v1.36.1+k0s.0

What's Changed

• Revert "Bump quay.io/k0sproject/kube-router Docker tag to v2.7.1" by @juanluisvaladas in #7152
• Use a custom docker network in addons inttest by @twz123 in #7134
• [Doc] Update OpenEBS example by @olofvndrhr in #7151
• Make renovate calico links automatically by @juanluisvaladas in #7169
• Make renovate keep track of release-1.35 by @juanluisvaladas in #7170
• Remove Oracle Linux from nightly OS test matrix by @twz123 in #7176
• Bump containerd to v2.2.1 by @morlay in #7011
• Add CI job to lint for invisible Unicode characters by @twz123 in #7190
• Fix calico-node restarts on BIRD mode by @juanluisvaladas in #7194
• Delay join token parsing on worker until it is known that it is needed by @kke in #7204
• Bump kubernetes to v1.35.2 by @juanluisvaladas in #7184
• Fix branch for Renovate's 1.35 release version bumps by @twz123 in #7234
• docs: fix typo in UpdaterConfig to UpdateConfig by @smiggiddy in #7247
• Make Helm chart reconciliation interruption-aware and recover interrupted installs by @twz123 in #7177
• Remove retry cap when waiting for Helm CRDs by @twz123 in #7217
• Fix EtcdMember lease name mismatch by @makhov in #7243
• Enable Kubernetes version bumps for releases 1.33 and 1.34 by @twz123 in #7210
• Bump CoreDNS to v1.14.2 by @twz123 in #7275
• Add cgroups v1 clarification to docs by @jnummelin in #7264
• Check Go module versions more thoroughly by @twz123 in #7280
• Use filepath.Join for local filesystem paths by @twz123 in #7274
• Move containerd 1 indirect dependency into right section by @twz123 in #7288
• Fix link in godoc for ATTACH_PARENT_PROCESS by @twz123 in #7299
• Renovate improvements by @twz123 in #7316
• Pin upload-release-asset GH action to node 20 for ARMv7 by @twz123 in #7309
• Modify Kine build flags to match upstream by @juanluisvaladas in #7334
• adopters/add-adopter-logsightai by @alek-thunder in #7322
• Bump Kubernetes to v1.35.3 by @juanluisvaladas in #7333
• Fix kube-dns address on dualstack clusters by @juanluisvaladas in #7342
• [Docs] Update Traefik ingress documentation and fix MetalLB docs by @olofvndrhr in #7331
• Docs: Remove minio from storage.md by @martimmoura in #7329
• [renovate] Don't bump go in release-1.34 by @juanluisvaladas in #7356
• docs: kubeproxy nftables version mismatch by @lethedata in #7292
• Re-enable Helm reconciler concurrency by @jnummelin in #7378
• [inttest] containerd v1 to v2 live migration by @juanluisvaladas in #7350
• Some more gitattributes settings for Windows by @twz123 in #7409
• Teach Renovate the k0s OCI image versioning scheme by @twz123 in #7430
• Replace filepath.Glob with a custom loop by @twz123 in #7267
• Add healthzBindAddress parameter to kubeProxy conf by @dodgex in #7384
• Pin all GitHub Actions using their commit hashes by @twz123 in #7443
• [kube-router] generate router-id for IPv6 by @juanluisvaladas in #7469
• Check image platform when bundling artifacts by @twz123 in #7298
• Switch from embedded bins to appended zip payloads by @twz123 in #6770
• Don't bump Calico for release-1.35 by @twz123 in #7465
• Hard-code the containerd git revision by @twz123 in #7479
• Don't let Renovate bump indirect containerd v1 versions by @twz123 in #7466
• Bump Alpine from 3.20 to 3.21 in ostests by @twz123 in #7483
• Add GitHub Actions problem matchers for golangci-lint by @twz123 in #7474
• Remove Dependabot rule for hack/tool/ by @twz123 in #7486
• Let Renovate bump containerd 1.7 for release-1.35 by @twz123 in #7489
• Fail on cgroup v1 in pre-flight (#7398) by @ncopa in #7418
• Use distinct constants for Calico image versions by @twz123 in #7429
• Deprecate disabling worker-config component by @juanluisvaladas in #7441
• fix(autopilot): airgapupdate plan stuck on controller+worker nodes by @emosbaugh in #7304
• Prevent unnecessary kube-router config reconciliations by @twz123 in #7449
• Bump kubernetes to v1.35.4 by @juanluisvaladas in #7492
• Let Renovate bump the OpenTofu modules by @twz123 in #7485
• Default Chart release name to the object name when unset by @twz123 in #7480
• Make airgap list-images platform-aware by @twz123 in #7459
• Make StringMap args output deterministic by @twz123 in #7448
• dynamic-config: immutable primaryAddressFamily by @juanluisvaladas in #7494
• Require v3 configuration on containerd imports by @juanluisvaladas in #7376
• Make konnectivity-agent work on Windows by @twz123 in #7520
• Publish platform-specific airgap image lists and bundles by @twz123 in #7470
• Roll kube-proxy DaemonSet on ConfigMap changes by @twz123 in #7450
• docs: add Kubernetes AI conformance evidence page by @bnallapeta in #7537
• docs: document version skew policy by @alliasgher in #7540
• Bump iptables to 1.8.13 by @juanluisvaladas in #7538
• Fix kubelet dual stack kubelet flags by @juanluisvaladas in #7468
• docs: document k0s data and run directories by @alliasgher in #7539
• Lint doc copyright in docs CI workflow by @twz123 in #7542
• Fix the security context of konnectivity-agent by @twz123 in #7515
• Bump kubernetes to 1.36.0 by @juanluisvaladas in #7458
• Corrections and clarifications for the directory docs by @twz123 in #7543
• Use less RBAC-heavy connection probing in k0s status by @twz123 in #7400
• Kuberouter IPv6 network conformance tests by @juanluisvaladas in #6263
• Bump controller-runtime to v0.24.0 by @juanluisvaladas in #7579
• Bump calico to v3.32.0 by @juanluisvaladas in #7562
• Document changes related to containerd v2 by @juanluisvaladas in #7526
• Add Traefik as an alternative NLLB backend by @twz123 in #7405
• Apply Helm Stack in-memory by @twz123 in #6742
• [renovate] Fix kuberouter image regex by @juanluisvaladas in #7621
• [CI] Split out the unittests job to a separate workflow_call file by @luhenry in #7606
• Make controller --init-only work again by @twz123 in #7593
• Enable API server's watch termination grace period by default by @twz123 in #7188
• Don't use etcd component at all when external etcd is used by @twz123 in #7595
• Improve network conformance tests flakyness by @juanluisvaladas in #7561
• Only stage iptables if needed by @twz123 in #7596
• Skip kuberouter IPv6 network conformance tests by @juanluisvaladas in #7638
• Build admin kubeconfig directly from PKI files by @twz123 in #7600
• Add emeritus maintainers on MAINTAINERS.md file. by @jnummelin in #7646
• Add OpenRC retry settings comparable to systemd's defaults by @twz123 in #7664
• Use runtime config lock as liveness guard for reset and worker by @twz123 in #7662
• Only generate konnectivity kubeconfig if it's enabled by @twz123 in #7675
• Bump kubernetes to v1.36.1 by @juanluisvaladas in #7637
• Keep the old names when generating admin kubeconfigs by @twz123 in #7688
• More consistently build pod and service CIDRs by @pschichtel in #7684
• join new etcd members as learners and auto-promote by @makhov in #7629
• Makefile: prune build/cache and inttest from GO_SRCS find by @ncopa in #7697
• Set an appropriate status when a leaving member isn't found by @twz123 in #7650
• Keep primary IP address family out of cluster-wide config by @twz123 in #7695
• Self-remove from etcd cluster before stopping by @twz123 in #7649
• Add containerd config drop-in validation to sysprobes by @jnummelin in #7693
• Detect and reconcile stale EtcdMember objects by @twz123 in #7644
• [renovate] Fix kubernetes version bumps for 1.35 by @juanluisvaladas in #7636
• Add --ignore-pre-flight-checks to install cmds by @jnummelin in #7728
• Don't use hard-coded containerd version in upgrade inttest by @twz123 in #7733
• containerd 2.x: use native config merging instead of custom CRI merge logic by @jnummelin in #7713
• Fix Autopilot labeling for worker node leases by @twz123 in #7731
• Remove gold linker for ARM architectures by @twz123 in #7734
• Makefile: fix chmod on MacOS by @ncopa in #7744
• Correctly set lease labels by @twz123 in #7762
• Wait for k0s api to boot before checking the cert in customca inttest by @jnummelin in #7765
• Group Renovate PRs for konnectivity and Traefik by @twz123 in #7754
• Remove v1.34 upgrade path by @twz123 in #7752
• Strip default images from the config with non-default repo by @makhov in #7738
• Remove bogus log line by @twz123 in #7624
• Lint GitHub Actions workflows by @twz123 in #7774
• Resource patches by @makhov in #7727
• Always use node config when retrieving service CIDR and primary address family by @twz123 in #7781
• Fix release signing with cosign v3.1 by @twz123 in #7785

New Contributors

• @olofvndrhr made their first contribution in #7151
• @morlay made their first contribution in #7011
• @smiggiddy made their first contribution in #7247
• @alek-thunder made their first contribution in #7322
• @martimmoura made their first contribution in #7329
• @lethedata made their first contribution in #7292
• @dodgex made their first contribution in #7384
• @alliasgher made their first contribution in #7540
• @luhenry made their first contribution in #7606

Automatic version bumps

• Bump modernc.org/sqlite from 1.45.0 to 1.46.0 by @dependabot[bot] in #7149
• Bump docker.io/anchore/syft Docker tag to v1.42.1 by @k0s-bot in #7150
• Bump quay.io/k0sproject/kube-router Docker tag to v2.7.1 by @k0s-bot in #7153
• Bump modernc.org/sqlite from 1.46.0 to 1.46.1 by @dependabot[bot] in #7155
• Bump mkdocs-material from 9.7.1 to 9.7.2 in /docs in the mkdocs group by @dependabot[bot] in #7156
• Bump sigstore/cosign to v3.0.5 by @k0s-bot in #7158
• Bump regex from 2026.1.15 to 2026.2.19 in /docs by @dependabot[bot] in #7164
• Bump k3s-io/kine to v0.14.12 by @k0s-bot in #7162
• Bump renovatebot/github-action from 46.1.1 to 46.1.2 by @dependabot[bot] in #7166
• Bump docker.io/library/traefik Docker tag to v3.6.9 by @k0s-bot in #7168
• Bump Calico to v3.31.4 by @k0s-bot in #7163
• Bump mkdocs-material from 9.7.2 to 9.7.3 in /docs in the mkdocs group by @dependabot[bot] in #7171
• Bump github.com/containerd/containerd/api from 1.9.0 to 1.10.0 by @dependabot[bot] in #7106
• Bump go by @k0s-bot in #7092
• Bump certifi from 2026.1.4 to 2026.2.25 in /docs by @dependabot[bot] in #7175
• Bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 by @dependabot[bot] in #7185
• Bump regex from 2026.2.19 to 2026.2.28 in /docs by @dependabot[bot] in #7193
• Bump renovatebot/github-action from 46.1.2 to 46.1.3 by @dependabot[bot] in #7192
• Bump moby/buildkit to v0.28.0 by @k0s-bot in #7212
• Bump github.com/go-openapi/jsonpointer from 0.22.4 to 0.22.5 by @dependabot[bot] in #7207
• Bump mkdocs-material from 9.7.3 to 9.7.4 in /docs in the mkdocs group by @dependabot[bot] in #7215
• Bump korthout/backport-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #7223
• Bump platformdirs from 4.9.2 to 4.9.4 in /docs by @dependabot[bot] in #7225
• Bump sigs.k8s.io/controller-runtime from 0.23.1 to 0.23.3 by @dependabot[bot] in #7227
• Bump github.com/cilium/ebpf from 0.20.0 to 0.21.0 by @dependabot[bot] in #7224
• Bump docker.io/library/traefik Docker tag to v3.6.10 by @k0s-bot in #7230
• Bump golangci/golangci-lint to v2.11.1 by @k0s-bot in #7229
• Bump Mirantis/cri-dockerd to v0.4.2 by @k0s-bot in #7228
• Bump google.golang.org/grpc from 1.79.1 to 1.79.2 by @dependabot[bot] in #7226
• Bump k3s-io/kine to v0.14.14 by @k0s-bot in #7231
• Bump go to v1.26.1 by @k0s-bot in #7222
• Bump golangci/golangci-lint to v2.11.2 by @k0s-bot in #7233
• Bump renovatebot/github-action from 46.1.3 to 46.1.4 by @dependabot[bot] in #7240
• Bump golang.org/x/sys from 0.41.0 to 0.42.0 by @dependabot[bot] in #7239
• Bump golang.org/x/sync from 0.19.0 to 0.20.0 by @dependabot[bot] in #7238
• Bump mike from 2.1.3 to 2.1.4 in /docs by @dependabot[bot] in #7241
• Bump golangci/golangci-lint to v2.11.3 by @k0s-bot in #7244
• Bump docker.io/anchore/syft Docker tag to v1.42.2 by @k0s-bot in #7242
• Bump docker/build-push-action from 6 to 7 by @dependabot[bot] in #7245
• Bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #7218
• Bump docker/login-action from 3 to 4 by @dependabot[bot] in #7214
• Bump quay.io/k0sproject/envoy-distroless Docker tag to v1.37.1 by @k0s-bot in #7257
• Bump golang.org/x/mod from 0.33.0 to 0.34.0 by @dependabot[bot] in #7261
• Bump replicatedhq/troubleshoot to v0.124.0 by @k0s-bot in #7266
• Bump golang.org/x/text from 0.34.0 to 0.35.0 by @dependabot[bot] in #7262
• Bump docker.io/library/nginx Docker tag to v1.29.6 by @k0s-bot in #7249
• Bump golang.org/x/time from 0.14.0 to 0.15.0 by @dependabot[bot] in #7260
• Bump replicatedhq/troubleshoot to v0.124.1 by @k0s-bot in #7270
• Bump Helm to v3.20.1 by @k0s-bot in #7271
• Bump golang.org/x/crypto from 0.48.0 to 0.49.0 by @dependabot[bot] in #7278
• Bump replicatedhq/troubleshoot to v0.125.0 by @k0s-bot in #7283
• Bump golang.org/x/tools from 0.42.0 to 0.43.0 by @dependabot[bot] in #7277
• Bump opencontainers/runc to v1.4.1 by @k0s-bot in #7286
• Bump slackapi/slack-github-action from 2.1.1 to 3.0.1 by @dependabot[bot] in #7289
• Bump renovatebot/github-action from 46.1.4 to 46.1.5 by @dependabot[bot] in #7296
• Bump modernc.org/sqlite from 1.46.1 to 1.47.0 by @dependabot[bot] in #7301
• Bump shogo82148/actions-upload-release-asset from 1.8.2 to 1.10.0 by @dependabot[bot] in #7297
• Bump google.golang.org/grpc from 1.79.2 to 1.79.3 by @dependabot[bot] in #7306
• Bump opentofu/setup-opentofu from 1 to 2 by @dependabot[bot] in #7300
• Bump shogo82148/actions-create-release from 1.8.1 to 1.9.0 by @dependabot[bot] in #7295
• Bump containerd to v2.2.2 by @k0s-bot in #7248
• Bump importlib-metadata from 8.7.1 to 8.8.0 in /docs by @dependabot[bot] in #7318
• Bump importlib-metadata from 8.8.0 to 9.0.0 in /docs by @dependabot[bot] in #7323
• Bump docker.io/library/traefik Docker tag to v3.6.11 by @k0s-bot in #7320
• Bump docker.io/anchore/syft Docker tag to v1.42.3 by @k0s-bot in #7319
• Bump k3s-io/kine to v0.14.15 by @k0s-bot in #7326
• Bump etcd to v3.6.9 by @k0s-bot in #7325
• Bump golangci/golangci-lint to v2.11.4 by @k0s-bot in #7332
• Bump replicatedhq/troubleshoot to v0.125.1 by @k0s-bot in #7339
• Bump renovatebot/github-action from 46.1.5 to 46.1.6 by @dependabot[bot] in #7336
• Bump github.com/containerd/platforms from 1.0.0-rc.2 to 1.0.0-rc.3 by @dependabot[bot] in #7337
• Bump k0sproject/k0sctl to v0.29.0 by @k0s-bot in #7349
• Bump requests from 2.32.5 to 2.33.0 in /docs by @dependabot[bot] in #7353
• Bump DavidAnson/markdownlint-cli2-action from 22.0.0 to 23.0.0 by @dependabot[bot] in #7352
• Bump docker.io/library/traefik Docker tag to v3.6.12 by @k0s-bot in #7355
• Bump moby/buildkit to v0.28.1 by @k0s-bot in #7347
• Bump korthout/backport-action from 4.2.0 to 4.3.0 by @dependabot[bot] in #7351
• Bump docker.io/library/nginx Docker tag to v1.29.7 by @k0s-bot in #7344
• Bump pymdown-extensions from 10.21 to 10.21.2 in /docs by @dependabot[bot] in #7370
• Bump renovatebot/github-action from 46.1.6 to 46.1.7 by @dependabot[bot] in #7366
• Bump pygments from 2.19.2 to 2.20.0 in /docs by @dependabot[bot] in #7369
• Bump modernc.org/sqlite from 1.47.0 to 1.48.0 by @dependabot[bot] in #7365
• Bump regex from 2026.2.28 to 2026.3.32 in /docs by @dependabot[bot] in #7367
• Bump github.com/go-playground/validator/v10 from 10.30.1 to 10.30.2 by @dependabot[bot] in #7375
• Bump requests from 2.33.0 to 2.33.1 in /docs by @dependabot[bot] in #7374
• Bump etcd to v3.6.10 by @k0s-bot in #7382
• Bump modernc.org/sqlite from 1.48.0 to 1.48.1 by @dependabot[bot] in #7385
• Bump github.com/containerd/platforms from 1.0.0-rc.3 to 1.0.0-rc.4 by @dependabot[bot] in #7381
• Bump the mkdocs group across 1 directory with 3 updates by @dependabot[bot] in #7368
• Bump opencontainers/runc to v1.4.2 by @k0s-bot in #7383
• Bump renovatebot/github-action from 46.1.7 to 46.1.8 by @dependabot[bot] in #7388
• Bump click from 8.3.1 to 8.3.2 in /docs by @dependabot[bot] in #7389
• Bump regex from 2026.3.32 to 2026.4.4 in /docs by @dependabot[bot] in #7390
• Bump sigstore/cosign to v3.0.6 by @k0s-bot in #7392
• Bump go to v1.26.2 by @k0s-bot in #7397
• Bump docker.io/library/traefik Docker tag to v3.6.13 by @k0s-bot in #7396
• Bump moby/buildkit to v0.29.0 by @k0s-bot in #7373
• Bump docker.io/library/registry Docker tag to v3.1.0 by @k0s-bot in #7394
• Bump docker.io/library/nginx Docker tag to v1.29.8 by @k0s-bot in #7395
• Bump google.golang.org/grpc from 1.79.3 to 1.80.0 by @dependabot[bot] in #7380
• Bump docker.io/anchore/syft Docker tag to v1.42.4 by @k0s-bot in #7408
• Bump containerbase/python-prebuild to v3.14.4 by @k0s-bot in #7407
• Bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 by @dependabot[bot] in #7406
• Bump docker.io/curlimages/curl Docker tag to v8.19.0 by @k0s-bot in #7403
• Bump opentofu/opentofu to v1.11.6 by @k0s-bot in #7402
• Bump golang.org/x/sys from 0.42.0 to 0.43.0 by @dependabot[bot] in #7404
• Bump replicatedhq/troubleshoot to v0.126.0 by @k0s-bot in #7416
• Bump Helm to v3.20.2 by @k0s-bot in #7415
• Bump golang.org/x/mod from 0.34.0 to 0.35.0 by @dependabot[bot] in #7410
• Bump golang.org/x/text from 0.35.0 to 0.36.0 by @dependabot[bot] in #7411
• Bump dependabot/fetch-metadata from 2 to 3 by @dependabot[bot] in #7412
• Bump docker.io/library/nginx Docker tag to v1.29.8 by @k0s-bot in #7420
• Bump golang.org/x/crypto from 0.49.0 to 0.50.0 by @dependabot[bot] in #7424
• Bump actions/github-script from 8 to 9 by @dependabot[bot] in #7421
• Bump modernc.org/sqlite from 1.48.1 to 1.48.2 by @dependabot[bot] in #7422
• Bump platformdirs from 4.9.4 to 4.9.6 in /docs by @dependabot[bot] in #7413
• Bump k3s-io/kine to v0.14.16 by @k0s-bot in #7426
• Bump golang.org/x/tools from 0.43.0 to 0.44.0 by @dependabot[bot] in #7423
• Bump replicatedhq/troubleshoot to v0.126.1 by @k0s-bot in #7427
• Bump quay.io/k0sproject/calico-cni Docker tag to v3.31.4-2 by @k0s-bot in #7431
• Bump quay.io/k0sproject/envoy-distroless Docker tag to v1.37.2 by @k0s-bot in #7439
• Bump importlib-resources from 6.5.2 to 7.1.0 in /docs by @dependabot[bot] in #7437
• Bump renovatebot/github-action from 46.1.8 to 46.1.9 by @dependabot[bot] in #7436
• Bump github.com/cloudflare/cfssl from 1.6.4 to 1.6.5 by @dependabot[bot] in #7435
• Bump zipp from 3.23.0 to 3.23.1 in /docs by @dependabot[bot] in #7454
• Bump mike from 2.1.4 to 2.2.0 in /docs by @dependabot[bot] in #7452
• Bump docker.io/library/nginx Docker tag to v1.30.0 by @k0s-bot in #7463
• Bump packaging from 26.0 to 26.1 in /docs by @dependabot[bot] in #7473
• Bump docker.io/library/alpine Docker tag to v3.23.4 by @k0s-bot in #7475
• Bump github.com/go-openapi/jsonpointer from 0.22.5 to 0.23.0 by @dependabot[bot] in #7484
• Bump quay.io/k0sproject/pause Docker tag to v3.10.2-0 by @k0s-bot in #7482
• Bump containerd to v2.2.3 by @k0s-bot in #7460
• Bump quay.io/k0sproject/pushgateway-ttl Docker tag to v1.4.0-k0s.1 by @k0s-bot in #7487
• Bump replicatedhq/troubleshoot to v0.127.0 by @k0s-bot in #7497
• Bump Terraform external to v2.3.5 by @k0s-bot in #7499
• Bump Terraform aws to v5.100.0 by @k0s-bot in #7500
• Bump Terraform tls to v4.2.1 by @k0s-bot in #7503
• Bump Terraform random to v3.8.1 by @k0s-bot in #7502
• Bump Terraform local to v2.7.0 by @k0s-bot in #7501
• Bump modernc.org/sqlite from 1.48.2 to 1.49.1 by @dependabot[bot] in #7510
• Bump dependabot/fetch-metadata from 3.0.0 to 3.1.0 by @dependabot[bot] in #7508
• Bump Calico by @k0s-bot in #7461
• Bump github.com/go-openapi/jsonpointer from 0.23.0 to 0.23.1 by @dependabot[bot] in #7509
• Bump Terraform aws to v6 by @k0s-bot in #7504
• Bump idna from 3.11 to 3.12 in /docs by @dependabot[bot] in #7514
• Bump renovatebot/github-action from 46.1.9 to 46.1.10 by @dependabot[bot] in #7513
• Bump replicatedhq/troubleshoot to v0.127.1 by @k0s-bot in #7511
• Bump certifi from 2026.2.25 to 2026.4.22 in /docs by @dependabot[bot] in #7524
• Bump docker.io/anchore/syft Docker tag to v1.43.0 by @k0s-bot in #7525
• Bump Terraform aws to v6.42.0 by @k0s-bot in #7528
• Bump pathspec from 1.0.4 to 1.1.0 in /docs by @dependabot[bot] in #7532
• Bump wheel from 0.46.3 to 0.47.0 in /docs by @dependabot[bot] in #7530
• Bump idna from 3.12 to 3.13 in /docs by @dependabot[bot] in #7531
• Bump click from 8.3.2 to 8.3.3 in /docs by @dependabot[bot] in #7529
• Bump quay.io/k0sproject/apiserver-network-proxy-agent Docker tag to v0.34.0-k0s.2 by @k0s-bot in #7533
• Bump docker.io/library/traefik Docker tag to v3.6.14 by @k0s-bot in #7527
• Bump quay.io/k0sproject/kube-router Docker tag to v2.8.1-iptables1.8.13-0 by @k0s-bot in #7544
• Bump pathspec from 1.1.0 to 1.1.1 in /docs by @dependabot[bot] in #7546
• Bump packaging from 26.1 to 26.2 in /docs by @dependabot[bot] in #7548
• Bump pip from 26.0.1 to 26.1 in /docs by @dependabot[bot] in #7547
• Bump modernc.org/sqlite from 1.49.1 to 1.50.0 by @dependabot[bot] in #7545
• Bump quay.io/k0sproject/coredns Docker tag to v1.14.3-k0s.0 by @k0s-bot in #7541
• Bump Mirantis/cri-dockerd to v0.4.3 by @k0s-bot in #7550
• Bump go.uber.org/zap from 1.27.1 to 1.28.0 by @dependabot[bot] in #7549
• Bump Terraform aws to v6.43.0 by @k0s-bot in #7560
• Bump github.com/fsnotify/fsnotify from 1.9.0 to 1.10.1 by @dependabot[bot] in #7570
• Bump google.golang.org/grpc from 1.80.0 to 1.81.0 by @dependabot[bot] in #7571
• Bump pip from 26.1 to 26.1.1 in /docs by @dependabot[bot] in #7572
• Bump k0sproject/k0sctl to v0.30.0 by @k0s-bot in #7555
• Bump docker.io/library/registry Docker tag to v3.1.1 by @k0s-bot in #7573
• Bump golangci/golangci-lint to v2.12.1 by @k0s-bot in #7568
• Bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0 by @dependabot[bot] in #7567
• Bump replicatedhq/troubleshoot to v0.128.1 by @k0s-bot in #7565
• Bump etcd to v3.6.11 by @k0s-bot in #7577
• Bump Terraform aws to v6.44.0 by @k0s-bot in #7589
• Bump docker.io/anchore/syft Docker tag to v1.44.0 by @k0s-bot in #7574
• Bump kubernetes-sigs/controller-tools to v0.21.0 by @k0s-bot in #7588
• Bump docker.io/curlimages/curl Docker tag to v8.20.0 by @k0s-bot in #7554
• Bump go to v1.26.3 by @k0s-bot in #7592
• Bump mergiraf/mergiraf to v0.17.0 by @k0s-bot in #7598
• Bump golangci/golangci-lint to v2.12.2 by @k0s-bot in #7582
• Bump github.com/opencontainers/selinux from 1.13.1 to 1.14.0 by @dependabot[bot] in #7584
• Bump k0sproject/k0sctl to v0.30.1 by @k0s-bot in #7603
• Bump opentofu/opentofu to v1.11.7 by @k0s-bot in #7609
• Bump containerbase/python-prebuild to v3.14.5 by @k0s-bot in #7617
• Bump regex from 2026.4.4 to 2026.5.9 in /docs by @dependabot[bot] in #7614
• Bump idna from 3.13 to 3.14 in /docs by @dependabot[bot] in #7615
• Bump requests from 2.33.1 to 2.34.0 in /docs by @dependabot[bot] in #7616
• Bump golang.org/x/mod from 0.35.0 to 0.36.0 by @dependabot[bot] in #7612
• Bump idna from 3.14 to 3.15 in /docs by @dependabot[bot] in #7627
• Bump pymdown-extensions from 10.21.2 to 10.21.3 in /docs by @dependabot[bot] in #7626
• Bump quay.io/k0sproject/kube-router Docker tag to v2.9.0-iptables1.8.13-k0s.0 by @k0s-bot in #7622
• Bump requests from 2.34.0 to 2.34.1 in /docs by @dependabot[bot] in #7631
• Bump docker.io/library/nginx Docker tag to v1.31.0 by @k0s-bot in #7630
• Bump modernc.org/sqlite from 1.50.0 to 1.50.1 by @dependabot[bot] in #7625
• Bump opentofu/opentofu to v1.12.0 by @k0s-bot in #7641
• Bump requests from 2.34.1 to 2.34.2 in /docs by @dependabot[bot] in #7643
• Bump golang.org/x/sys from 0.43.0 to 0.44.0 by @dependabot[bot] in #7599
• Bump k3s-io/kine to v0.15.0 by @k0s-bot in #7597
• Bump Terraform aws to v6.45.0 by @k0s-bot in #7648
• Bump moby/buildkit to v0.30.0 by @k0s-bot in #7640
• Bump replicatedhq/troubleshoot to v0.129.0 by @k0s-bot in #7645
• Bump Terraform http to v3.6.0 by @k0s-bot in #7653
• Bump Terraform external to v2.4.0 by @k0s-bot in #7652
• Bump Terraform tls to v4.3.0 by @k0s-bot in #7659
• Bump Terraform random to v3.9.0 by @k0s-bot in #7658
• Bump click from 8.3.3 to 8.4.0 in /docs by @dependabot[bot] in #7657
• Bump sigs.k8s.io/controller-runtime from 0.24.0 to 0.24.1 by @dependabot[bot] in #7642
• Bump zipp from 3.23.1 to 4.1.0 in /docs by @dependabot[bot] in #7656
• Bump docker.io/library/traefik Docker tag to v3.7.1 by @k0s-bot in #7557
• Bump golang.org/x/text from 0.36.0 to 0.37.0 by @dependabot[bot] in #7661
• Bump Helm to v3.21.0 by @k0s-bot in #7632
• Bump github.com/opencontainers/selinux from 1.14.0 to 1.14.1 by @dependabot[bot] in #7654
• Bump golang.org/x/crypto from 0.50.0 to 0.51.0 by @dependabot[bot] in #7611
• Bump mkdocs-include-markdown-plugin from 7.2.2 to 7.3.0 in /docs in the mkdocs group across 1 directory by @dependabot[bot] in #7655
• Bump golang.org/x/tools from 0.44.0 to 0.45.0 by @dependabot[bot] in #7613
• Bump quay.io/k0sproject/traefik Docker tag to v3.7.1-k0s.0 by @k0s-bot in #7604
• Bump certifi from 2026.4.22 to 2026.5.20 in /docs by @dependabot[bot] in #7666
• Bump Terraform aws to v6.46.0 by @k0s-bot in #7669
• Bump google.golang.org/grpc from 1.81.0 to 1.81.1 by @dependabot[bot] in #7668
• Bump click from 8.4.0 to 8.4.1 in /docs by @dependabot[bot] in #7677
• Bump idna from 3.15 to 3.16 in /docs by @dependabot[bot] in #7679
• Bump docker.io/library/nginx Docker tag to v1.31.1 by @k0s-bot in #7682
• Bump github.com/opencontainers/selinux from 1.14.1 to 1.15.0 by @dependabot[bot] in #7680
• Bump golang.org/x/crypto from 0.51.0 to 0.52.0 by @dependabot[bot] in #7678
• Bump github.com/containerd/containerd from 1.7.30 to 1.7.32 by @dependabot[bot] in #7674
• Bump google/renameio to v2.0.2 by @k0s-bot in #6938
• Bump konnectivity by @k0s-bot in #7683
• Bump opentofu/opentofu to v1.12.1 by @k0s-bot in #7694
• Bump k3s-io/kine to v0.16.0 by @k0s-bot in #7696
• Bump Terraform aws to v6.47.0 by @k0s-bot in #7702
• Bump modernc.org/sqlite from 1.50.1 to 1.51.0 by @dependabot[bot] in #7699
• Bump idna from 3.16 to 3.17 in /docs by @dependabot[bot] in #7700
• Bump platformdirs from 4.9.6 to 4.10.0 in /docs by @dependabot[bot] in #7701
• Bump replicatedhq/troubleshoot to v0.129.1 by @k0s-bot in #7704
• Bump k3s-io/kine to v0.16.1 by @k0s-bot in #7705
• Bump etcd to v3.6.12 by @k0s-bot in #7709
• Bump idna from 3.17 to 3.18 in /docs by @dependabot[bot] in #7720
• Bump pip from 26.1.1 to 26.1.2 in /docs by @dependabot[bot] in #7721
• Bump docker.io/anchore/syft Docker tag to v1.45.0 by @k0s-bot in #7725
• Bump github.com/go-playground/validator/v10 from 10.30.2 to 10.30.3 by @dependabot[bot] in #7719
• Bump github.com/opencontainers/selinux from 1.15.0 to 1.15.1 by @dependabot[bot] in #7718
• Bump k3s-io/kine to v0.16.2 by @k0s-bot in #7724
• Bump quay.io/k0sproject/kube-router Docker tag to v2.10.0-iptables1.8.13-k0s.0 by @k0s-bot in #7737
• Bump Terraform aws to v6.48.0 by @k0s-bot in #7740
• Bump containerd to v2.3.1 by @k0s-bot in #7566
• Bump Terraform aws to v6.49.0 by @k0s-bot in #7751
• Bump go to v1.26.4 by @k0s-bot in #7723
• Bump docker.io/library/traefik Docker tag to v3.7.3 by @k0s-bot in #7750
• Bump konnectivity by @k0s-bot in #7739
• Bump quay.io/k0sproject/traefik Docker tag to v3.7.3-k0s.0 by @k0s-bot in #7753
• Bump docker.io/anchore/syft Docker tag to v1.45.1 by @k0s-bot in #7755
• Bump golang.org/x/sync from 0.20.0 to 0.21.0 by @dependabot[bot] in #7761
• Bump replicatedhq/troubleshoot to v0.129.3 by @k0s-bot in #7763
• Bump quay.io/k0sproject/traefik Docker tag to v3.7.4-k0s.0 by @k0s-bot in #7758
• Bump golang.org/x/sys from 0.45.0 to 0.46.0 by @dependabot[bot] in #7760
• Bump docker.io/library/traefik Docker tag to v3.7.4 by @k0s-bot in #7756
• Bump modernc.org/sqlite from 1.51.0 to 1.52.0 by @dependabot[bot] in #7759
• Bump golang.org/x/text from 0.37.0 to 0.38.0 by @dependabot[bot] in #7768
• Bump golang.org/x/mod from 0.36.0 to 0.37.0 by @dependabot[bot] in #7769
• Bump sigstore/cosign to v3.1.1 by @k0s-bot in #7773
• Bump golang.org/x/crypto from 0.52.0 to 0.53.0 by @dependabot[bot] in #7770
• Bump oras.land/oras-go/v2 from 2.6.0 to 2.6.1 by @dependabot[bot] in #7767
• Bump Terraform aws to v6.50.0 by @k0s-bot in #7780
• Bump replicatedhq/troubleshoot to v0.130.0 by @k0s-bot in #7779
• Bump Traefik to v3.7.5-k0s.0 by @k0s-bot in #7778

Full Changelog: v1.35.4+k0s.0...v1.36.1+k0s.0