderolabs/talos/commit/59582496d)
feat: bring in partity with sd-257
-
[@&#8203;`83d84a8`](https://redirect.github.com/siderolabs/talos/commit/83d84a831)
chore(ci): better zfs checks
-
[@&#8203;`650eb3a`](https://redirect.github.com/siderolabs/talos/commit/650eb3a4f)
refactor: rewrite cloud uploader to use AWS SDK Go v2
-
[@&#8203;`01bf844`](https://redirect.github.com/siderolabs/talos/commit/01bf8449b)
fix: update field name for bus path disk selector
-
[@&#8203;`e915c98`](https://redirect.github.com/siderolabs/talos/commit/e915c98d5)
fix: exclude disks with empty transport for disk selector
-
[@&#8203;`b7a7fdc`](https://redirect.github.com/siderolabs/talos/commit/b7a7fdc4b)
refactor: generate /etc/os-release file static way
-
[@&#8203;`e79c9e1`](https://redirect.github.com/siderolabs/talos/commit/e79c9e127)
chore(ci): drop equinix metal e2e-test
-
[@&#8203;`4189454`](https://redirect.github.com/siderolabs/talos/commit/418945444)
fix: build of talosctl on non-Linux platforms
-
[@&#8203;`4761a9e`](https://redirect.github.com/siderolabs/talos/commit/4761a9e6a)
chore: update dependencies
-
[@&#8203;`f98efb3`](https://redirect.github.com/siderolabs/talos/commit/f98efb333)
fix: ignore member not found error on leave cluster
-
[@&#8203;`b72bda0`](https://redirect.github.com/siderolabs/talos/commit/b72bda0a4)
fix: talosctl support and race tests
-
[@&#8203;`27233cf`](https://redirect.github.com/siderolabs/talos/commit/27233cf0f)
test: use node informer instead of raw watch
-
[@&#8203;`5dc15e8`](https://redirect.github.com/siderolabs/talos/commit/5dc15e8db)
fix: update go-blockdevice to v2.0.9
-
[@&#8203;`5f3acd0`](https://redirect.github.com/siderolabs/talos/commit/5f3acd0f2)
fix: use correct default search domain
-
[@&#8203;`7e5d36d`](https://redirect.github.com/siderolabs/talos/commit/7e5d36d46)
fix: pci driver rebind config validation
-
[@&#8203;`4b97bbc`](https://redirect.github.com/siderolabs/talos/commit/4b97bbc3f)
fix: pull in containerd CNI deadlock fix
-
[@&#8203;`0664807`](https://redirect.github.com/siderolabs/talos/commit/066480722)
test: fix apparmor tests
-
[@&#8203;`82ea44a`](https://redirect.github.com/siderolabs/talos/commit/82ea44a6b)
fix: reduce installer image
-
[@&#8203;`78b3e7f`](https://redirect.github.com/siderolabs/talos/commit/78b3e7f4f)
fix: get next rule number for IPv6 in the appropriate chain
-
[@&#8203;`675854a`](https://redirect.github.com/siderolabs/talos/commit/675854aa0)
docs: fix two typos
-
[@&#8203;`f70b738`](https://redirect.github.com/siderolabs/talos/commit/f70b7386a)
test: add a xfs makefs test
-
[@&#8203;`8212e48`](https://redirect.github.com/siderolabs/talos/commit/8212e4864)
refactor: use quirks in kernel args
-
[@&#8203;`b4aa518`](https://redirect.github.com/siderolabs/talos/commit/b4aa5189d)
release(v1.10.0-alpha.0): prepare release
-
[@&#8203;`bd85bd5`](https://redirect.github.com/siderolabs/talos/commit/bd85bd5b7)
fix: fix `Failed to initialize SELinux labeling handle` udev error
-
[@&#8203;`73c82e3`](https://redirect.github.com/siderolabs/talos/commit/73c82e3e5)
feat: bring Linux 6.12.6, CNI plugins 1.6.1
-
[@&#8203;`c12b524`](https://redirect.github.com/siderolabs/talos/commit/c12b52491)
docs: document Kubernetes service registry incompat with K8s 1.32
-
[@&#8203;`a5660ed`](https://redirect.github.com/siderolabs/talos/commit/a5660ed77)
feat: pcirebind controller
-
[@&#8203;`4c32616`](https://redirect.github.com/siderolabs/talos/commit/4c3261626)
docs: fix several typos
-
[@&#8203;`fb36753`](https://redirect.github.com/siderolabs/talos/commit/fb3675321)
fix: dashboard crash on CPU data
-
[@&#8203;`dec0185`](https://redirect.github.com/siderolabs/talos/commit/dec0185c8)
chore: reduce memory usage for secureboot functions
-
[@&#8203;`cee6c60`](https://redirect.github.com/siderolabs/talos/commit/cee6c60a0)
fix: make talosctl time work with PTP time sync
-
[@&#8203;`f756043`](https://redirect.github.com/siderolabs/talos/commit/f75604313)
chore: support gcr.io auth for cache and image gen
-
[@&#8203;`6ef2596`](https://redirect.github.com/siderolabs/talos/commit/6ef2596da)
docs: improve Hetzner documentation
-
[@&#8203;`7d39b9e`](https://redirect.github.com/siderolabs/talos/commit/7d39b9ec2)
feat: remove cgroupsv1 in non-container mode
-
[@&#8203;`8003536`](https://redirect.github.com/siderolabs/talos/commit/8003536c7)
fix: restore previous disk serial fetching
-
[@&#8203;`03116ef`](https://redirect.github.com/siderolabs/talos/commit/03116ef9b)
chore: prepare for Talos 1.10
-
[@&#8203;`00682fd`](https://redirect.github.com/siderolabs/talos/commit/00682fdd6)
docs: activate 1.9 docs as default
-
[@&#8203;`bea05f5`](https://redirect.github.com/siderolabs/talos/commit/bea05f5c9)
docs: update deploying-cilium.md
-
[@&#8203;`284ab11`](https://redirect.github.com/siderolabs/talos/commit/284ab1179)
feat: support link altnames/aliases
-
[@&#8203;`5bfd829`](https://redirect.github.com/siderolabs/talos/commit/5bfd829bf)
docs: fix 'containter' typo
-
[@&#8203;`8d151b7`](https://redirect.github.com/siderolabs/talos/commit/8d151b771)
docs: clarify TALOSCONFIG for AWS
-
[@&#8203;`0ef1917`](https://redirect.github.com/siderolabs/talos/commit/0ef19171f)
fix: renovate typo
-
[@&#8203;`c568adc`](https://redirect.github.com/siderolabs/talos/commit/c568adc7d)
fix: renovate config
-
[@&#8203;`ec2e24f`](https://redirect.github.com/siderolabs/talos/commit/ec2e24fd9)
fix: match MAC addresses case-insensitive (nocloud)
-
[@&#8203;`41a0c44`](https://redirect.github.com/siderolabs/talos/commit/41a0c440a)
chore: rekres for renovate changes
-
[@&#8203;`a49bb9e`](https://redirect.github.com/siderolabs/talos/commit/a49bb9ee4)
feat: update Linux to 6.12.5
-
[@&#8203;`b15917e`](https://redirect.github.com/siderolabs/talos/commit/b15917ecc)
chore: add more debugging logs for META and volumes
-
[@&#8203;`2b1b326`](https://redirect.github.com/siderolabs/talos/commit/2b1b326f0)
docs: mention different paths for OpenEBS
-
[@&#8203;`9470e84`](https://redirect.github.com/siderolabs/talos/commit/9470e842f)
test: cleanup failed Kubernetes pods
-
[@&#8203;`c9c6851`](https://redirect.github.com/siderolabs/talos/commit/c9c685150)
fix: node identity flip
-
[@&#8203;`590c016`](https://redirect.github.com/siderolabs/talos/commit/590c01657)
feat: update containerd to v2.0.1
-
[@&#8203;`18fa5a2`](https://redirect.github.com/siderolabs/talos/commit/18fa5a258)
docs: update image-cache doc for iso
-
[@&#8203;`ab5bb68`](https://redirect.github.com/siderolabs/talos/commit/ab5bb6884)
fix: generate and serve registries with port
-
[@&#8203;`5823606`](https://redirect.github.com/siderolabs/talos/commit/58236066d)
fix: support image cache on VFAT USB stick
-
[@&#8203;`e193a50`](https://redirect.github.com/siderolabs/talos/commit/e193a5071)
fix: image cache integration test
-
[@&#8203;`08ee400`](https://redirect.github.com/siderolabs/talos/commit/08ee400fd)
test: fix flaky test NodeAddressSort
-
[@&#8203;`d45e8d1`](https://redirect.github.com/siderolabs/talos/commit/d45e8d1d1)
feat: update Kubernetes to 1.32.0
-
[@&#8203;`136b129`](https://redirect.github.com/siderolabs/talos/commit/136b12912)
chore: drop semicolon for supporting vfat filesystems
-
[@&#8203;`3e9e027`](https://redirect.github.com/siderolabs/talos/commit/3e9e027ef)
test: add an option to boot from an USB stick
-
[@&#8203;`ef8c3e3`](https://redirect.github.com/siderolabs/talos/commit/ef8c3e3b3)
docs: fix typo in multus.md
-
[@&#8203;`d54414a`](https://redirect.github.com/siderolabs/talos/commit/d54414add)
fix: authorization config gen
-
[@&#8203;`cce72cf`](https://redirect.github.com/siderolabs/talos/commit/cce72cfe8)
docs: replace deprecated Hetzner server plans
-
[@&#8203;`8180510`](https://redirect.github.com/siderolabs/talos/commit/81805103d)
chore: enable proper parallel usage of TestDepth
-
[@&#8203;`e1b824e`](https://redirect.github.com/siderolabs/talos/commit/e1b824eba)
docs: update ceph-with-rook.md
-
[@&#8203;`470b755`](https://redirect.github.com/siderolabs/talos/commit/470b75563)
fix: use mtu network option for podman
-
[@&#8203;`61b1489`](https://redirect.github.com/siderolabs/talos/commit/61b1489a0)
fix: order volume config by the requested size
-
[@&#8203;`bc3039a`](https://redirect.github.com/siderolabs/talos/commit/bc3039acd)
feat: update runc to 1.2.3
-
[@&#8203;`30016a0`](https://redirect.github.com/siderolabs/talos/commit/30016a0a8)
fix: avoid nil-pointer-panic in `RegistriesConfigController`
-
[@&#8203;`fe04571`](https://redirect.github.com/siderolabs/talos/commit/fe0457152)
fix: power on the machine on reboot request in qemu power api
-
[@&#8203;`10da553`](https://redirect.github.com/siderolabs/talos/commit/10da553ef)
docs: build what's new for 1.9
-
[@&#8203;`d946cca`](https://redirect.github.com/siderolabs/talos/commit/d946ccae3)
feat: update Linux to 6.12.4
-
[@&#8203;`707a77b`](https://redirect.github.com/siderolabs/talos/commit/707a77bf6)
test: fix user namespace test, TPM2 fixes
-
[@&#8203;`c3537b2`](https://redirect.github.com/siderolabs/talos/commit/c3537b2f5)
feat: update Linux to 6.12.3
-
[@&#8203;`cb4d9d6`](https://redirect.github.com/siderolabs/talos/commit/cb4d9d673)
docs: fix a few mistakes in release notes
-
[@&#8203;`c4724fc`](https://redirect.github.com/siderolabs/talos/commit/c4724fc97)
chore: add integration tests for image-cache
-
[@&#8203;`07220fe`](https://redirect.github.com/siderolabs/talos/commit/07220fe7f)
fix: install iptables-nft to the host
-
[@&#8203;`1484175`](https://redirect.github.com/siderolabs/talos/commit/14841750b)
chore: add version compatibility for Talos 1.10
-
[@&#8203;`852baf8`](https://redirect.github.com/siderolabs/talos/commit/852baf819)
feat: support vlan/bond in v1, vlan in v2 for nocloud
-
[@&#8203;`dd61ad8`](https://redirect.github.com/siderolabs/talos/commit/dd61ad861)
fix: lock provisioning order of user disk partitions
-
[@&#8203;`d0773ff`](https://redirect.github.com/siderolabs/talos/commit/d0773ff09)
chore: update Go to 1.23.4
-
[@&#8203;`7d65071`](https://redirect.github.com/siderolabs/talos/commit/7d6507189)
feat: implement new address sorting algorithm
-
[@&#8203;`9081506`](https://redirect.github.com/siderolabs/talos/commit/9081506d6)
feat: add process scheduling options
-
[@&#8203;`77e9db4`](https://redirect.github.com/siderolabs/talos/commit/77e9db4ab)
test: use two workers in qemu tests by default
-
[@&#8203;`5a4bdf6`](https://redirect.github.com/siderolabs/talos/commit/5a4bdf62a)
feat: update Kubernetes to 1.32.0-rc.1
-
[@&#8203;`d99bcc9`](https://redirect.github.com/siderolabs/talos/commit/d99bcc950)
chore: refactor mergeDNSServers func
-
[@&#8203;`0cde08d`](https://redirect.github.com/siderolabs/talos/commit/0cde08d8b)
docs: add Turing RK1 docs to Single Board Computer section

</p>
</details>

##### Changes since v1.10.0-alpha.1
<details><summary>59 commits</summary>
<p>

-
[@&#8203;`ab6cb3d`](https://redirect.github.com/siderolabs/talos/commit/ab6cb3dfa)
chore: disable azure upload
-
[@&#8203;`2355218`](https://redirect.github.com/siderolabs/talos/commit/2355218e4)
release(v1.10.0-alpha.2): prepare release
-
[@&#8203;`d4e3e95`](https://redirect.github.com/siderolabs/talos/commit/d4e3e957c)
fix(ci): fix integration tests
-
[@&#8203;`1849b53`](https://redirect.github.com/siderolabs/talos/commit/1849b5388)
feat: update dependencies
-
[@&#8203;`88fc6bb`](https://redirect.github.com/siderolabs/talos/commit/88fc6bbeb)
test: fix UKI preserving talos.config and image cache
-
[@&#8203;`ba8cd30`](https://redirect.github.com/siderolabs/talos/commit/ba8cd304d)
test: enable image-cache in the cron
-
[@&#8203;`28b5dc7`](https://redirect.github.com/siderolabs/talos/commit/28b5dc738)
test: fix reproduciblity test
-
[@&#8203;`5099803`](https://redirect.github.com/siderolabs/talos/commit/50998038b)
feat: prefer sd-boot for UEFI
-
[@&#8203;`e831e52`](https://redirect.github.com/siderolabs/talos/commit/e831e52e0)
feat: add support for qla2xx
-
[@&#8203;`ec5c049`](https://redirect.github.com/siderolabs/talos/commit/ec5c049a5)
feat: update Kubernetes to 1.33.0-alpha.2
-
[@&#8203;`ebfa82f`](https://redirect.github.com/siderolabs/talos/commit/ebfa82f35)
docs: update deprecated command
-
[@&#8203;`d79059a`](https://redirect.github.com/siderolabs/talos/commit/d79059a2c)
chore: fix shutdown typo in shutdown sequence
-
[@&#8203;`a3f88d2`](https://redirect.github.com/siderolabs/talos/commit/a3f88d2ef)
fix: block NodePort services with ingress firewall
-
[@&#8203;`fd8131c`](https://redirect.github.com/siderolabs/talos/commit/fd8131cb8)
feat: generate unified installer
-
[@&#8203;`ebfdb91`](https://redirect.github.com/siderolabs/talos/commit/ebfdb91b4)
fix: handle dynamic HTTP proxy settings for discovery client
-
[@&#8203;`d45eaeb`](https://redirect.github.com/siderolabs/talos/commit/d45eaeb74)
fix: correctly map link names/aliases when using VIP operator
-
[@&#8203;`7c4e47c`](https://redirect.github.com/siderolabs/talos/commit/7c4e47c0c)
chore: stop doing generate on each build
-
[@&#8203;`b1d410c`](https://redirect.github.com/siderolabs/talos/commit/b1d410cb6)
feat: dual boot disk image
-
[@&#8203;`468e318`](https://redirect.github.com/siderolabs/talos/commit/468e318ba)
fix: multiple fixes for dashboard/no data
-
[@&#8203;`3dd8d9a`](https://redirect.github.com/siderolabs/talos/commit/3dd8d9aed)
docs: update resetting-a-machine.md to include example of reset
-
[@&#8203;`7af8f6b`](https://redirect.github.com/siderolabs/talos/commit/7af8f6b2f)
feat: validate docker image references in upgrade options
-
[@&#8203;`c949f55`](https://redirect.github.com/siderolabs/talos/commit/c949f55e6)
docs: remove typo on resetting a machine page
-
[@&#8203;`f5c0970`](https://redirect.github.com/siderolabs/talos/commit/f5c097041)
feat: add description to schema object defs
-
[@&#8203;`79ee304`](https://redirect.github.com/siderolabs/talos/commit/79ee304e1)
chore: update enumer to a version that fixes Go 1.24 compatibility
-
[@&#8203;`46d67fe`](https://redirect.github.com/siderolabs/talos/commit/46d67fe44)
chore: update Go to 1.24, update pkgs
-
[@&#8203;`7f1dd26`](https://redirect.github.com/siderolabs/talos/commit/7f1dd2669)
fix(ci): fix integration-misc crons
-
[@&#8203;`26a773d`](https://redirect.github.com/siderolabs/talos/commit/26a773d3f)
docs: add a note about syslog sending messages to services
-
[@&#8203;`7ce0536`](https://redirect.github.com/siderolabs/talos/commit/7ce053638)
fix: ignore digest part of images when checking version
-
[@&#8203;`ae1b003`](https://redirect.github.com/siderolabs/talos/commit/ae1b00354)
feat: support noclooud instance-id from dmi
-
[@&#8203;`58661de`](https://redirect.github.com/siderolabs/talos/commit/58661dea7)
docs: update getting-started.md
-
[@&#8203;`94cf9fb`](https://redirect.github.com/siderolabs/talos/commit/94cf9fb84)
chore: fix spurious generate failures
-
[@&#8203;`32a3479`](https://redirect.github.com/siderolabs/talos/commit/32a34791e)
fix: typo in Makefile target talosctl-freebsd-arm64
-
[@&#8203;`1b4464c`](https://redirect.github.com/siderolabs/talos/commit/1b4464c8a)
feat: update Kubernetes to 1.32.2
-
[@&#8203;`9463ac2`](https://redirect.github.com/siderolabs/talos/commit/9463ac23e)
fix: make ingress firewall filter traffic to nodeports
-
[@&#8203;`8531d91`](https://redirect.github.com/siderolabs/talos/commit/8531d91a1)
fix: blockdevice transport detection
-
[@&#8203;`ce616d9`](https://redirect.github.com/siderolabs/talos/commit/ce616d93a)
fix: path for ca-certificates
-
[@&#8203;`f35b587`](https://redirect.github.com/siderolabs/talos/commit/f35b58779)
fix: fix diff printing
-
[@&#8203;`bf0f910`](https://redirect.github.com/siderolabs/talos/commit/bf0f910a1)
chore: provide more logging for dns requests
-
[@&#8203;`607998b`](https://redirect.github.com/siderolabs/talos/commit/607998ba2)
feat: support uki profiles via imager
-
[@&#8203;`711cf2d`](https://redirect.github.com/siderolabs/talos/commit/711cf2d99)
fix: ignore errors to stop pods
-
[@&#8203;`142d754`](https://redirect.github.com/siderolabs/talos/commit/142d75483)
fix: handle empty registry config
-
[@&#8203;`47f377b`](https://redirect.github.com/siderolabs/talos/commit/47f377b21)
feat: implement the last ethtool feature - channels
-
[@&#8203;`88cf69b`](https://redirect.github.com/siderolabs/talos/commit/88cf69b8c)
feat: multi profile UKIs
-
[@&#8203;`557faad`](https://redirect.github.com/siderolabs/talos/commit/557faad75)
feat: update Linux to 6.12.13
-
[@&#8203;`5dbf9e3`](https://redirect.github.com/siderolabs/talos/commit/5dbf9e350)
refactor: implement volume mount controller
-
[@&#8203;`aa11e9a`](https://redirect.github.com/siderolabs/talos/commit/aa11e9abb)
fix: make image cache volume management less strict
-
[@&#8203;`26a62e3`](https://redirect.github.com/siderolabs/talos/commit/26a62e342)
docs: fix typo in Wireguard docs
-
[@&#8203;`0419f5d`](https://redirect.github.com/siderolabs/talos/commit/0419f5d8b)
feat: implement features in `ethtool`-like support
-
[@&#8203;`cd66fc6`](https://redirect.github.com/siderolabs/talos/commit/cd66fc6e8)
feat: use bootstrapped packages for building Talos
-
[@&#8203;`2b5bd5d`](https://redirect.github.com/siderolabs/talos/commit/2b5bd5d1d)
chore: upgrade siderolabs/go-loadbalancer
-
[@&#8203;`15191aa`](https://redirect.github.com/siderolabs/talos/commit/15191aa3e)
fix: extract cmdline multi profile UKIs
-
[@&#8203;`716f700`](https://redirect.github.com/siderolabs/talos/commit/716f700da)
feat: provide initial support for ethtool configuration
-
[@&#8203;`b726e2f`](https://redirect.github.com/siderolabs/talos/commit/b726e2f9f)
feat: update Flannel to 0.26.4
-
[@&#8203;`98d56d4`](https://redirect.github.com/siderolabs/talos/commit/98d56d4d6)
chore: track opened grpc connections
-
[@&#8203;`5e28c8e`](https://redirect.github.com/siderolabs/talos/commit/5e28c8e03)
fix: image cache volume provisioning
-
[@&#8203;`c966781`](https://redirect.github.com/siderolabs/talos/commit/c9667813d)
chore: remove containerd importer
-
[@&#8203;`270ffb6`](https://redirect.github.com/siderolabs/talos/commit/270ffb69a)
fix: duplicate qemu drive ids
-
[@&#8203;`71ec41b`](https://redirect.github.com/siderolabs/talos/commit/71ec41be1)
fix: build of Talos on non-Linux host
-
[@&#8203;`e2aa7c9`](https://redirect.github.com/siderolabs/talos/commit/e2aa7c98c)
fix: installer with SecureBoot should contain UKIs

</p>
</details>

##### Changes from siderolabs/crypto
<details><summary>1 commit</summary>
<p>

-
[siderolabs/crypto@`0d45dee`](https://redirect.github.com/siderolabs/crypto/commit/0d45dee)
chore: bump deps

</p>
</details>

##### Changes from siderolabs/discovery-api
<details><summary>1 commit</summary>
<p>

-
[siderolabs/discovery-api@`64513a6`](https://redirect.github.com/siderolabs/discovery-api/commit/64513a6)
feat: rekres, regenerate proto files

</p>
</details>

##### Changes from siderolabs/discovery-client
<details><summary>1 commit</summary>
<p>

-
[siderolabs/discovery-client@`b3632c4`](https://redirect.github.com/siderolabs/discovery-client/commit/b3632c4)
feat: support extra dial options in the client

</p>
</details>

##### Changes from siderolabs/extras
<details><summary>6 commits</summary>
<p>

-
[siderolabs/extras@`4102a78`](https://redirect.github.com/siderolabs/extras/commit/4102a78)
feat: build hermetically using new bldr and pkgs
-
[siderolabs/extras@`f4a110f`](https://redirect.github.com/siderolabs/extras/commit/f4a110f)
fix: build tc-redirect-tap as static binary
-
[siderolabs/extras@`0840abb`](https://redirect.github.com/siderolabs/extras/commit/0840abb)
fix: pull in fixed CNI plugins from pkgs
-
[siderolabs/extras@`52c217f`](https://redirect.github.com/siderolabs/extras/commit/52c217f)
feat: update dependencies
-
[siderolabs/extras@`f755eb4`](https://redirect.github.com/siderolabs/extras/commit/f755eb4)
chore: rekres to simplify `.kres.yaml` defaults
-
[siderolabs/extras@`e5382fc`](https://redirect.github.com/siderolabs/extras/commit/e5382fc)
chore: kresify renovate

</p>
</details>

##### Changes from siderolabs/gen
<details><summary>1 commit</summary>
<p>

-
[siderolabs/gen@`5ae3afe`](https://redirect.github.com/siderolabs/gen/commit/5ae3afe)
chore: update hashtriemap implementation from the latest upstream

</p>
</details>

##### Changes from siderolabs/go-circular
<details><summary>2 commits</summary>
<p>

-
[siderolabs/go-circular@`015a398`](https://redirect.github.com/siderolabs/go-circular/commit/015a398)
fix: replace static buffer allocation on growth
-
[siderolabs/go-circular@`ed8685e`](https://redirect.github.com/siderolabs/go-circular/commit/ed8685e)
test: add more assertions for write length result

</p>
</details>

##### Changes from siderolabs/go-debug
<details><summary>1 commit</summary>
<p>

-
[siderolabs/go-debug@`ea108ca`](https://redirect.github.com/siderolabs/go-debug/commit/ea108ca)
chore: add support for Go 1.24

</p>
</details>

##### Changes from siderolabs/go-kubernetes
<details><summary>1 commit</summary>
<p>

-
[siderolabs/go-kubernetes@`804cb44`](https://redirect.github.com/siderolabs/go-kubernetes/commit/804cb44)
feat: add support for Kubernetes to 1.33

</p>
</details>

##### Changes from siderolabs/go-loadbalancer
<details><summary>1 commit</summary>
<p>

-
[siderolabs/go-loadbalancer@`589c33a`](https://redirect.github.com/siderolabs/go-loadbalancer/commit/589c33a)
chore: upgrade `upstream.List` and `loadbalancer.TCP` to Go 1.23

</p>
</details>

##### Changes from siderolabs/go-talos-support
<details><summary>1 commit</summary>
<p>

-
[siderolabs/go-talos-support@`0f784bd`](https://redirect.github.com/siderolabs/go-talos-support/commit/0f784bd)
fix: avoid deadlock on context cancel

</p>
</details>

##### Changes from siderolabs/pkgs
<details><summary>50 commits</summary>
<p>

-
[siderolabs/pkgs@`347ad26`](https://redirect.github.com/siderolabs/pkgs/commit/347ad26)
feat: update Linux 6.12.17, containerd 2.0.3
-
[siderolabs/pkgs@`40241af`](https://redirect.github.com/siderolabs/pkgs/commit/40241af)
feat: enable qla2xxx module
-
[siderolabs/pkgs@`6fb00b4`](https://redirect.github.com/siderolabs/pkgs/commit/6fb00b4)
fix: pull in kmod from tools
-
[siderolabs/pkgs@`cc5317a`](https://redirect.github.com/siderolabs/pkgs/commit/cc5317a)
fix: patch Linux with blackhole patch
-
[siderolabs/pkgs@`08389dd`](https://redirect.github.com/siderolabs/pkgs/commit/08389dd)
chore: support vmdk and cp format for qemu-img
-
[siderolabs/pkgs@`7774b08`](https://redirect.github.com/siderolabs/pkgs/commit/7774b08)
feat: update Linux to 6.12.16, validate package structure
-
[siderolabs/pkgs@`40d288c`](https://redirect.github.com/siderolabs/pkgs/commit/40d288c)
fix: imager deps
-
[siderolabs/pkgs@`351a1a1`](https://redirect.github.com/siderolabs/pkgs/commit/351a1a1)
feat: add tools needed for imager
-
[siderolabs/pkgs@`80351ca`](https://redirect.github.com/siderolabs/pkgs/commit/80351ca)
fix: reproducibility tests
-
[siderolabs/pkgs@`e1f11f0`](https://redirect.github.com/siderolabs/pkgs/commit/e1f11f0)
fix: remove patches and other files from copy-only packages
-
[siderolabs/pkgs@`8fff06b`](https://redirect.github.com/siderolabs/pkgs/commit/8fff06b)
chore: bump xfsprogs to 6.12.0
-
[siderolabs/pkgs@`76a0316`](https://redirect.github.com/siderolabs/pkgs/commit/76a0316)
chore: systemd 257.3, runc 1.2.5, ipxe
-
[siderolabs/pkgs@`359807b`](https://redirect.github.com/siderolabs/pkgs/commit/359807b)
feat: copy built packages, improve hermetic build
-
[siderolabs/pkgs@`117a1d6`](https://redirect.github.com/siderolabs/pkgs/commit/117a1d6)
feat: update Linux to 6.12.13
-
[siderolabs/pkgs@`85f8901`](https://redirect.github.com/siderolabs/pkgs/commit/85f8901)
feat: make pkgs build bootstrapped
-
[siderolabs/pkgs@`5763e3e`](https://redirect.github.com/siderolabs/pkgs/commit/5763e3e)
feat: update systemd to 257.2
-
[siderolabs/pkgs@`1e24b31`](https://redirect.github.com/siderolabs/pkgs/commit/1e24b31)
feat: update Linux to 6.12.11
-
[siderolabs/pkgs@`38749d1`](https://redirect.github.com/siderolabs/pkgs/commit/38749d1)
fix: build CNI plugins statically linked
-
[siderolabs/pkgs@`5da83db`](https://redirect.github.com/siderolabs/pkgs/commit/5da83db)
feat: bump NVIDIA driver versions
-
[siderolabs/pkgs@`5934363`](https://redirect.github.com/siderolabs/pkgs/commit/5934363)
fix: certificates CA
-
[siderolabs/pkgs@`57f492d`](https://redirect.github.com/siderolabs/pkgs/commit/57f492d)
feat: bump dependencies
-
[siderolabs/pkgs@`45b9ebe`](https://redirect.github.com/siderolabs/pkgs/commit/45b9ebe)
feat: update Linux to 6.2.10
-
[siderolabs/pkgs@`e00ad67`](https://redirect.github.com/siderolabs/pkgs/commit/e00ad67)
chore: rekres to fix reproducibility build
-
[siderolabs/pkgs@`cfb4b0a`](https://redirect.github.com/siderolabs/pkgs/commit/cfb4b0a)
feat: update Go to 1.23.5
-
[siderolabs/pkgs@`72f19a2`](https://redirect.github.com/siderolabs/pkgs/commit/72f19a2)
feat: update containerd to v2.0.2
-
[siderolabs/pkgs@`17a80ee`](https://redirect.github.com/siderolabs/pkgs/commit/17a80ee)
feat: update Linux to 6.12.9
-
[siderolabs/pkgs@`c9d718d`](https://redirect.github.com/siderolabs/pkgs/commit/c9d718d)
fix: adjust kernel options around ACPI/PCI/EFI
-
[siderolabs/pkgs@`eb9d566`](https://redirect.github.com/siderolabs/pkgs/commit/eb9d566)
feat: update Linux to 6.12.8
-
[siderolabs/pkgs@`73e4353`](https://redirect.github.com/siderolabs/pkgs/commit/73e4353)
fix: update config-arm64 to add Rasperry Pi watchdog support
-
[siderolabs/pkgs@`0ab2427`](https://redirect.github.com/siderolabs/pkgs/commit/0ab2427)
fix: dvb was missing I2C_MUX support and si2168 driver
-
[siderolabs/pkgs@`c3ac8e2`](https://redirect.github.com/siderolabs/pkgs/commit/c3ac8e2)
chore: drop unused cert copy
-
[siderolabs/pkgs@`e7eddcf`](https://redirect.github.com/siderolabs/pkgs/commit/e7eddcf)
feat: bump dependencies
-
[siderolabs/pkgs@`0b00e86`](https://redirect.github.com/siderolabs/pkgs/commit/0b00e86)
fix: patch containerd with CNI deadlock fix
-
[siderolabs/pkgs@`9051c9a`](https://redirect.github.com/siderolabs/pkgs/commit/9051c9a)
feat: update Linux to 6.12.6
-
[siderolabs/pkgs@`6695012`](https://redirect.github.com/siderolabs/pkgs/commit/6695012)
chore: rekres to simplify `.kres.yaml` defaults
-
[siderolabs/pkgs@`611ca38`](https://redirect.github.com/siderolabs/pkgs/commit/611ca38)
chore: rekres to bring renovate under kres
-
[siderolabs/pkgs@`a4c4215`](https://redirect.github.com/siderolabs/pkgs/commit/a4c4215)
fix: drop cgroupsv1 controllers
-
[siderolabs/pkgs@`28c909d`](https://redirect.github.com/siderolabs/pkgs/commit/28c909d)
feat: update Linux firmware to
[`2024121`](https://redirect.github.com/siderolabs/talos/commit/20241210)
-
[siderolabs/pkgs@`c40a9e9`](https://redirect.github.com/siderolabs/pkgs/commit/c40a9e9)
feat: update Linux to 6.12.5
-
[siderolabs/pkgs@`d54ca83`](https://redirect.github.com/siderolabs/pkgs/commit/d54ca83)
feat: update containerd to v2.0.1
-
[siderolabs/pkgs@`86e3755`](https://redirect.github.com/siderolabs/pkgs/commit/86e3755)
fix: add CONFIG_INTEL_MEI_GSC_PROXY as module
-
[siderolabs/pkgs@`8c31321`](https://redirect.github.com/siderolabs/pkgs/commit/8c31321)
feat: update ZFS to 2.2.7
-
[siderolabs/pkgs@`605f493`](https://redirect.github.com/siderolabs/pkgs/commit/605f493)
feat: update runc to v1.2.3
-
[siderolabs/pkgs@`1a55529`](https://redirect.github.com/siderolabs/pkgs/commit/1a55529)
feat: update Linux to 6.12.4
-
[siderolabs/pkgs@`52ba9a5`](https://redirect.github.com/siderolabs/pkgs/commit/52ba9a5)
feat: update Linux 6.12.3
-
[siderolabs/pkgs@`9cf35be`](https://redirect.github.com/siderolabs/pkgs/commit/9cf35be)
feat: build host iptables with nftables support
-
[siderolabs/pkgs@`71003a3`](https://redirect.github.com/siderolabs/pkgs/commit/71003a3)
feat: update Go to 1.23.4
-
[siderolabs/pkgs@`5b4d402`](https://redirect.github.com/siderolabs/pkgs/commit/5b4d402)
feat: build dvb kernel modules and CX23885
-
[siderolabs/pkgs@`b330af9`](https://redirect.github.com/siderolabs/pkgs/commit/b330af9)
chore: bring in KSPP recommendations
-
[siderolabs/pkgs@`f81b190`](https://redirect.github.com/siderolabs/pkgs/commit/f81b190)
feat: kernel driver support for RK3588 devices (Turing RK1)

</p>
</details>

##### Changes from siderolabs/proto-codec
<details><summary>1 commit</summary>
<p>

-
[siderolabs/proto-codec@`3235c29`](https://redirect.github.com/siderolabs/proto-codec/commit/3235c29)
chore: bump deps

</p>
</details>

##### Changes from siderolabs/siderolink
<details><summary>1 commit</summary>
<p>

-
[siderolabs/siderolink@`38e459e`](https://redirect.github.com/siderolabs/siderolink/commit/38e459e)
chore: bump deps

</p>
</details>

##### Changes from siderolabs/tools
<details><summary>19 commits</summary>
<p>

-
[siderolabs/tools@`fcee25b`](https://redirect.github.com/siderolabs/tools/commit/fcee25b)
fix: revert kmod to 33
-
[siderolabs/tools@`6a71711`](https://redirect.github.com/siderolabs/tools/commit/6a71711)
fix: do not install man and locale for exported packages
-
[siderolabs/tools@`3389ba2`](https://redirect.github.com/siderolabs/tools/commit/3389ba2)
chore: move zlib to be an external package
-
[siderolabs/tools@`d93b780`](https://redirect.github.com/siderolabs/tools/commit/d93b780)
chore: expose more tools
-
[siderolabs/tools@`46be459`](https://redirect.github.com/siderolabs/tools/commit/46be459)
chore: remove systemd version
-
[siderolabs/tools@`f33fbe4`](https://redirect.github.com/siderolabs/tools/commit/f33fbe4)
fix: install policycoreutils under correct prefix
-
[siderolabs/tools@`758d61c`](https://redirect.github.com/siderolabs/tools/commit/758d61c)
chore: update dependencies
-
[siderolabs/tools@`f398a04`](https://redirect.github.com/siderolabs/tools/commit/f398a04)
chore: update dependencies, hermetic build
-
[siderolabs/tools@`9db33dd`](https://redirect.github.com/siderolabs/tools/commit/9db33dd)
feat: update to Go 1.23.6
-
[siderolabs/tools@`ef0a679`](https://redirect.github.com/siderolabs/tools/commit/ef0a679)
fix: do not install anything to /usr/lib64
-
[siderolabs/tools@`35748ea`](https://redirect.github.com/siderolabs/tools/commit/35748ea)
feat: fully bootstrapped build
-
[siderolabs/tools@`7200845`](https://redirect.github.com/siderolabs/tools/commit/7200845)
feat: update dependencies
-
[siderolabs/tools@`bc30a2a`](https://redirect.github.com/siderolabs/tools/commit/bc30a2a)
feat: update Go to 1.23.5
-
[siderolabs/tools@`533b595`](https://redirect.github.com/siderolabs/tools/commit/533b595)
chore: rekres to fix reproducibility
-
[siderolabs/tools@`01568a5`](https://redirect.github.com/siderolabs/tools/commit/01568a5)
chore: use Make and Go from the toolchain image
-
[siderolabs/tools@`0393558`](https://redirect.github.com/siderolabs/tools/commit/0393558)
feat: bump dependencies
-
[siderolabs/tools@`7811a5f`](https://redirect.github.com/siderolabs/tools/commit/7811a5f)
chore: rekres to simplify `.kres.yaml` defaults
-
[siderolabs/tools@`0b8b905`](https://redirect.github.com/siderolabs/tools/commit/0b8b905)
chore: kresify renovate config
-
[siderolabs/tools@`fe34fb3`](https://redirect.github.com/siderolabs/tools/commit/fe34fb3)
feat: update Go to 1.23.4

</p>
</details>

##### Dependency Changes

- **cloud.google.com/go/compute/metadata** v0.5.2 -> v0.6.0
- **github.com/Azure/azure-sdk-for-go/sdk/azcore** v1.16.0 -> v1.17.0
- **github.com/Azure/azure-sdk-for-go/sdk/azidentity** v1.8.0 -> v1.8.2
-
**github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azcertificates**
v1.3.0 -> v1.3.1
- **github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys**
v1.3.0 -> v1.3.1
- **github.com/aws/aws-sdk-go-v2/config** v1.28.5 -> v1.29.8
- **github.com/aws/aws-sdk-go-v2/feature/ec2/imds** v1.16.20 -> v1.16.30
- **github.com/aws/aws-sdk-go-v2/service/kms** v1.37.6 -> v1.38.0
- **github.com/aws/smithy-go** v1.22.1 -> v1.22.3
- **github.com/containerd/cgroups/v3** v3.0.4 -> v3.0.5
- **github.com/containerd/containerd/v2** v2.0.1 -> v2.0.3
- **github.com/containerd/platforms** v1.0.0-rc.0 -> v1.0.0-rc.1
- **github.com/containernetworking/plugins** v1.6.0 -> v1.6.2
- **github.com/cosi-project/runtime** v0.7.6 -> v0.10.0
- **github.com/docker/cli** v27.3.1 -> v28.0.1
- **github.com/docker/docker** v27.3.1 -> v28.0.1
- **github.com/foxboron/go-uefi**
[`fab4fdf`](https://redirect.github.com/siderolabs/talos/commit/fab4fdf2f2f3)
->
[`69fb7db`](https://redirect.github.com/siderolabs/talos/commit/69fb7dba244f)
- **github.com/gdamore/tcell/v2** v2.7.4 -> v2.8.1
- **github.com/google/cel-go** v0.22.1 -> v0.24.1
- **github.com/google/go-containerregistry** v0.20.2 -> v0.20.3
- **github.com/google/go-tpm** v0.9.1 -> v0.9.3
- **github.com/google/nftables** v0.2.0 -> v0.3.0
- **github.com/grpc-ecosystem/go-grpc-middleware/v2** v2.1.0 -> v2.3.0
- **github.com/hetznercloud/hcloud-go/v2** v2.17.0 -> v2.19.1
- **github.com/insomniacslk/dhcp**
[`a3a4c1f`](https://redirect.github.com/siderolabs/talos/commit/a3a4c1f04475)
->
[`8abf581`](https://redirect.github.com/siderolabs/talos/commit/8abf58130905)
- **github.com/klauspost/compress** v1.17.11 -> v1.18.0
- **github.com/klauspost/cpuid/v2** v2.2.9 -> v2.2.10
- **github.com/mdlayher/netlink** v1.7.2 ->
[`fbb4dce`](https://redirect.github.com/siderolabs/talos/commit/fbb4dce95f42)
- **github.com/miekg/dns** v1.1.62 -> v1.1.63
- **github.com/opencontainers/runc** v1.2.2 -> v1.2.5
- **github.com/opencontainers/runtime-spec** v1.2.0 -> v1.2.1
- **github.com/rivo/tview**
[`c76f787`](https://redirect.github.com/siderolabs/talos/commit/c76f7879f592)
->
[`17b7edb`](https://redirect.github.com/siderolabs/talos/commit/17b7edb88c57)
- **github.com/safchain/ethtool** v0.5.9 -> v0.5.10
- **github.com/scaleway/scaleway-sdk-go** v1.0.0-beta.30 ->
v1.0.0-beta.32
- **github.com/siderolabs/crypto** v0.5.0 -> v0.5.1
- **github.com/siderolabs/discovery-api** v0.1.5 -> v0.1.6
- **github.com/siderolabs/discovery-client** v0.1.10 -> v0.1.11
- **github.com/siderolabs/extras** v1.9.0 -> v1.10.0-alpha.0-3-g4102a78
- **github.com/siderolabs/gen** v0.7.0 -> v0.8.0
- **github.com/siderolabs/go-blockdevice/v2** v2.0.7 -> v2.0.16
- **github.com/siderolabs/go-circular** v0.2.1 -> v0.2.2
- **github.com/siderolabs/go-debug** v0.4.0 -> v0.5.0
- **github.com/siderolabs/go-kubernetes** v0.2.17 -> v0.2.18
-   **github.com/siderolabs/go-loadbalancer**

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xODUuMSIsInVwZGF0ZWRJblZlciI6IjM5LjE4NS4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
---
 clustertool/go.mod | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/clustertool/go.mod b/clustertool/go.mod
index 53da877ffe3..02c22d04d72 100644
--- a/clustertool/go.mod
+++ b/clustertool/go.mod
@@ -18,7 +18,7 @@ require (
     github.com/knadh/koanf/v2 v2.1.2
     github.com/leaanthony/debme v1.2.1
     github.com/rs/zerolog v1.33.0
-    github.com/siderolabs/talos/pkg/machinery v1.10.0-alpha.1.0.20250203100439-e2aa7c98cceb
+    github.com/siderolabs/talos/pkg/machinery v1.10.0-alpha.2
     github.com/spf13/cobra v1.9.1
     golang.org/x/crypto v0.35.0
     gopkg.in/yaml.v3 v3.0.1