Commit Graph

510 Commits

Author SHA1 Message Date
Kjeld Schouten cd2dd7c4fe fix(clustertool): correct bootstrap issue with nginx vs traefik and kps instead of operator 2025-04-03 18:55:37 +02:00
Kjeld Schouten f968fb3988 hmm 2025-04-03 18:30:47 +02:00
Kjeld Schouten de7c0b824d cleanup some go stuff 2025-04-03 17:54:54 +02:00
Kjeld Schouten 5e9554a3ce feat(clustertool): BREAKING CHANGE move to nginx 2025-04-03 17:37:59 +02:00
TrueCharts Bot 580bb08dc5 fix(deps): update module github.com/getsops/sops/v3 v3.9.4 → v3.10.1 (clustertool) (#33798)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [github.com/getsops/sops/v3](https://redirect.github.com/getsops/sops)
| require | minor | `v3.9.4` -> `v3.10.1` |

---

### Release Notes

<details>
<summary>getsops/sops (github.com/getsops/sops/v3)</summary>

###
[`v3.10.1`](https://redirect.github.com/getsops/sops/releases/tag/v3.10.1)

[Compare
Source](https://redirect.github.com/getsops/sops/compare/v3.10.0...v3.10.1)

#### Installation

To install `sops`, download one of the pre-built binaries provided for
your platform from the artifacts attached to this release.

For instance, if you are using Linux on an AMD64 architecture:

```shell

### Download the binary
curl -LO https://github.com/getsops/sops/releases/download/v3.10.1/sops-v3.10.1.linux.amd64

### Move the binary in to your PATH
mv sops-v3.10.1.linux.amd64 /usr/local/bin/sops

### Make the binary executable
chmod +x /usr/local/bin/sops
```

##### Verify checksums file signature

The checksums file provided within the artifacts attached to this
release is signed using
[Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC.
To validate the signature of this file, run the following commands:

```shell

### Download the checksums file, certificate and signature
curl -LO https://github.com/getsops/sops/releases/download/v3.10.1/sops-v3.10.1.checksums.txt
curl -LO https://github.com/getsops/sops/releases/download/v3.10.1/sops-v3.10.1.checksums.pem
curl -LO https://github.com/getsops/sops/releases/download/v3.10.1/sops-v3.10.1.checksums.sig

### Verify the checksums file
cosign verify-blob sops-v3.10.1.checksums.txt \
  --certificate sops-v3.10.1.checksums.pem \
  --signature sops-v3.10.1.checksums.sig \
  --certificate-identity-regexp=https://github.com/getsops \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com
```

##### Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the
checksums file after having validated its signature:

```shell

### Verify the binary using the checksums file
sha256sum -c sops-v3.10.1.checksums.txt --ignore-missing
```

##### Verify artifact provenance

The [SLSA provenance](https://slsa.dev/provenance/v0.2) of the binaries,
packages, and SBOMs can be found within the artifacts associated with
this release. It is presented through an [in-toto](https://in-toto.io/)
link metadata file named `sops-v3.10.1.intoto.jsonl`. To verify the
provenance of an artifact, you can utilize the
[`slsa-verifier`](https://redirect.github.com/slsa-framework/slsa-verifier#artifacts)
tool:

```shell

### Download the metadata file
curl -LO  https://github.com/getsops/sops/releases/download/v3.10.1/sops-v3.10.1.intoto.jsonl

### Verify the provenance of the artifact
slsa-verifier verify-artifact <artifact> \
  --provenance-path sops-v3.10.1.intoto.jsonl \
  --source-uri github.com/getsops/sops \
  --source-tag v3.10.1
```

#### Container Images

The `sops` binaries are also available as container images, based on
Debian (slim) and Alpine Linux. The Debian-based container images
include any dependencies which may be required to make use of certain
key services, such as GnuPG, AWS KMS, Azure Key Vault, and Google Cloud
KMS. The Alpine-based container images are smaller in size, but do not
include these dependencies.

These container images are available for the following architectures:
`linux/amd64` and `linux/arm64`.

##### GitHub Container Registry

-   `ghcr.io/getsops/sops:v3.10.1`
-   `ghcr.io/getsops/sops:v3.10.1-alpine`

##### Quay.io

-   `quay.io/getsops/sops:v3.10.1`
-   `quay.io/getsops/sops:v3.10.1-alpine`

##### Verify container image signature

The container images are signed using
[Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC.
To validate the signature of an image, run the following command:

```shell
cosign verify ghcr.io/getsops/sops:v3.10.1 \
  --certificate-identity-regexp=https://github.com/getsops \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com \
  -o text
```

##### Verify container image provenance

The container images include [SLSA
provenance](https://slsa.dev/provenance/v0.2) attestations. For more
information around the verification of this, please refer to the
[`slsa-verifier`
documentation](https://redirect.github.com/slsa-framework/slsa-verifier#containers).

#### Software Bill of Materials

The Software Bill of Materials (SBOM) for each binary is accessible
within the artifacts enclosed with this release. It is presented as an
[SPDX](https://spdx.dev/) JSON file, formatted as
`<binary>.spdx.sbom.json`.

#### What's Changed

- build(deps): Bump the ci group with 2 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1826](https://redirect.github.com/getsops/sops/pull/1826)
- Release 3.10.1 by
[@&#8203;felixfontein](https://redirect.github.com/felixfontein) in
[https://github.com/getsops/sops/pull/1827](https://redirect.github.com/getsops/sops/pull/1827)

**Full Changelog**:
https://github.com/getsops/sops/compare/v3.10.0...v3.10.1

###
[`v3.10.0`](https://redirect.github.com/getsops/sops/releases/tag/v3.10.0)

[Compare
Source](https://redirect.github.com/getsops/sops/compare/v3.9.4...v3.10.0)

#### Installation

To install `sops`, download one of the pre-built binaries provided for
your platform from the artifacts attached to this release.

For instance, if you are using Linux on an AMD64 architecture:

```shell

### Download the binary
curl -LO https://github.com/getsops/sops/releases/download/v3.10.0/sops-v3.10.0.linux.amd64

### Move the binary in to your PATH
mv sops-v3.10.0.linux.amd64 /usr/local/bin/sops

### Make the binary executable
chmod +x /usr/local/bin/sops
```

##### Verify checksums file signature

The checksums file provided within the artifacts attached to this
release is signed using
[Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC.
To validate the signature of this file, run the following commands:

```shell

### Download the checksums file, certificate and signature
curl -LO https://github.com/getsops/sops/releases/download/v3.10.0/sops-v3.10.0.checksums.txt
curl -LO https://github.com/getsops/sops/releases/download/v3.10.0/sops-v3.10.0.checksums.pem
curl -LO https://github.com/getsops/sops/releases/download/v3.10.0/sops-v3.10.0.checksums.sig

### Verify the checksums file
cosign verify-blob sops-v3.10.0.checksums.txt \
  --certificate sops-v3.10.0.checksums.pem \
  --signature sops-v3.10.0.checksums.sig \
  --certificate-identity-regexp=https://github.com/getsops \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com
```

##### Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the
checksums file after having validated its signature:

```shell

### Verify the binary using the checksums file
sha256sum -c sops-v3.10.0.checksums.txt --ignore-missing
```

##### Verify artifact provenance

The [SLSA provenance](https://slsa.dev/provenance/v0.2) of the binaries,
packages, and SBOMs can be found within the artifacts associated with
this release. It is presented through an [in-toto](https://in-toto.io/)
link metadata file named `sops-v3.10.0.intoto.jsonl`. To verify the
provenance of an artifact, you can utilize the
[`slsa-verifier`](https://redirect.github.com/slsa-framework/slsa-verifier#artifacts)
tool:

```shell

### Download the metadata file
curl -LO  https://github.com/getsops/sops/releases/download/v3.10.0/sops-v3.10.0.intoto.jsonl

### Verify the provenance of the artifact
slsa-verifier verify-artifact <artifact> \
  --provenance-path sops-v3.10.0.intoto.jsonl \
  --source-uri github.com/getsops/sops \
  --source-tag v3.10.0
```

#### Container Images

The `sops` binaries are also available as container images, based on
Debian (slim) and Alpine Linux. The Debian-based container images
include any dependencies which may be required to make use of certain
key services, such as GnuPG, AWS KMS, Azure Key Vault, and Google Cloud
KMS. The Alpine-based container images are smaller in size, but do not
include these dependencies.

These container images are available for the following architectures:
`linux/amd64` and `linux/arm64`.

##### GitHub Container Registry

-   `ghcr.io/getsops/sops:v3.10.0`
-   `ghcr.io/getsops/sops:v3.10.0-alpine`

##### Quay.io

-   `quay.io/getsops/sops:v3.10.0`
-   `quay.io/getsops/sops:v3.10.0-alpine`

##### Verify container image signature

The container images are signed using
[Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC.
To validate the signature of an image, run the following command:

```shell
cosign verify ghcr.io/getsops/sops:v3.10.0 \
  --certificate-identity-regexp=https://github.com/getsops \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com \
  -o text
```

##### Verify container image provenance

The container images include [SLSA
provenance](https://slsa.dev/provenance/v0.2) attestations. For more
information around the verification of this, please refer to the
[`slsa-verifier`
documentation](https://redirect.github.com/slsa-framework/slsa-verifier#containers).

#### Software Bill of Materials

The Software Bill of Materials (SBOM) for each binary is accessible
within the artifacts enclosed with this release. It is presented as an
[SPDX](https://spdx.dev/) JSON file, formatted as
`<binary>.spdx.sbom.json`.

#### What's Changed

- build(deps): Bump alpine from 3.18 to 3.21 in /.release in the docker
group across 1 directory by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1700](https://redirect.github.com/getsops/sops/pull/1700)
- Convert changelog to MarkDown by
[@&#8203;felixfontein](https://redirect.github.com/felixfontein) in
[https://github.com/getsops/sops/pull/1741](https://redirect.github.com/getsops/sops/pull/1741)
- build(deps): Bump the go group with 7 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1743](https://redirect.github.com/getsops/sops/pull/1743)
- build(deps): Bump the go group with 9 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1745](https://redirect.github.com/getsops/sops/pull/1745)
- build(deps): Bump the rust group in /functional-tests with 2 updates
by [@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1744](https://redirect.github.com/getsops/sops/pull/1744)
- build(deps): Bump github/codeql-action from 3.28.5 to 3.28.8 in the ci
group by [@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1746](https://redirect.github.com/getsops/sops/pull/1746)
- build(deps): Bump the go group with 12 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1751](https://redirect.github.com/getsops/sops/pull/1751)
- build(deps): Bump the ci group with 4 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1750](https://redirect.github.com/getsops/sops/pull/1750)
- Add --input-type option for filestatus subcommand by
[@&#8203;felixfontein](https://redirect.github.com/felixfontein) in
[https://github.com/getsops/sops/pull/1601](https://redirect.github.com/getsops/sops/pull/1601)
- Use SOPS_EDITOR before EDITOR by
[@&#8203;felixfontein](https://redirect.github.com/felixfontein) in
[https://github.com/getsops/sops/pull/1611](https://redirect.github.com/getsops/sops/pull/1611)
- Allow users to disable version check via environment variable by
[@&#8203;nicklasfrahm](https://redirect.github.com/nicklasfrahm) in
[https://github.com/getsops/sops/pull/1684](https://redirect.github.com/getsops/sops/pull/1684)
- add duplicate section support to ini store by
[@&#8203;reindlt](https://redirect.github.com/reindlt) in
[https://github.com/getsops/sops/pull/1452](https://redirect.github.com/getsops/sops/pull/1452)
- stores: test for duplicate keys, reserve keyword (yaml only now) by
[@&#8203;holiman](https://redirect.github.com/holiman) in
[https://github.com/getsops/sops/pull/1203](https://redirect.github.com/getsops/sops/pull/1203)
- Add same process option for exec-env by
[@&#8203;ricmatsui](https://redirect.github.com/ricmatsui) in
[https://github.com/getsops/sops/pull/880](https://redirect.github.com/getsops/sops/pull/880)
- outputs: add trailing newline at the end of JSON files by
[@&#8203;duthils](https://redirect.github.com/duthils) in
[https://github.com/getsops/sops/pull/1476](https://redirect.github.com/getsops/sops/pull/1476)
- set subcommand: add --idempotent flag that will not write the file if
no change happened by
[@&#8203;felixfontein](https://redirect.github.com/felixfontein) in
[https://github.com/getsops/sops/pull/1754](https://redirect.github.com/getsops/sops/pull/1754)
- Encrypt and decrypt time.Time objects by
[@&#8203;felixfontein](https://redirect.github.com/felixfontein) in
[https://github.com/getsops/sops/pull/1759](https://redirect.github.com/getsops/sops/pull/1759)
- build(deps): Bump the go group with 8 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1763](https://redirect.github.com/getsops/sops/pull/1763)
- build(deps): Bump tempfile from 3.16.0 to 3.17.0 in /functional-tests
in the rust group by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1762](https://redirect.github.com/getsops/sops/pull/1762)
- build(deps): Bump goreleaser/goreleaser-action from 6.1.0 to 6.2.1 in
the ci group by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1761](https://redirect.github.com/getsops/sops/pull/1761)
- fix(docs): typo in README.rst by
[@&#8203;Paredev](https://redirect.github.com/Paredev) in
[https://github.com/getsops/sops/pull/1765](https://redirect.github.com/getsops/sops/pull/1765)
- Add SSH support for age by
[@&#8203;haoqixu](https://redirect.github.com/haoqixu) in
[https://github.com/getsops/sops/pull/1692](https://redirect.github.com/getsops/sops/pull/1692)
- make sure that tests do not pick keys.txt from user's HOME dir by
[@&#8203;tomaszduda23](https://redirect.github.com/tomaszduda23) in
[https://github.com/getsops/sops/pull/1766](https://redirect.github.com/getsops/sops/pull/1766)
- support for age identity with passphrase by
[@&#8203;tomaszduda23](https://redirect.github.com/tomaszduda23) in
[https://github.com/getsops/sops/pull/1400](https://redirect.github.com/getsops/sops/pull/1400)
- build(deps): Bump the rust group in /functional-tests with 4 updates
by [@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1768](https://redirect.github.com/getsops/sops/pull/1768)
- build(deps): Bump the go group with 12 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1769](https://redirect.github.com/getsops/sops/pull/1769)
- build(deps): Bump the ci group with 4 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1770](https://redirect.github.com/getsops/sops/pull/1770)
- build(deps): Bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1773](https://redirect.github.com/getsops/sops/pull/1773)
- feat: add age plugin support by
[@&#8203;brianmcgee](https://redirect.github.com/brianmcgee) in
[https://github.com/getsops/sops/pull/1641](https://redirect.github.com/getsops/sops/pull/1641)
- Check GnuPG decryption result for non-empty size by
[@&#8203;felixfontein](https://redirect.github.com/felixfontein) in
[https://github.com/getsops/sops/pull/1776](https://redirect.github.com/getsops/sops/pull/1776)
- vendored age code: consolidate passphrase reading functionality by
[@&#8203;felixfontein](https://redirect.github.com/felixfontein) in
[https://github.com/getsops/sops/pull/1775](https://redirect.github.com/getsops/sops/pull/1775)
- Allow to encrypt and decrypt from stdin by
[@&#8203;felixfontein](https://redirect.github.com/felixfontein) in
[https://github.com/getsops/sops/pull/1690](https://redirect.github.com/getsops/sops/pull/1690)
- build(deps): Bump the go group with 11 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1784](https://redirect.github.com/getsops/sops/pull/1784)
- build(deps): Bump the ci group with 5 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1782](https://redirect.github.com/getsops/sops/pull/1782)
- build(deps): Bump serde_json from 1.0.139 to 1.0.140 in
/functional-tests in the rust group; bump Rust to 1.85.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1783](https://redirect.github.com/getsops/sops/pull/1783)
- build(deps): Bump the go group with 13 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1797](https://redirect.github.com/getsops/sops/pull/1797)
- build(deps): Bump the rust group in /functional-tests with 3 updates
by [@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1796](https://redirect.github.com/getsops/sops/pull/1796)
- build(deps): Bump github/codeql-action from 3.28.10 to 3.28.11 in the
ci group by [@&#8203;dependabot](https://redirect.github.com/dependabot)
in
[https://github.com/getsops/sops/pull/1795](https://redirect.github.com/getsops/sops/pull/1795)
- build(deps): Bump the go group with 6 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1802](https://redirect.github.com/getsops/sops/pull/1802)
- build(deps): Bump tempfile from 3.18.0 to 3.19.0 in /functional-tests
in the rust group by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1800](https://redirect.github.com/getsops/sops/pull/1800)
- build(deps): Bump docker/login-action from 3.3.0 to 3.4.0 in the ci
group by [@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1801](https://redirect.github.com/getsops/sops/pull/1801)
- build(deps): Bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1806](https://redirect.github.com/getsops/sops/pull/1806)
- goreleaser: add windows arm64 by
[@&#8203;duthils](https://redirect.github.com/duthils) in
[https://github.com/getsops/sops/pull/1791](https://redirect.github.com/getsops/sops/pull/1791)
- Add a way to set sops config location via envvar by
[@&#8203;sledzikowy](https://redirect.github.com/sledzikowy) in
[https://github.com/getsops/sops/pull/1701](https://redirect.github.com/getsops/sops/pull/1701)
- build(deps): Bump the go group with 3 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1809](https://redirect.github.com/getsops/sops/pull/1809)
- build(deps): Bump the ci group with 5 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1808](https://redirect.github.com/getsops/sops/pull/1808)
- build(deps): Bump tempfile from 3.19.0 to 3.19.1 in /functional-tests
in the rust group by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1807](https://redirect.github.com/getsops/sops/pull/1807)
- Support --config option in publish subcommand by
[@&#8203;felixfontein](https://redirect.github.com/felixfontein) in
[https://github.com/getsops/sops/pull/1779](https://redirect.github.com/getsops/sops/pull/1779)
- Fix caching of Metadata.DataKey by
[@&#8203;felixfontein](https://redirect.github.com/felixfontein) in
[https://github.com/getsops/sops/pull/1781](https://redirect.github.com/getsops/sops/pull/1781)
- Lint by
[@&#8203;felixfontein](https://redirect.github.com/felixfontein) in
[https://github.com/getsops/sops/pull/1780](https://redirect.github.com/getsops/sops/pull/1780)
- updatekeys subcommand: rename GroupQuorum to ShamirThreshold by
[@&#8203;felixfontein](https://redirect.github.com/felixfontein) in
[https://github.com/getsops/sops/pull/1631](https://redirect.github.com/getsops/sops/pull/1631)
- If --filename-override is specified, convert it to an absolute path
same as regular filenames by
[@&#8203;felixfontein](https://redirect.github.com/felixfontein) in
[https://github.com/getsops/sops/pull/1793](https://redirect.github.com/getsops/sops/pull/1793)
- Add support for `oauth2.TokenSource` in GCP KMS by
[@&#8203;matheuscscp](https://redirect.github.com/matheuscscp) in
[https://github.com/getsops/sops/pull/1794](https://redirect.github.com/getsops/sops/pull/1794)
- Added SOPS_AGE_KEY_CMD option to age, fixes
[#&#8203;1323](https://redirect.github.com/getsops/sops/issues/1323) by
[@&#8203;danilobuerger](https://redirect.github.com/danilobuerger) in
[https://github.com/getsops/sops/pull/1811](https://redirect.github.com/getsops/sops/pull/1811)
- chore: omitempty metadata to reduce the size of stored config by
[@&#8203;cgetzen](https://redirect.github.com/cgetzen) in
[https://github.com/getsops/sops/pull/1571](https://redirect.github.com/getsops/sops/pull/1571)
- Improve Shamir Secret Sharing code by
[@&#8203;felixfontein](https://redirect.github.com/felixfontein) in
[https://github.com/getsops/sops/pull/1813](https://redirect.github.com/getsops/sops/pull/1813)
- Update all dependencies by
[@&#8203;felixfontein](https://redirect.github.com/felixfontein) in
[https://github.com/getsops/sops/pull/1814](https://redirect.github.com/getsops/sops/pull/1814)
- Run 'gofmt -w' on all .go files by
[@&#8203;felixfontein](https://redirect.github.com/felixfontein) in
[https://github.com/getsops/sops/pull/1817](https://redirect.github.com/getsops/sops/pull/1817)
- Add option to explicitly check for the latest version; deprecate
current default of always doing that unless disabled by
[@&#8203;felixfontein](https://redirect.github.com/felixfontein) in
[https://github.com/getsops/sops/pull/1816](https://redirect.github.com/getsops/sops/pull/1816)
- Build using Go 1.24 and drop support for 1.22 by
[@&#8203;hiddeco](https://redirect.github.com/hiddeco) in
[https://github.com/getsops/sops/pull/1819](https://redirect.github.com/getsops/sops/pull/1819)
- Support `GOOGLE_OAUTH_ACCESS_TOKEN` for Google Cloud Platform by
[@&#8203;marensofier](https://redirect.github.com/marensofier) in
[https://github.com/getsops/sops/pull/1578](https://redirect.github.com/getsops/sops/pull/1578)
- Warn about `.sops.yml` files found while searching for `.sops.yaml` by
[@&#8203;felixfontein](https://redirect.github.com/felixfontein) in
[https://github.com/getsops/sops/pull/1820](https://redirect.github.com/getsops/sops/pull/1820)
- Release 3.10.0 by
[@&#8203;felixfontein](https://redirect.github.com/felixfontein) in
[https://github.com/getsops/sops/pull/1815](https://redirect.github.com/getsops/sops/pull/1815)
- Added support for multiarch windows release binaries by
[@&#8203;sabre1041](https://redirect.github.com/sabre1041) in
[https://github.com/getsops/sops/pull/1823](https://redirect.github.com/getsops/sops/pull/1823)

#### New Contributors

- [@&#8203;reindlt](https://redirect.github.com/reindlt) made their
first contribution in
[https://github.com/getsops/sops/pull/1452](https://redirect.github.com/getsops/sops/pull/1452)
- [@&#8203;ricmatsui](https://redirect.github.com/ricmatsui) made their
first contribution in
[https://github.com/getsops/sops/pull/880](https://redirect.github.com/getsops/sops/pull/880)
- [@&#8203;Paredev](https://redirect.github.com/Paredev) made their
first contribution in
[https://github.com/getsops/sops/pull/1765](https://redirect.github.com/getsops/sops/pull/1765)
- [@&#8203;haoqixu](https://redirect.github.com/haoqixu) made their
first contribution in
[https://github.com/getsops/sops/pull/1692](https://redirect.github.com/getsops/sops/pull/1692)
- [@&#8203;brianmcgee](https://redirect.github.com/brianmcgee) made
their first contribution in
[https://github.com/getsops/sops/pull/1641](https://redirect.github.com/getsops/sops/pull/1641)
- [@&#8203;sledzikowy](https://redirect.github.com/sledzikowy) made
their first contribution in
[https://github.com/getsops/sops/pull/1701](https://redirect.github.com/getsops/sops/pull/1701)
- [@&#8203;matheuscscp](https://redirect.github.com/matheuscscp) made
their first contribution in
[https://github.com/getsops/sops/pull/1794](https://redirect.github.com/getsops/sops/pull/1794)
- [@&#8203;danilobuerger](https://redirect.github.com/danilobuerger)
made their first contribution in
[https://github.com/getsops/sops/pull/1811](https://redirect.github.com/getsops/sops/pull/1811)
- [@&#8203;cgetzen](https://redirect.github.com/cgetzen) made their
first contribution in
[https://github.com/getsops/sops/pull/1571](https://redirect.github.com/getsops/sops/pull/1571)
- [@&#8203;marensofier](https://redirect.github.com/marensofier) made
their first contribution in
[https://github.com/getsops/sops/pull/1578](https://redirect.github.com/getsops/sops/pull/1578)
- [@&#8203;sabre1041](https://redirect.github.com/sabre1041) made their
first contribution in
[https://github.com/getsops/sops/pull/1823](https://redirect.github.com/getsops/sops/pull/1823)

**Full Changelog**:
https://github.com/getsops/sops/compare/v3.9.4...v3.10.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMjIuMiIsInVwZGF0ZWRJblZlciI6IjM5LjIyMi4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
2025-04-01 02:25:42 +02:00
TrueCharts Bot 592af2ad06 chore(flux): update image volsync 2.11.0 → 2.11.1 (clustertool) (#33795)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [volsync](https://truecharts.org/charts/system/volsync)
([source](https://redirect.github.com/backube/helm-charts)) | patch |
`2.11.0` -> `2.11.1` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMjIuMiIsInVwZGF0ZWRJblZlciI6IjM5LjIyMi4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2025-04-01 02:25:18 +02:00
TrueCharts Bot ebed9238ed chore(flux): update image spegel 3.2.2 → 3.2.3 (clustertool) (#33710)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [spegel](https://truecharts.org/charts/system/spegel)
([source](https://ghcr.io/spegel-org/spegel)) | patch | `3.2.2` ->
`3.2.3` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMTkuMiIsInVwZGF0ZWRJblZlciI6IjM5LjIxOS4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2025-03-29 01:14:41 +01:00
TrueCharts Bot 3e149fe9df fix(deps): update module github.com/go-playground/validator/v10 v10.25.0 → v10.26.0 (clustertool) (#33706)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/go-playground/validator/v10](https://redirect.github.com/go-playground/validator)
| require | minor | `v10.25.0` -> `v10.26.0` |

---

### Release Notes

<details>
<summary>go-playground/validator
(github.com/go-playground/validator/v10)</summary>

###
[`v10.26.0`](https://redirect.github.com/go-playground/validator/releases/tag/v10.26.0)

[Compare
Source](https://redirect.github.com/go-playground/validator/compare/v10.25.0...v10.26.0)

#### What's Changed

- Use correct pointer in errors.As(). Fix "panic: errors: \*target must
be interface or implement error" in examples. by
[@&#8203;antonsoroko](https://redirect.github.com/antonsoroko) in
[https://github.com/go-playground/validator/pull/1378](https://redirect.github.com/go-playground/validator/pull/1378)
- Create dependabot by
[@&#8203;nodivbyzero](https://redirect.github.com/nodivbyzero) in
[https://github.com/go-playground/validator/pull/1373](https://redirect.github.com/go-playground/validator/pull/1373)
- Bump golangci/golangci-lint-action from 4 to 6 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-playground/validator/pull/1381](https://redirect.github.com/go-playground/validator/pull/1381)
- Bump golang.org/x/text from 0.21.0 to 0.22.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-playground/validator/pull/1383](https://redirect.github.com/go-playground/validator/pull/1383)
- Bump golang.org/x/crypto from 0.32.0 to 0.33.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-playground/validator/pull/1382](https://redirect.github.com/go-playground/validator/pull/1382)
- feat(translations): improve Indonesian translations and add tests by
[@&#8203;fathiraz](https://redirect.github.com/fathiraz) in
[https://github.com/go-playground/validator/pull/1376](https://redirect.github.com/go-playground/validator/pull/1376)
- Fix time.Duration translation error by
[@&#8203;nodivbyzero](https://redirect.github.com/nodivbyzero) in
[https://github.com/go-playground/validator/pull/1154](https://redirect.github.com/go-playground/validator/pull/1154)
- Update Project Status button by
[@&#8203;nodivbyzero](https://redirect.github.com/nodivbyzero) in
[https://github.com/go-playground/validator/pull/1380](https://redirect.github.com/go-playground/validator/pull/1380)
- Remove gitter.im link from README.md by
[@&#8203;nodivbyzero](https://redirect.github.com/nodivbyzero) in
[https://github.com/go-playground/validator/pull/1366](https://redirect.github.com/go-playground/validator/pull/1366)
- Docs: fix `Base64RawURL` usage by
[@&#8203;196Ikuchil](https://redirect.github.com/196Ikuchil) in
[https://github.com/go-playground/validator/pull/1336](https://redirect.github.com/go-playground/validator/pull/1336)
- Fix length check on dns_rfc1035\_label tag by
[@&#8203;KimNorgaard](https://redirect.github.com/KimNorgaard) in
[https://github.com/go-playground/validator/pull/1214](https://redirect.github.com/go-playground/validator/pull/1214)
- Add Korean by [@&#8203;jkh0kr](https://redirect.github.com/jkh0kr) in
[https://github.com/go-playground/validator/pull/1338](https://redirect.github.com/go-playground/validator/pull/1338)
- add german translations by
[@&#8203;max-weis](https://redirect.github.com/max-weis) in
[https://github.com/go-playground/validator/pull/1322](https://redirect.github.com/go-playground/validator/pull/1322)
- Update workflow to support the last three Go versions by
[@&#8203;nodivbyzero](https://redirect.github.com/nodivbyzero) in
[https://github.com/go-playground/validator/pull/1393](https://redirect.github.com/go-playground/validator/pull/1393)
- Fix: Nil pointer dereference in Arabic translations by
[@&#8203;BlackSud0](https://redirect.github.com/BlackSud0) in
[https://github.com/go-playground/validator/pull/1391](https://redirect.github.com/go-playground/validator/pull/1391)
- Translate to thai by
[@&#8203;maetad](https://redirect.github.com/maetad) in
[https://github.com/go-playground/validator/pull/1202](https://redirect.github.com/go-playground/validator/pull/1202)
- Feat: add EIN validation by
[@&#8203;henrriusdev](https://redirect.github.com/henrriusdev) in
[https://github.com/go-playground/validator/pull/1384](https://redirect.github.com/go-playground/validator/pull/1384)
- Fix reference to parameter name in docs by
[@&#8203;yegvla](https://redirect.github.com/yegvla) in
[https://github.com/go-playground/validator/pull/1400](https://redirect.github.com/go-playground/validator/pull/1400)
- use mail.ParseAddress to cover missing email validations by
[@&#8203;eladb2011](https://redirect.github.com/eladb2011) in
[https://github.com/go-playground/validator/pull/1395](https://redirect.github.com/go-playground/validator/pull/1395)
- Update linter to v2.0.2 by
[@&#8203;nodivbyzero](https://redirect.github.com/nodivbyzero) in
[https://github.com/go-playground/validator/pull/1405](https://redirect.github.com/go-playground/validator/pull/1405)

#### New Contributors

- [@&#8203;antonsoroko](https://redirect.github.com/antonsoroko) made
their first contribution in
[https://github.com/go-playground/validator/pull/1378](https://redirect.github.com/go-playground/validator/pull/1378)
- [@&#8203;dependabot](https://redirect.github.com/dependabot) made
their first contribution in
[https://github.com/go-playground/validator/pull/1381](https://redirect.github.com/go-playground/validator/pull/1381)
- [@&#8203;fathiraz](https://redirect.github.com/fathiraz) made their
first contribution in
[https://github.com/go-playground/validator/pull/1376](https://redirect.github.com/go-playground/validator/pull/1376)
- [@&#8203;196Ikuchil](https://redirect.github.com/196Ikuchil) made
their first contribution in
[https://github.com/go-playground/validator/pull/1336](https://redirect.github.com/go-playground/validator/pull/1336)
- [@&#8203;KimNorgaard](https://redirect.github.com/KimNorgaard) made
their first contribution in
[https://github.com/go-playground/validator/pull/1214](https://redirect.github.com/go-playground/validator/pull/1214)
- [@&#8203;jkh0kr](https://redirect.github.com/jkh0kr) made their first
contribution in
[https://github.com/go-playground/validator/pull/1338](https://redirect.github.com/go-playground/validator/pull/1338)
- [@&#8203;max-weis](https://redirect.github.com/max-weis) made their
first contribution in
[https://github.com/go-playground/validator/pull/1322](https://redirect.github.com/go-playground/validator/pull/1322)
- [@&#8203;BlackSud0](https://redirect.github.com/BlackSud0) made their
first contribution in
[https://github.com/go-playground/validator/pull/1391](https://redirect.github.com/go-playground/validator/pull/1391)
- [@&#8203;maetad](https://redirect.github.com/maetad) made their first
contribution in
[https://github.com/go-playground/validator/pull/1202](https://redirect.github.com/go-playground/validator/pull/1202)
- [@&#8203;henrriusdev](https://redirect.github.com/henrriusdev) made
their first contribution in
[https://github.com/go-playground/validator/pull/1384](https://redirect.github.com/go-playground/validator/pull/1384)
- [@&#8203;yegvla](https://redirect.github.com/yegvla) made their first
contribution in
[https://github.com/go-playground/validator/pull/1400](https://redirect.github.com/go-playground/validator/pull/1400)
- [@&#8203;eladb2011](https://redirect.github.com/eladb2011) made their
first contribution in
[https://github.com/go-playground/validator/pull/1395](https://redirect.github.com/go-playground/validator/pull/1395)

**Full Changelog**:
https://github.com/go-playground/validator/compare/v10.25.0...v10.26.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMTkuMiIsInVwZGF0ZWRJblZlciI6IjM5LjIxOS4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
2025-03-28 19:11:09 +01:00
TrueCharts Bot d92f67632d chore(flux): update image volsync 2.10.1 → 2.11.0 (clustertool) (#33656)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [volsync](https://truecharts.org/charts/system/volsync)
([source](https://redirect.github.com/backube/helm-charts)) | minor |
`2.10.1` -> `2.11.0` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMTMuMyIsInVwZGF0ZWRJblZlciI6IjM5LjIxMy4zIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
2025-03-27 19:11:41 +01:00
TrueCharts Bot 24f8b5daf0 chore(flux): update image spegel 3.2.0 → 3.2.2 (clustertool) (#33648)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [spegel](https://truecharts.org/charts/system/spegel)
([source](https://ghcr.io/spegel-org/spegel)) | patch | `3.2.0` ->
`3.2.2` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMTMuMyIsInVwZGF0ZWRJblZlciI6IjM5LjIxMy4zIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2025-03-27 13:11:37 +01:00
TrueCharts Bot 87508d8b50 chore(flux): update image spegel 3.1.2 → 3.2.0 (clustertool) (#33632) 2025-03-27 01:20:49 +01:00
TrueCharts Bot c788d9094e chore(flux): update image volsync 2.10.0 → 2.10.1 (clustertool) (#33629)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [volsync](https://truecharts.org/charts/system/volsync)
([source](https://redirect.github.com/backube/helm-charts)) | patch |
`2.10.0` -> `2.10.1` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMDcuMiIsInVwZGF0ZWRJblZlciI6IjM5LjIwNy4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2025-03-27 00:20:38 +00:00
TrueCharts Bot 754751af38 chore(flux): update image kubernetes-dashboard 1.14.1 → 1.14.2 (clustertool) (#33628) 2025-03-27 01:20:25 +01:00
TrueCharts Bot a316073bb7 chore(flux): update image blocky 16.13.12 → 16.13.13 (clustertool) (#33438)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [blocky](https://truecharts.org/charts/premium/blocky)
([source](https://0xerr0r.github.io/blocky/)) | patch | `16.13.12` ->
`16.13.13` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMDcuMiIsInVwZGF0ZWRJblZlciI6IjM5LjIwNy4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2025-03-19 19:30:57 +01:00
TrueCharts Bot 91eebec08b chore(flux): update helm release cilium 1.17.1 → 1.17.2 (clustertool) (#33290)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [cilium](https://cilium.io/)
([source](https://redirect.github.com/cilium/cilium)) | patch | `1.17.1`
-> `1.17.2` |

---

### Release Notes

<details>
<summary>cilium/cilium (cilium)</summary>

###
[`v1.17.2`](https://redirect.github.com/cilium/cilium/releases/tag/v1.17.2):
1.17.2

[Compare
Source](https://redirect.github.com/cilium/cilium/compare/1.17.1...1.17.2)

## Summary of Changes

**Minor Changes:**

- docs: clarify wording of remote-nodes in context of a clustermesh
(Backport PR
[#&#8203;38104](https://redirect.github.com/cilium/cilium/issues/38104),
Upstream PR
[#&#8203;37989](https://redirect.github.com/cilium/cilium/issues/37989),
[@&#8203;oblazek](https://redirect.github.com/oblazek))
- Increase granularity of the `api_duration_seconds` metric buckets
(Backport PR
[#&#8203;38104](https://redirect.github.com/cilium/cilium/issues/38104),
Upstream PR
[#&#8203;37365](https://redirect.github.com/cilium/cilium/issues/37365),
[@&#8203;jaredledvina](https://redirect.github.com/jaredledvina))
- New agent option `--policy-restore-timeout` (default 3m) has been
added to bound the maximum time Cilium agent waits for endpoint policies
to regenerate before starting serving resources to `cilium-envoy` proxy.
(Backport PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37658](https://redirect.github.com/cilium/cilium/issues/37658),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- Set json output as default for `cilium-dbg endpoint get` (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;36537](https://redirect.github.com/cilium/cilium/issues/36537),
[@&#8203;saiaunghlyanhtet](https://redirect.github.com/saiaunghlyanhtet))
- Set json output as default for `cilium-dbg endpoint get` (Backport PR
[#&#8203;37742](https://redirect.github.com/cilium/cilium/issues/37742),
Upstream PR
[#&#8203;36537](https://redirect.github.com/cilium/cilium/issues/36537),
[@&#8203;saiaunghlyanhtet](https://redirect.github.com/saiaunghlyanhtet))

**Bugfixes:**

- Apply Egress bandwith-limiting only once for traffic that is matched
by an Egress Gateway policy. (Backport PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37674](https://redirect.github.com/cilium/cilium/issues/37674),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- Auth policy is properly maintained also when covered by proxy
redirects. (Backport PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37685](https://redirect.github.com/cilium/cilium/issues/37685),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- Do not auto detect / auto select IPoIB devices (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37553](https://redirect.github.com/cilium/cilium/issues/37553),
[@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))
- Egress route reconciliation (Backport PR
[#&#8203;38118](https://redirect.github.com/cilium/cilium/issues/38118),
Upstream PR
[#&#8203;37962](https://redirect.github.com/cilium/cilium/issues/37962),
[@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))
- Fix a regression that made it impossible to disable Hubble via Helm
charts (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37587](https://redirect.github.com/cilium/cilium/issues/37587),
[@&#8203;devodev](https://redirect.github.com/devodev))
- Fix bug causing `cilium-dbg bpf` commands to fail with a map not found
error in IPv6-only clusters. (Backport PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37787](https://redirect.github.com/cilium/cilium/issues/37787),
[@&#8203;pchaigno](https://redirect.github.com/pchaigno))
- Fix creating ServiceMonitor for Hubble when dynamic metrics are
enabled in the Helm chart (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37474](https://redirect.github.com/cilium/cilium/issues/37474),
[@&#8203;dustinspecker](https://redirect.github.com/dustinspecker))
- Fix creation and deletion of host port maps that would occasionally
leave pods without them (Backport PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37419](https://redirect.github.com/cilium/cilium/issues/37419),
[@&#8203;javanthropus](https://redirect.github.com/javanthropus))
- Fix dropped NodePort traffic to hostNetwork backends with Geneve+DSR
(Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;36978](https://redirect.github.com/cilium/cilium/issues/36978),
[@&#8203;tommasopozzetti](https://redirect.github.com/tommasopozzetti))
- Fix envoy metrics could not be obtained on IPv6-only clusters
(Backport PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37818](https://redirect.github.com/cilium/cilium/issues/37818),
[@&#8203;haozhangami](https://redirect.github.com/haozhangami))
- Fix helm charts to properly configure tls and peer service for dynamic
Hubble metrics. (Backport PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37543](https://redirect.github.com/cilium/cilium/issues/37543),
[@&#8203;rectified95](https://redirect.github.com/rectified95))
- Fix service id exceeds max limit (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37191](https://redirect.github.com/cilium/cilium/issues/37191),
[@&#8203;haozhangami](https://redirect.github.com/haozhangami))
- Fix the `--dns-policy-unload-on-shutdown` feature for restored
endpoints (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37532](https://redirect.github.com/cilium/cilium/issues/37532),
[@&#8203;antonipp](https://redirect.github.com/antonipp))
- Fix the possible race condition caused by async update from aws to
instance map in issue
[#&#8203;36428](https://redirect.github.com/cilium/cilium/issues/36428)
(Backport PR
[#&#8203;38104](https://redirect.github.com/cilium/cilium/issues/38104),
Upstream PR
[#&#8203;37650](https://redirect.github.com/cilium/cilium/issues/37650),
[@&#8203;liyihuang](https://redirect.github.com/liyihuang))
- Fix traffic not getting masqueraded with wildcard devices or
egress-masquerade-interfaces when enable-masquerade-to-route-source flag
is set. (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37450](https://redirect.github.com/cilium/cilium/issues/37450),
[@&#8203;liyihuang](https://redirect.github.com/liyihuang))
- fix(helm): multiPoolPreAllocation fix conditional avoid null (Backport
PR
[#&#8203;37742](https://redirect.github.com/cilium/cilium/issues/37742),
Upstream PR
[#&#8203;37585](https://redirect.github.com/cilium/cilium/issues/37585),
[@&#8203;acelinkio](https://redirect.github.com/acelinkio))
- fix: cilium-config configmap was incorrectly resulting in values like
`2.09715…2e+06` instead of `2097152` (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37236](https://redirect.github.com/cilium/cilium/issues/37236),
[@&#8203;dee-kryvenko](https://redirect.github.com/dee-kryvenko))
- fix: duplicate label maps in helm chart templates and add missing
commonlabels (Backport PR
[#&#8203;37742](https://redirect.github.com/cilium/cilium/issues/37742),
Upstream PR
[#&#8203;37693](https://redirect.github.com/cilium/cilium/issues/37693),
[@&#8203;cmergenthaler](https://redirect.github.com/cmergenthaler))
- Fix: Resolved an issue causing ArgoCD to report constant out-of-sync
status due to the hasKey check in Helm. The condition has been
simplified to ensure proper synchronization. No functional changes to
deployments. (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37536](https://redirect.github.com/cilium/cilium/issues/37536),
[@&#8203;nicl-dev](https://redirect.github.com/nicl-dev))
- Fixed Envoy JSON log format conversion in Helm, preventing crashes.
(Backport PR
[#&#8203;37742](https://redirect.github.com/cilium/cilium/issues/37742),
Upstream PR
[#&#8203;37656](https://redirect.github.com/cilium/cilium/issues/37656),
[@&#8203;kahirokunn](https://redirect.github.com/kahirokunn))
- helm: fix large number handling (Backport PR
[#&#8203;37742](https://redirect.github.com/cilium/cilium/issues/37742),
Upstream PR
[#&#8203;37670](https://redirect.github.com/cilium/cilium/issues/37670),
[@&#8203;justin0u0](https://redirect.github.com/justin0u0))
- hubble: escape terminal special characters from observe output
(Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37401](https://redirect.github.com/cilium/cilium/issues/37401),
[@&#8203;devodev](https://redirect.github.com/devodev))
- hubble: fix locking of hubble metrics registry for dynamically
configured metrics (Backport PR
[#&#8203;38104](https://redirect.github.com/cilium/cilium/issues/38104),
Upstream PR
[#&#8203;37923](https://redirect.github.com/cilium/cilium/issues/37923),
[@&#8203;marseel](https://redirect.github.com/marseel))
- identity: fix bug where fromNodes/toNodes could be used to allow
custom endpoint (Backport PR
[#&#8203;38104](https://redirect.github.com/cilium/cilium/issues/38104),
Upstream PR
[#&#8203;36657](https://redirect.github.com/cilium/cilium/issues/36657),
[@&#8203;oblazek](https://redirect.github.com/oblazek))
- ipam/multi-pool: Periodically perform pool maintenance (Backport PR
[#&#8203;38104](https://redirect.github.com/cilium/cilium/issues/38104),
Upstream PR
[#&#8203;37895](https://redirect.github.com/cilium/cilium/issues/37895),
[@&#8203;gandro](https://redirect.github.com/gandro))
- operator: explicit controller-runtime controller names to avoid naming
conflicts (Backport PR
[#&#8203;37742](https://redirect.github.com/cilium/cilium/issues/37742),
Upstream PR
[#&#8203;37606](https://redirect.github.com/cilium/cilium/issues/37606),
[@&#8203;mhofstetter](https://redirect.github.com/mhofstetter))
- operator: Fix duplicate configurations (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37293](https://redirect.github.com/cilium/cilium/issues/37293),
[@&#8203;joestringer](https://redirect.github.com/joestringer))
- Restore aggregration of network trace events for Egress Gateway reply
traffic on the gateway node (Backport PR
[#&#8203;38104](https://redirect.github.com/cilium/cilium/issues/38104),
Upstream PR
[#&#8203;38029](https://redirect.github.com/cilium/cilium/issues/38029),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- Updated Gateway API and GAMMA processing to remove incorrect behavior
when both parentRefs were present. (Backport PR
[#&#8203;38154](https://redirect.github.com/cilium/cilium/issues/38154),
Upstream PR
[#&#8203;38143](https://redirect.github.com/cilium/cilium/issues/38143),
[@&#8203;youngnick](https://redirect.github.com/youngnick))
- Workaround for iptables 1.8.10, used in OpenShift 4.16, 4.17 and 4.18,
returning a wrong error message `iptables: Incompatible with this
kernel` to `iptables -n -L CHAIN` when the chain does not exist. This
prevents iptables configuration and induced unnecessary loops and log
messages. (Backport PR
[#&#8203;38104](https://redirect.github.com/cilium/cilium/issues/38104),
Upstream PR
[#&#8203;37749](https://redirect.github.com/cilium/cilium/issues/37749),
[@&#8203;fgiloux](https://redirect.github.com/fgiloux))

**CI Changes:**

- .github: Remove misleading step from ipsec workflow (Backport PR
[#&#8203;37742](https://redirect.github.com/cilium/cilium/issues/37742),
Upstream PR
[#&#8203;37681](https://redirect.github.com/cilium/cilium/issues/37681),
[@&#8203;joestringer](https://redirect.github.com/joestringer))
- .github: s/enbaled/enabled/ (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37449](https://redirect.github.com/cilium/cilium/issues/37449),
[@&#8203;chansuke](https://redirect.github.com/chansuke))
- bgpv1: wait for watchers to be ready in tests (Backport PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37884](https://redirect.github.com/cilium/cilium/issues/37884),
[@&#8203;harsimran-pabla](https://redirect.github.com/harsimran-pabla))
- CI: GKE backslash missing disable insecure kubelet (Backport PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37850](https://redirect.github.com/cilium/cilium/issues/37850),
[@&#8203;auriaave](https://redirect.github.com/auriaave))
- CI: GKE, disable insecure kubelet readonly port (Backport PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37844](https://redirect.github.com/cilium/cilium/issues/37844),
[@&#8203;auriaave](https://redirect.github.com/auriaave))
- ci: switch to monitor aggregation medium (Backport PR
[#&#8203;38104](https://redirect.github.com/cilium/cilium/issues/38104),
Upstream PR
[#&#8203;38036](https://redirect.github.com/cilium/cilium/issues/38036),
[@&#8203;marseel](https://redirect.github.com/marseel))
- gh: ci-e2e-upgrade: Add encryption leak checks for wireguard (Backport
PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37551](https://redirect.github.com/cilium/cilium/issues/37551),
[@&#8203;jschwinger233](https://redirect.github.com/jschwinger233))
- gh: ipsec-e2e: add concurrency for connectivity tests (Backport PR
[#&#8203;37925](https://redirect.github.com/cilium/cilium/issues/37925),
Upstream PR
[#&#8203;37891](https://redirect.github.com/cilium/cilium/issues/37891),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- gh: update naming for bpftrace leak detection script (Backport PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37865](https://redirect.github.com/cilium/cilium/issues/37865),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))

**Misc Changes:**

- always render enable-hubble in the Cilium configmap (Backport PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37703](https://redirect.github.com/cilium/cilium/issues/37703),
[@&#8203;kaworu](https://redirect.github.com/kaworu))
- bpf: Add option to utilize core maps via BPF_F_NO_COMMON_LRU (Backport
PR
[#&#8203;38104](https://redirect.github.com/cilium/cilium/issues/38104),
Upstream PR
[#&#8203;38037](https://redirect.github.com/cilium/cilium/issues/38037),
[@&#8203;borkmann](https://redirect.github.com/borkmann))
- bpf: minor clean-ups for the ENI symmetric routing feature (Backport
PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37379](https://redirect.github.com/cilium/cilium/issues/37379),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- chore(deps): update all github action dependencies (v1.17)
([#&#8203;37950](https://redirect.github.com/cilium/cilium/issues/37950),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update all-dependencies (v1.17)
([#&#8203;37944](https://redirect.github.com/cilium/cilium/issues/37944),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update all-dependencies (v1.17)
([#&#8203;38048](https://redirect.github.com/cilium/cilium/issues/38048),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update dependency cilium/cilium-cli to v0.17.0 (v1.17)
([#&#8203;37793](https://redirect.github.com/cilium/cilium/issues/37793),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update dependency cilium/cilium-cli to v0.18.0 (v1.17)
([#&#8203;37949](https://redirect.github.com/cilium/cilium/issues/37949),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update dependency cilium/cilium-cli to v0.18.2 (v1.17)
([#&#8203;38057](https://redirect.github.com/cilium/cilium/issues/38057),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update go to v1.23.7 (v1.17)
([#&#8203;37996](https://redirect.github.com/cilium/cilium/issues/37996),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update module github.com/go-jose/go-jose/v4 to v4.0.5
\[security] (v1.17)
([#&#8203;37833](https://redirect.github.com/cilium/cilium/issues/37833),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update quay.io/cilium/cilium-envoy docker tag to
v1.31.5-1741765102-efed3defcc70ab5b263a0fc44c93d316b846a211 (v1.17)
([#&#8203;38148](https://redirect.github.com/cilium/cilium/issues/38148),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- cilium-dbg: output parentIfIndex in bpf endpoint list (Backport PR
[#&#8203;37742](https://redirect.github.com/cilium/cilium/issues/37742),
Upstream PR
[#&#8203;37398](https://redirect.github.com/cilium/cilium/issues/37398),
[@&#8203;Mahdi-BZ](https://redirect.github.com/Mahdi-BZ))
- cilium: Allow to configure tunnel source port range (Backport PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37777](https://redirect.github.com/cilium/cilium/issues/37777),
[@&#8203;borkmann](https://redirect.github.com/borkmann))
- cilium: Pull in vxlan netlink Go fix and uncomment assertion in test
(Backport PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37808](https://redirect.github.com/cilium/cilium/issues/37808),
[@&#8203;borkmann](https://redirect.github.com/borkmann))
- docs: complete load balancer service manifest in kubeproxy-free
(Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37466](https://redirect.github.com/cilium/cilium/issues/37466),
[@&#8203;ybelleguic](https://redirect.github.com/ybelleguic))
- docs: fix broken links (Backport PR
[#&#8203;38104](https://redirect.github.com/cilium/cilium/issues/38104),
Upstream PR
[#&#8203;37995](https://redirect.github.com/cilium/cilium/issues/37995),
[@&#8203;nueavv](https://redirect.github.com/nueavv))
- docs: masquerading: mention that BPF masq also pulls in BPF
Host-Routing (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37604](https://redirect.github.com/cilium/cilium/issues/37604),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- docs: use latest for rtd theme commit with fixed version selector
(Backport PR
[#&#8203;37614](https://redirect.github.com/cilium/cilium/issues/37614),
Upstream PR
[#&#8203;37421](https://redirect.github.com/cilium/cilium/issues/37421),
[@&#8203;ayuspin](https://redirect.github.com/ayuspin))
- envoy: remove duplicated service/endpointslice informers when
envoyConfig is enabled (Backport PR
[#&#8203;37742](https://redirect.github.com/cilium/cilium/issues/37742),
Upstream PR
[#&#8203;37683](https://redirect.github.com/cilium/cilium/issues/37683),
[@&#8203;marseel](https://redirect.github.com/marseel))
- Fix API generation and add trusted dependencies to renovate config
(Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;36957](https://redirect.github.com/cilium/cilium/issues/36957),
[@&#8203;aanm](https://redirect.github.com/aanm))
- Fix API generation and add trusted dependencies to renovate config
(Backport PR
[#&#8203;37742](https://redirect.github.com/cilium/cilium/issues/37742),
Upstream PR
[#&#8203;36957](https://redirect.github.com/cilium/cilium/issues/36957),
[@&#8203;aanm](https://redirect.github.com/aanm))
- Fix helm value for IPAM Multi-Pool (Backport PR
[#&#8203;38104](https://redirect.github.com/cilium/cilium/issues/38104),
Upstream PR
[#&#8203;37963](https://redirect.github.com/cilium/cilium/issues/37963),
[@&#8203;saintdle](https://redirect.github.com/saintdle))
- fqdn/dnsproxy: use `netip.Addr` for `DNSProxy.usedServers` (Backport
PR
[#&#8203;38104](https://redirect.github.com/cilium/cilium/issues/38104),
Upstream PR
[#&#8203;37985](https://redirect.github.com/cilium/cilium/issues/37985),
[@&#8203;tklauser](https://redirect.github.com/tklauser))
- gha: Update the helm flag for TLS related test (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37428](https://redirect.github.com/cilium/cilium/issues/37428),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- ipcache: Slightly optimize calls to fetch tunnel and encrypt metadata
(Backport PR
[#&#8203;38104](https://redirect.github.com/cilium/cilium/issues/38104),
Upstream PR
[#&#8203;38021](https://redirect.github.com/cilium/cilium/issues/38021),
[@&#8203;christarazi](https://redirect.github.com/christarazi))
- labels: fix TestNewFrom test (Backport PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37846](https://redirect.github.com/cilium/cilium/issues/37846),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- Moves Unix socket listener configuration to a new file specifically
for Linux builds. (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37399](https://redirect.github.com/cilium/cilium/issues/37399),
[@&#8203;ritwikranjan](https://redirect.github.com/ritwikranjan))
- operator: Explicitly init the FQDN regex LRU cache (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37366](https://redirect.github.com/cilium/cilium/issues/37366),
[@&#8203;christarazi](https://redirect.github.com/christarazi))
- pkg/hive: always use default logger when decorating cells (Backport PR
[#&#8203;37742](https://redirect.github.com/cilium/cilium/issues/37742),
Upstream PR
[#&#8203;37636](https://redirect.github.com/cilium/cilium/issues/37636),
[@&#8203;aanm](https://redirect.github.com/aanm))
- policy: Skip iteration when proxy port priority is zero (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37422](https://redirect.github.com/cilium/cilium/issues/37422),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- Remove grpc-health-probe binary from the Hubble Relay image as it is
no longer used (Backport PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37806](https://redirect.github.com/cilium/cilium/issues/37806),
[@&#8203;rolinh](https://redirect.github.com/rolinh))
- Update Hubble UI to v0.13.2 which contains security fixes, add the
missing traffic direction in the flow table, and enhance the home
namespace list. See
[v0.13.2](https://redirect.github.com/cilium/hubble-ui/releases/tag/v0.13.2)
for more details (Backport PR
[#&#8203;37742](https://redirect.github.com/cilium/cilium/issues/37742),
Upstream PR
[#&#8203;37631](https://redirect.github.com/cilium/cilium/issues/37631),
[@&#8203;yannikmesserli](https://redirect.github.com/yannikmesserli))
- use runtime image set by env var action in build and lint (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37253](https://redirect.github.com/cilium/cilium/issues/37253),
[@&#8203;Artyop](https://redirect.github.com/Artyop))

**Other Changes:**

- \[v1.17] Revert "Fix dropped NodePort traffic to hostNetwork backends
with Geneve+DSR"
([#&#8203;38101](https://redirect.github.com/cilium/cilium/issues/38101),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- Backport set runtime action 1.17
([#&#8203;37854](https://redirect.github.com/cilium/cilium/issues/37854),
[@&#8203;Artyop](https://redirect.github.com/Artyop))
- gha: Update GatewayAPI conformance report
([#&#8203;37671](https://redirect.github.com/cilium/cilium/issues/37671),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- install: Update image digests for v1.17.1
([#&#8203;37580](https://redirect.github.com/cilium/cilium/issues/37580),
[@&#8203;cilium-release-bot](https://redirect.github.com/cilium-release-bot)\[bot])
- v1.17: gh/workflows: Remove conformance-externalworkloads
([#&#8203;37738](https://redirect.github.com/cilium/cilium/issues/37738),
[@&#8203;brb](https://redirect.github.com/brb))

#### Docker Manifests

##### cilium


`quay.io/cilium/cilium:v1.17.2@&#8203;sha256:3c4c9932b5d8368619cb922a497ff2ebc8def5f41c18e410bcc84025fcd385b1`

`quay.io/cilium/cilium:stable@sha256:3c4c9932b5d8368619cb922a497ff2ebc8def5f41c18e410bcc84025fcd385b1`

##### clustermesh-apiserver


`quay.io/cilium/clustermesh-apiserver:v1.17.2@&#8203;sha256:981250ebdc6e66e190992eaf75cfca169113a8f08d5c3793fe15822176980398`

`quay.io/cilium/clustermesh-apiserver:stable@sha256:981250ebdc6e66e190992eaf75cfca169113a8f08d5c3793fe15822176980398`

##### docker-plugin


`quay.io/cilium/docker-plugin:v1.17.2@&#8203;sha256:a599893f1fc76fc31afad2bbb73af7e7f618adbf02043b2098fafeca4adf551c`

`quay.io/cilium/docker-plugin:stable@sha256:a599893f1fc76fc31afad2bbb73af7e7f618adbf02043b2098fafeca4adf551c`

##### hubble-relay


`quay.io/cilium/hubble-relay:v1.17.2@&#8203;sha256:42a8db5c256c516cacb5b8937c321b2373ad7a6b0a1e5a5120d5028433d586cc`

`quay.io/cilium/hubble-relay:stable@sha256:42a8db5c256c516cacb5b8937c321b2373ad7a6b0a1e5a5120d5028433d586cc`

##### operator-alibabacloud


`quay.io/cilium/operator-alibabacloud:v1.17.2@&#8203;sha256:7cb8c23417f65348bb810fe92fb05b41d926f019d77442f3fa1058d17fea7ffe`

`quay.io/cilium/operator-alibabacloud:stable@sha256:7cb8c23417f65348bb810fe92fb05b41d926f019d77442f3fa1058d17fea7ffe`

##### operator-aws


`quay.io/cilium/operator-aws:v1.17.2@&#8203;sha256:955096183e22a203bbb198ca66e3266ce4dbc2b63f1a2fbd03f9373dcd97893c`

`quay.io/cilium/operator-aws:stable@sha256:955096183e22a203bbb198ca66e3266ce4dbc2b63f1a2fbd03f9373dcd97893c`

##### operator-azure


`quay.io/cilium/operator-azure:v1.17.2@&#8203;sha256:455fb88b558b1b8ba09d63302ccce76b4930581be89def027184ab04335c20e0`

`quay.io/cilium/operator-azure:stable@sha256:455fb88b558b1b8ba09d63302ccce76b4930581be89def027184ab04335c20e0`

##### operator-generic


`quay.io/cilium/operator-generic:v1.17.2@&#8203;sha256:81f2d7198366e8dec2903a3a8361e4c68d47d19c68a0d42f0b7b6e3f0523f249`

`quay.io/cilium/operator-generic:stable@sha256:81f2d7198366e8dec2903a3a8361e4c68d47d19c68a0d42f0b7b6e3f0523f249`

##### operator


`quay.io/cilium/operator:v1.17.2@&#8203;sha256:697a7e6c4765ef053d33dd2d9d7f14642c01dfa7333ad7902de7ca5afbf3b419`

`quay.io/cilium/operator:stable@sha256:697a7e6c4765ef053d33dd2d9d7f14642c01dfa7333ad7902de7ca5afbf3b419`

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOTkuMSIsInVwZGF0ZWRJblZlciI6IjM5LjE5OS4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2025-03-15 19:28:13 +01:00
TrueCharts Bot e08f176f10 chore(flux): update image app-template 3.7.2 → 3.7.3 (clustertool) (#33236)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [app-template](https://redirect.github.com/bjw-s/helm-charts) | patch
| `3.7.2` -> `3.7.3` |

---

### Release Notes

<details>
<summary>bjw-s/helm-charts (app-template)</summary>

###
[`v3.7.3`](https://redirect.github.com/bjw-s/helm-charts/releases/tag/app-template-3.7.3)

[Compare
Source](https://redirect.github.com/bjw-s/helm-charts/compare/app-template-3.7.2...app-template-3.7.3)

#### Changelog:

##### Fixed

-   Fixed name suffix for HTTPRoute
-   Fixed incorrect default backendRefs values in HTTPRoute

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOTkuMSIsInVwZGF0ZWRJblZlciI6IjM5LjE5OS4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2025-03-14 13:13:33 +01:00
TrueCharts Bot 3f4ddb3f00 fix(deps): update module helm.sh/helm/v3 v3.17.1 → v3.17.2 (clustertool) (#33225)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [helm.sh/helm/v3](https://redirect.github.com/helm/helm) | require |
patch | `v3.17.1` -> `v3.17.2` |

---

### Release Notes

<details>
<summary>helm/helm (helm.sh/helm/v3)</summary>

###
[`v3.17.2`](https://redirect.github.com/helm/helm/releases/tag/v3.17.2):
Helm v3.17.2

[Compare
Source](https://redirect.github.com/helm/helm/compare/v3.17.1...v3.17.2)

Helm v3.17.2 is a patch release. Users are encouraged to upgrade for the
best experience. Users are encouraged to upgrade for the best
experience.

The community keeps growing, and we'd love to see you there!

- Join the discussion in [Kubernetes
Slack](https://kubernetes.slack.com):
    -   for questions and just to hang out
    -   for discussing PRs, code, and bugs
- Hang out at the Public Developer Call: Thursday, 9:30 Pacific via
[Zoom](https://zoom.us/j/696660622)
- Test, debug, and contribute charts:
[ArtifactHub/packages](https://artifacthub.io/packages/search?kind=0)

#### Installation and Upgrading

Download Helm v3.17.2. The common platform binaries are here:

- [MacOS amd64](https://get.helm.sh/helm-v3.17.2-darwin-amd64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.17.2-darwin-amd64.tar.gz.sha256sum)
/ 3e240238c7a3a10efd37b8e16615b28e94ba5db5957247bb42009ba6d52f76e9)
- [MacOS arm64](https://get.helm.sh/helm-v3.17.2-darwin-arm64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.17.2-darwin-arm64.tar.gz.sha256sum)
/ b843cebcbebc9eccb1e43aba9cca7693d32e9f2c4a35344990e3b7b381933948)
- [Linux amd64](https://get.helm.sh/helm-v3.17.2-linux-amd64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.17.2-linux-amd64.tar.gz.sha256sum)
/ 90c28792a1eb5fb0b50028e39ebf826531ebfcf73f599050dbd79bab2f277241)
- [Linux arm](https://get.helm.sh/helm-v3.17.2-linux-arm.tar.gz)
([checksum](https://get.helm.sh/helm-v3.17.2-linux-arm.tar.gz.sha256sum)
/ 0b13ec8580dd5498b5a2d7cb34146e098049f59500a266db1bb98f59649eb90a)
- [Linux arm64](https://get.helm.sh/helm-v3.17.2-linux-arm64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.17.2-linux-arm64.tar.gz.sha256sum)
/ d78d76ec7625a94991e887ac049d93f44bd70e4876200b945f813c9e1ed1df7c)
- [Linux i386](https://get.helm.sh/helm-v3.17.2-linux-386.tar.gz)
([checksum](https://get.helm.sh/helm-v3.17.2-linux-386.tar.gz.sha256sum)
/ 1c599c4559b97d8cf2100704f5cdc3269dcb369b553711b09a564e1d89c725dc)
- [Linux ppc64le](https://get.helm.sh/helm-v3.17.2-linux-ppc64le.tar.gz)
([checksum](https://get.helm.sh/helm-v3.17.2-linux-ppc64le.tar.gz.sha256sum)
/ 6bb1c83078bdd5e9acad5793dfc9ab3b5b56d410723a660ff1da61dbdff3207b)
- [Linux s390x](https://get.helm.sh/helm-v3.17.2-linux-s390x.tar.gz)
([checksum](https://get.helm.sh/helm-v3.17.2-linux-s390x.tar.gz.sha256sum)
/ 55ce412c48a79020a435eed2d7895e3cf74293d939da60a287c7c5fc15480f58)
- [Linux riscv64](https://get.helm.sh/helm-v3.17.2-linux-riscv64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.17.2-linux-riscv64.tar.gz.sha256sum)
/ 70e27a5b73fe848233f3e43bbe393a84d5ccfea2db666906ed37ef9b54468876)
- [Windows amd64](https://get.helm.sh/helm-v3.17.2-windows-amd64.zip)
([checksum](https://get.helm.sh/helm-v3.17.2-windows-amd64.zip.sha256sum)
/ f76fe76fa116d2bae948aee9bb54ba11bf5b726a09f732ce6a74eb65af2886b1)
- [Windows arm64](https://get.helm.sh/helm-v3.17.2-windows-arm64.zip)
([checksum](https://get.helm.sh/helm-v3.17.2-windows-arm64.zip.sha256sum)
/ a47a0059285347d44c2ac81aa09398cfa527eb60bcddd7e1836f9459e503697d)

This release was signed with ` 672C 657B E06B 4B30 969C 4A57 4614 49C2
5E36 B98E ` and can be found at
[@&#8203;mattfarina](https://redirect.github.com/mattfarina) [keybase
account](https://keybase.io/mattfarina). Please use the attached
signatures for verifying this release using `gpg`.

The [Quickstart Guide](https://helm.sh/docs/intro/quickstart/) will get
you going from there. For **upgrade instructions** or detailed
installation notes, check the [install
guide](https://helm.sh/docs/intro/install/). You can also use a [script
to
install](https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3)
on any system with `bash`.

#### What's Next

-   3.17.3 is the next patch release and will be on April 09, 2025
-   3.18.0 is the next minor release and will be on May 14, 2025

#### Changelog

- Updating to 0.37.0 for x/net
[`cc0bbbd`](https://redirect.github.com/helm/helm/commit/cc0bbbd6d6276b83880042c1ecb34087e84d41eb)
(Matt Farina)
- build(deps): bump the k8s-io group with 7 updates
[`ecb7a74`](https://redirect.github.com/helm/helm/commit/ecb7a74f19c23f76e7c18d1ce99f88bf1926a9ae)
(dependabot\[bot])

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOTkuMSIsInVwZGF0ZWRJblZlciI6IjM5LjE5OS4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2025-03-14 01:28:24 +01:00
TrueCharts Bot 8c0ec0214d chore(flux): update image blocky 16.13.11 → 16.13.12 (clustertool) (#33217)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [blocky](https://truecharts.org/charts/premium/blocky)
([source](https://0xerr0r.github.io/blocky/)) | patch | `16.13.11` ->
`16.13.12` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOTkuMSIsInVwZGF0ZWRJblZlciI6IjM5LjE5OS4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2025-03-14 01:26:23 +01:00
TrueCharts Bot 08b7bea08b chore(flux): update image clusterissuer 9.6.0 → 9.6.1 (clustertool) (#33208)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [clusterissuer](https://truecharts.org/charts/premium/clusterissuer)
([source](https://cert-manager.io/)) | patch | `9.6.0` -> `9.6.1` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOTkuMSIsInVwZGF0ZWRJblZlciI6IjM5LjE5OS4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2025-03-13 07:44:37 +01:00
TrueCharts Bot db9a9cc57a fix(deps): update module github.com/budimanjojo/talhelper/v3 v3.0.20 → v3.0.21 (clustertool) (#33210)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/budimanjojo/talhelper/v3](https://redirect.github.com/budimanjojo/talhelper)
| require | patch | `v3.0.20` -> `v3.0.21` |

---

### Release Notes

<details>
<summary>budimanjojo/talhelper
(github.com/budimanjojo/talhelper/v3)</summary>

###
[`v3.0.21`](https://redirect.github.com/budimanjojo/talhelper/releases/tag/v3.0.21)

[Compare
Source](https://redirect.github.com/budimanjojo/talhelper/compare/v3.0.20...v3.0.21)

#### Changelog

-
[`e655789`](https://redirect.github.com/budimanjojo/talhelper/commit/e6557899a20a5fd5af82775971451335a28e24d2)
chore(container): update ghcr.io/siderolabs/talosctl docker tag to
v1.9.5
-
[`b39ef41`](https://redirect.github.com/budimanjojo/talhelper/commit/b39ef41441cddc75e808b6be0036c76b94452a2b)
chore(container): update golangci/golangci-lint docker tag to v1.64.7
-
[`25e0fd0`](https://redirect.github.com/budimanjojo/talhelper/commit/25e0fd03a1c2de46761436ea684a8de14cab5154)
chore(container): update registry.k8s.io/kubectl docker tag to v1.32.3
-
[`01483a5`](https://redirect.github.com/budimanjojo/talhelper/commit/01483a553634f07f614bdaa337e8e064e73a4e81)
chore(deps): update dependency siderolabs/talos to v1.9.5
-
[`a0dbebd`](https://redirect.github.com/budimanjojo/talhelper/commit/a0dbebdbe6316a71e1c693714f344ed270a6606d)
chore(github-action)!: Update cachix/install-nix-action action to v31
-
[`9be9c47`](https://redirect.github.com/budimanjojo/talhelper/commit/9be9c4761874e3b72f3521a202c94a00039a0983)
chore(schema): update talos-extensions.yaml JSON schema
-
[`ca8884f`](https://redirect.github.com/budimanjojo/talhelper/commit/ca8884ffba92c20627b012427f98822f334bf57e)
chore(schema): update talos-extensions.yaml JSON schema
-
[`a962d3b`](https://redirect.github.com/budimanjojo/talhelper/commit/a962d3b5639817b4011ddc1c393f36f3dc8204df)
chore(schema): update talos-extensions.yaml JSON schema
([#&#8203;886](https://redirect.github.com/budimanjojo/talhelper/issues/886))
-
[`001c278`](https://redirect.github.com/budimanjojo/talhelper/commit/001c278d4e15fff790e846b9f9bf6c9502eaea9b)
chore(schema): update talos-extensions.yaml JSON schema
([#&#8203;894](https://redirect.github.com/budimanjojo/talhelper/issues/894))
-
[`c9be9cd`](https://redirect.github.com/budimanjojo/talhelper/commit/c9be9cd593d2a239b76bdf35a06f7a703c6a9998)
feat: update Scoop for talhelper version v3.0.20
-
[`94ec9ba`](https://redirect.github.com/budimanjojo/talhelper/commit/94ec9ba48d1ad1c0c8bed408b01f31b5b9cfc1f0)
feat: update flake
([#&#8203;882](https://redirect.github.com/budimanjojo/talhelper/issues/882))
-
[`e7b8516`](https://redirect.github.com/budimanjojo/talhelper/commit/e7b85164e7aa666e388251862e11d34cc2be3252)
fix(deps): update module github.com/budimanjojo/talhelper/v3 to v3.0.20

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOTkuMSIsInVwZGF0ZWRJblZlciI6IjM5LjE5OS4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2025-03-13 07:25:23 +01:00
TrueCharts Bot 16e3ff6d4c chore(deps): update ghcr.io/siderolabs/installer docker tag to v1.9.5 (clustertool) (#33182)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[ghcr.io/siderolabs/installer](https://redirect.github.com/siderolabs/talos)
| patch | `v1.9.4` -> `v1.9.5` |

---

### Release Notes

<details>
<summary>siderolabs/talos (ghcr.io/siderolabs/installer)</summary>

###
[`v1.9.5`](https://redirect.github.com/siderolabs/talos/releases/tag/v1.9.5)

[Compare
Source](https://redirect.github.com/siderolabs/talos/compare/v1.9.4...v1.9.5)

##### [Talos
1.9.5](https://redirect.github.com/siderolabs/talos/releases/tag/v1.9.5)
(2025-03-12)

Welcome to the v1.9.5 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

##### Component Updates

-   Linux: 6.12.18
-   containerd: 2.0.3
-   runc: 1.2.5
-   Kubernetes: 1.32.3
-   etcd: 3.5.19

Talos is built with Go 1.23.7.

##### Contributors

-   Andrey Smirnov
-   Dmitriy Matrenichev
-   Dmitry Sharshakov
-   Robin Elfrink
-   Serge Logvinov

##### Changes

<details><summary>12 commits</summary>
<p>

-
[@&#8203;`d07f6da`](https://redirect.github.com/siderolabs/talos/commit/d07f6daaa)
release(v1.9.5): prepare release
-
[@&#8203;`dd629ad`](https://redirect.github.com/siderolabs/talos/commit/dd629ad5f)
chore: fix the mount cache ids in the Dockerfile
-
[@&#8203;`456516f`](https://redirect.github.com/siderolabs/talos/commit/456516f0b)
feat: update Flannel to 0.26.5
-
[@&#8203;`82f3a8c`](https://redirect.github.com/siderolabs/talos/commit/82f3a8c51)
feat: update etcd to 3.5.19
-
[@&#8203;`46ab576`](https://redirect.github.com/siderolabs/talos/commit/46ab576e4)
feat: add support for qla2xx
-
[@&#8203;`7f89234`](https://redirect.github.com/siderolabs/talos/commit/7f8923452)
fix: handle dynamic HTTP proxy settings for discovery client
-
[@&#8203;`9a29332`](https://redirect.github.com/siderolabs/talos/commit/9a293327a)
fix: multiple fixes for dashboard/no data
-
[@&#8203;`9d3a2c8`](https://redirect.github.com/siderolabs/talos/commit/9d3a2c8df)
fix: ignore digest part of images when checking version
-
[@&#8203;`93180bf`](https://redirect.github.com/siderolabs/talos/commit/93180bffe)
feat: support noclooud instance-id from dmi
-
[@&#8203;`76832c2`](https://redirect.github.com/siderolabs/talos/commit/76832c237)
chore: disable azure upload
-
[@&#8203;`d4986d9`](https://redirect.github.com/siderolabs/talos/commit/d4986d957)
feat: update default Kubernetes to 1.32.3
-
[@&#8203;`1fe0c2f`](https://redirect.github.com/siderolabs/talos/commit/1fe0c2f1b)
feat: update Go, Linux, containerd, runc

</p>
</details>

##### Changes from siderolabs/discovery-api
<details><summary>1 commit</summary>
<p>

-
[siderolabs/discovery-api@`64513a6`](https://redirect.github.com/siderolabs/discovery-api/commit/64513a6)
feat: rekres, regenerate proto files

</p>
</details>

##### Changes from siderolabs/discovery-client
<details><summary>1 commit</summary>
<p>

-
[siderolabs/discovery-client@`b3632c4`](https://redirect.github.com/siderolabs/discovery-client/commit/b3632c4)
feat: support extra dial options in the client

</p>
</details>

##### Changes from siderolabs/gen
<details><summary>1 commit</summary>
<p>

-
[siderolabs/gen@`5ae3afe`](https://redirect.github.com/siderolabs/gen/commit/5ae3afe)
chore: update hashtriemap implementation from the latest upstream

</p>
</details>

##### Changes from siderolabs/pkgs
<details><summary>9 commits</summary>
<p>

-
[siderolabs/pkgs@`792f5ca`](https://redirect.github.com/siderolabs/pkgs/commit/792f5ca)
feat: update Linux firmware to
[`2025021`](https://redirect.github.com/siderolabs/talos/commit/20250211)
-
[siderolabs/pkgs@`142de09`](https://redirect.github.com/siderolabs/pkgs/commit/142de09)
feat: update runc to 1.2.5
-
[siderolabs/pkgs@`b39f244`](https://redirect.github.com/siderolabs/pkgs/commit/b39f244)
feat: update Linux to 6.12.18
-
[siderolabs/pkgs@`9a21d6c`](https://redirect.github.com/siderolabs/pkgs/commit/9a21d6c)
fix: backport MGLRU patch from Linux 6.13
-
[siderolabs/pkgs@`1565250`](https://redirect.github.com/siderolabs/pkgs/commit/1565250)
feat: update Linux 6.12.17, containerd 2.0.3
-
[siderolabs/pkgs@`fc5e81d`](https://redirect.github.com/siderolabs/pkgs/commit/fc5e81d)
feat: enable qla2xxx module
-
[siderolabs/pkgs@`3ff0ab6`](https://redirect.github.com/siderolabs/pkgs/commit/3ff0ab6)
fix: patch Linux with blackhole patch
-
[siderolabs/pkgs@`b4060f8`](https://redirect.github.com/siderolabs/pkgs/commit/b4060f8)
feat: update Go to 1.23.7
-
[siderolabs/pkgs@`3349185`](https://redirect.github.com/siderolabs/pkgs/commit/3349185)
fix: patch musl to mitigate CVE-2025-26519

</p>
</details>

##### Changes from siderolabs/tools
<details><summary>1 commit</summary>
<p>

-
[siderolabs/tools@`17d43b2`](https://redirect.github.com/siderolabs/tools/commit/17d43b2)
feat: update Go to 1.23.7

</p>
</details>

##### Dependency Changes

-   **github.com/siderolabs/discovery-api**        v0.1.5 -> v0.1.6
-   **github.com/siderolabs/discovery-client**     v0.1.10 -> v0.1.11
-   **github.com/siderolabs/gen**                  v0.7.0 -> v0.8.0
- **github.com/siderolabs/pkgs** v1.9.0-27-g27017e0 ->
v1.9.0-36-g792f5ca
-   **github.com/siderolabs/talos/pkg/machinery**  v1.9.4 -> v1.9.5
- **github.com/siderolabs/tools** v1.9.0-3-gb2ede52 -> v1.9.0-4-g17d43b2
-   **google.golang.org/grpc**                     v1.68.1 -> v1.70.0
-   **google.golang.org/protobuf**                 v1.35.2 -> v1.36.5

Previous release can be found at
[v1.9.4](https://redirect.github.com/siderolabs/talos/releases/tag/v1.9.4)

##### Images

    ghcr.io/siderolabs/flannel:v0.26.5
    registry.k8s.io/coredns/coredns:v1.12.0
    gcr.io/etcd-development/etcd:v3.5.19
    registry.k8s.io/kube-apiserver:v1.32.3
    registry.k8s.io/kube-controller-manager:v1.32.3
    registry.k8s.io/kube-scheduler:v1.32.3
    registry.k8s.io/kube-proxy:v1.32.3
    ghcr.io/siderolabs/kubelet:v1.32.3
    ghcr.io/siderolabs/installer:v1.9.5
    registry.k8s.io/pause:3.10

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOTEuNCIsInVwZGF0ZWRJblZlciI6IjM5LjE5MS40IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbInJlbm92YXRlL2NvbnRhaW5lciIsInN5c3RlbS11cGdyYWRlIiwidHlwZS9wYXRjaCJdfQ==-->
2025-03-12 19:31:37 +01:00
TrueCharts Bot 7d31a1e1a6 chore(flux): update image blocky 16.13.10 → 16.13.11 (clustertool) (#33183)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [blocky](https://truecharts.org/charts/premium/blocky)
([source](https://0xerr0r.github.io/blocky/)) | patch | `16.13.10` ->
`16.13.11` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOTEuNCIsInVwZGF0ZWRJblZlciI6IjM5LjE5MS40IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2025-03-12 19:15:56 +01:00
TrueCharts Bot c30903eb9e chore(deps): update ghcr.io/siderolabs/kubelet docker tag to v1.32.3 (clustertool) (#33167)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[ghcr.io/siderolabs/kubelet](https://redirect.github.com/siderolabs/kubelet)
| patch | `v1.32.2` -> `v1.32.3` |

---

### Release Notes

<details>
<summary>siderolabs/kubelet (ghcr.io/siderolabs/kubelet)</summary>

###
[`v1.32.3`](https://redirect.github.com/siderolabs/kubelet/compare/v1.32.2...v1.32.3)

[Compare
Source](https://redirect.github.com/siderolabs/kubelet/compare/v1.32.2...v1.32.3)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOTEuNCIsInVwZGF0ZWRJblZlciI6IjM5LjE5MS40IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbInJlbm92YXRlL2NvbnRhaW5lciIsInN5c3RlbS11cGdyYWRlIiwidHlwZS9wYXRjaCJdfQ==-->
2025-03-12 16:05:56 +01:00
TrueCharts Bot 1e41624b41 fix(deps): update kubernetes packages v0.32.2 → v0.32.3 (clustertool) (patch) (#33170)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [k8s.io/api](https://redirect.github.com/kubernetes/api) | require |
patch | `v0.32.2` -> `v0.32.3` |
|
[k8s.io/apimachinery](https://redirect.github.com/kubernetes/apimachinery)
| require | patch | `v0.32.2` -> `v0.32.3` |
| [k8s.io/client-go](https://redirect.github.com/kubernetes/client-go) |
require | patch | `v0.32.2` -> `v0.32.3` |

---

### Release Notes

<details>
<summary>kubernetes/api (k8s.io/api)</summary>

###
[`v0.32.3`](https://redirect.github.com/kubernetes/api/compare/v0.32.2...v0.32.3)

[Compare
Source](https://redirect.github.com/kubernetes/api/compare/v0.32.2...v0.32.3)

</details>

<details>
<summary>kubernetes/apimachinery (k8s.io/apimachinery)</summary>

###
[`v0.32.3`](https://redirect.github.com/kubernetes/apimachinery/compare/v0.32.2...v0.32.3)

[Compare
Source](https://redirect.github.com/kubernetes/apimachinery/compare/v0.32.2...v0.32.3)

</details>

<details>
<summary>kubernetes/client-go (k8s.io/client-go)</summary>

###
[`v0.32.3`](https://redirect.github.com/kubernetes/client-go/compare/v0.32.2...v0.32.3)

[Compare
Source](https://redirect.github.com/kubernetes/client-go/compare/v0.32.2...v0.32.3)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOTEuNCIsInVwZGF0ZWRJblZlciI6IjM5LjE5MS40IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2025-03-12 13:22:49 +01:00
TrueCharts Bot 66030a6578 chore(flux): update image blocky 16.13.9 → 16.13.10 (clustertool) (#33168)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [blocky](https://truecharts.org/charts/premium/blocky)
([source](https://0xerr0r.github.io/blocky/)) | patch | `16.13.9` ->
`16.13.10` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOTEuNCIsInVwZGF0ZWRJblZlciI6IjM5LjE5MS40IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2025-03-12 13:22:21 +01:00
TrueCharts Bot 934eb002fa chore(flux): update image registry.k8s.io/kubectl v1.32.2 → v1.32.3 (clustertool) (#33139)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| registry.k8s.io/kubectl | patch | `v1.32.2` -> `v1.32.3` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOTEuNCIsInVwZGF0ZWRJblZlciI6IjM5LjE5MS40IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2025-03-12 07:39:39 +01:00
TrueCharts Bot b73af5cbff chore(flux): update image spegel 3.1.1 → 3.1.2 (clustertool) (#33108)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [spegel](https://truecharts.org/charts/system/spegel)
([source](https://ghcr.io/spegel-org/spegel)) | patch | `3.1.1` ->
`3.1.2` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOTEuNCIsInVwZGF0ZWRJblZlciI6IjM5LjE5MS40IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2025-03-11 01:29:37 +01:00
TrueCharts Bot 0c98d19eab chore(flux): update image blocky 16.13.8 → 16.13.9 (clustertool) (#33103)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [blocky](https://truecharts.org/charts/premium/blocky)
([source](https://0xerr0r.github.io/blocky/)) | patch | `16.13.8` ->
`16.13.9` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOTEuNCIsInVwZGF0ZWRJblZlciI6IjM5LjE5MS40IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2025-03-10 19:14:37 +01:00
TrueCharts Bot 32c1254cef chore(flux): update image docker.io/rancher/system-upgrade-controller v0.15.1 → v0.15.2 (clustertool) (#33025)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[docker.io/rancher/system-upgrade-controller](https://redirect.github.com/rancher/system-upgrade-controller)
| patch | `v0.15.1` -> `v0.15.2` |

---

### Release Notes

<details>
<summary>rancher/system-upgrade-controller
(docker.io/rancher/system-upgrade-controller)</summary>

###
[`v0.15.2`](https://redirect.github.com/rancher/system-upgrade-controller/releases/tag/v0.15.2)

[Compare
Source](https://redirect.github.com/rancher/system-upgrade-controller/compare/v0.15.1...v0.15.2)

#### What's Changed

- support k8s 1.32.2 by
[@&#8203;jiaqiluo](https://redirect.github.com/jiaqiluo) in
[https://github.com/rancher/system-upgrade-controller/pull/352](https://redirect.github.com/rancher/system-upgrade-controller/pull/352)

**Full Changelog**:
https://github.com/rancher/system-upgrade-controller/compare/v0.15.1...v0.15.2

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xODguMyIsInVwZGF0ZWRJblZlciI6IjM5LjE4OC4zIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2025-03-09 07:17:58 +01:00
TrueCharts Bot 2f1909f7a4 chore(flux): update image prometheus-operator 11.5.0 → 11.5.1 (clustertool) (#33013) 2025-03-08 19:11:35 +01:00
TrueCharts Bot 01d99cf37f fix(deps): update module sigs.k8s.io/controller-runtime v0.20.2 → v0.20.3 (clustertool) (#32999)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[sigs.k8s.io/controller-runtime](https://redirect.github.com/kubernetes-sigs/controller-runtime)
| require | patch | `v0.20.2` -> `v0.20.3` |

---

### Release Notes

<details>
<summary>kubernetes-sigs/controller-runtime
(sigs.k8s.io/controller-runtime)</summary>

###
[`v0.20.3`](https://redirect.github.com/kubernetes-sigs/controller-runtime/releases/tag/v0.20.3)

[Compare
Source](https://redirect.github.com/kubernetes-sigs/controller-runtime/compare/v0.20.2...v0.20.3)

#### What's Changed

- 🐛 fix: cache should list out of global cache when present and
necessary by
[@&#8203;k8s-infra-cherrypick-robot](https://redirect.github.com/k8s-infra-cherrypick-robot)
in
[https://github.com/kubernetes-sigs/controller-runtime/pull/3127](https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3127)
- 🌱 Export envtest.ReadCRDFiles by
[@&#8203;k8s-infra-cherrypick-robot](https://redirect.github.com/k8s-infra-cherrypick-robot)
in
[https://github.com/kubernetes-sigs/controller-runtime/pull/3131](https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3131)
- 🐛 Fakeclient: Fix dataraces when writing to the scheme by
[@&#8203;k8s-infra-cherrypick-robot](https://redirect.github.com/k8s-infra-cherrypick-robot)
in
[https://github.com/kubernetes-sigs/controller-runtime/pull/3145](https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3145)
- Revert " Expose all Go runtime metrics" by
[@&#8203;alvaroaleman](https://redirect.github.com/alvaroaleman) in
[https://github.com/kubernetes-sigs/controller-runtime/pull/3147](https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3147)

**Full Changelog**:
https://github.com/kubernetes-sigs/controller-runtime/compare/v0.20.2...v0.20.3

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xODguMyIsInVwZGF0ZWRJblZlciI6IjM5LjE4OC4zIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2025-03-08 13:08:45 +01:00
TrueCharts Bot bed7dd6221 chore(flux): update image prometheus-operator 11.4.3 → 11.5.0 (clustertool) (#32985)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[prometheus-operator](https://truecharts.org/charts/system/prometheus-operator)
([source](https://redirect.github.com/prometheus-operator)) | minor |
`11.4.3` -> `11.5.0` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xODguMyIsInVwZGF0ZWRJblZlciI6IjM5LjE4OC4zIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
2025-03-07 19:11:22 +01:00
TrueCharts Bot 1fecd936ba chore(flux): update image prometheus-operator 11.4.2 → 11.4.3 (clustertool) (#32963)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[prometheus-operator](https://truecharts.org/charts/system/prometheus-operator)
([source](https://redirect.github.com/prometheus-operator)) | patch |
`11.4.2` -> `11.4.3` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xODguMyIsInVwZGF0ZWRJblZlciI6IjM5LjE4OC4zIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2025-03-07 01:19:32 +01:00
TrueCharts Bot 21fdfa594f chore(flux): update image kubernetes-dashboard 1.13.3 → 1.14.1 (clustertool) (#32940) 2025-03-06 13:16:12 +01:00
TrueCharts Bot 86f57aa56a fix(deps): update module github.com/budimanjojo/talhelper/v3 v3.0.19 → v3.0.20 (clustertool) (#32939)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/budimanjojo/talhelper/v3](https://redirect.github.com/budimanjojo/talhelper)
| require | patch | `v3.0.19` -> `v3.0.20` |

---

### Release Notes

<details>
<summary>budimanjojo/talhelper
(github.com/budimanjojo/talhelper/v3)</summary>

###
[`v3.0.20`](https://redirect.github.com/budimanjojo/talhelper/releases/tag/v3.0.20)

[Compare
Source](https://redirect.github.com/budimanjojo/talhelper/compare/v3.0.19...v3.0.20)

#### Changelog

-
[`c3c774b`](https://redirect.github.com/budimanjojo/talhelper/commit/c3c774b598aa53426ad3786ebdb637b2b5676c65)
chore(container): update alpine docker tag to v3.21.3
-
[`4e593a7`](https://redirect.github.com/budimanjojo/talhelper/commit/4e593a7d938b5ca18a31d4aa808bb000627ee7f5)
chore(container): update golangci/golangci-lint docker tag to v1.64.6
-
[`7380a16`](https://redirect.github.com/budimanjojo/talhelper/commit/7380a168284f7c6985f528feb8e513d1823a6b86)
chore(github-action): update renovatebot/github-action action to
v41.0.14
-
[`c4a71aa`](https://redirect.github.com/budimanjojo/talhelper/commit/c4a71aa3318be288a61a9e3751a33ccb2891f73e)
chore(schema): update talconfig.yaml JSON schema
([#&#8203;872](https://redirect.github.com/budimanjojo/talhelper/issues/872))
-
[`59b710c`](https://redirect.github.com/budimanjojo/talhelper/commit/59b710c1e51e1e515f558e51ff0c5b330d3bfa45)
chore(schema): update talos-extensions.yaml JSON schema
-
[`2224c03`](https://redirect.github.com/budimanjojo/talhelper/commit/2224c034c706ce8b2121e5e1d584bf83c1b27e49)
chore(schema): update talos-extensions.yaml JSON schema
-
[`531a377`](https://redirect.github.com/budimanjojo/talhelper/commit/531a3779b826e69697e94e0f5b194d2522d9d12d)
chore(schema): update talos-extensions.yaml JSON schema
-
[`9c927e5`](https://redirect.github.com/budimanjojo/talhelper/commit/9c927e5e08a6f072d34971c9416c49192640395c)
chore(schema): update talos-extensions.yaml JSON schema
([#&#8203;867](https://redirect.github.com/budimanjojo/talhelper/issues/867))
-
[`aefdf9e`](https://redirect.github.com/budimanjojo/talhelper/commit/aefdf9e9905d56b1df6cca341849cd0c4ebc06b1)
chore(schema): update talos-extensions.yaml JSON schema
([#&#8203;877](https://redirect.github.com/budimanjojo/talhelper/issues/877))
-
[`6f3194d`](https://redirect.github.com/budimanjojo/talhelper/commit/6f3194d023e3dc7f126080f3a9ee06e6e3611c32)
chore(schema): update talos-extensions.yaml JSON schema
([#&#8203;878](https://redirect.github.com/budimanjojo/talhelper/issues/878))
-
[`19cfa85`](https://redirect.github.com/budimanjojo/talhelper/commit/19cfa856350e35037abe6de5669cc990fceac713)
chore(schema): update talos-extensions.yaml JSON schema
([#&#8203;881](https://redirect.github.com/budimanjojo/talhelper/issues/881))
-
[`d0c611f`](https://redirect.github.com/budimanjojo/talhelper/commit/d0c611f916cfbcc9f8662ebbe93ec4fe283edee8)
feat(config): add node `certSANs` and deprecate
`additionalMachineCertSans`
([#&#8203;869](https://redirect.github.com/budimanjojo/talhelper/issues/869))
-
[`e6aede9`](https://redirect.github.com/budimanjojo/talhelper/commit/e6aede9eee08a47fbe4afea3effbcbccadb0be1d)
feat(flake): update go version
-
[`ec47c88`](https://redirect.github.com/budimanjojo/talhelper/commit/ec47c88b385a9e9e5bd12f748f0091c3cbf68a2b)
feat(gencommand): add shorthand for `--env-file` flag to match genconfig
-
[`c6c81b6`](https://redirect.github.com/budimanjojo/talhelper/commit/c6c81b69061abad8ddb9289f2574cf8a465a754f)
feat: update Scoop for talhelper version v3.0.19
-
[`78cba87`](https://redirect.github.com/budimanjojo/talhelper/commit/78cba87dcb518f9adc2993976ed58a684e7fb357)
feat: update flake
([#&#8203;857](https://redirect.github.com/budimanjojo/talhelper/issues/857))
-
[`771d3b0`](https://redirect.github.com/budimanjojo/talhelper/commit/771d3b0e188595b0280c97e59697cfc531e688c0)
fix(deps): update module github.com/a8m/envsubst to v1.4.3
-
[`4bc81a3`](https://redirect.github.com/budimanjojo/talhelper/commit/4bc81a3f086ae9a9786954f241cca86a8c8a15f8)
fix(deps): update module github.com/budimanjojo/talhelper/v3 to v3.0.19
-
[`2f61dc2`](https://redirect.github.com/budimanjojo/talhelper/commit/2f61dc247e6aba437c081ae0433a7e6fa41b55f2)
fix(deps): update module github.com/siderolabs/talos/pkg/machinery to
v1.10.0-alpha.2
-
[`8ac547c`](https://redirect.github.com/budimanjojo/talhelper/commit/8ac547c9adeeb8a4ecfae7eeea60a609d910077f)
fix(deps): update module github.com/spf13/cobra to v1.9.0
-
[`b04aaf2`](https://redirect.github.com/budimanjojo/talhelper/commit/b04aaf24b56e77b3e8b0037de7bb866ee3f1239b)
fix(deps): update module github.com/spf13/cobra to v1.9.1
-
[`4ad6365`](https://redirect.github.com/budimanjojo/talhelper/commit/4ad63653915001d20590bbe1761dff0b14902a17)
fix(deps): update module golang.org/x/mod to v0.24.0
-
[`b1f897b`](https://redirect.github.com/budimanjojo/talhelper/commit/b1f897b181e2ca29242abf43f5fa56901e21c372)
fix(validate_talconfig): only exit 1 when there are errors

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xODUuMSIsInVwZGF0ZWRJblZlciI6IjM5LjE4NS4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2025-03-06 13:16:08 +01:00
TrueCharts Bot ec2727d84d fix(deps): update module golang.org/x/crypto v0.35.0 → v0.36.0 (clustertool) (#32924)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| golang.org/x/crypto | require | minor | `v0.35.0` -> `v0.36.0` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xODUuMSIsInVwZGF0ZWRJblZlciI6IjM5LjE4NS4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
2025-03-06 02:53:29 +01:00
TrueCharts Bot 7c18299adc chore(flux): update image docker.io/rancher/system-upgrade-controller v0.15.0 → v0.15.1 (clustertool) (#32896)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[docker.io/rancher/system-upgrade-controller](https://redirect.github.com/rancher/system-upgrade-controller)
| patch | `v0.15.0` -> `v0.15.1` |

---

### Release Notes

<details>
<summary>rancher/system-upgrade-controller
(docker.io/rancher/system-upgrade-controller)</summary>

###
[`v0.15.1`](https://redirect.github.com/rancher/system-upgrade-controller/releases/tag/v0.15.1)

[Compare
Source](https://redirect.github.com/rancher/system-upgrade-controller/compare/v0.15.0...v0.15.1)

#### What's Changed

- feat: add `org.opencontainers.image.source` docker label by
[@&#8203;viceice](https://redirect.github.com/viceice) in
[https://github.com/rancher/system-upgrade-controller/pull/350](https://redirect.github.com/rancher/system-upgrade-controller/pull/350)
- Make IgnoreUpdate secrets optional by
[@&#8203;brandond](https://redirect.github.com/brandond) in
[https://github.com/rancher/system-upgrade-controller/pull/351](https://redirect.github.com/rancher/system-upgrade-controller/pull/351)

#### New Contributors

- [@&#8203;viceice](https://redirect.github.com/viceice) made their
first contribution in
[https://github.com/rancher/system-upgrade-controller/pull/350](https://redirect.github.com/rancher/system-upgrade-controller/pull/350)

**Full Changelog**:
https://github.com/rancher/system-upgrade-controller/compare/v0.15.0...v0.15.1

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xODUuMSIsInVwZGF0ZWRJblZlciI6IjM5LjE4NS4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2025-03-06 01:40:56 +01:00
TrueCharts Bot 93f7e55cee chore(flux): update image prometheus-operator 11.4.1 → 11.4.2 (clustertool) (#32897) 2025-03-06 01:40:42 +01:00
TrueCharts Bot af21e15784 fix(deps): update module github.com/siderolabs/talos/pkg/machinery v1.10.0-alpha.1.0.20250203100439-e2aa7c98cceb → v1.10.0-alpha.2 (clustertool) (#32875)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/siderolabs/talos/pkg/machinery](https://redirect.github.com/siderolabs/talos)
| require | patch | `v1.10.0-alpha.1.0.20250203100439-e2aa7c98cceb` ->
`v1.10.0-alpha.2` |

---

### Release Notes

<details>
<summary>siderolabs/talos
(github.com/siderolabs/talos/pkg/machinery)</summary>

###
[`v1.10.0-alpha.2`](https://redirect.github.com/siderolabs/talos/releases/tag/v1.10.0-alpha.2)

[Compare
Source](https://redirect.github.com/siderolabs/talos/compare/v1.10.0-alpha.1...v1.10.0-alpha.2)

#### [Talos
1.10.0-alpha.2](https://redirect.github.com/siderolabs/talos/releases/tag/v1.10.0-alpha.2)
(2025-03-05)

Welcome to the v1.10.0-alpha.2 release of Talos!\
*This is a pre-release of Talos*

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

##### auditd

Kernel parameter `talos.auditd.disabled=1` can be used to disable Talos
built-in `auditd` service.

##### cgroups v1

Talos Linux no longer supports `cgroupsv1` when running in non-container
mode.
The kernel argument `talos.unified_cgroup_hierarchy` is now ignored.

##### Disk Image

Talos starting with 1.10 will have disk images that will use GRUB only
for legacy BIOS and systemd-boot for modern UEFI systems.
On first boot Talos determines the boot method and will wipe the unused
bootloader.

Secureboot disk-images will be sd-boot only.

For ARM64 imager will still generate GRUB bootloader for Talos < 1.10
and for Talos >= 1.10 all ARM64 boot assets will use systemd-boot.

Imager supports overwriting bootloader when generating a disk image via
the Imager profile `output` option.

Eg:

```yaml
output:
  kind: image
  imageOptions:
    bootloader: sd-boot # supported options are sd-boot, grub, dual-boot
```

##### Driver Rebind

Talos 1.10 now supports a new machine config document named
`PCIDriverRebindConfig` that allows rebinding the driver of a PCI device
to a different target driver.
See the
[documentation](https://www.talos.dev/v1.10/reference/configuration/hardware/pcidriverrebindconfig/)
for more information.

##### Ethernet

Talos now provides `ethtool`-style Ethernet low-level configuration via
`network/EthernetConfig` documents.
Current status of the interface can be read by `talosctl get
ethernetstatus`.

##### Ingress Firewall

Talos Ingress Firewall now filters access to Kubernetes NodePort
services correctly.

##### iSCSI Initiator

Talos now generates `/etc/iscsi/initiatorname.iscsi` file based on the
node identity which is tied to the lifecycle of the node.
If using `iscsi-tools` extension, starting with Talos 1.10 would have a
more deterministic IQN for the initiator node.
Make sure to update any iSCSI targets to use the new initiator IQN.

The iqn can be read by `talosctl read /etc/iscsi/initiatorname.iscsi`

##### ISO

Talos starting with 1.10 will have ISO's that will use GRUB only for
legacy BIOS and systemd-boot for modern UEFI systems.

##### kube-apiserver Authorization Config

When using `.cluster.apiServer.authorizationConfig` the user provided
order for the authorizers is honoured and `Node` and `RBAC` authorizers
are always added to the end if not explicitly specified.

Eg: If user provides only `Webhook` authorizer, the final order will be
`Webhook`, `Node`, `RBAC`.

To provide a specific order for `Node` or `RBAC` explicitly, user can
provide the authorizer in the order they want.

Eg:

```yaml
cluster:
  apiServer:
    authorizationConfig:
      - type: Node
        name: Node
      - type: Webhook
        name: Webhook
        webhook:
          connectionInfo:
            type: InClusterConfig
        ...
      - type: RBAC
        name: rbac
```

Usage of `authorization-mode` CLI argument will not support this form of
customization.

##### NVMe NQN

Talos now generates `/etc/nvme/hostnqn` and `/etc/nvme/hostid` files
based on the node identity which is tied to the lifecycle of the node.

The NQN can be read by `talosctl read /etc/nvme/hostnqn`

##### Fully bootstrapped builds

Talos 1.10 is built with a toolchain based on
[\[Stageˣ\]](https://stagex.tools/), which is a project building fully
bootstrapped software.
This change increases reproducibility, auditability and security of
Talos builds.

This also changes Talos root filesystem structure for unified /usr, with
other directories symlinking to /usr/bin and /usr/lib.
System extensions must move their directories accordingly for 1.10.

##### Component Updates

-   Linux: 6.12.17
-   CNI plugins: 1.6.2
-   runc: 1.2.5
-   containerd: 2.0.3
-   etcd: 3.5.18
-   Flannel: 0.26.4
-   Kubernetes: 1.33.0-alpha.2

Talos is built with Go 1.24.0.

##### Contributors

-   Andrey Smirnov
-   Noel Georgi
-   Dmitry Sharshakov
-   Dmitriy Matrenichev
-   Dmitrii Sharshakov
-   Justin Garrison
-   Mathspy
-   Nico Berlee
-   Skyler Mäntysaari
-   Utku Ozdemir
-   ihelmer07
-   459below
-   Alexis La Goutte
-   Andrew Longwill
-   Andrew Symington
-   Christian Luetke-Stetzkamp
-   Christoph Hoopmann
-   Devin Buhl
-   Dominik Masur
-   Florian Grignon
-   Ganawa Juanah
-   Jason Benedicic
-   Joakim Nohlgård
-   K Birt
-   KillianCdP
-   L.J. Hanson
-   Louis SCHNEIDER
-   Marcel Hamer
-   Mikhail Petrov
-   Motte
-   Natalie Romana Albers
-   Orzelius
-   PRIHLOP
-   Ram
-   Robin Elfrink
-   Ryan Jacobs
-   Serge Logvinov
-   Thomas Gosteli
-   Tim Olson
-   Tine Jozelj
-   TomyLobo
-   bzub
-   greenpsi
-   sflotat2607
-   suse-coder

##### Changes

<details><summary>221 commits</summary>
<p>

-
[@&#8203;`ab6cb3d`](https://redirect.github.com/siderolabs/talos/commit/ab6cb3dfa)
chore: disable azure upload
-
[@&#8203;`2355218`](https://redirect.github.com/siderolabs/talos/commit/2355218e4)
release(v1.10.0-alpha.2): prepare release
-
[@&#8203;`d4e3e95`](https://redirect.github.com/siderolabs/talos/commit/d4e3e957c)
fix(ci): fix integration tests
-
[@&#8203;`1849b53`](https://redirect.github.com/siderolabs/talos/commit/1849b5388)
feat: update dependencies
-
[@&#8203;`88fc6bb`](https://redirect.github.com/siderolabs/talos/commit/88fc6bbeb)
test: fix UKI preserving talos.config and image cache
-
[@&#8203;`ba8cd30`](https://redirect.github.com/siderolabs/talos/commit/ba8cd304d)
test: enable image-cache in the cron
-
[@&#8203;`28b5dc7`](https://redirect.github.com/siderolabs/talos/commit/28b5dc738)
test: fix reproduciblity test
-
[@&#8203;`5099803`](https://redirect.github.com/siderolabs/talos/commit/50998038b)
feat: prefer sd-boot for UEFI
-
[@&#8203;`e831e52`](https://redirect.github.com/siderolabs/talos/commit/e831e52e0)
feat: add support for qla2xx
-
[@&#8203;`ec5c049`](https://redirect.github.com/siderolabs/talos/commit/ec5c049a5)
feat: update Kubernetes to 1.33.0-alpha.2
-
[@&#8203;`ebfa82f`](https://redirect.github.com/siderolabs/talos/commit/ebfa82f35)
docs: update deprecated command
-
[@&#8203;`d79059a`](https://redirect.github.com/siderolabs/talos/commit/d79059a2c)
chore: fix shutdown typo in shutdown sequence
-
[@&#8203;`a3f88d2`](https://redirect.github.com/siderolabs/talos/commit/a3f88d2ef)
fix: block NodePort services with ingress firewall
-
[@&#8203;`fd8131c`](https://redirect.github.com/siderolabs/talos/commit/fd8131cb8)
feat: generate unified installer
-
[@&#8203;`ebfdb91`](https://redirect.github.com/siderolabs/talos/commit/ebfdb91b4)
fix: handle dynamic HTTP proxy settings for discovery client
-
[@&#8203;`d45eaeb`](https://redirect.github.com/siderolabs/talos/commit/d45eaeb74)
fix: correctly map link names/aliases when using VIP operator
-
[@&#8203;`7c4e47c`](https://redirect.github.com/siderolabs/talos/commit/7c4e47c0c)
chore: stop doing generate on each build
-
[@&#8203;`b1d410c`](https://redirect.github.com/siderolabs/talos/commit/b1d410cb6)
feat: dual boot disk image
-
[@&#8203;`468e318`](https://redirect.github.com/siderolabs/talos/commit/468e318ba)
fix: multiple fixes for dashboard/no data
-
[@&#8203;`3dd8d9a`](https://redirect.github.com/siderolabs/talos/commit/3dd8d9aed)
docs: update resetting-a-machine.md to include example of reset
-
[@&#8203;`7af8f6b`](https://redirect.github.com/siderolabs/talos/commit/7af8f6b2f)
feat: validate docker image references in upgrade options
-
[@&#8203;`c949f55`](https://redirect.github.com/siderolabs/talos/commit/c949f55e6)
docs: remove typo on resetting a machine page
-
[@&#8203;`f5c0970`](https://redirect.github.com/siderolabs/talos/commit/f5c097041)
feat: add description to schema object defs
-
[@&#8203;`79ee304`](https://redirect.github.com/siderolabs/talos/commit/79ee304e1)
chore: update enumer to a version that fixes Go 1.24 compatibility
-
[@&#8203;`46d67fe`](https://redirect.github.com/siderolabs/talos/commit/46d67fe44)
chore: update Go to 1.24, update pkgs
-
[@&#8203;`7f1dd26`](https://redirect.github.com/siderolabs/talos/commit/7f1dd2669)
fix(ci): fix integration-misc crons
-
[@&#8203;`26a773d`](https://redirect.github.com/siderolabs/talos/commit/26a773d3f)
docs: add a note about syslog sending messages to services
-
[@&#8203;`7ce0536`](https://redirect.github.com/siderolabs/talos/commit/7ce053638)
fix: ignore digest part of images when checking version
-
[@&#8203;`ae1b003`](https://redirect.github.com/siderolabs/talos/commit/ae1b00354)
feat: support noclooud instance-id from dmi
-
[@&#8203;`58661de`](https://redirect.github.com/siderolabs/talos/commit/58661dea7)
docs: update getting-started.md
-
[@&#8203;`94cf9fb`](https://redirect.github.com/siderolabs/talos/commit/94cf9fb84)
chore: fix spurious generate failures
-
[@&#8203;`32a3479`](https://redirect.github.com/siderolabs/talos/commit/32a34791e)
fix: typo in Makefile target talosctl-freebsd-arm64
-
[@&#8203;`1b4464c`](https://redirect.github.com/siderolabs/talos/commit/1b4464c8a)
feat: update Kubernetes to 1.32.2
-
[@&#8203;`9463ac2`](https://redirect.github.com/siderolabs/talos/commit/9463ac23e)
fix: make ingress firewall filter traffic to nodeports
-
[@&#8203;`8531d91`](https://redirect.github.com/siderolabs/talos/commit/8531d91a1)
fix: blockdevice transport detection
-
[@&#8203;`ce616d9`](https://redirect.github.com/siderolabs/talos/commit/ce616d93a)
fix: path for ca-certificates
-
[@&#8203;`f35b587`](https://redirect.github.com/siderolabs/talos/commit/f35b58779)
fix: fix diff printing
-
[@&#8203;`bf0f910`](https://redirect.github.com/siderolabs/talos/commit/bf0f910a1)
chore: provide more logging for dns requests
-
[@&#8203;`607998b`](https://redirect.github.com/siderolabs/talos/commit/607998ba2)
feat: support uki profiles via imager
-
[@&#8203;`711cf2d`](https://redirect.github.com/siderolabs/talos/commit/711cf2d99)
fix: ignore errors to stop pods
-
[@&#8203;`142d754`](https://redirect.github.com/siderolabs/talos/commit/142d75483)
fix: handle empty registry config
-
[@&#8203;`47f377b`](https://redirect.github.com/siderolabs/talos/commit/47f377b21)
feat: implement the last ethtool feature - channels
-
[@&#8203;`88cf69b`](https://redirect.github.com/siderolabs/talos/commit/88cf69b8c)
feat: multi profile UKIs
-
[@&#8203;`557faad`](https://redirect.github.com/siderolabs/talos/commit/557faad75)
feat: update Linux to 6.12.13
-
[@&#8203;`5dbf9e3`](https://redirect.github.com/siderolabs/talos/commit/5dbf9e350)
refactor: implement volume mount controller
-
[@&#8203;`aa11e9a`](https://redirect.github.com/siderolabs/talos/commit/aa11e9abb)
fix: make image cache volume management less strict
-
[@&#8203;`26a62e3`](https://redirect.github.com/siderolabs/talos/commit/26a62e342)
docs: fix typo in Wireguard docs
-
[@&#8203;`0419f5d`](https://redirect.github.com/siderolabs/talos/commit/0419f5d8b)
feat: implement features in `ethtool`-like support
-
[@&#8203;`cd66fc6`](https://redirect.github.com/siderolabs/talos/commit/cd66fc6e8)
feat: use bootstrapped packages for building Talos
-
[@&#8203;`2b5bd5d`](https://redirect.github.com/siderolabs/talos/commit/2b5bd5d1d)
chore: upgrade siderolabs/go-loadbalancer
-
[@&#8203;`15191aa`](https://redirect.github.com/siderolabs/talos/commit/15191aa3e)
fix: extract cmdline multi profile UKIs
-
[@&#8203;`716f700`](https://redirect.github.com/siderolabs/talos/commit/716f700da)
feat: provide initial support for ethtool configuration
-
[@&#8203;`b726e2f`](https://redirect.github.com/siderolabs/talos/commit/b726e2f9f)
feat: update Flannel to 0.26.4
-
[@&#8203;`98d56d4`](https://redirect.github.com/siderolabs/talos/commit/98d56d4d6)
chore: track opened grpc connections
-
[@&#8203;`5e28c8e`](https://redirect.github.com/siderolabs/talos/commit/5e28c8e03)
fix: image cache volume provisioning
-
[@&#8203;`c966781`](https://redirect.github.com/siderolabs/talos/commit/c9667813d)
chore: remove containerd importer
-
[@&#8203;`270ffb6`](https://redirect.github.com/siderolabs/talos/commit/270ffb69a)
fix: duplicate qemu drive ids
-
[@&#8203;`71ec41b`](https://redirect.github.com/siderolabs/talos/commit/71ec41be1)
fix: build of Talos on non-Linux host
-
[@&#8203;`e2aa7c9`](https://redirect.github.com/siderolabs/talos/commit/e2aa7c98c)
fix: installer with SecureBoot should contain UKIs
-
[@&#8203;`6e22c06`](https://redirect.github.com/siderolabs/talos/commit/6e22c06c3)
release(v1.10.0-alpha.1): prepare release
-
[@&#8203;`3a2d986`](https://redirect.github.com/siderolabs/talos/commit/3a2d9867b)
fix: do not close client.Client.conn with finalizer
-
[@&#8203;`73f30ff`](https://redirect.github.com/siderolabs/talos/commit/73f30ff25)
feat: bump pkgs for udev update
-
[@&#8203;`aea90cb`](https://redirect.github.com/siderolabs/talos/commit/aea90cb8f)
docs: update hyper-v
-
[@&#8203;`b716561`](https://redirect.github.com/siderolabs/talos/commit/b7165615f)
fix: use local NTP for AWS platform
-
[@&#8203;`673ca4b`](https://redirect.github.com/siderolabs/talos/commit/673ca4bcb)
fix: ensure proper closure of client.Client.conn with finalizer
-
[@&#8203;`19040ff`](https://redirect.github.com/siderolabs/talos/commit/19040ffd6)
fix: handle of PE sections with duplicate names
-
[@&#8203;`83489d3`](https://redirect.github.com/siderolabs/talos/commit/83489d348)
docs: add note about vmxnet and flannel conflict
-
[@&#8203;`f1292f5`](https://redirect.github.com/siderolabs/talos/commit/f1292f5e7)
docs: add iscsi-tools extension to prerequisites
-
[@&#8203;`93b4a37`](https://redirect.github.com/siderolabs/talos/commit/93b4a3740)
test: bump timeout on rotate CA test
-
[@&#8203;`42e1669`](https://redirect.github.com/siderolabs/talos/commit/42e166984)
feat: support kexec from uki
-
[@&#8203;`8da2649`](https://redirect.github.com/siderolabs/talos/commit/8da264946)
docs: add Orange Pi 5 to Image Factory platforms and documentation
-
[@&#8203;`c5fb62e`](https://redirect.github.com/siderolabs/talos/commit/c5fb62e2e)
feat: update Linux to 6.2.11
-
[@&#8203;`83d007c`](https://redirect.github.com/siderolabs/talos/commit/83d007c16)
feat: update etcd to 3.5.18
-
[@&#8203;`edf7c32`](https://redirect.github.com/siderolabs/talos/commit/edf7c3288)
fix: pe uki extract
-
[@&#8203;`70f72c5`](https://redirect.github.com/siderolabs/talos/commit/70f72c5b0)
docs: update multus.md
-
[@&#8203;`807a3cd`](https://redirect.github.com/siderolabs/talos/commit/807a3cd29)
refactor: all network merge controllers
-
[@&#8203;`ec8c466`](https://redirect.github.com/siderolabs/talos/commit/ec8c4660e)
docs: update vmware.md
-
[@&#8203;`baf81cd`](https://redirect.github.com/siderolabs/talos/commit/baf81cd49)
fix(ci): k8s integration suite wait for resource
-
[@&#8203;`cd5e549`](https://redirect.github.com/siderolabs/talos/commit/cd5e54903)
feat: generate iso's with both UKI and grub
-
[@&#8203;`75673b6`](https://redirect.github.com/siderolabs/talos/commit/75673b6a3)
feat: provide stable symlinks in disk resources
-
[@&#8203;`f407c88`](https://redirect.github.com/siderolabs/talos/commit/f407c88e4)
fix(ci): wait for longhorn node resource
-
[@&#8203;`601cdcc`](https://redirect.github.com/siderolabs/talos/commit/601cdccb9)
feat: extract kernel/initrd from uki for grub
-
[@&#8203;`ff175b9`](https://redirect.github.com/siderolabs/talos/commit/ff175b9fb)
docs: update disk-encryption.md
-
[@&#8203;`a8d84e3`](https://redirect.github.com/siderolabs/talos/commit/a8d84e315)
docs: fix typos and add more explanations in docs
-
[@&#8203;`3a38424`](https://redirect.github.com/siderolabs/talos/commit/3a384240e)
fix: invalid date field in iqn/nqn
-
[@&#8203;`82c9ec1`](https://redirect.github.com/siderolabs/talos/commit/82c9ec158)
chore(ci): add tests with longhorn v2 engine
-
[@&#8203;`689ea1d`](https://redirect.github.com/siderolabs/talos/commit/689ea1dbf)
fix: bring back disk UUID
-
[@&#8203;`7a712fa`](https://redirect.github.com/siderolabs/talos/commit/7a712fad2)
fix: disks with 4k sector size and systemd-boot
-
[@&#8203;`d62a34a`](https://redirect.github.com/siderolabs/talos/commit/d62a34aaf)
feat: update tools/pkgs/extras
-
[@&#8203;`b9a8ad6`](https://redirect.github.com/siderolabs/talos/commit/b9a8ad6ac)
chore: de-hardcode list of extra images for image-cache test
-
[@&#8203;`683153a`](https://redirect.github.com/siderolabs/talos/commit/683153a33)
docs: remove the last mentions of `preserve` flag for Talos 1.8+
-
[@&#8203;`33c7f41`](https://redirect.github.com/siderolabs/talos/commit/33c7f4195)
docs: fix typo an MacOS to on MacOS
-
[@&#8203;`21cff39`](https://redirect.github.com/siderolabs/talos/commit/21cff3919)
chore(ci): fio benchmark results as separate artifacts
-
[@&#8203;`0b7fc7c`](https://redirect.github.com/siderolabs/talos/commit/0b7fc7cdf)
fix: abort node watch on hostname change
-
[@&#8203;`99ba539`](https://redirect.github.com/siderolabs/talos/commit/99ba53941)
docs: remove the mention of `preserve` flag for Talos 1.8+
-
[@&#8203;`bde516f`](https://redirect.github.com/siderolabs/talos/commit/bde516fde)
chore(ci): rework iscsi-tools extensions test
-
[@&#8203;`e1efbf6`](https://redirect.github.com/siderolabs/talos/commit/e1efbf656)
refactor: extract platform metadata into Talos machinery
-
[@&#8203;`79987c0`](https://redirect.github.com/siderolabs/talos/commit/79987c05d)
feat: generate iqn and nqn files
-
[@&#8203;`0cab6ed`](https://redirect.github.com/siderolabs/talos/commit/0cab6ed17)
docs: update troubleshooting.md
-
[@&#8203;`921e102`](https://redirect.github.com/siderolabs/talos/commit/921e10254)
chore: update Go to 1.23.5
-
[@&#8203;`399d53b`](https://redirect.github.com/siderolabs/talos/commit/399d53b54)
fix: ignore forbidden error when waiting for pod eviction
-
[@&#8203;`8dea57a`](https://redirect.github.com/siderolabs/talos/commit/8dea57a81)
fix: make etc binds read-only
-
[@&#8203;`63157dc`](https://redirect.github.com/siderolabs/talos/commit/63157dcb4)
docs: update SideroLinkConfig example
-
[@&#8203;`fc7080e`](https://redirect.github.com/siderolabs/talos/commit/fc7080e34)
chore: clear cache after updating upstreams
-
[@&#8203;`51e0f27`](https://redirect.github.com/siderolabs/talos/commit/51e0f273f)
docs: update documentation for Talos 1.9.2
-
[@&#8203;`e06b141`](https://redirect.github.com/siderolabs/talos/commit/e06b14112)
feat: update Kubernetes to 1.32.1
-
[@&#8203;`4310b29`](https://redirect.github.com/siderolabs/talos/commit/4310b290d)
fix: generate UKI only if actually needed
-
[@&#8203;`a8cd991`](https://redirect.github.com/siderolabs/talos/commit/a8cd99102)
docs: update OpenEBS Mayastor installation
-
[@&#8203;`cf45f47`](https://redirect.github.com/siderolabs/talos/commit/cf45f4764)
docs: add Radxa ROCK 5B docs to Single Board Computer section
-
[@&#8203;`b21bdc5`](https://redirect.github.com/siderolabs/talos/commit/b21bdc5e5)
chore(ci): save csi tests fio results
-
[@&#8203;`01c8683`](https://redirect.github.com/siderolabs/talos/commit/01c86832c)
chore(ci): add test for OpenEBS MayaStor
-
[@&#8203;`c774835`](https://redirect.github.com/siderolabs/talos/commit/c77483510)
test: update `talosctl debug air-gapped`
-
[@&#8203;`ddd695d`](https://redirect.github.com/siderolabs/talos/commit/ddd695d93)
feat: update containerd to 2.0.2
-
[@&#8203;`da2e811`](https://redirect.github.com/siderolabs/talos/commit/da2e81120)
fix: add informer resync period for node status watcher
-
[@&#8203;`9b957df`](https://redirect.github.com/siderolabs/talos/commit/9b957df64)
chore: uki code restructure
-
[@&#8203;`e41a995`](https://redirect.github.com/siderolabs/talos/commit/e41a99525)
fix: kube-apiserver authorizers order
-
[@&#8203;`db4ca56`](https://redirect.github.com/siderolabs/talos/commit/db4ca5668)
feat: add a kernel parameter to disable built-in auditd
-
[@&#8203;`faa1490`](https://redirect.github.com/siderolabs/talos/commit/faa149003)
feat: update Linux to 6.12.9
-
[@&#8203;`8de1975`](https://redirect.github.com/siderolabs/talos/commit/8de19758d)
fix: a couple of imager panics/crashes
-
[@&#8203;`5bc3e34`](https://redirect.github.com/siderolabs/talos/commit/5bc3e34cb)
fix: detect GPT before ZFS
-
[@&#8203;`ed7e47d`](https://redirect.github.com/siderolabs/talos/commit/ed7e47d15)
refactor: drop usage of objcopy to generate UKIs
-
[@&#8203;`edf5c5e`](https://redirect.github.com/siderolabs/talos/commit/edf5c5e29)
fix: extfs repair and resize
-
[@&#8203;`6e32ea5`](https://redirect.github.com/siderolabs/talos/commit/6e32ea5b7)
fix: merge of VolumeConfig documents with sizes
-
[@&#8203;`1be5f8f`](https://redirect.github.com/siderolabs/talos/commit/1be5f8ff2)
feat: update Linux to 6.12.8
-
[@&#8203;`e6a4583`](https://redirect.github.com/siderolabs/talos/commit/e6a4583ba)
feat: support generating unsigned UKIs
-
[@&#8203;`bbd6067`](https://redirect.github.com/siderolabs/talos/commit/bbd6067d4)
fix: partition alignment on disks with 4k sectors
-
[@&#8203;`84fcc97`](https://redirect.github.com/siderolabs/talos/commit/84fcc976f)
fix: yet another dashboard panic
-
[@&#8203;`6d605fc`](https://redirect.github.com/siderolabs/talos/commit/6d605fc85)
fix: disable NRI plugin in a different way
-
[@&#8203;`499695e`](https://redirect.github.com/siderolabs/talos/commit/499695e24)
fix: request previous IP address in discovery
-
[@&#8203;`cc84caf`](https://redirect.github.com/siderolabs/talos/commit/cc84caf8c)
docs: update Cilium documentation
-
[@&#8203;`fa5300d`](https://redirect.github.com/siderolabs/talos/commit/fa5300d91)
chore: revert: drop deprecated allowSchedulingOnMasters
-
[@&#8203;`0abb3da`](https://redirect.github.com/siderolabs/talos/commit/0abb3dabf)
docs: fix command to wait for ceph-rook HEALTH_OK
-
[@&#8203;`32c67c2`](https://redirect.github.com/siderolabs/talos/commit/32c67c27c)
chore: drop deprecated allowSchedulingOnMasters
-
[@&#8203;`ae6d065`](https://redirect.github.com/siderolabs/talos/commit/ae6d065be)
fix: mount selinuxfs only when SELinux is enabled
-
[@&#8203;`5ccbf4b`](https://redirect.github.com/siderolabs/talos/commit/5ccbf4bcd)
feat: enable `configfs`
-
[@&#8203;`5958249`](https://redirect.github.com/siderolabs/talos/commit/59582496d)
feat: bring in partity with sd-257
-
[@&#8203;`83d84a8`](https://redirect.github.com/siderolabs/talos/commit/83d84a831)
chore(ci): better zfs checks
-
[@&#8203;`650eb3a`](https://redirect.github.com/siderolabs/talos/commit/650eb3a4f)
refactor: rewrite cloud uploader to use AWS SDK Go v2
-
[@&#8203;`01bf844`](https://redirect.github.com/siderolabs/talos/commit/01bf8449b)
fix: update field name for bus path disk selector
-
[@&#8203;`e915c98`](https://redirect.github.com/siderolabs/talos/commit/e915c98d5)
fix: exclude disks with empty transport for disk selector
-
[@&#8203;`b7a7fdc`](https://redirect.github.com/siderolabs/talos/commit/b7a7fdc4b)
refactor: generate /etc/os-release file static way
-
[@&#8203;`e79c9e1`](https://redirect.github.com/siderolabs/talos/commit/e79c9e127)
chore(ci): drop equinix metal e2e-test
-
[@&#8203;`4189454`](https://redirect.github.com/siderolabs/talos/commit/418945444)
fix: build of talosctl on non-Linux platforms
-
[@&#8203;`4761a9e`](https://redirect.github.com/siderolabs/talos/commit/4761a9e6a)
chore: update dependencies
-
[@&#8203;`f98efb3`](https://redirect.github.com/siderolabs/talos/commit/f98efb333)
fix: ignore member not found error on leave cluster
-
[@&#8203;`b72bda0`](https://redirect.github.com/siderolabs/talos/commit/b72bda0a4)
fix: talosctl support and race tests
-
[@&#8203;`27233cf`](https://redirect.github.com/siderolabs/talos/commit/27233cf0f)
test: use node informer instead of raw watch
-
[@&#8203;`5dc15e8`](https://redirect.github.com/siderolabs/talos/commit/5dc15e8db)
fix: update go-blockdevice to v2.0.9
-
[@&#8203;`5f3acd0`](https://redirect.github.com/siderolabs/talos/commit/5f3acd0f2)
fix: use correct default search domain
-
[@&#8203;`7e5d36d`](https://redirect.github.com/siderolabs/talos/commit/7e5d36d46)
fix: pci driver rebind config validation
-
[@&#8203;`4b97bbc`](https://redirect.github.com/siderolabs/talos/commit/4b97bbc3f)
fix: pull in containerd CNI deadlock fix
-
[@&#8203;`0664807`](https://redirect.github.com/siderolabs/talos/commit/066480722)
test: fix apparmor tests
-
[@&#8203;`82ea44a`](https://redirect.github.com/siderolabs/talos/commit/82ea44a6b)
fix: reduce installer image
-
[@&#8203;`78b3e7f`](https://redirect.github.com/siderolabs/talos/commit/78b3e7f4f)
fix: get next rule number for IPv6 in the appropriate chain
-
[@&#8203;`675854a`](https://redirect.github.com/siderolabs/talos/commit/675854aa0)
docs: fix two typos
-
[@&#8203;`f70b738`](https://redirect.github.com/siderolabs/talos/commit/f70b7386a)
test: add a xfs makefs test
-
[@&#8203;`8212e48`](https://redirect.github.com/siderolabs/talos/commit/8212e4864)
refactor: use quirks in kernel args
-
[@&#8203;`b4aa518`](https://redirect.github.com/siderolabs/talos/commit/b4aa5189d)
release(v1.10.0-alpha.0): prepare release
-
[@&#8203;`bd85bd5`](https://redirect.github.com/siderolabs/talos/commit/bd85bd5b7)
fix: fix `Failed to initialize SELinux labeling handle` udev error
-
[@&#8203;`73c82e3`](https://redirect.github.com/siderolabs/talos/commit/73c82e3e5)
feat: bring Linux 6.12.6, CNI plugins 1.6.1
-
[@&#8203;`c12b524`](https://redirect.github.com/siderolabs/talos/commit/c12b52491)
docs: document Kubernetes service registry incompat with K8s 1.32
-
[@&#8203;`a5660ed`](https://redirect.github.com/siderolabs/talos/commit/a5660ed77)
feat: pcirebind controller
-
[@&#8203;`4c32616`](https://redirect.github.com/siderolabs/talos/commit/4c3261626)
docs: fix several typos
-
[@&#8203;`fb36753`](https://redirect.github.com/siderolabs/talos/commit/fb3675321)
fix: dashboard crash on CPU data
-
[@&#8203;`dec0185`](https://redirect.github.com/siderolabs/talos/commit/dec0185c8)
chore: reduce memory usage for secureboot functions
-
[@&#8203;`cee6c60`](https://redirect.github.com/siderolabs/talos/commit/cee6c60a0)
fix: make talosctl time work with PTP time sync
-
[@&#8203;`f756043`](https://redirect.github.com/siderolabs/talos/commit/f75604313)
chore: support gcr.io auth for cache and image gen
-
[@&#8203;`6ef2596`](https://redirect.github.com/siderolabs/talos/commit/6ef2596da)
docs: improve Hetzner documentation
-
[@&#8203;`7d39b9e`](https://redirect.github.com/siderolabs/talos/commit/7d39b9ec2)
feat: remove cgroupsv1 in non-container mode
-
[@&#8203;`8003536`](https://redirect.github.com/siderolabs/talos/commit/8003536c7)
fix: restore previous disk serial fetching
-
[@&#8203;`03116ef`](https://redirect.github.com/siderolabs/talos/commit/03116ef9b)
chore: prepare for Talos 1.10
-
[@&#8203;`00682fd`](https://redirect.github.com/siderolabs/talos/commit/00682fdd6)
docs: activate 1.9 docs as default
-
[@&#8203;`bea05f5`](https://redirect.github.com/siderolabs/talos/commit/bea05f5c9)
docs: update deploying-cilium.md
-
[@&#8203;`284ab11`](https://redirect.github.com/siderolabs/talos/commit/284ab1179)
feat: support link altnames/aliases
-
[@&#8203;`5bfd829`](https://redirect.github.com/siderolabs/talos/commit/5bfd829bf)
docs: fix 'containter' typo
-
[@&#8203;`8d151b7`](https://redirect.github.com/siderolabs/talos/commit/8d151b771)
docs: clarify TALOSCONFIG for AWS
-
[@&#8203;`0ef1917`](https://redirect.github.com/siderolabs/talos/commit/0ef19171f)
fix: renovate typo
-
[@&#8203;`c568adc`](https://redirect.github.com/siderolabs/talos/commit/c568adc7d)
fix: renovate config
-
[@&#8203;`ec2e24f`](https://redirect.github.com/siderolabs/talos/commit/ec2e24fd9)
fix: match MAC addresses case-insensitive (nocloud)
-
[@&#8203;`41a0c44`](https://redirect.github.com/siderolabs/talos/commit/41a0c440a)
chore: rekres for renovate changes
-
[@&#8203;`a49bb9e`](https://redirect.github.com/siderolabs/talos/commit/a49bb9ee4)
feat: update Linux to 6.12.5
-
[@&#8203;`b15917e`](https://redirect.github.com/siderolabs/talos/commit/b15917ecc)
chore: add more debugging logs for META and volumes
-
[@&#8203;`2b1b326`](https://redirect.github.com/siderolabs/talos/commit/2b1b326f0)
docs: mention different paths for OpenEBS
-
[@&#8203;`9470e84`](https://redirect.github.com/siderolabs/talos/commit/9470e842f)
test: cleanup failed Kubernetes pods
-
[@&#8203;`c9c6851`](https://redirect.github.com/siderolabs/talos/commit/c9c685150)
fix: node identity flip
-
[@&#8203;`590c016`](https://redirect.github.com/siderolabs/talos/commit/590c01657)
feat: update containerd to v2.0.1
-
[@&#8203;`18fa5a2`](https://redirect.github.com/siderolabs/talos/commit/18fa5a258)
docs: update image-cache doc for iso
-
[@&#8203;`ab5bb68`](https://redirect.github.com/siderolabs/talos/commit/ab5bb6884)
fix: generate and serve registries with port
-
[@&#8203;`5823606`](https://redirect.github.com/siderolabs/talos/commit/58236066d)
fix: support image cache on VFAT USB stick
-
[@&#8203;`e193a50`](https://redirect.github.com/siderolabs/talos/commit/e193a5071)
fix: image cache integration test
-
[@&#8203;`08ee400`](https://redirect.github.com/siderolabs/talos/commit/08ee400fd)
test: fix flaky test NodeAddressSort
-
[@&#8203;`d45e8d1`](https://redirect.github.com/siderolabs/talos/commit/d45e8d1d1)
feat: update Kubernetes to 1.32.0
-
[@&#8203;`136b129`](https://redirect.github.com/siderolabs/talos/commit/136b12912)
chore: drop semicolon for supporting vfat filesystems
-
[@&#8203;`3e9e027`](https://redirect.github.com/siderolabs/talos/commit/3e9e027ef)
test: add an option to boot from an USB stick
-
[@&#8203;`ef8c3e3`](https://redirect.github.com/siderolabs/talos/commit/ef8c3e3b3)
docs: fix typo in multus.md
-
[@&#8203;`d54414a`](https://redirect.github.com/siderolabs/talos/commit/d54414add)
fix: authorization config gen
-
[@&#8203;`cce72cf`](https://redirect.github.com/siderolabs/talos/commit/cce72cfe8)
docs: replace deprecated Hetzner server plans
-
[@&#8203;`8180510`](https://redirect.github.com/siderolabs/talos/commit/81805103d)
chore: enable proper parallel usage of TestDepth
-
[@&#8203;`e1b824e`](https://redirect.github.com/siderolabs/talos/commit/e1b824eba)
docs: update ceph-with-rook.md
-
[@&#8203;`470b755`](https://redirect.github.com/siderolabs/talos/commit/470b75563)
fix: use mtu network option for podman
-
[@&#8203;`61b1489`](https://redirect.github.com/siderolabs/talos/commit/61b1489a0)
fix: order volume config by the requested size
-
[@&#8203;`bc3039a`](https://redirect.github.com/siderolabs/talos/commit/bc3039acd)
feat: update runc to 1.2.3
-
[@&#8203;`30016a0`](https://redirect.github.com/siderolabs/talos/commit/30016a0a8)
fix: avoid nil-pointer-panic in `RegistriesConfigController`
-
[@&#8203;`fe04571`](https://redirect.github.com/siderolabs/talos/commit/fe0457152)
fix: power on the machine on reboot request in qemu power api
-
[@&#8203;`10da553`](https://redirect.github.com/siderolabs/talos/commit/10da553ef)
docs: build what's new for 1.9
-
[@&#8203;`d946cca`](https://redirect.github.com/siderolabs/talos/commit/d946ccae3)
feat: update Linux to 6.12.4
-
[@&#8203;`707a77b`](https://redirect.github.com/siderolabs/talos/commit/707a77bf6)
test: fix user namespace test, TPM2 fixes
-
[@&#8203;`c3537b2`](https://redirect.github.com/siderolabs/talos/commit/c3537b2f5)
feat: update Linux to 6.12.3
-
[@&#8203;`cb4d9d6`](https://redirect.github.com/siderolabs/talos/commit/cb4d9d673)
docs: fix a few mistakes in release notes
-
[@&#8203;`c4724fc`](https://redirect.github.com/siderolabs/talos/commit/c4724fc97)
chore: add integration tests for image-cache
-
[@&#8203;`07220fe`](https://redirect.github.com/siderolabs/talos/commit/07220fe7f)
fix: install iptables-nft to the host
-
[@&#8203;`1484175`](https://redirect.github.com/siderolabs/talos/commit/14841750b)
chore: add version compatibility for Talos 1.10
-
[@&#8203;`852baf8`](https://redirect.github.com/siderolabs/talos/commit/852baf819)
feat: support vlan/bond in v1, vlan in v2 for nocloud
-
[@&#8203;`dd61ad8`](https://redirect.github.com/siderolabs/talos/commit/dd61ad861)
fix: lock provisioning order of user disk partitions
-
[@&#8203;`d0773ff`](https://redirect.github.com/siderolabs/talos/commit/d0773ff09)
chore: update Go to 1.23.4
-
[@&#8203;`7d65071`](https://redirect.github.com/siderolabs/talos/commit/7d6507189)
feat: implement new address sorting algorithm
-
[@&#8203;`9081506`](https://redirect.github.com/siderolabs/talos/commit/9081506d6)
feat: add process scheduling options
-
[@&#8203;`77e9db4`](https://redirect.github.com/siderolabs/talos/commit/77e9db4ab)
test: use two workers in qemu tests by default
-
[@&#8203;`5a4bdf6`](https://redirect.github.com/siderolabs/talos/commit/5a4bdf62a)
feat: update Kubernetes to 1.32.0-rc.1
-
[@&#8203;`d99bcc9`](https://redirect.github.com/siderolabs/talos/commit/d99bcc950)
chore: refactor mergeDNSServers func
-
[@&#8203;`0cde08d`](https://redirect.github.com/siderolabs/talos/commit/0cde08d8b)
docs: add Turing RK1 docs to Single Board Computer section

</p>
</details>

##### Changes since v1.10.0-alpha.1
<details><summary>59 commits</summary>
<p>

-
[@&#8203;`ab6cb3d`](https://redirect.github.com/siderolabs/talos/commit/ab6cb3dfa)
chore: disable azure upload
-
[@&#8203;`2355218`](https://redirect.github.com/siderolabs/talos/commit/2355218e4)
release(v1.10.0-alpha.2): prepare release
-
[@&#8203;`d4e3e95`](https://redirect.github.com/siderolabs/talos/commit/d4e3e957c)
fix(ci): fix integration tests
-
[@&#8203;`1849b53`](https://redirect.github.com/siderolabs/talos/commit/1849b5388)
feat: update dependencies
-
[@&#8203;`88fc6bb`](https://redirect.github.com/siderolabs/talos/commit/88fc6bbeb)
test: fix UKI preserving talos.config and image cache
-
[@&#8203;`ba8cd30`](https://redirect.github.com/siderolabs/talos/commit/ba8cd304d)
test: enable image-cache in the cron
-
[@&#8203;`28b5dc7`](https://redirect.github.com/siderolabs/talos/commit/28b5dc738)
test: fix reproduciblity test
-
[@&#8203;`5099803`](https://redirect.github.com/siderolabs/talos/commit/50998038b)
feat: prefer sd-boot for UEFI
-
[@&#8203;`e831e52`](https://redirect.github.com/siderolabs/talos/commit/e831e52e0)
feat: add support for qla2xx
-
[@&#8203;`ec5c049`](https://redirect.github.com/siderolabs/talos/commit/ec5c049a5)
feat: update Kubernetes to 1.33.0-alpha.2
-
[@&#8203;`ebfa82f`](https://redirect.github.com/siderolabs/talos/commit/ebfa82f35)
docs: update deprecated command
-
[@&#8203;`d79059a`](https://redirect.github.com/siderolabs/talos/commit/d79059a2c)
chore: fix shutdown typo in shutdown sequence
-
[@&#8203;`a3f88d2`](https://redirect.github.com/siderolabs/talos/commit/a3f88d2ef)
fix: block NodePort services with ingress firewall
-
[@&#8203;`fd8131c`](https://redirect.github.com/siderolabs/talos/commit/fd8131cb8)
feat: generate unified installer
-
[@&#8203;`ebfdb91`](https://redirect.github.com/siderolabs/talos/commit/ebfdb91b4)
fix: handle dynamic HTTP proxy settings for discovery client
-
[@&#8203;`d45eaeb`](https://redirect.github.com/siderolabs/talos/commit/d45eaeb74)
fix: correctly map link names/aliases when using VIP operator
-
[@&#8203;`7c4e47c`](https://redirect.github.com/siderolabs/talos/commit/7c4e47c0c)
chore: stop doing generate on each build
-
[@&#8203;`b1d410c`](https://redirect.github.com/siderolabs/talos/commit/b1d410cb6)
feat: dual boot disk image
-
[@&#8203;`468e318`](https://redirect.github.com/siderolabs/talos/commit/468e318ba)
fix: multiple fixes for dashboard/no data
-
[@&#8203;`3dd8d9a`](https://redirect.github.com/siderolabs/talos/commit/3dd8d9aed)
docs: update resetting-a-machine.md to include example of reset
-
[@&#8203;`7af8f6b`](https://redirect.github.com/siderolabs/talos/commit/7af8f6b2f)
feat: validate docker image references in upgrade options
-
[@&#8203;`c949f55`](https://redirect.github.com/siderolabs/talos/commit/c949f55e6)
docs: remove typo on resetting a machine page
-
[@&#8203;`f5c0970`](https://redirect.github.com/siderolabs/talos/commit/f5c097041)
feat: add description to schema object defs
-
[@&#8203;`79ee304`](https://redirect.github.com/siderolabs/talos/commit/79ee304e1)
chore: update enumer to a version that fixes Go 1.24 compatibility
-
[@&#8203;`46d67fe`](https://redirect.github.com/siderolabs/talos/commit/46d67fe44)
chore: update Go to 1.24, update pkgs
-
[@&#8203;`7f1dd26`](https://redirect.github.com/siderolabs/talos/commit/7f1dd2669)
fix(ci): fix integration-misc crons
-
[@&#8203;`26a773d`](https://redirect.github.com/siderolabs/talos/commit/26a773d3f)
docs: add a note about syslog sending messages to services
-
[@&#8203;`7ce0536`](https://redirect.github.com/siderolabs/talos/commit/7ce053638)
fix: ignore digest part of images when checking version
-
[@&#8203;`ae1b003`](https://redirect.github.com/siderolabs/talos/commit/ae1b00354)
feat: support noclooud instance-id from dmi
-
[@&#8203;`58661de`](https://redirect.github.com/siderolabs/talos/commit/58661dea7)
docs: update getting-started.md
-
[@&#8203;`94cf9fb`](https://redirect.github.com/siderolabs/talos/commit/94cf9fb84)
chore: fix spurious generate failures
-
[@&#8203;`32a3479`](https://redirect.github.com/siderolabs/talos/commit/32a34791e)
fix: typo in Makefile target talosctl-freebsd-arm64
-
[@&#8203;`1b4464c`](https://redirect.github.com/siderolabs/talos/commit/1b4464c8a)
feat: update Kubernetes to 1.32.2
-
[@&#8203;`9463ac2`](https://redirect.github.com/siderolabs/talos/commit/9463ac23e)
fix: make ingress firewall filter traffic to nodeports
-
[@&#8203;`8531d91`](https://redirect.github.com/siderolabs/talos/commit/8531d91a1)
fix: blockdevice transport detection
-
[@&#8203;`ce616d9`](https://redirect.github.com/siderolabs/talos/commit/ce616d93a)
fix: path for ca-certificates
-
[@&#8203;`f35b587`](https://redirect.github.com/siderolabs/talos/commit/f35b58779)
fix: fix diff printing
-
[@&#8203;`bf0f910`](https://redirect.github.com/siderolabs/talos/commit/bf0f910a1)
chore: provide more logging for dns requests
-
[@&#8203;`607998b`](https://redirect.github.com/siderolabs/talos/commit/607998ba2)
feat: support uki profiles via imager
-
[@&#8203;`711cf2d`](https://redirect.github.com/siderolabs/talos/commit/711cf2d99)
fix: ignore errors to stop pods
-
[@&#8203;`142d754`](https://redirect.github.com/siderolabs/talos/commit/142d75483)
fix: handle empty registry config
-
[@&#8203;`47f377b`](https://redirect.github.com/siderolabs/talos/commit/47f377b21)
feat: implement the last ethtool feature - channels
-
[@&#8203;`88cf69b`](https://redirect.github.com/siderolabs/talos/commit/88cf69b8c)
feat: multi profile UKIs
-
[@&#8203;`557faad`](https://redirect.github.com/siderolabs/talos/commit/557faad75)
feat: update Linux to 6.12.13
-
[@&#8203;`5dbf9e3`](https://redirect.github.com/siderolabs/talos/commit/5dbf9e350)
refactor: implement volume mount controller
-
[@&#8203;`aa11e9a`](https://redirect.github.com/siderolabs/talos/commit/aa11e9abb)
fix: make image cache volume management less strict
-
[@&#8203;`26a62e3`](https://redirect.github.com/siderolabs/talos/commit/26a62e342)
docs: fix typo in Wireguard docs
-
[@&#8203;`0419f5d`](https://redirect.github.com/siderolabs/talos/commit/0419f5d8b)
feat: implement features in `ethtool`-like support
-
[@&#8203;`cd66fc6`](https://redirect.github.com/siderolabs/talos/commit/cd66fc6e8)
feat: use bootstrapped packages for building Talos
-
[@&#8203;`2b5bd5d`](https://redirect.github.com/siderolabs/talos/commit/2b5bd5d1d)
chore: upgrade siderolabs/go-loadbalancer
-
[@&#8203;`15191aa`](https://redirect.github.com/siderolabs/talos/commit/15191aa3e)
fix: extract cmdline multi profile UKIs
-
[@&#8203;`716f700`](https://redirect.github.com/siderolabs/talos/commit/716f700da)
feat: provide initial support for ethtool configuration
-
[@&#8203;`b726e2f`](https://redirect.github.com/siderolabs/talos/commit/b726e2f9f)
feat: update Flannel to 0.26.4
-
[@&#8203;`98d56d4`](https://redirect.github.com/siderolabs/talos/commit/98d56d4d6)
chore: track opened grpc connections
-
[@&#8203;`5e28c8e`](https://redirect.github.com/siderolabs/talos/commit/5e28c8e03)
fix: image cache volume provisioning
-
[@&#8203;`c966781`](https://redirect.github.com/siderolabs/talos/commit/c9667813d)
chore: remove containerd importer
-
[@&#8203;`270ffb6`](https://redirect.github.com/siderolabs/talos/commit/270ffb69a)
fix: duplicate qemu drive ids
-
[@&#8203;`71ec41b`](https://redirect.github.com/siderolabs/talos/commit/71ec41be1)
fix: build of Talos on non-Linux host
-
[@&#8203;`e2aa7c9`](https://redirect.github.com/siderolabs/talos/commit/e2aa7c98c)
fix: installer with SecureBoot should contain UKIs

</p>
</details>

##### Changes from siderolabs/crypto
<details><summary>1 commit</summary>
<p>

-
[siderolabs/crypto@`0d45dee`](https://redirect.github.com/siderolabs/crypto/commit/0d45dee)
chore: bump deps

</p>
</details>

##### Changes from siderolabs/discovery-api
<details><summary>1 commit</summary>
<p>

-
[siderolabs/discovery-api@`64513a6`](https://redirect.github.com/siderolabs/discovery-api/commit/64513a6)
feat: rekres, regenerate proto files

</p>
</details>

##### Changes from siderolabs/discovery-client
<details><summary>1 commit</summary>
<p>

-
[siderolabs/discovery-client@`b3632c4`](https://redirect.github.com/siderolabs/discovery-client/commit/b3632c4)
feat: support extra dial options in the client

</p>
</details>

##### Changes from siderolabs/extras
<details><summary>6 commits</summary>
<p>

-
[siderolabs/extras@`4102a78`](https://redirect.github.com/siderolabs/extras/commit/4102a78)
feat: build hermetically using new bldr and pkgs
-
[siderolabs/extras@`f4a110f`](https://redirect.github.com/siderolabs/extras/commit/f4a110f)
fix: build tc-redirect-tap as static binary
-
[siderolabs/extras@`0840abb`](https://redirect.github.com/siderolabs/extras/commit/0840abb)
fix: pull in fixed CNI plugins from pkgs
-
[siderolabs/extras@`52c217f`](https://redirect.github.com/siderolabs/extras/commit/52c217f)
feat: update dependencies
-
[siderolabs/extras@`f755eb4`](https://redirect.github.com/siderolabs/extras/commit/f755eb4)
chore: rekres to simplify `.kres.yaml` defaults
-
[siderolabs/extras@`e5382fc`](https://redirect.github.com/siderolabs/extras/commit/e5382fc)
chore: kresify renovate

</p>
</details>

##### Changes from siderolabs/gen
<details><summary>1 commit</summary>
<p>

-
[siderolabs/gen@`5ae3afe`](https://redirect.github.com/siderolabs/gen/commit/5ae3afe)
chore: update hashtriemap implementation from the latest upstream

</p>
</details>

##### Changes from siderolabs/go-circular
<details><summary>2 commits</summary>
<p>

-
[siderolabs/go-circular@`015a398`](https://redirect.github.com/siderolabs/go-circular/commit/015a398)
fix: replace static buffer allocation on growth
-
[siderolabs/go-circular@`ed8685e`](https://redirect.github.com/siderolabs/go-circular/commit/ed8685e)
test: add more assertions for write length result

</p>
</details>

##### Changes from siderolabs/go-debug
<details><summary>1 commit</summary>
<p>

-
[siderolabs/go-debug@`ea108ca`](https://redirect.github.com/siderolabs/go-debug/commit/ea108ca)
chore: add support for Go 1.24

</p>
</details>

##### Changes from siderolabs/go-kubernetes
<details><summary>1 commit</summary>
<p>

-
[siderolabs/go-kubernetes@`804cb44`](https://redirect.github.com/siderolabs/go-kubernetes/commit/804cb44)
feat: add support for Kubernetes to 1.33

</p>
</details>

##### Changes from siderolabs/go-loadbalancer
<details><summary>1 commit</summary>
<p>

-
[siderolabs/go-loadbalancer@`589c33a`](https://redirect.github.com/siderolabs/go-loadbalancer/commit/589c33a)
chore: upgrade `upstream.List` and `loadbalancer.TCP` to Go 1.23

</p>
</details>

##### Changes from siderolabs/go-talos-support
<details><summary>1 commit</summary>
<p>

-
[siderolabs/go-talos-support@`0f784bd`](https://redirect.github.com/siderolabs/go-talos-support/commit/0f784bd)
fix: avoid deadlock on context cancel

</p>
</details>

##### Changes from siderolabs/pkgs
<details><summary>50 commits</summary>
<p>

-
[siderolabs/pkgs@`347ad26`](https://redirect.github.com/siderolabs/pkgs/commit/347ad26)
feat: update Linux 6.12.17, containerd 2.0.3
-
[siderolabs/pkgs@`40241af`](https://redirect.github.com/siderolabs/pkgs/commit/40241af)
feat: enable qla2xxx module
-
[siderolabs/pkgs@`6fb00b4`](https://redirect.github.com/siderolabs/pkgs/commit/6fb00b4)
fix: pull in kmod from tools
-
[siderolabs/pkgs@`cc5317a`](https://redirect.github.com/siderolabs/pkgs/commit/cc5317a)
fix: patch Linux with blackhole patch
-
[siderolabs/pkgs@`08389dd`](https://redirect.github.com/siderolabs/pkgs/commit/08389dd)
chore: support vmdk and cp format for qemu-img
-
[siderolabs/pkgs@`7774b08`](https://redirect.github.com/siderolabs/pkgs/commit/7774b08)
feat: update Linux to 6.12.16, validate package structure
-
[siderolabs/pkgs@`40d288c`](https://redirect.github.com/siderolabs/pkgs/commit/40d288c)
fix: imager deps
-
[siderolabs/pkgs@`351a1a1`](https://redirect.github.com/siderolabs/pkgs/commit/351a1a1)
feat: add tools needed for imager
-
[siderolabs/pkgs@`80351ca`](https://redirect.github.com/siderolabs/pkgs/commit/80351ca)
fix: reproducibility tests
-
[siderolabs/pkgs@`e1f11f0`](https://redirect.github.com/siderolabs/pkgs/commit/e1f11f0)
fix: remove patches and other files from copy-only packages
-
[siderolabs/pkgs@`8fff06b`](https://redirect.github.com/siderolabs/pkgs/commit/8fff06b)
chore: bump xfsprogs to 6.12.0
-
[siderolabs/pkgs@`76a0316`](https://redirect.github.com/siderolabs/pkgs/commit/76a0316)
chore: systemd 257.3, runc 1.2.5, ipxe
-
[siderolabs/pkgs@`359807b`](https://redirect.github.com/siderolabs/pkgs/commit/359807b)
feat: copy built packages, improve hermetic build
-
[siderolabs/pkgs@`117a1d6`](https://redirect.github.com/siderolabs/pkgs/commit/117a1d6)
feat: update Linux to 6.12.13
-
[siderolabs/pkgs@`85f8901`](https://redirect.github.com/siderolabs/pkgs/commit/85f8901)
feat: make pkgs build bootstrapped
-
[siderolabs/pkgs@`5763e3e`](https://redirect.github.com/siderolabs/pkgs/commit/5763e3e)
feat: update systemd to 257.2
-
[siderolabs/pkgs@`1e24b31`](https://redirect.github.com/siderolabs/pkgs/commit/1e24b31)
feat: update Linux to 6.12.11
-
[siderolabs/pkgs@`38749d1`](https://redirect.github.com/siderolabs/pkgs/commit/38749d1)
fix: build CNI plugins statically linked
-
[siderolabs/pkgs@`5da83db`](https://redirect.github.com/siderolabs/pkgs/commit/5da83db)
feat: bump NVIDIA driver versions
-
[siderolabs/pkgs@`5934363`](https://redirect.github.com/siderolabs/pkgs/commit/5934363)
fix: certificates CA
-
[siderolabs/pkgs@`57f492d`](https://redirect.github.com/siderolabs/pkgs/commit/57f492d)
feat: bump dependencies
-
[siderolabs/pkgs@`45b9ebe`](https://redirect.github.com/siderolabs/pkgs/commit/45b9ebe)
feat: update Linux to 6.2.10
-
[siderolabs/pkgs@`e00ad67`](https://redirect.github.com/siderolabs/pkgs/commit/e00ad67)
chore: rekres to fix reproducibility build
-
[siderolabs/pkgs@`cfb4b0a`](https://redirect.github.com/siderolabs/pkgs/commit/cfb4b0a)
feat: update Go to 1.23.5
-
[siderolabs/pkgs@`72f19a2`](https://redirect.github.com/siderolabs/pkgs/commit/72f19a2)
feat: update containerd to v2.0.2
-
[siderolabs/pkgs@`17a80ee`](https://redirect.github.com/siderolabs/pkgs/commit/17a80ee)
feat: update Linux to 6.12.9
-
[siderolabs/pkgs@`c9d718d`](https://redirect.github.com/siderolabs/pkgs/commit/c9d718d)
fix: adjust kernel options around ACPI/PCI/EFI
-
[siderolabs/pkgs@`eb9d566`](https://redirect.github.com/siderolabs/pkgs/commit/eb9d566)
feat: update Linux to 6.12.8
-
[siderolabs/pkgs@`73e4353`](https://redirect.github.com/siderolabs/pkgs/commit/73e4353)
fix: update config-arm64 to add Rasperry Pi watchdog support
-
[siderolabs/pkgs@`0ab2427`](https://redirect.github.com/siderolabs/pkgs/commit/0ab2427)
fix: dvb was missing I2C_MUX support and si2168 driver
-
[siderolabs/pkgs@`c3ac8e2`](https://redirect.github.com/siderolabs/pkgs/commit/c3ac8e2)
chore: drop unused cert copy
-
[siderolabs/pkgs@`e7eddcf`](https://redirect.github.com/siderolabs/pkgs/commit/e7eddcf)
feat: bump dependencies
-
[siderolabs/pkgs@`0b00e86`](https://redirect.github.com/siderolabs/pkgs/commit/0b00e86)
fix: patch containerd with CNI deadlock fix
-
[siderolabs/pkgs@`9051c9a`](https://redirect.github.com/siderolabs/pkgs/commit/9051c9a)
feat: update Linux to 6.12.6
-
[siderolabs/pkgs@`6695012`](https://redirect.github.com/siderolabs/pkgs/commit/6695012)
chore: rekres to simplify `.kres.yaml` defaults
-
[siderolabs/pkgs@`611ca38`](https://redirect.github.com/siderolabs/pkgs/commit/611ca38)
chore: rekres to bring renovate under kres
-
[siderolabs/pkgs@`a4c4215`](https://redirect.github.com/siderolabs/pkgs/commit/a4c4215)
fix: drop cgroupsv1 controllers
-
[siderolabs/pkgs@`28c909d`](https://redirect.github.com/siderolabs/pkgs/commit/28c909d)
feat: update Linux firmware to
[`2024121`](https://redirect.github.com/siderolabs/talos/commit/20241210)
-
[siderolabs/pkgs@`c40a9e9`](https://redirect.github.com/siderolabs/pkgs/commit/c40a9e9)
feat: update Linux to 6.12.5
-
[siderolabs/pkgs@`d54ca83`](https://redirect.github.com/siderolabs/pkgs/commit/d54ca83)
feat: update containerd to v2.0.1
-
[siderolabs/pkgs@`86e3755`](https://redirect.github.com/siderolabs/pkgs/commit/86e3755)
fix: add CONFIG_INTEL_MEI_GSC_PROXY as module
-
[siderolabs/pkgs@`8c31321`](https://redirect.github.com/siderolabs/pkgs/commit/8c31321)
feat: update ZFS to 2.2.7
-
[siderolabs/pkgs@`605f493`](https://redirect.github.com/siderolabs/pkgs/commit/605f493)
feat: update runc to v1.2.3
-
[siderolabs/pkgs@`1a55529`](https://redirect.github.com/siderolabs/pkgs/commit/1a55529)
feat: update Linux to 6.12.4
-
[siderolabs/pkgs@`52ba9a5`](https://redirect.github.com/siderolabs/pkgs/commit/52ba9a5)
feat: update Linux 6.12.3
-
[siderolabs/pkgs@`9cf35be`](https://redirect.github.com/siderolabs/pkgs/commit/9cf35be)
feat: build host iptables with nftables support
-
[siderolabs/pkgs@`71003a3`](https://redirect.github.com/siderolabs/pkgs/commit/71003a3)
feat: update Go to 1.23.4
-
[siderolabs/pkgs@`5b4d402`](https://redirect.github.com/siderolabs/pkgs/commit/5b4d402)
feat: build dvb kernel modules and CX23885
-
[siderolabs/pkgs@`b330af9`](https://redirect.github.com/siderolabs/pkgs/commit/b330af9)
chore: bring in KSPP recommendations
-
[siderolabs/pkgs@`f81b190`](https://redirect.github.com/siderolabs/pkgs/commit/f81b190)
feat: kernel driver support for RK3588 devices (Turing RK1)

</p>
</details>

##### Changes from siderolabs/proto-codec
<details><summary>1 commit</summary>
<p>

-
[siderolabs/proto-codec@`3235c29`](https://redirect.github.com/siderolabs/proto-codec/commit/3235c29)
chore: bump deps

</p>
</details>

##### Changes from siderolabs/siderolink
<details><summary>1 commit</summary>
<p>

-
[siderolabs/siderolink@`38e459e`](https://redirect.github.com/siderolabs/siderolink/commit/38e459e)
chore: bump deps

</p>
</details>

##### Changes from siderolabs/tools
<details><summary>19 commits</summary>
<p>

-
[siderolabs/tools@`fcee25b`](https://redirect.github.com/siderolabs/tools/commit/fcee25b)
fix: revert kmod to 33
-
[siderolabs/tools@`6a71711`](https://redirect.github.com/siderolabs/tools/commit/6a71711)
fix: do not install man and locale for exported packages
-
[siderolabs/tools@`3389ba2`](https://redirect.github.com/siderolabs/tools/commit/3389ba2)
chore: move zlib to be an external package
-
[siderolabs/tools@`d93b780`](https://redirect.github.com/siderolabs/tools/commit/d93b780)
chore: expose more tools
-
[siderolabs/tools@`46be459`](https://redirect.github.com/siderolabs/tools/commit/46be459)
chore: remove systemd version
-
[siderolabs/tools@`f33fbe4`](https://redirect.github.com/siderolabs/tools/commit/f33fbe4)
fix: install policycoreutils under correct prefix
-
[siderolabs/tools@`758d61c`](https://redirect.github.com/siderolabs/tools/commit/758d61c)
chore: update dependencies
-
[siderolabs/tools@`f398a04`](https://redirect.github.com/siderolabs/tools/commit/f398a04)
chore: update dependencies, hermetic build
-
[siderolabs/tools@`9db33dd`](https://redirect.github.com/siderolabs/tools/commit/9db33dd)
feat: update to Go 1.23.6
-
[siderolabs/tools@`ef0a679`](https://redirect.github.com/siderolabs/tools/commit/ef0a679)
fix: do not install anything to /usr/lib64
-
[siderolabs/tools@`35748ea`](https://redirect.github.com/siderolabs/tools/commit/35748ea)
feat: fully bootstrapped build
-
[siderolabs/tools@`7200845`](https://redirect.github.com/siderolabs/tools/commit/7200845)
feat: update dependencies
-
[siderolabs/tools@`bc30a2a`](https://redirect.github.com/siderolabs/tools/commit/bc30a2a)
feat: update Go to 1.23.5
-
[siderolabs/tools@`533b595`](https://redirect.github.com/siderolabs/tools/commit/533b595)
chore: rekres to fix reproducibility
-
[siderolabs/tools@`01568a5`](https://redirect.github.com/siderolabs/tools/commit/01568a5)
chore: use Make and Go from the toolchain image
-
[siderolabs/tools@`0393558`](https://redirect.github.com/siderolabs/tools/commit/0393558)
feat: bump dependencies
-
[siderolabs/tools@`7811a5f`](https://redirect.github.com/siderolabs/tools/commit/7811a5f)
chore: rekres to simplify `.kres.yaml` defaults
-
[siderolabs/tools@`0b8b905`](https://redirect.github.com/siderolabs/tools/commit/0b8b905)
chore: kresify renovate config
-
[siderolabs/tools@`fe34fb3`](https://redirect.github.com/siderolabs/tools/commit/fe34fb3)
feat: update Go to 1.23.4

</p>
</details>

##### Dependency Changes

- **cloud.google.com/go/compute/metadata** v0.5.2 -> v0.6.0
- **github.com/Azure/azure-sdk-for-go/sdk/azcore** v1.16.0 -> v1.17.0
- **github.com/Azure/azure-sdk-for-go/sdk/azidentity** v1.8.0 -> v1.8.2
-
**github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azcertificates**
v1.3.0 -> v1.3.1
- **github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys**
v1.3.0 -> v1.3.1
- **github.com/aws/aws-sdk-go-v2/config** v1.28.5 -> v1.29.8
- **github.com/aws/aws-sdk-go-v2/feature/ec2/imds** v1.16.20 -> v1.16.30
- **github.com/aws/aws-sdk-go-v2/service/kms** v1.37.6 -> v1.38.0
- **github.com/aws/smithy-go** v1.22.1 -> v1.22.3
- **github.com/containerd/cgroups/v3** v3.0.4 -> v3.0.5
- **github.com/containerd/containerd/v2** v2.0.1 -> v2.0.3
- **github.com/containerd/platforms** v1.0.0-rc.0 -> v1.0.0-rc.1
- **github.com/containernetworking/plugins** v1.6.0 -> v1.6.2
- **github.com/cosi-project/runtime** v0.7.6 -> v0.10.0
- **github.com/docker/cli** v27.3.1 -> v28.0.1
- **github.com/docker/docker** v27.3.1 -> v28.0.1
- **github.com/foxboron/go-uefi**
[`fab4fdf`](https://redirect.github.com/siderolabs/talos/commit/fab4fdf2f2f3)
->
[`69fb7db`](https://redirect.github.com/siderolabs/talos/commit/69fb7dba244f)
- **github.com/gdamore/tcell/v2** v2.7.4 -> v2.8.1
- **github.com/google/cel-go** v0.22.1 -> v0.24.1
- **github.com/google/go-containerregistry** v0.20.2 -> v0.20.3
- **github.com/google/go-tpm** v0.9.1 -> v0.9.3
- **github.com/google/nftables** v0.2.0 -> v0.3.0
- **github.com/grpc-ecosystem/go-grpc-middleware/v2** v2.1.0 -> v2.3.0
- **github.com/hetznercloud/hcloud-go/v2** v2.17.0 -> v2.19.1
- **github.com/insomniacslk/dhcp**
[`a3a4c1f`](https://redirect.github.com/siderolabs/talos/commit/a3a4c1f04475)
->
[`8abf581`](https://redirect.github.com/siderolabs/talos/commit/8abf58130905)
- **github.com/klauspost/compress** v1.17.11 -> v1.18.0
- **github.com/klauspost/cpuid/v2** v2.2.9 -> v2.2.10
- **github.com/mdlayher/netlink** v1.7.2 ->
[`fbb4dce`](https://redirect.github.com/siderolabs/talos/commit/fbb4dce95f42)
- **github.com/miekg/dns** v1.1.62 -> v1.1.63
- **github.com/opencontainers/runc** v1.2.2 -> v1.2.5
- **github.com/opencontainers/runtime-spec** v1.2.0 -> v1.2.1
- **github.com/rivo/tview**
[`c76f787`](https://redirect.github.com/siderolabs/talos/commit/c76f7879f592)
->
[`17b7edb`](https://redirect.github.com/siderolabs/talos/commit/17b7edb88c57)
- **github.com/safchain/ethtool** v0.5.9 -> v0.5.10
- **github.com/scaleway/scaleway-sdk-go** v1.0.0-beta.30 ->
v1.0.0-beta.32
- **github.com/siderolabs/crypto** v0.5.0 -> v0.5.1
- **github.com/siderolabs/discovery-api** v0.1.5 -> v0.1.6
- **github.com/siderolabs/discovery-client** v0.1.10 -> v0.1.11
- **github.com/siderolabs/extras** v1.9.0 -> v1.10.0-alpha.0-3-g4102a78
- **github.com/siderolabs/gen** v0.7.0 -> v0.8.0
- **github.com/siderolabs/go-blockdevice/v2** v2.0.7 -> v2.0.16
- **github.com/siderolabs/go-circular** v0.2.1 -> v0.2.2
- **github.com/siderolabs/go-debug** v0.4.0 -> v0.5.0
- **github.com/siderolabs/go-kubernetes** v0.2.17 -> v0.2.18
-   **github.com/siderolabs/go-loadbalancer**

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xODUuMSIsInVwZGF0ZWRJblZlciI6IjM5LjE4NS4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2025-03-05 13:10:16 +01:00
TrueCharts Bot ab546a6040 chore(flux): update helm release longhorn 1.8.0 → 1.8.1 (clustertool) (#32873)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [longhorn](https://redirect.github.com/longhorn/longhorn)
([source](https://redirect.github.com/longhorn/charts)) | patch |
`1.8.0` -> `1.8.1` |

---

### Release Notes

<details>
<summary>longhorn/charts (longhorn)</summary>

###
[`v1.8.1`](https://redirect.github.com/longhorn/charts/releases/tag/longhorn-1.8.1)

[Compare
Source](https://redirect.github.com/longhorn/charts/compare/longhorn-1.8.0...longhorn-1.8.1)

Longhorn is a distributed block storage system for Kubernetes.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xODUuMSIsInVwZGF0ZWRJblZlciI6IjM5LjE4NS4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2025-03-05 13:10:04 +01:00
TrueCharts Bot f293cd24ad chore(flux): update image app-template 3.7.1 → 3.7.2 (clustertool) (#32861)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [app-template](https://redirect.github.com/bjw-s/helm-charts) | patch
| `3.7.1` -> `3.7.2` |

---

### Release Notes

<details>
<summary>bjw-s/helm-charts (app-template)</summary>

###
[`v3.7.2`](https://redirect.github.com/bjw-s/helm-charts/compare/app-template-3.7.1...app-template-3.7.2)

[Compare
Source](https://redirect.github.com/bjw-s/helm-charts/compare/app-template-3.7.1...app-template-3.7.2)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xODUuMSIsInVwZGF0ZWRJblZlciI6IjM5LjE4NS4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2025-03-04 19:09:10 +01:00
TrueCharts Bot f5e7668d57 chore(flux): update image volsync 2.9.0 → 2.10.0 (clustertool) (#32853) 2025-03-04 01:18:49 +01:00
TrueCharts Bot 774636792f chore(flux): update image prometheus-operator 11.4.0 → 11.4.1 (clustertool) (#32852)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[prometheus-operator](https://truecharts.org/charts/system/prometheus-operator)
([source](https://redirect.github.com/prometheus-operator)) | patch |
`11.4.0` -> `11.4.1` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xODUuMSIsInVwZGF0ZWRJblZlciI6IjM5LjE4NS4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2025-03-04 01:18:42 +01:00
TrueCharts Bot 63242df4b7 chore(flux): update image prometheus-operator 11.3.0 → 11.4.0 (clustertool) (#32831)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[prometheus-operator](https://truecharts.org/charts/system/prometheus-operator)
([source](https://redirect.github.com/prometheus-operator)) | minor |
`11.3.0` -> `11.4.0` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xODIuNCIsInVwZGF0ZWRJblZlciI6IjM5LjE4Mi40IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->

Signed-off-by: Alfred Göppel <43101280+alfi0812@users.noreply.github.com>
Co-authored-by: Alfred Göppel <43101280+alfi0812@users.noreply.github.com>
2025-03-03 21:29:12 +00:00
TrueCharts Bot 29a787dbf9 chore(flux): update image prometheus-operator 11.3.0 → 11.3.1 (clustertool) (#32827)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[prometheus-operator](https://truecharts.org/charts/system/prometheus-operator)
([source](https://redirect.github.com/prometheus-operator)) | patch |
`11.3.0` -> `11.3.1` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xODIuNCIsInVwZGF0ZWRJblZlciI6IjM5LjE4Mi40IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2025-03-03 19:11:57 +01:00
TrueCharts Bot bcc5207a98 chore(flux): update image clusterissuer 9.5.3 → 9.6.0 (clustertool) (#32721) 2025-02-28 19:29:25 +01:00
TrueCharts Bot cc24a226c2 chore(flux): update image prometheus-operator 11.2.1 → 11.3.0 (clustertool) (#32722)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[prometheus-operator](https://truecharts.org/charts/system/prometheus-operator)
([source](https://redirect.github.com/prometheus-operator)) | minor |
`11.2.1` -> `11.3.0` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xODIuNCIsInVwZGF0ZWRJblZlciI6IjM5LjE4Mi40IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
2025-02-28 19:29:18 +01:00
Elyra 6b870cbc95 feat(clusterissuer) Add webhook issuer (#32690)
**Description**

Add support for webhook issuer.
https://cert-manager.io/docs/configuration/acme/dns01/webhook/

⚒️ Fixes  # <!--(issue)-->

**⚙️ Type of change**

- [x] ⚙️ Feature/App addition
- [ ] 🪛 Bugfix
- [ ] ⚠️ Breaking change (fix or feature that would cause existing
functionality to not work as expected)
- [ ] 🔃 Refactor of current code
- [ ] 📜 Documentation Changes

**🧪 How Has This Been Tested?**
`helm template` created the desired result.

**📃 Notes:**
<!-- Please enter any other relevant information here -->

**✔️ Checklist:**

- [ ] ⚖️ My code follows the style guidelines of this project
- [x] 👀 I have performed a self-review of my own code
- [ ] #️⃣ I have commented my code, particularly in hard-to-understand
areas
- [ ] 📄 I have made changes to the documentation
- [ ] 🧪 I have added tests to this description that prove my fix is
effective or that my feature works
- [ ] ⬆️ I increased versions for any altered app according to semantic
versioning
- [x] I made sure the title starts with `feat(chart-name):`,
`fix(chart-name):`, `chore(chart-name):`, `docs(chart-name):` or
`fix(docs):`

** App addition**

If this PR is an app addition please make sure you have done the
following.

- [ ] 🖼️ I have added an icon in the Chart's root directory called
`icon.png`

---

_Please don't blindly check all the boxes. Read them and only check
those that apply.
Those checkboxes are there for the reviewer to see what is this all
about and
the status of this PR with a quick glance._

---------

Signed-off-by: Elyra <Elyra@users.noreply.github.com>
2025-02-28 17:18:02 +01:00
TrueCharts Bot f4ab6973bf chore(flux): update image metallb-config 8.5.2 → 8.5.3 (clustertool) (#32699) 2025-02-28 13:17:23 +01:00
TrueCharts Bot 925de72aad chore(flux): update image clusterissuer 9.5.2 → 9.5.3 (clustertool) (#32697)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [clusterissuer](https://truecharts.org/charts/premium/clusterissuer)
([source](https://cert-manager.io/)) | patch | `9.5.2` -> `9.5.3` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNzkuMSIsInVwZGF0ZWRJblZlciI6IjM5LjE3OS4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2025-02-28 13:16:40 +01:00