v1.13.10

Talos 1.13.10 (2026-09-03)

Welcome to the v1.13.10 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Component Updates

Linux: 6.18.48
CoreDNS: 1.14.7

Talos is built with Go 1.26.7

Contributors

• Andrey Smirnov
• Mateusz Urbanek
• Noel Georgi
• Dima Aratin
• Ivan Demchuk
• Maja Bojarska
• Max Makarov
• Utku Ozdemir
• immanuwell

Changes

28 commits

• 00ca4c987 release(v1.13.10): prepare release
• 271ce0dc8 fix: update DHCP library
• 3c70f4054 fix: harden the code around kubelet's client certificate handling
• 40d7de4c0 fix: normalize image reference when passing to image verification flow
• cf30d6df4 fix: filter out passed metadata in API proxying
• cc556d9ce fix: treat desired roles empty as error in Talos API access
• 0d7a47305 fix: allow CSI volumes to be mounted with an SELinux context
• 17ab196fe fix: validate received kubeconfig
• 934ae8a2b chore: update etcd to v3.6.14
• df9b82dce chore: update pkgs and tools
• 591c53aac fix: use os.Root in the talosctl extract path
• c36d99001 fix: escape output in the talosctl dashboard
• fc355dcd3 fix: add checks for meta key in the API path
• e950f655e feat: update COSI to 1.16.3
• 20cafbdb3 fix: route creation churning every 100ms
• c6fe78c61 chore: reduce verbosity of the grype scan
• b9696f9d7 fix: preserve special modes when extracting files
• 865aaec80 fix: use os.Root in the untar path
• 097fa184e fix: create parent directories when extracting tar archives
• c6edc3911 chore: bump sigstore/rekor to v1.5.4
• 6d062e13b fix: write the uploaded etcd snapshot atomically
• f6b795970 fix: skip selinux label for read-only/detached/external mounts
• bea850ac3 fix: persist in-memory meta on fresh install
• dcf46c11e fix: reduce stalls in the etcd member promotion cycle
• 0f4d08a1f feat: update CoreDNS to 1.14.7
• e0916388e fix: watch IPv6 route changes in RouteSpecController
• 92614ca8a fix: truncate files replaced by system extensions
• b7b27ec29 fix: skip target settings for external volume mounts

Changes from siderolabs/pkgs

5 commits

• siderolabs/pkgs@9b044c5 feat: update kernel to 6.18.48
• siderolabs/pkgs@de74a50 feat: bump kernel to 6.18.47
• siderolabs/pkgs@bb15c62 chore: update toolchain and tools
• siderolabs/pkgs@49c50f7 feat: bump kernel to 6.18.46
• siderolabs/pkgs@2da2cdc feat: backport aes256k support (Ceph)

Changes from siderolabs/tools

3 commits

• siderolabs/tools@c70be08 chore: update toolchain
• siderolabs/tools@7791f48 feat: use kernel gnu mirrors
• siderolabs/tools@d908dc0 fix: update OpenSSL to 3.6.4

Dependency Changes

• github.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.1 -> v1.22.0
• github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.13.1 -> v1.14.0
• github.com/aws/aws-sdk-go-v2 v1.41.7 -> v1.43.0
• github.com/aws/aws-sdk-go-v2/config v1.32.17 -> v1.32.31
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.23 -> v1.18.31
• github.com/aws/aws-sdk-go-v2/service/kms v1.52.0 -> v1.55.0
• github.com/aws/smithy-go v1.25.1 -> v1.27.3
• github.com/cosi-project/runtime v1.14.1 -> v1.16.3
• github.com/docker/cli v29.4.3 -> v29.5.3
• github.com/fatih/color v1.18.0 -> v1.19.0
• github.com/google/go-containerregistry v0.21.6 -> v0.21.7
• github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.3 -> v2.3.4
• github.com/insomniacslk/dhcp 5adc3eb26f91 -> 234b97448fae
• github.com/klauspost/compress v1.18.7 -> v1.19.2
• github.com/mattn/go-isatty v0.0.20 -> v0.0.24
• github.com/prometheus/procfs v0.20.1 -> v0.22.0
• github.com/siderolabs/pkgs v1.13.0-60-gf541ca4 -> v1.13.0-65-g9b044c5
• github.com/siderolabs/talos/pkg/machinery v1.13.9 -> v1.13.10
• github.com/siderolabs/tools v1.13.0-9-ga201d19 -> v1.13.0-12-gc70be08
• github.com/sigstore/sigstore v1.10.8 -> v1.10.9
• github.com/sirupsen/logrus v1.9.4 -> v1.10.2
• github.com/stretchr/testify v1.11.1 -> v1.12.1
• go.etcd.io/etcd/api/v3 v3.6.12 -> v3.6.14
• go.etcd.io/etcd/client/pkg/v3 v3.6.12 -> v3.6.14
• go.etcd.io/etcd/client/v3 v3.6.12 -> v3.6.14
• go.etcd.io/etcd/etcdutl/v3 v3.6.12 -> v3.6.14
• go.yaml.in/yaml/v4 v4.0.0-rc.4 -> v4.0.0-rc.6
• google.golang.org/grpc v1.82.1 -> v1.83.2
• google.golang.org/protobuf f2248ac996af -> v1.36.12

Previous release can be found at v1.13.9

Images

ghcr.io/siderolabs/flannel:0.28.8
registry.k8s.io/coredns/coredns:v1.14.7
registry.k8s.io/etcd:v3.6.14
registry.k8s.io/pause:3.10.1
registry.k8s.io/kube-apiserver:v1.36.3
registry.k8s.io/kube-controller-manager:v1.36.3
registry.k8s.io/kube-scheduler:v1.36.3
registry.k8s.io/kube-proxy:v1.36.3
ghcr.io/siderolabs/kubelet:v1.36.3
registry.k8s.io/networking/kube-network-policies:v1.1.0
ghcr.io/siderolabs/installer:v1.13.10
ghcr.io/siderolabs/installer-base:v1.13.10
ghcr.io/siderolabs/imager:v1.13.10
ghcr.io/siderolabs/talos:v1.13.10
ghcr.io/siderolabs/talosctl-all:v1.13.10
ghcr.io/siderolabs/overlays:v1.13.10
ghcr.io/siderolabs/extensions:v1.13.10