Talos 1.13.11 (2026-10-01)
Welcome to the v1.13.11 release of Talos!
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
Time Check API
The TimeService/TimeCheck API (talosctl time --check) is no longer available to the os:reader role, as it allows querying
arbitrary time servers from the node. The TimeService/Time API (querying the configured time server) is still available to os:reader.
PTP device paths are now strictly validated both in the machine configuration and in the API: the path should be directly under /dev,
the name should start with ptp (e.g. /dev/ptp0, /dev/ptp_kvm), and the device should be a PTP character device.
Component Updates
Linux: 6.18.54 containerd: 2.2.9
Talos is built with Go 1.26.7
Contributors
- Andrey Smirnov
- Maja Bojarska
- Noel Georgi
- Raphaël DUCOM
- Utku Ozdemir
Changes
13 commits
* siderolabs/talos@638bd9493 release(v1.13.11): prepare release * siderolabs/talos@5f3e4fce3 test: fix up tests for default OCI spec * siderolabs/talos@4fe094e73 fix: add validation for the PTP device name * siderolabs/talos@56c81cffd fix: drop devices from the last observed generation if they are gone * siderolabs/talos@bd7a2d4dc fix: perform stricter validation of hostnames/search domains * siderolabs/talos@dbe8e022c fix: do not disclose pre-shared Wireguard key in LinkStatus * siderolabs/talos@00db0af77 chore: pass kernel version down to VEX generator * siderolabs/talos@500899185 fix: reconnect the WireGuard over gRPC tunnel after a failure * siderolabs/talos@0077a50ed fix: drop logical links if they no longer declare as logical * siderolabs/talos@29b1e6536 fix: notify about link alias changes * siderolabs/talos@118a77363 fix(security): define the permissions the 6.18 kernel expects in the classes * siderolabs/talos@365e3c4f6 fix: set TCP keealive and user timeout on apid proxied connections * siderolabs/talos@080979b4c feat: update pkgs/tools
Changes from siderolabs/pkgs
10 commits
* siderolabs/pkgs@642a01b feat: update containerd to 2.2.9 * siderolabs/pkgs@3016b61 fix: add a patch to fix booting on Apple hardware * siderolabs/pkgs@889ec2b feat: update Linux to 6.18.54 * siderolabs/pkgs@b554743 feat: update Linux to 6.18.53 * siderolabs/pkgs@574809b feat: update DRBD & Linux firmware * siderolabs/pkgs@6f29f5d feat: update Linux to 6.18.52 * siderolabs/pkgs@1737c02 feat: update Linux to 6.18.51 * siderolabs/pkgs@6b76586 feat: update Linux to 6.18.50 * siderolabs/pkgs@bb9fe70 feat: bump kernel to 6.18.49 * siderolabs/pkgs@6187366 chore: sync tools
Changes from siderolabs/tools
2 commits
* siderolabs/tools@b912600 feat: update pcre to 10.48 * siderolabs/tools@7b95365 chore: bump util-linux 2.42.3
Dependency Changes
- github.com/siderolabs/pkgs v1.13.0-65-g9b044c5 -> v1.13.0-75-g642a01b
- github.com/siderolabs/talos/pkg/machinery v1.13.10 -> v1.13.11
- github.com/siderolabs/tools v1.13.0-12-gc70be08 -> v1.13.0-14-gb912600
Previous release can be found at v1.13.10
Images
ghcr.io/siderolabs/flannel:0.28.8
registry.k8s.io/coredns/coredns:v1.14.7
registry.k8s.io/etcd:v3.6.14
registry.k8s.io/pause:3.10.1
registry.k8s.io/kube-apiserver:v1.36.3
registry.k8s.io/kube-controller-manager:v1.36.3
registry.k8s.io/kube-scheduler:v1.36.3
registry.k8s.io/kube-proxy:v1.36.3
ghcr.io/siderolabs/kubelet:v1.36.3
registry.k8s.io/networking/kube-network-policies:v1.1.0
ghcr.io/siderolabs/installer:v1.13.11
ghcr.io/siderolabs/installer-base:v1.13.11
ghcr.io/siderolabs/imager:v1.13.11
ghcr.io/siderolabs/talos:v1.13.11
ghcr.io/siderolabs/talosctl-all:v1.13.11
ghcr.io/siderolabs/overlays:v1.13.11
ghcr.io/siderolabs/extensions:v1.13.11
