This release updates Kubernetes to v1.36.5, and fixes a number of issues. For more details on what's new, see the Kubernetes release notes. Changes since v1.36.4+k3s1: Bump rancher/mirrored-coredns-coredns image version (#14534) Bump gateway-api and traefik image versions for K3s 1.36 (#14567) Bump Traefik image to 3.7.12 and gateway-api to 1.6.1 Bump Traefik to v3.7.13 (#14610) Bump google.golang…
This release updates Kubernetes to v1.37.1, and fixes a number of issues. For more details on what's new, see the Kubernetes release notes. Changes since v1.37.0+k3s1: Backports for 2026-09 (#14631) Fix restore from compressed etcd snapshot #14528 Enable seccomp in riscv64 builds #14529 Use ginkgo CLI to run tests #14531 Bump k3s-io/api to v0.2.0 #14570 Servicelb multiple lbpools #14547 Close mini…
WarningThis release upgrades Traefik chart to v40.x which includes a breaking change for the ingress-nginx migration: the provider name changes from kubernetesIngressNginx to kubernetesIngressNGINX. Check https://github.com/traefik/traefik-helm-chart/releases/tag/v40.0.0 for more details This release updates Kubernetes to v1.35.9, and fixes a number of issues. For more details on what's new, see t…
WarningThis release upgrades Traefik chart to v40.x which includes a breaking change for the ingress-nginx migration: the provider name changes from kubernetesIngressNginx to kubernetesIngressNGINX. Check https://github.com/traefik/traefik-helm-chart/releases/tag/v40.0.0 for more details This release updates Kubernetes to v1.34.12, and fixes a number of issues. For more details on what's new, see…
What's Changed [Release-1.37] Reject anonymous access to supervisor router (spegel/pprof/metrics) by @dereknola in #14701 [Release-1.37] Improve CA hash validation by @dereknola in #14705 Full Changelog: v1.37.1-rc1+k3s1...v1.37.1-rc2+k3s1
What's Changed [Release-1.36] Reject anonymous access to supervisor router (spegel/pprof/metrics) by @dereknola in #14702 [Release-1.36] Improve CA hash validation by @dereknola in #14706 Full Changelog: v1.36.5-rc1+k3s1...v1.36.5-rc2+k3s1
What's Changed [Release-1.35] Reject anonymous access to supervisor router (spegel/pprof/metrics) by @dereknola in #14703 [Release-1.35] Improve CA hash validation by @dereknola in #14707 Full Changelog: v1.35.9-rc1+k3s1...v1.35.9-rc2+k3s1
What's Changed [Release-1.34] Improve CA hash validation by @dereknola in #14708 [Release-1.34] Reject anonymous access to supervisor router (spegel/pprof/metrics) by @dereknola in #14704 Full Changelog: v1.34.12-rc1+k3s1...v1.34.12-rc2+k3s1
What's Changed [release-1.37] Backports for 2026-09 by @brandond in #14631 [release-1.37] Bump helm-controller by @brandond in #14684 [release-1.37] Bump k3s-io/kubernetes and Go references by @github-actions[bot] in #14695 [Release-1.37] bump cadvisor to v0.60.5-k3s1 by @vitorsavian in #14698 Full Changelog: v1.37.0+k3s1...v1.37.1-rc1+k3s1
What's Changed [release-1.36] Bump rancher/mirrored-coredns-coredns image version by @github-actions[bot] in #14534 Bump gateway-api and traefik image versions for K3s 1.36 by @manuelbuil in #14567 [Release 1.36] Bump Traefik to v3.7.13 by @manuelbuil in #14610 [release-1.36] Bump google.golang.org/grpc to v1.83.2 for CVE-2026-84445 by @brandond in #14620 [release-1.36] Backports for 2026-09 by @b…
What's Changed [release-1.35] Bump rancher/mirrored-coredns-coredns image version by @github-actions[bot] in #14533 [Release 1.35] Bump gateway-api and traefik image versions by @manuelbuil in #14584 [Release 1.35] Bump Traefik to v3.7.13 by @manuelbuil in #14611 [release-1.35] Bump google.golang.org/grpc to v1.83.2 for CVE-2026-84445 by @brandond in #14621 [release-1.35] Backports for 2026-09 by…
What's Changed [release-1.34] Bump rancher/mirrored-coredns-coredns image version by @github-actions[bot] in #14532 [Release 1.34] Bump gateway-api and traefik image versions by @manuelbuil in #14585 [Release 1.34] Bump Traefik to v3.7.13 by @manuelbuil in #14612 [release-1.34] Bump google.golang.org/grpc to v1.83.2 for CVE-2026-84445 by @brandond in #14622 [release-1.34] Backports for 2026-09 by…
This release updates Kubernetes to v1.37.0, and fixes a number of issues. For more details on what's new, see the Kubernetes release notes. Changes since v1.36.3+k3s1: Bump mirrored-pause to 3.10.2 (#14339) Build(deps): bump the action-deps group with 14 updates (#14394) Bump dynamiclistener for atomic write fix (#14382) Bump helm-controller/klipper-helm (#14403) Simplify WriteSubnetFile cleanup a…
What's Changed [release-1.37] Bump google.golang.org/grpc to v1.83.2 for CVE-2026-84445 by @brandond in #14614 [release-1.37] Bump google.golang.org/grpc to v1.83.2, not v1.82.2 by @brandond in #14619 Full Changelog: v1.37.0-rc4+k3s1...v1.37.0-rc5+k3s1
What's Changed [Release 1.37] Bump Traefik to v3.7.13 by @manuelbuil in #14606 Full Changelog: v1.37.0-rc3+k3s1...v1.37.0-rc4+k3s1
What's Changed [Release 1.37] Bump gateway-api-crd version 3, which includes the keep annotation by @manuelbuil in #14586 Full Changelog: v1.37.0-rc2+k3s1...v1.37.0-rc3+k3s1
What's Changed [release-1.37] Bump rancher/mirrored-coredns-coredns image version by @github-actions[bot] in #14577 [Release-1.37] Bump critools to v1.37 by @vitorsavian in #14579 Full Changelog: v1.37.0-rc1+k3s1...v1.37.0-rc2+k3s1
What's Changed Expand docker upgrade test, sunset E2E upgrade test by @dereknola in #13338 Add firewall section to check-config.sh by @dereknola in #13234 Update golangci-lint and re-enable CI linting step by @brandond in #13343 Fix PR lint checkout depth by @brandond in #13369 Update stable channel to v1.34.3+k3s1 by @rafaelbreno in #13374 Bump actions/download-artifact from 6 to 7 by @dependabot…
WarningThis release upgrades Traefik chart to v40.x which includes a breaking change for the ingress-nginx migration: the provider name changes from kubernetesIngressNginx to kubernetesIngressNGINX. Check https://github.com/traefik/traefik-helm-chart/releases/tag/v40.0.0 for more details This release updates Kubernetes to v1.34.11, and fixes a number of issues. For more details on what's new, see…
WarningThis release upgrades Traefik chart to v40.x which includes a breaking change for the ingress-nginx migration: the provider name changes from kubernetesIngressNginx to kubernetesIngressNGINX. Check https://github.com/traefik/traefik-helm-chart/releases/tag/v40.0.0 for more details This release updates Kubernetes to v1.35.8, and fixes a number of issues. For more details on what's new, see t…
WarningThis release upgrades Traefik chart to v40.x which includes a breaking change for the ingress-nginx migration: the provider name changes from kubernetesIngressNginx to kubernetesIngressNGINX. Check https://github.com/traefik/traefik-helm-chart/releases/tag/v40.0.0 for more details This release updates Kubernetes to v1.36.4, and fixes a number of issues. For more details on what's new, see t…
What's Changed [Release-1.36] Backport tests changes by @vitorsavian in #14517 [release-1.36] Bump Local Path Provisioner version by @github-actions[bot] in #14498 [Release-1.36] Bump containerd to v2.3.4-k3s1.36 by @vitorsavian in #14512 [release-1.36] Backports for 2026-08 by @brandond in #14522 [release-1.36] Update to v1.36.4-k3s1 and Go 1.26.7 by @rafaelbreno in #14545 Full Changelog: v1.36.3…
What's Changed [Release-1.34] Backport tests changes by @vitorsavian in #14519 [release-1.34] Bump Local Path Provisioner version by @github-actions[bot] in #14494 [Release-1.34] Bump containerd to v2.2.7-k3s1 by @vitorsavian in #14520 [release-1.34] Backports for 2026-08 by @brandond in #14524 [release-1.34] Update to v1.34.11-k3s1 and Go 1.26.7 by @rafaelbreno in #14543 Full Changelog: v1.34.10+…
What's Changed [Release-1.35] Backport tests changes by @vitorsavian in #14518 [release-1.35] Bump Local Path Provisioner version by @github-actions[bot] in #14497 [Release-1.35] Bump containerd to v2.2.7-k3s1 by @vitorsavian in #14513 [release-1.35] Backports for 2026-08 by @brandond in #14523 [release-1.35] Update to v1.35.8-k3s1 and Go 1.26.7 by @rafaelbreno in #14544 Full Changelog: v1.35.7+k3…
WarningThis release upgrades Traefik chart to v40.x which includes a breaking change for the ingress-nginx migration: the provider name changes from kubernetesIngressNginx to kubernetesIngressNGINX. Check https://github.com/traefik/traefik-helm-chart/releases/tag/v40.0.0 for more details This release updates Kubernetes to v1.33.13, and fixes a number of issues. For more details on what's new, see…
WarningThis release upgrades Traefik chart to v40.x which includes a breaking change for the ingress-nginx migration: the provider name changes from kubernetesIngressNginx to kubernetesIngressNGINX. Check https://github.com/traefik/traefik-helm-chart/releases/tag/v40.0.0 for more details This release updates Kubernetes to v1.34.10, and fixes a number of issues. For more details on what's new, see…
WarningThis release upgrades Traefik chart to v40.x which includes a breaking change for the ingress-nginx migration: the provider name changes from kubernetesIngressNginx to kubernetesIngressNGINX. Check https://github.com/traefik/traefik-helm-chart/releases/tag/v40.0.0 for more details This release updates Kubernetes to v1.35.7, and fixes a number of issues. For more details on what's new, see t…
WarningThis release upgrades Traefik chart to v40.x which includes a breaking change for the ingress-nginx migration: the provider name changes from kubernetesIngressNginx to kubernetesIngressNGINX. Check https://github.com/traefik/traefik-helm-chart/releases/tag/v40.0.0 for more details This release updates Kubernetes to v1.36.3, and fixes a number of issues. For more details on what's new, see t…
What's Changed [Release-1.33] Fix production builds always enabling Go coverage instrumentation by @mgfritch in #14469 [release-1.33] Bump helm-controller and klipper-helm by @brandond in #14478 Full Changelog: v1.33.13-rc1+k3s2...v1.33.13-rc2+k3s2
What's Changed [Release-1.35] Fix production builds always enabling Go coverage instrumentation by @mgfritch in #14467 [release-1.35] Bump helm-controller and klipper-helm by @brandond in #14476 Full Changelog: v1.35.7-rc1+k3s1...v1.35.7-rc2+k3s1