WarningThis release upgrades Traefik chart to v40.x which includes a breaking change for the ingress-nginx migration: the provider name changes from kubernetesIngressNginx to kubernetesIngressNGINX. Check https://github.com/traefik/traefik-helm-chart/releases/tag/v40.0.0 for more details This release updates Kubernetes to v1.34.13, and fixes a number of issues. For more details on what's new, see…
WarningThis release upgrades Traefik chart to v40.x which includes a breaking change for the ingress-nginx migration: the provider name changes from kubernetesIngressNginx to kubernetesIngressNGINX. Check https://github.com/traefik/traefik-helm-chart/releases/tag/v40.0.0 for more details This release updates Kubernetes to v1.35.10, and fixes a number of issues. For more details on what's new, see…
This release updates Kubernetes to v1.36.6, and fixes a number of issues. For more details on what's new, see the Kubernetes release notes. Changes since v1.36.5+k3s1: Run snapshotrestore test entries in parallel (#14734) Deps: bump containerd to v2.3.6 (#14742) Bump Traefik image and gateway-api (#14750) Bump gateway-api to 1.6.3 (#14771) Bump K3s-root version to v0.15.3 (#14779) Bump flannel to…
This release updates Kubernetes to v1.37.2, and fixes a number of issues. For more details on what's new, see the Kubernetes release notes. Changes since v1.37.1+k3s1: Add gateway-api-crd to help (#14727) Run snapshotrestore test entries in parallel (#14733) Deps: bump containerd to v2.3.6 (#14744) Bump Traefik to v3.7.14 and gateway-api to 1.6.2 (#14757) Bump gateway-api to 1.6.3 (#14769) Bump K3…
What's Changed [release-1.36] Bump x/net and pass golang.org/x/ replacements through when building bundled binaries by @brandond in #14936 Full Changelog: v1.36.6-rc1+k3s1...v1.36.6-rc2+k3s1
What's Changed [release-1.35] Bump x/net and pass golang.org/x/ replacements through when building bundled binaries by @brandond in #14937 Full Changelog: v1.35.10-rc1+k3s1...v1.35.10-rc2+k3s1
What's Changed [release-1.37] Bump x/net and pass golang.org/x/ replacements through when building bundled binaries by @brandond in #14935 Full Changelog: v1.37.2-rc1+k3s1...v1.37.2-rc2+k3s1
What's Changed [release-1.34] Bump x/net and pass golang.org/x/ replacements through when building bundled binaries by @brandond in #14938 Full Changelog: v1.34.13-rc1+k3s1...v1.34.13-rc2+k3s1
What's Changed [Release 1.37] Add gateway-api-crd to help by @manuelbuil in #14727 [Release-1.37] Run snapshotrestore test entries in parallel by @dereknola in #14733 [Release-1.37] deps: bump containerd to v2.3.6 by @vitorsavian in #14744 [Release 1.37] Bump Traefik to v3.7.14 and gateway-api to 1.6.2 by @manuelbuil in #14757 [Release-1.37] Bump gateway-api to 1.6.3 by @manuelbuil in #14769 [rele…
What's Changed [Release-1.35] Run snapshotrestore test entries in parallel by @dereknola in #14735 [Release-1.35] deps: bump containerd to v2.2.9 by @vitorsavian in #14743 [Release 1.35] Bump Traefik image and gateway-api by @manuelbuil in #14754 [Release-1.35] Bump gateway-api to 1.6.3 by @manuelbuil in #14773 [release-1.35] Bump K3s-root version to v0.15.3 by @github-actions[bot] in #14778 [Rele…
What's Changed [Release-1.34] Run snapshotrestore test entries in parallel by @dereknola in #14736 [Release-1.34] deps: bump containerd to v2.2.9 by @vitorsavian in #14745 [Release 1.34] Bump Traefik image and gateway-api by @manuelbuil in #14755 [Release-1.34] Bump gateway-api to 1.6.3 by @manuelbuil in #14775 [release-1.34] Bump K3s-root version to v0.15.3 by @github-actions[bot] in #14781 [Rele…
What's Changed [Release-1.36] Run snapshotrestore test entries in parallel by @dereknola in #14734 [Release-1.36] deps: bump containerd to v2.3.6 by @vitorsavian in #14742 [Release 1.36] Bump Traefik image and gateway-api by @manuelbuil in #14750 [Release-1.36] Bump gateway-api to 1.6.3 by @manuelbuil in #14771 [release-1.36] Bump K3s-root version to v0.15.3 by @github-actions[bot] in #14779 [Rele…
WarningThis release upgrades Traefik chart to v40.x which includes a breaking change for the ingress-nginx migration: the provider name changes from kubernetesIngressNginx to kubernetesIngressNGINX. Check https://github.com/traefik/traefik-helm-chart/releases/tag/v40.0.0 for more details This release updates Kubernetes to v1.36.5, and fixes a number of issues. For more details on what's new, see t…
This release updates Kubernetes to v1.37.1, and fixes a number of issues. For more details on what's new, see the Kubernetes release notes. Changes since v1.37.0+k3s1: Backports for 2026-09 (#14631) Fix restore from compressed etcd snapshot #14528 Enable seccomp in riscv64 builds #14529 Use ginkgo CLI to run tests #14531 Bump k3s-io/api to v0.2.0 #14570 Servicelb multiple lbpools #14547 Close mini…
WarningThis release upgrades Traefik chart to v40.x which includes a breaking change for the ingress-nginx migration: the provider name changes from kubernetesIngressNginx to kubernetesIngressNGINX. Check https://github.com/traefik/traefik-helm-chart/releases/tag/v40.0.0 for more details This release updates Kubernetes to v1.35.9, and fixes a number of issues. For more details on what's new, see t…
WarningThis release upgrades Traefik chart to v40.x which includes a breaking change for the ingress-nginx migration: the provider name changes from kubernetesIngressNginx to kubernetesIngressNGINX. Check https://github.com/traefik/traefik-helm-chart/releases/tag/v40.0.0 for more details This release updates Kubernetes to v1.34.12, and fixes a number of issues. For more details on what's new, see…
What's Changed [Release-1.37] Reject anonymous access to supervisor router (spegel/pprof/metrics) by @dereknola in #14701 [Release-1.37] Improve CA hash validation by @dereknola in #14705 Full Changelog: v1.37.1-rc1+k3s1...v1.37.1-rc2+k3s1
What's Changed [Release-1.36] Reject anonymous access to supervisor router (spegel/pprof/metrics) by @dereknola in #14702 [Release-1.36] Improve CA hash validation by @dereknola in #14706 Full Changelog: v1.36.5-rc1+k3s1...v1.36.5-rc2+k3s1
What's Changed [Release-1.35] Reject anonymous access to supervisor router (spegel/pprof/metrics) by @dereknola in #14703 [Release-1.35] Improve CA hash validation by @dereknola in #14707 Full Changelog: v1.35.9-rc1+k3s1...v1.35.9-rc2+k3s1
What's Changed [Release-1.34] Improve CA hash validation by @dereknola in #14708 [Release-1.34] Reject anonymous access to supervisor router (spegel/pprof/metrics) by @dereknola in #14704 Full Changelog: v1.34.12-rc1+k3s1...v1.34.12-rc2+k3s1
What's Changed [release-1.37] Backports for 2026-09 by @brandond in #14631 [release-1.37] Bump helm-controller by @brandond in #14684 [release-1.37] Bump k3s-io/kubernetes and Go references by @github-actions[bot] in #14695 [Release-1.37] bump cadvisor to v0.60.5-k3s1 by @vitorsavian in #14698 Full Changelog: v1.37.0+k3s1...v1.37.1-rc1+k3s1
What's Changed [release-1.36] Bump rancher/mirrored-coredns-coredns image version by @github-actions[bot] in #14534 Bump gateway-api and traefik image versions for K3s 1.36 by @manuelbuil in #14567 [Release 1.36] Bump Traefik to v3.7.13 by @manuelbuil in #14610 [release-1.36] Bump google.golang.org/grpc to v1.83.2 for CVE-2026-84445 by @brandond in #14620 [release-1.36] Backports for 2026-09 by @b…
What's Changed [release-1.35] Bump rancher/mirrored-coredns-coredns image version by @github-actions[bot] in #14533 [Release 1.35] Bump gateway-api and traefik image versions by @manuelbuil in #14584 [Release 1.35] Bump Traefik to v3.7.13 by @manuelbuil in #14611 [release-1.35] Bump google.golang.org/grpc to v1.83.2 for CVE-2026-84445 by @brandond in #14621 [release-1.35] Backports for 2026-09 by…
What's Changed [release-1.34] Bump rancher/mirrored-coredns-coredns image version by @github-actions[bot] in #14532 [Release 1.34] Bump gateway-api and traefik image versions by @manuelbuil in #14585 [Release 1.34] Bump Traefik to v3.7.13 by @manuelbuil in #14612 [release-1.34] Bump google.golang.org/grpc to v1.83.2 for CVE-2026-84445 by @brandond in #14622 [release-1.34] Backports for 2026-09 by…
This release updates Kubernetes to v1.37.0, and fixes a number of issues. For more details on what's new, see the Kubernetes release notes. Changes since v1.36.3+k3s1: Bump mirrored-pause to 3.10.2 (#14339) Build(deps): bump the action-deps group with 14 updates (#14394) Bump dynamiclistener for atomic write fix (#14382) Bump helm-controller/klipper-helm (#14403) Simplify WriteSubnetFile cleanup a…
What's Changed [release-1.37] Bump google.golang.org/grpc to v1.83.2 for CVE-2026-84445 by @brandond in #14614 [release-1.37] Bump google.golang.org/grpc to v1.83.2, not v1.82.2 by @brandond in #14619 Full Changelog: v1.37.0-rc4+k3s1...v1.37.0-rc5+k3s1
What's Changed [Release 1.37] Bump Traefik to v3.7.13 by @manuelbuil in #14606 Full Changelog: v1.37.0-rc3+k3s1...v1.37.0-rc4+k3s1
What's Changed [Release 1.37] Bump gateway-api-crd version 3, which includes the keep annotation by @manuelbuil in #14586 Full Changelog: v1.37.0-rc2+k3s1...v1.37.0-rc3+k3s1
What's Changed [release-1.37] Bump rancher/mirrored-coredns-coredns image version by @github-actions[bot] in #14577 [Release-1.37] Bump critools to v1.37 by @vitorsavian in #14579 Full Changelog: v1.37.0-rc1+k3s1...v1.37.0-rc2+k3s1
What's Changed Expand docker upgrade test, sunset E2E upgrade test by @dereknola in #13338 Add firewall section to check-config.sh by @dereknola in #13234 Update golangci-lint and re-enable CI linting step by @brandond in #13343 Fix PR lint checkout depth by @brandond in #13369 Update stable channel to v1.34.3+k3s1 by @rafaelbreno in #13374 Bump actions/download-artifact from 6 to 7 by @dependabot…