chore(container): update image ghcr.io/siderolabs/talosctl to v1.13.9

[daddy-ro]

This PR contains the following updates:

Package	Update	Change
ghcr.io/siderolabs/talosctl	patch	v1.13.7 → v1.13.9

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

siderolabs/talos (ghcr.io/siderolabs/talosctl)

v1.13.9

Compare Source

Talos 1.13.9 (2026-08-19)

Welcome to the v1.13.9 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Component Updates

Linux: 6.18.44
containerd: 2.2.7
Kubernetes: 1.36.3

Talos is built with Go 1.26.6.

Contributors

• Andrey Smirnov
• Noel Georgi

Changes

7 commits

• @​3ebd10a release(v1.13.9): prepare release
• @​9ade215 feat: update Kubernetes to 1.36.3
• @​14343cd test: save the provision test logs
• @​b33e5fc fix: support try mode apply without prior config
• @​6a8f295 fix: share IPC namespace with the host for extension services
• @​b525b82 fix: size the receive/send buffers for nftables netlink
• @​7ac5264 feat: update Go to 1.26.6

Changes from siderolabs/pkgs

5 commits

• siderolabs/pkgs@f541ca4 feat: bump kernel to 6.18.44
• siderolabs/pkgs@a4f2c26 feat: bump kernel to 6.18.43
• siderolabs/pkgs@79a7531 feat: update Linux firmware to 2026081
• siderolabs/pkgs@89d76bf feat: update backportable dependencies
• siderolabs/pkgs@af6c08a feat: update Go to 1.26.6

Changes from siderolabs/tools

1 commit

• siderolabs/tools@a201d19 feat: update Go to 1.26.6

Dependency Changes

• github.com/siderolabs/pkgs v1.13.0-55-gf677246 -> v1.13.0-60-gf541ca4
• github.com/siderolabs/talos/pkg/machinery v1.13.8 -> v1.13.9
• github.com/siderolabs/tools v1.13.0-8-gc2844e6 -> v1.13.0-9-ga201d19
• golang.org/x/net v0.57.0 -> v0.58.0
• golang.org/x/text v0.40.0 -> v0.41.0
• k8s.io/api v0.36.2 -> v0.36.3
• k8s.io/apiextensions-apiserver v0.36.2 -> v0.36.3
• k8s.io/apimachinery v0.36.2 -> v0.36.3
• k8s.io/apiserver v0.36.2 -> v0.36.3
• k8s.io/client-go v0.36.2 -> v0.36.3
• k8s.io/component-base v0.36.2 -> v0.36.3
• k8s.io/cri-api v0.36.2 -> v0.36.3
• k8s.io/kube-scheduler v0.36.2 -> v0.36.3
• k8s.io/kubectl v0.36.2 -> v0.36.3
• k8s.io/kubelet v0.36.2 -> v0.36.3
• k8s.io/pod-security-admission v0.36.2 -> v0.36.3

Previous release can be found at v1.13.8

Images

ghcr.io/siderolabs/flannel:0.28.8
registry.k8s.io/coredns/coredns:v1.14.6
registry.k8s.io/etcd:v3.6.12
registry.k8s.io/pause:3.10.1
registry.k8s.io/kube-apiserver:v1.36.3
registry.k8s.io/kube-controller-manager:v1.36.3
registry.k8s.io/kube-scheduler:v1.36.3
registry.k8s.io/kube-proxy:v1.36.3
ghcr.io/siderolabs/kubelet:v1.36.3
registry.k8s.io/networking/kube-network-policies:v1.1.0
ghcr.io/siderolabs/installer:v1.13.9
ghcr.io/siderolabs/installer-base:v1.13.9
ghcr.io/siderolabs/imager:v1.13.9
ghcr.io/siderolabs/talos:v1.13.9
ghcr.io/siderolabs/talosctl-all:v1.13.9
ghcr.io/siderolabs/overlays:v1.13.9
ghcr.io/siderolabs/extensions:v1.13.9

v1.13.8

Compare Source

Talos 1.13.8 (2026-08-04)

Welcome to the v1.13.8 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Component Updates

Linux: 6.18.42
CoreDNS: 1.14.6
Flannel: 0.28.8

Talos is built with Go 1.26.5.

Contributors

• Andrey Smirnov
• Mateusz Urbanek
• Noel Georgi
• ctr49
• imusmanmalik
• kastakhov

Changes

14 commits

• @​3de4932 release(v1.13.8): prepare release
• @​76de777 chore: update dependencies
• @​77d5fe2 chore: update pkgs
• @​a7db9b2 fix: verify the public key signed images correctly
• @​d769389 fix: use context without cancelation for etcd locks
• @​3a2abc0 fix: redact resource specs in the merge controllers
• @​1531797 fix(machined): preserve health when services reach running
• @​fc75754 fix: race with PCR extensions and volume unlock
• @​2a51fb1 feat: update Flannel to 0.28.8
• @​05471d3 feat: update CoreDNS to 1.14.6
• @​9e0b1ca fix: volume mount race (third attempt) around service restart
• @​c5cb365 fix: ignore insecure-only imager assets
• @​c67b10d test: update Calico in canal reset test
• @​9eca6ea fix: preserve trailing rate-limited trigger events

Changes from siderolabs/pkgs

6 commits

• siderolabs/pkgs@f677246 chore: update kernel
• siderolabs/pkgs@6c5daf2 chore: replace gnu mirror
• siderolabs/pkgs@4304e87 feat: bump kernel to 6.18.41
• siderolabs/pkgs@e66edeb feat: enable PCF8523 RTC support for arm64
• siderolabs/pkgs@b2e51fc feat: bump kernel to 6.18.40
• siderolabs/pkgs@33195c5 feat: enable CONFIG_NFT_SOCKET in the kernel

Dependency Changes

• github.com/google/cel-go v0.28.0 -> v0.29.0
• github.com/gopacket/gopacket v1.5.0 -> v1.6.1
• github.com/klauspost/compress v1.18.6 -> v1.18.7
• github.com/siderolabs/pkgs v1.13.0-49-g91fe0a0 -> v1.13.0-55-gf677246
• github.com/siderolabs/talos/pkg/machinery v1.13.7 -> v1.13.8
• github.com/sigstore/sigstore-go v1.2.0 -> v1.2.1
• golang.org/x/net v0.55.0 -> v0.57.0
• golang.org/x/sync v0.20.0 -> v0.22.0
• golang.org/x/sys v0.45.0 -> v0.47.0
• golang.org/x/term v0.43.0 -> v0.45.0
• golang.org/x/text v0.37.0 -> v0.40.0
• google.golang.org/grpc v1.81.1 -> v1.82.1

Previous release can be found at v1.13.7

Images

ghcr.io/siderolabs/flannel:0.28.8
registry.k8s.io/coredns/coredns:v1.14.6
registry.k8s.io/etcd:v3.6.12
registry.k8s.io/pause:3.10.1
registry.k8s.io/kube-apiserver:v1.36.2
registry.k8s.io/kube-controller-manager:v1.36.2
registry.k8s.io/kube-scheduler:v1.36.2
registry.k8s.io/kube-proxy:v1.36.2
ghcr.io/siderolabs/kubelet:v1.36.2
registry.k8s.io/networking/kube-network-policies:v1.1.0
ghcr.io/siderolabs/installer:v1.13.8
ghcr.io/siderolabs/installer-base:v1.13.8
ghcr.io/siderolabs/imager:v1.13.8
ghcr.io/siderolabs/talos:v1.13.8
ghcr.io/siderolabs/talosctl-all:v1.13.8
ghcr.io/siderolabs/overlays:v1.13.8
ghcr.io/siderolabs/extensions:v1.13.8

---

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[daddy-ro]

konflate — summary

Note

+0 added · 1 changed · −0 removed — 1 resource · 1 app

Tip

Routine — only container-image and chart-version changes; nothing else changed.

Image changes

image	from	to
ghcr.io/siderolabs/talosctl	v1.13.7	v1.13.9

View the full rendered diff →

_{konflate · rendered c0d620f · advisory, not a gate}