chore(deps): update dependency siderolabs/talos to v1.11.1 #1851
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
1.10.5->1.11.1v1.11.2Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
siderolabs/talos (siderolabs/talos)
v1.11.1Compare Source
Talos 1.11.1 (2025-09-08)
Welcome to the v1.11.1 release of Talos!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Component Updates
Linux: 6.12.45
CoreDNS: 1.12.3
Talos is built with Go 1.24.6.
Contributors
Changes
7 commits
8e85c83release(v1.11.1): prepare releaseff8644cfix: correctly handle status-code 2047d5fe2dfeat: update Linux kernel (memcg_v1, ublk)9e310a9fix: enable support for VMWare arm64f7620f0feat: update CoreDNS to 1.12.301bf2f6feat: add SOCKS5 proxy support to dynamic proxy dialer8a578bcfeat: update Linux to 6.12.45Changes from siderolabs/pkgs
3 commits
1a25681feat: enable ublk support95f0be4fix: enable memcg v1e1c333cfeat: update Linux to 6.12.45Dependency Changes
Previous release can be found at v1.11.0
Images
v1.11.0Compare Source
Welcome to the v1.12.0-alpha.1 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Disk Encryption
Talos versions prior to v1.12 used the state of PCR 7 and signed policies locked to PCR 11 for TPM based disk encryption.
Talos now supports configuring which PCRs states are to be used for TPM based disk encryption via the
options.pcrsfield in the
tpmsection of the disk encryption configuration.If user doesn't specify any options Talos defaults to using PCR 7 for backwards compatibility with existing installations.
This change was made to improve compatibility with systems that may have varying states in PCR 7 due to UEFI Secure Boot configurations
and users may wish to disable locking to PCR 7 state entirely.
Signed PCR policies will still be bound to PCR 11.
The currently used PCR's can be seen with
talosctl get volumestatus <volume> -o yamlcommand.Embedded Config
Talos Linux now supports embedding the machine configuration directly into the boot image.
Ethernet Configuration
The Ethernet configuration now includes a
wakeOnLANfield to enable Wake-on-LAN (WOL) support.This field can be set to enable WOL and specify the desired WOL modes.
Extra Binaries
Talos Linux now ships with
nftbinary in the rootfs to support CNIs which shell out tonftcommand.Kernel Security Posture Profile (KSPP)
Talos now enables a stricter set of KSPP sysctl settings by default.
The list of overridden settings is available with
talosctl get kernelparamstatuscommand.Encrypted Volumes
Talos Linux now consistently provides mapped names for encrypted volumes in the format
/dev/mapper/luks2-<volume-id>.This change should not affect system or user volumes, but might allow easier identification of encrypted volumes,
and specifically for raw encrypted volumes.
Component Updates
Linux: 6.16.9
Kubernetes: 1.34.1
CNI Plugins: 1.8.0
cryptsetup: 2.8.1
LVM2: 2_03_34
systemd-udevd: 257.8
runc: 1.3.1
CoreDNS: 1.12.4
etcd: 3.6.5
Talos is built with Go 1.25.1.
Contributors
Changes
178 commits
e455c7ea9chore: use testing/synctest in tests7f048e962feat: update dependenciesfe36b3d32fix: stop returning EINVAL on remount of detached mountsc6279e04cchore: use new mount/v3 package in efivarfsd5197effbfeat: update etcd 3.6.5, CoreDNS 1.12.433714b715feat: release cloud image using factoryd10a2747edocs: deprecate JSON6902 patches and interactive installer1e604cbf5fix: don't set broadcast for /31 and /32 addresses65a66097arefactor: split cluster create logic into smaller partsab847310efix: provide refreshing CA pool (resolvers)d63c3ed7ddocs: update secureboot docs493f7ed9dfeat: support embedded config251df70f6feat: add a userspace OOM controller7bae5b40bfeat: implement link configuration724857decfix(ci): skip netbird extension for testse06a08698fix: default gateway as string7ed07412efix: uefi boot entry handling logicea4ed165arefactor: efivarfs mock and tests1fca111e2feat: support setting wake-on-lan for Ethernet94f78dbe7docs: add a documentation for running Talos in KVM46902f8fddocs: add TrueFullstaq to adoptersa28e5cbd5chore: update pkgs and tools7cf403db8docs: step-by-step scaleway documentation to get an image687285fa2docs: remove 'curl' in wget command9db6dc06cfeat: stop mounting state partition53ce93aaetest: try to clear connection refused more aggressively51db5279cfix: bump trustd memory limit25204dc8afix(machined): changeconstants.MinimumGOAMD64Levelusing build tag9cd2d794dfeat: ship nft binary with Talos rootfsb1416c9fefeat: record last log the failed service0b129f9effeat: enforce more KSPP and hardening sysctls11872643cchore: drop docs folderd30fdcd88chore: pass in github token to imagerb88f27d80chore: make reset test code a bit better1cde53d01test: fix several issues with tests16cd127a0docs: add docs on updating image cachec3ae92b14fix: build kernel checks only on linux2120904ecfeat: create detached tmpfs6bbee6de5docs: remove 'ceph-data' from volume examples/docs07acb3bd2fix: use correct order to determine SideroV1 keys directory path2d57fa002fix: trim zero bytes in the DHCP host & domain response451cb5f78docs: clarify disk partition confusiona2122ee5cfeat: implement HostConfig multi-doc69ab076b4fix: re-create cgroups when restarting runners297b5cc28docs: add docs on node labelse168512ddfix: apply 'ro' flag to iso9660 filesystems7f7acfbb9docs: fix typo in docd57882b18feat: update Kubernetes to 1.34.1f85f82f32test: fix flakiness in RawVolumes test82569e319feat: update Linux 6.16.62fd2ab4e4fix: remove CoreDNS cpu limitce9bc32a0chore(ci): rekres to use new runner groups8b64f68f6test: improve test stability272cb860dchore: drop the --input-dir flag from the cluster create command1b6533675docs: add note about ca-signed certs for securebootd3f88f50cdocs: document talos vip failover behavior005fc8bd5docs: add docs on syncing configs after a kube upgrade4d876d9affeat: update Go to 1.25.12b556cd22feat: implement multi-doc StaticHostConfiga7b776842docs: replace Raspberry Pi 5 links with Talos buildera349b20eddocs: clarify that talos does not support intermediate ca895133de9feat: support configuring PCR states to bind disk encryptionc1360103bdocs: fix command for uploading image on Hetzner43b5b9d89fix: correctly handle status-code 204feeb0d312feat: update runc to 1.3.1421634a14docs: add docs on multihoming41af2d230refactor: clean up internal cluster creation code3000d9e43fix: don't bootstrap talos cluster if there's no config present79cb871d0feat: use the id of the volume in the mapped luks2 name6c322710dchore: refactor mount packageced7186e2refactor: update COSI to 1.11.0de2e24fcddocs: clarify that install-cni image is deprecatedbef8ef509docs: add docs on cilium's compatibility with kubespane5acb10fcfeat: update pkgsc4c1daf0edocs: add info about br_netfilter5c52ecac3docs: clarify interactive dashboard resolution control15ecb02a4feat: update Linux kernel (memcg_v1, ublk)53f18c2f6fix: enable support for VMWare arm643bbe1c0dadocs: add docs on grow flagb9fb09dcdrelease(v1.12.0-alpha.0): prepare release6a389cad3chore: update dependencies9d98c2e89feat: add a cgroup preset for PSI and --skip-cri-resolve072f77b16chore: prepare for future Talos 1.12-alpha.0 release96f41ce88docs: update qemu and docker docsa751cd6b7docs: activate Talos v1.11 docs by defaulte8f1ec1c5docs: fix broken create qemu command v1.11 docs639f0dfddfeat: update Linux to 6.16.48aa7b3933fix: bring back linux/armv7 build and update xz9cae7ba6bfeat: update CoreDNS to 1.12.3cfef3ad45fix: drop linux/armv7 build42ea2ac50fix: update xz module (security)4fcfd35b9docs: fix module name example50824599achore: update some toolsbcd297490feat: allowEd25119in FIPS mode5992138bbtest: ignore one leaking goroutined155326c1docs: add sbc unofficial ports docs285fa7d22docs: add the deploy application docs527791f09feat: update Kubernetes to 1.34.0a1c0e237dfeat: update Linux to 6.15.11, Go to 1.254d7fc25f8docs: switch order of wipe disk command7368a994dfeat: add SOCKS5 proxy support to dynamic proxy dialerd63591069chore: silence linter warnings07eb4d7ecfix: set default ram unit to MiB instead of MB6b732adc4feat: update Linux to 6.12.43b6410914ffeat: add human readable byte size cli flagsec70cef99feat: update NVIDIA drivers and kernel0879efa69feat: update Kubernetes default to v1.34.0-rc.2f504639dffeat: add a user-facing create qemu command558e0b09atest: fix the Image Factory PXE boot testd73f0a2e5docs: make readme badges consistentf1369af98chore: use new filesystem api on STATE partition366cedbe7docs: link to kubernetes linux swap tuning2f5a16f5efix: make --with-uuid-hostnames functionality available to qemu provider70612c1f9refactor: split the PlatformConfigController511748339docs: add system extension tier documentation009fb1540test: don't run nvidia tests on integration/aws99674ef20docs: apply fixes for what is new92db677b5fix: image cache lockup on a missing volume9c97ed886fix: version contract parsing in encryption keys handling1fc670a08fix: dial with proxy18447d0affeat: update Linux to 6.12.41f65f39b78fix: provide mitigation CVE-1999-05248817cc60cfix: actually use SIDEROV1_KEYS_DIR env var if it's providedb08b20a10feat: use key provider with fallback option for auth type SideroV17a52d7489fix: kubernetes upgrade options for kubeletea8289f55feat: add a user facing docker command54ad64765chore: re-enable vulncheck26bbddea9fix: darwin buildb5d5ef79efix: set secs field in DHCPv4 packetsc07911933chore: refactor how tools are being installed34f25815cdocs: fork docs for v1.12b66b995d3feat: update default Kubernetes to v1.34.0-rc.1b967c587ddocs: fix clone URL to include.gitb72c68398docs: edit the insecure, etcd-metrics, inline and extramanifestse5b9c1fffdocs: remov RAS Syndrome701fe774bdocs: fix cilium links and bump to 1.18.0d306713a1feat: update Go to 1.24.6721595a00chore: add deadcode elimination linterdc4865915refactor: stop usingtext/templateinmachinedcode paths545be55edfeat: add a pause function to dashboard06a6c0fe3refactor: fix deadcode elimination with godbus2dce8f8d4refactor: replace containerd/containerd/v2 module for proper DCE9b11d8608chore: rekres to configure slack notify workflow for CI failures5ce6a660fdocs: augment the pod security docsada51ff69fix: unmarshal encryption STATE from METAb9e9b2e07docs: add what is new notes for 1.1153055bdf4docs: fix typo in kubevirt page8d12db480fix: one more attempt to fix volume mount race on restart34d37a268chore: rekres to use correct slack channel for slack-notify326a00538feat: implementtalos.config.earlycommand line arga5f3000f2feat: implement encryption locking to STATEc1e65a342docs: remove talos API flags from mgmt commands181d0bbf5feat: bootedentry resource7ad439ac3fix: enforce minimum size on user volumes if not set explicitly50e37aefdfix: live reload of TLS client config for discovery client87efd75effeat: update containerd to 2.1.4724b9de6dfeat: addF71808Ewatchdog driver8af96f7afdocs: add ETCD downgrade documentation44edd205ddocs: add remark about 'exclude-from-external-load-balancers' label727101926fix(ci): use a random suffix for ami namesd621ce372fix: grype scand62e255c2fix: issues with reading GPT5d0883e14feat: update PCI DB module to v0.3.23751c8ccftest: wait for service account test job longera592eb9f9feat: update Linux to 6.12.404c40e6d3ffeat: update etcd to 3.6.42bc37bd2cdocs: fix error in kernel module guidebfc57fb86chore: tag aws snapshots created via ci with the image name06ef7108afix: issue with volume remount on service restart03efbff18docs: add SBOM documentationaf8a2869dfix: do not download artifacts for cron Grype scan5f442159bfeat: unify disk encryption configuration38e176e59chore(ci): fix datasource versioning85d6b9198feat: update etcd to v3.5.22dd7bd2dabdocs: rewrite the getting started and prod docs for v1.10 and v1.11136a899aachore: regenerate release step with signing fixes450b30d5achore(ci): add more nvidia test matrix451c2c4c3test: add talosctl:latest to the image cacheChanges since v1.12.0-alpha.0
79 commits
e455c7ea9chore: use testing/synctest in tests7f048e962feat: update dependenciesfe36b3d32fix: stop returning EINVAL on remount of detached mountsc6279e04cchore: use new mount/v3 package in efivarfsd5197effbfeat: update etcd 3.6.5, CoreDNS 1.12.433714b715feat: release cloud image using factoryd10a2747edocs: deprecate JSON6902 patches and interactive installer1e604cbf5fix: don't set broadcast for /31 and /32 addresses65a66097arefactor: split cluster create logic into smaller partsab847310efix: provide refreshing CA pool (resolvers)d63c3ed7ddocs: update secureboot docs493f7ed9dfeat: support embedded config251df70f6feat: add a userspace OOM controller7bae5b40bfeat: implement link configuration724857decfix(ci): skip netbird extension for testse06a08698fix: default gateway as string7ed07412efix: uefi boot entry handling logicea4ed165arefactor: efivarfs mock and tests1fca111e2feat: support setting wake-on-lan for Ethernet94f78dbe7docs: add a documentation for running Talos in KVM46902f8fddocs: add TrueFullstaq to adoptersa28e5cbd5chore: update pkgs and tools7cf403db8docs: step-by-step scaleway documentation to get an image687285fa2docs: remove 'curl' in wget command9db6dc06cfeat: stop mounting state partition53ce93aaetest: try to clear connection refused more aggressively51db5279cfix: bump trustd memory limit25204dc8afix(machined): changeconstants.MinimumGOAMD64Levelusing build tag9cd2d794dfeat: ship nft binary with Talos rootfsb1416c9fefeat: record last log the failed service0b129f9effeat: enforce more KSPP and hardening sysctls11872643cchore: drop docs folderd30fdcd88chore: pass in github token to imagerb88f27d80chore: make reset test code a bit better1cde53d01test: fix several issues with tests16cd127a0docs: add docs on updating image cachec3ae92b14fix: build kernel checks only on linux2120904ecfeat: create detached tmpfs6bbee6de5docs: remove 'ceph-data' from volume examples/docs07acb3bd2fix: use correct order to determine SideroV1 keys directory path2d57fa002fix: trim zero bytes in the DHCP host & domain response451cb5f78docs: clarify disk partition confusiona2122ee5cfeat: implement HostConfig multi-doc69ab076b4fix: re-create cgroups when restarting runners297b5cc28docs: add docs on node labelse168512ddfix: apply 'ro' flag to iso9660 filesystems7f7acfbb9docs: fix typo in docd57882b18feat: update Kubernetes to 1.34.1f85f82f32test: fix flakiness in RawVolumes test82569e319feat: update Linux 6.16.62fd2ab4e4fix: remove CoreDNS cpu limitce9bc32a0chore(ci): rekres to use new runner groups8b64f68f6test: improve test stability272cb860dchore: drop the --input-dir flag from the cluster create command1b6533675docs: add note about ca-signed certs for securebootd3f88f50cdocs: document talos vip failover behavior005fc8bd5docs: add docs on syncing configs after a kube upgrade4d876d9affeat: update Go to 1.25.12b556cd22feat: implement multi-doc StaticHostConfiga7b776842docs: replace Raspberry Pi 5 links with Talos buildera349b20eddocs: clarify that talos does not support intermediate ca895133de9feat: support configuring PCR states to bind disk encryptionc1360103bdocs: fix command for uploading image on Hetzner43b5b9d89fix: correctly handle status-code 204feeb0d312feat: update runc to 1.3.1421634a14docs: add docs on multihoming41af2d230refactor: clean up internal cluster creation code3000d9e43fix: don't bootstrap talos cluster if there's no config present79cb871d0feat: use the id of the volume in the mapped luks2 name6c322710dchore: refactor mount packageced7186e2refactor: update COSI to 1.11.0de2e24fcddocs: clarify that install-cni image is deprecatedbef8ef509docs: add docs on cilium's compatibility with kubespane5acb10fcfeat: update pkgsc4c1daf0edocs: add info about br_netfilter5c52ecac3docs: clarify interactive dashboard resolution control15ecb02a4feat: update Linux kernel (memcg_v1, ublk)53f18c2f6fix: enable support for VMWare arm643bbe1c0dadocs: add docs on grow flagChanges from siderolabs/crypto
2 commits
4154a77feat: implement dynamic certificate reloaderdae07fachore: update to Go 1.25Changes from siderolabs/go-api-signature
1 commit
68478e2fix: returninvalid signatureerror when a signature is requiredChanges from siderolabs/go-debug
1 commit
e21721bchore: add support for Go 1.25Changes from siderolabs/go-loadbalancer
1 commit
5e7a8b2feat: add jitter and initial health check wait support to upstreamsChanges from siderolabs/pkgs
32 commits
202a8e6feat: update Linux to 6.16.93a0900ffeat: enable SRv6 LWTUNNEL and BPF support628efc8chore: update linuxfirmware and rekres9d1fb02feat: support adding extra trusted certificates in the kernel7fe686dfix: build nftables with embedded gmpfede0a7feat: add nft binary0dae01afeat: update NVIDIA to 580.82.079ac2392feat: enable Kernel config options for IPVS Maglev hashing scheduler support3c5315cfeat: update dependencies122fa66feat: update Linux to 6.16.6ab1e866feat: update Go to 1.25.17d6ef1bfeat: update runc to 1.3.1e067c20feat: enable USB audio supportc4faa38feat: bump dependencies453cdfcfeat: enable ublk support9824684fix: enable memcg v12447e11feat: update Linux to 6.16, GCC to 152cfb920feat: update Linux to 6.15.11, update tools, rekresab4e975feat: update Linux to 6.12.43cd67e36chore: update kernel config to support max SMP CPUse3b2094fix: fix build for new NVIDIA driversfd5fdfdfeat: update Nvidia LTS to 580.65.06 and production to 570.172.080edf426fix: backport CVE kernel patches to 6.1226d8feffeat: enable Infiniband IRDMA support16b5facfix: re-enable CPUSETS_V1 cgroups controllerfd53886feat: update backportable dependenciesd5f7467feat: update Go to 1.24.60bd019ffeat: update containerd to 2.1.40ba8b5bfeat: enableF71808Ewatchdog driver895a86bfix: enable ISCSI IBFTa76a67cfeat: update Linux to 6.12.408b0a561feat: enable bootloader control on amd64Changes from siderolabs/tools
8 commits
4f90801chore: update openssl, curl, libexpat and rekresc37ac80feat: update Go to 1.25.17c659e9feat: update to GCC 1583fd7b7feat: migrate from pkg-config to pkgconfedafd5ffeat: update toolchain for new Go and Linux headers65789c7chore: drop unused vars from Pkgfile52db66echore: drop protobuf-related stuff from toolse3c3ef2feat: update Go to 1.24.6Dependency Changes
a3183a1->bf180abfbb4dce-> v1.8.0a4a78f1-> v0.42.0Configuration
📅 Schedule: Branch creation - "after 3am on Sunday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.