v1.5.1

[smira]

image-factory 1.5.1 (2026-08-25)

Welcome to the v1.5.1 release of image-factory!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/image-factory/issues.

Contributors

• Andrey Smirnov
• Noel Georgi
• Mateusz Urbanek
• Edward Sammut Alessi
• Spencer Smith
• Dmitrii Sharshakov
• Maja Bojarska
• Max Makarov
• Dima Aratin
• Evan Champion
• Noel
• Orzelius
• Utku Ozdemir
• dadbravo

Changes

11 commits

• 43adb19 release(v1.5.1): prepare release
• 5f1f197 feat: update Talos to 1.14.0-rc.2
• b7908c1 feat(enterprise): add Auth0 Management API client for node tokens
• 36fedd7 feat: add WithBearerToken to include m2m token
• e783a3d feat(frontend): preserve whitespace for vuln descriptions
• 18f56f7 chore: make sure check-dirty also checks docs
• 196a447 fix: enforce canonical image references
• 26b95ca feat(enterprise): require auth0 clientID and clientSecret always
• 25561f7 fix: retry put when joining a failed get flight
• aab14ff feat: add spdx and vex reports to factory client
• dc6a9f9 feat(enterprise): theme and translate Auth0 logout/login-error pages

Changes from siderolabs/pkgs

9 commits

• 13c7afc chore: update OpenZFS to 2.4.4
• 7cf25e7 feat: bump kernel to 6.18.46
• 84c1b87 feat: backport aes256k support (Ceph)
• 9e069b7 feat: enable SPD5118 sensor driver
• fe419a4 feat: enable IPSec offload and dma-buf heaps
• 02ae809 feat: update Linux to 6.18.45
• 2b995f1 feat(kernel): enable CONFIG_MLX5_VFIO_PCI
• fc35614 feat: update containerd to 2.3.4
• e708524 feat: update toolchain/tools

Changes from siderolabs/talos

27 commits

• 322de8bf2 fix: cache filemap layers on disk
• 414a1d463 release(v1.14.0-rc.2): prepare release
• a740329b9 feat: bump kernel, containerd and go
• 0048cd3f4 chore: bump vulncheck dates
• acc89cbef fix: use default terminal theme colors in talosctl dashboard
• d78c61c82 fix: don't create new client in dry-run mode
• 7276d54ef fix: preserve selected sd-boot entry on upgrade
• 68a436656 fix: use the UKI command line when the config has no install section
• e32a266d9 fix: persist in-memory meta on fresh install
• 35c8f172c fix: drop lockdown=confidentiality default for 1.14+
• 977199548 fix: reduce stalls in the etcd member promotion cycle
• 4c381dfae feat: update CoreDNS to 1.14.7
• 95135f804 feat: update Kubernetes to 1.37.0-rc.1
• 7ac3cad5e fix: watch IPv6 route changes in RouteSpecController
• d31a66599 fix: enable SELinux to work with overlays
• 3cc04997f fix: move the spike information field of the time.Status resource
• 52e874785 feat: log peer address in gRPC request log
• 5f0005c25 feat: talosctl dashboard log filtering
• 5d13cc0e7 fix: truncate files replaced by system extensions
• afc8d952d fix: skip target settings for external volume mounts
• 6e83aece4 test: use tiny hostns debug image
• 2f371abd5 fix: support try mode apply without prior config
• d3544c2e3 fix: adjust cluster size for VFAT on ISO
• 3909ca9b2 feat: impl ContainerImageController
• c563615ed test: add cachefilesd to the test matrix
• d36a20e84 fix: apply directory user volume mount security
• 78efbb413 fix: install conntrack handler in accept ingress firewall mode

Dependency Changes

• github.com/auth0/go-auth0/v3 v3.3.0 new
• github.com/siderolabs/pkgs v1.14.0-1-geffed43 -> v1.14.0-10-g13c7afc
• github.com/siderolabs/talos v1.14.0-rc.1 -> 322de8bf2974
• github.com/siderolabs/talos/pkg/machinery v1.14.0-rc.1 -> 322de8bf2974
• github.com/stretchr/testify v1.11.1 -> v1.12.0

Previous release can be found at v1.5.0

---

This discussion was created from the release v1.5.1.