Repository navigation
chore(deps): update dependency siderolabs/talos to v1.13.6 - #2662
Conversation
![botantler-1[bot]](https://avatars.githubusercontent.com/in/1025824?s=60&v=4){kind=small}
The talosctl ordering test hard-coded TALOS_VERSION: "1.13.5", so every Talos bump renovate proposes failed CI on an assertion incidental to what the test actually covers (setup ordering). Derive the expected version from spec.cluster.talos.version in ksail.prod.yaml -- the source of truth the workflow comments already name -- following the existing KSAIL_OPERATOR_VERSION idiom. The drift guard now also catches ksail.prod.yaml and the workflows disagreeing, which a pinned literal could not. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Edited/Blocked NotificationRenovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR. You can manually request rebase by checking the rebase/retry box above. |
@codex review Context: renovate's Talos v1.13.5 → v1.13.6 bump failed CI because Please focus on whether the drift guard is still meaningful — i.e. that it would still fail if |
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 22f2e7c683
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| self.assertIn( | ||
| f'TALOS_VERSION: "{KSAIL_PROD_TALOS_VERSION}"', setup_step | ||
| ) |
There was a problem hiding this comment.
If .github/workflows/ci.yaml's validate-talos TALOS_VERSION is left on an older Talos release while ksail.prod.yaml and the deploy/DR paths are bumped, this test still passes because it only reads ACTION and DR_REBUILD. That leaves the PR-event machine-config validation running a different talosctl than the production pin without this guard catching the drift; include CI_WORKFLOW's setup step here, or add a separate assertion against KSAIL_PROD_TALOS_VERSION.
Useful? React with 👍 / 👎.
| # Pin Talos to match the ISO so 'ksail cluster update' doesn't attempt | ||
| # an unwanted in-place upgrade to ksail's default version. | ||
| version: v1.13.5 | ||
| version: v1.13.6 |
There was a problem hiding this comment.
When GitHub Actions is unavailable and an operator follows the manual DR rebuild in docs/dr/runbook.md, it still instructs them to use the prod-pinned v1.13.5 talosctl even though this line moves prod to v1.13.6. That leaves the emergency path using a different Talos client than the deploy/DR workflows for the GHCR bridge's Talos API calls; update the runbook to match or derive from this pin.
Useful? React with 👍 / 👎.
|
🎉 This PR is included in version 1.117.4 🎉 The release is available on GitHub release Your semantic-release bot 📦🚀 |
This PR contains the following updates:
1.13.5→1.13.6Release Notes
siderolabs/talos (siderolabs/talos)
v1.13.6Compare Source
Talos 1.13.6 (2026-07-09)
Welcome to the v1.13.6 release of Talos!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Component Updates
Linux: 6.18.38
Talos is built with Go 1.26.5.
Contributors
Changes
15 commits
0431885release(v1.13.6): prepare release9d8e47dchore: update pkgs and tools31552f4fix: shutdown/reboot via usermode helpersbc0c3f3fix: flaky serviceaccount suite test3e75592fix: flaky testsfbe4d90fix: data race in manifest sync6df3a45fix: provide cooldown period for the QoS trigger85f8dd6fix: decode extraArgs list values correctlyc2a56d5fix: kubelet stuck restarting8714408chore: bump rekor for GHSA-47q9-m4ww-924m3e37ef8fix: handle image cache being disabled466bcd8fix: align documented image cache partition labeld3cf09bfix: image verification with referrerse9609b9feat: add AMD XGBE driver to initramfsf18efccchore: update depsChanges from siderolabs/gen
1 commit
c526410fix: skip unknown-key check for types with custom YAML unmarshalerChanges from siderolabs/pkgs
7 commits
d8c80ccchore: update toolchain and tools71874fbfeat: bump kernel to 6.18.38a2406a1feat: bump kernel 6.18.37e410c35feat: update Linux firmware to2026062389b8aafix: patch Linux kernel for tunnel metadata buffer overflow7e4a719feat: add support for AMD XGBE driver1915c58feat: enable NF_TABLES_ARP optionChanges from siderolabs/tools
1 commit
c58afd5chore: bump toolchainDependency Changes
Previous release can be found at v1.13.5
Images
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.