fix(deps): update dependency aqua:siderolabs/talos ( 1.13.2 ➔ 1.13.7 )

[parsec-renovate]

This PR contains the following updates:

Package	Update	Change
aqua:siderolabs/talos	patch	1.13.2 → 1.13.7

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

siderolabs/talos (aqua:siderolabs/talos)

v1.13.7

Compare Source

Talos 1.13.7 (2026-07-21)

Welcome to the v1.13.7 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Component Updates

Linux: 6.18.39
containerd: 2.2.6
Flannel: 0.28.7
CoreDNS: 1.14.4

Talos is built with Go 1.26.5.

Contributors

• Andrey Smirnov
• Mateusz Urbanek
• Noel Georgi
• Calin
• Dario Emerson
• Maja Bojarska

Changes

19 commits

• @​b0039b7 release(v1.13.7): prepare release
• @​fc6f9b1 test: add nginx to the image cache integration
• @​c6c435b test: increase resource inmem buffer to stabilize the tests
• @​202dc15 fix: add ca-certificates to talosctl
• @​3a14c8d fix: vrf sorting
• @​a4c1e6e fix: oom podruntime protection
• @​57b8616 feat: bump CoreDNS, Flannel
• @​58a78fe fix: use symlinks for init aliases
• @​428872b fix: do proper backoff for NTP Kiss-of-Death responses
• @​1d55e28 feat: add iommufd as a kernel module
• @​576638d fix: make audit restartable
• @​76328f9 fix: avoid image cache mount request churn
• @​46f9ac6 feat: bring in ifb.ko module
• @​0d752e7 fix: provide correct handler for Ctrl-Alt-Delete sequence
• @​fe9d330 fix: terminate log persistence a bit harder
• @​7c8021a feat: add --no-reboot flag to upgrade cmd
• @​a155bad fix: do not block volume lifecycle teardown on failed user volumes
• @​c63f078 fix: flaky tests
• @​2bf6b74 feat: bring in Linux 6.18.39, containerd 2.2.6

Changes from siderolabs/pkgs

6 commits

• siderolabs/pkgs@91fe0a0 feat: update Linux to 6.18.39
• siderolabs/pkgs@1018556 feat: enable CONFIG_IOMMUFD and CONFIG_VFIO_DEVICE_CDEV
• siderolabs/pkgs@d529479 chore: bump nvidia to 580.167.08
• siderolabs/pkgs@971fd23 fix: enable CONFIG_IFB as a module
• siderolabs/pkgs@acece91 feat: update DRBD to 9.3.3
• siderolabs/pkgs@b91905c feat: update containerd to 2.2.6

Changes from siderolabs/tools

1 commit

• siderolabs/tools@c2844e6 feat: update util-linux to 2.42.2

Dependency Changes

• github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.4.0 -> v1.5.0
• github.com/aws/aws-sdk-go-v2/service/kms v1.51.1 -> v1.52.0
• github.com/docker/cli v29.4.0 -> v29.4.3
• github.com/google/go-containerregistry v0.21.5 -> v0.21.6
• github.com/klauspost/compress v1.18.5 -> v1.18.6
• github.com/moby/moby/api v1.54.1 -> v1.54.2
• github.com/moby/moby/client v0.4.0 -> v0.4.1
• github.com/siderolabs/pkgs v1.13.0-43-gd8c80cc -> v1.13.0-49-g91fe0a0
• github.com/siderolabs/talos/pkg/machinery v1.13.6 -> v1.13.7
• github.com/siderolabs/tools v1.13.0-7-gc58afd5 -> v1.13.0-8-gc2844e6
• github.com/sigstore/sigstore v1.10.6 -> v1.10.8
• github.com/sigstore/sigstore-go v1.1.4 -> v1.2.0
• github.com/theupdateframework/go-tuf/v2 v2.4.1 -> 7e8f69f
• google.golang.org/grpc v1.81.0 -> v1.81.1

Previous release can be found at v1.13.6

Images

ghcr.io/siderolabs/flannel:0.28.7
registry.k8s.io/coredns/coredns:v1.14.4
registry.k8s.io/etcd:v3.6.12
registry.k8s.io/pause:3.10.1
registry.k8s.io/kube-apiserver:v1.36.2
registry.k8s.io/kube-controller-manager:v1.36.2
registry.k8s.io/kube-scheduler:v1.36.2
registry.k8s.io/kube-proxy:v1.36.2
ghcr.io/siderolabs/kubelet:v1.36.2
registry.k8s.io/networking/kube-network-policies:v1.1.0
ghcr.io/siderolabs/installer:v1.13.7
ghcr.io/siderolabs/installer-base:v1.13.7
ghcr.io/siderolabs/imager:v1.13.7
ghcr.io/siderolabs/talos:v1.13.7
ghcr.io/siderolabs/talosctl-all:v1.13.7
ghcr.io/siderolabs/overlays:v1.13.7
ghcr.io/siderolabs/extensions:v1.13.7

v1.13.6

Compare Source

Talos 1.13.6 (2026-07-09)

Welcome to the v1.13.6 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Component Updates

Linux: 6.18.38

Talos is built with Go 1.26.5.

Contributors

• Andrey Smirnov
• Mateusz Urbanek
• Noel Georgi
• Maja Bojarska
• Mark Glants

Changes

15 commits

• @​0431885 release(v1.13.6): prepare release
• @​9d8e47d chore: update pkgs and tools
• @​31552f4 fix: shutdown/reboot via usermode helpers
• @​bc0c3f3 fix: flaky serviceaccount suite test
• @​3e75592 fix: flaky tests
• @​fbe4d90 fix: data race in manifest sync
• @​6df3a45 fix: provide cooldown period for the QoS trigger
• @​85f8dd6 fix: decode extraArgs list values correctly
• @​c2a56d5 fix: kubelet stuck restarting
• @​8714408 chore: bump rekor for GHSA-47q9-m4ww-924m
• @​3e37ef8 fix: handle image cache being disabled
• @​466bcd8 fix: align documented image cache partition label
• @​d3cf09b fix: image verification with referrers
• @​e9609b9 feat: add AMD XGBE driver to initramfs
• @​f18efcc chore: update deps

Changes from siderolabs/gen

1 commit

• siderolabs/gen@c526410 fix: skip unknown-key check for types with custom YAML unmarshaler

Changes from siderolabs/pkgs

7 commits

• siderolabs/pkgs@d8c80cc chore: update toolchain and tools
• siderolabs/pkgs@71874fb feat: bump kernel to 6.18.38
• siderolabs/pkgs@a2406a1 feat: bump kernel 6.18.37
• siderolabs/pkgs@e410c35 feat: update Linux firmware to 2026062
• siderolabs/pkgs@389b8aa fix: patch Linux kernel for tunnel metadata buffer overflow
• siderolabs/pkgs@7e4a719 feat: add support for AMD XGBE driver
• siderolabs/pkgs@1915c58 feat: enable NF_TABLES_ARP option

Changes from siderolabs/tools

1 commit

• siderolabs/tools@c58afd5 chore: bump toolchain

Dependency Changes

• github.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.0 -> v1.21.1
• github.com/aws/aws-sdk-go-v2 v1.41.4 -> v1.41.7
• github.com/aws/aws-sdk-go-v2/config v1.32.12 -> v1.32.17
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.20 -> v1.18.23
• github.com/aws/aws-sdk-go-v2/service/kms v1.50.3 -> v1.51.1
• github.com/aws/smithy-go v1.24.2 -> v1.25.1
• github.com/siderolabs/gen v0.8.6 -> v0.8.7
• github.com/siderolabs/pkgs v1.13.0-36-g6b315f7 -> v1.13.0-43-gd8c80cc
• github.com/siderolabs/talos/pkg/machinery v1.13.5 -> v1.13.6
• github.com/siderolabs/tools v1.13.0-6-g9b78252 -> v1.13.0-7-gc58afd5
• github.com/sigstore/cosign/v3 v3.0.5 -> v3.0.6
• github.com/sigstore/sigstore v1.10.5 -> v1.10.6
• go.uber.org/zap v1.27.1 -> v1.28.0

Previous release can be found at v1.13.5

Images

ghcr.io/siderolabs/flannel:v0.28.5
registry.k8s.io/coredns/coredns:v1.14.2
registry.k8s.io/etcd:v3.6.12
registry.k8s.io/pause:3.10.1
registry.k8s.io/kube-apiserver:v1.36.2
registry.k8s.io/kube-controller-manager:v1.36.2
registry.k8s.io/kube-scheduler:v1.36.2
registry.k8s.io/kube-proxy:v1.36.2
ghcr.io/siderolabs/kubelet:v1.36.2
registry.k8s.io/networking/kube-network-policies:v1.0.0
ghcr.io/siderolabs/installer:v1.13.6
ghcr.io/siderolabs/installer-base:v1.13.6
ghcr.io/siderolabs/imager:v1.13.6
ghcr.io/siderolabs/talos:v1.13.6
ghcr.io/siderolabs/talosctl-all:v1.13.6
ghcr.io/siderolabs/overlays:v1.13.6
ghcr.io/siderolabs/extensions:v1.13.6

v1.13.5

Compare Source

Talos 1.13.5 (2026-06-22)

Welcome to the v1.13.5 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Component Updates

Linux: 6.18.36
containerd: 2.2.5
runc: 1.4.3

Talos is built with Go 1.26.4.

Contributors

• Andrey Smirnov
• Maja Bojarska
• Noel Georgi
• Mateusz Urbanek
• Aleksei Sviridkin

Changes

9 commits

• @​51b0d8e release(v1.13.5): prepare release
• @​c5089c6 fix: bump number of open files for etcd
• @​e0b4d9d fix: stop the log persistence and close all files on shutdown
• @​23a080d fix: honor FailurePauseTimeout when pausing before reboot
• @​9adc63a fix: correct the link alias condition
• @​b902f9d feat: verify go.mod tidiness in generate target
• @​765f0a1 fix: relax LUKS header validation
• @​d63aba4 feat: update pkgs and Kubernetes
• @​f0a5842 fix: update go.mod and rekres

Changes from siderolabs/pkgs

8 commits

• siderolabs/pkgs@6b315f7 chore: update zfs to 2.4.3
• siderolabs/pkgs@ebf23f3 feat: update Linux to 6.18.36
• siderolabs/pkgs@7eed62d chore: bump containerd to 2.2.5 (cve patches)
• siderolabs/pkgs@8b67bab chore: update nvidia driver lts to 580.167.08
• siderolabs/pkgs@8cb61b2 feat: bump runc
• siderolabs/pkgs@d736aef feat: bump kernel to 6.18.35
• siderolabs/pkgs@7ede376 fix: avoid page_table_check BUG on time namespace VVAR page
• siderolabs/pkgs@e69debd feat: update tools and rekres

Changes from siderolabs/tools

2 commits

• siderolabs/tools@9b78252 feat: update ca-certificates to 2026-05-14
• siderolabs/tools@4d13aff feat: bump OpenSSL to 3.6.3

Dependency Changes

• github.com/ryanuber/columnize v2.1.2 new
• github.com/siderolabs/go-blockdevice/v2 v2.0.28 -> v2.0.30
• github.com/siderolabs/pkgs v1.13.0-28-g54ec9fc -> v1.13.0-36-g6b315f7
• github.com/siderolabs/talos/pkg/machinery v1.13.4 -> v1.13.5
• github.com/siderolabs/tools v1.13.0-4-ga06bb31 -> v1.13.0-6-g9b78252
• k8s.io/api v0.36.1 -> v0.36.2
• k8s.io/apiextensions-apiserver v0.36.1 -> v0.36.2
• k8s.io/apimachinery v0.36.1 -> v0.36.2
• k8s.io/apiserver v0.36.1 -> v0.36.2
• k8s.io/client-go v0.36.1 -> v0.36.2
• k8s.io/component-base v0.36.1 -> v0.36.2
• k8s.io/cri-api v0.36.1 -> v0.36.2
• k8s.io/kube-scheduler v0.36.1 -> v0.36.2
• k8s.io/kubectl v0.36.1 -> v0.36.2
• k8s.io/kubelet v0.36.1 -> v0.36.2
• k8s.io/pod-security-admission v0.36.1 -> v0.36.2

Previous release can be found at v1.13.4

Images

ghcr.io/siderolabs/flannel:v0.28.5
registry.k8s.io/coredns/coredns:v1.14.2
registry.k8s.io/etcd:v3.6.12
registry.k8s.io/pause:3.10.1
registry.k8s.io/kube-apiserver:v1.36.2
registry.k8s.io/kube-controller-manager:v1.36.2
registry.k8s.io/kube-scheduler:v1.36.2
registry.k8s.io/kube-proxy:v1.36.2
ghcr.io/siderolabs/kubelet:v1.36.2
registry.k8s.io/networking/kube-network-policies:v1.0.0
ghcr.io/siderolabs/installer:v1.13.5
ghcr.io/siderolabs/installer-base:v1.13.5
ghcr.io/siderolabs/imager:v1.13.5
ghcr.io/siderolabs/talos:v1.13.5
ghcr.io/siderolabs/talosctl-all:v1.13.5
ghcr.io/siderolabs/overlays:v1.13.5
ghcr.io/siderolabs/extensions:v1.13.5

v1.13.4

Compare Source

Talos 1.13.4 (2026-06-09)

Welcome to the v1.13.4 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Component Updates

Linux: 6.18.34
etcd: v2.6.12
Flannel: v0.28.5

Talos is built with Go 1.26.4.

Contributors

• Andrey Smirnov
• Noel Georgi
• Mateusz Urbanek
• Orzelius
• Erwan Leboucher
• Jonny
• Rokoucha
• appkins

Changes

17 commits

• @​707dbd8 release(v1.13.4): prepare release
• @​27d7a19 fix: handle cluster-scoped resources with a namespace correctly
• @​fe74e00 chore: update deps
• @​f44cafb fix: recreate dns server and listeners on host DNS runner restart
• @​5ed296b fix: marshal kube-scheduler config correctly with int types
• @​5992015 fix: machine configuration schemas
• @​b8dfda7 fix: mark more resources as sensitive
• @​aad841b feat: update Flannel to v0.28.5
• @​7c0900b fix(ci): aws nvidia tests
• @​9f5122d fix: flaky test
• @​cf62af3 fix: etcd client leak in the (legacy) Upgrade API
• @​d5c3136 feat: enforce strict QoS ordering in OOM victim selection
• @​b5ad39e feat: update etcd to v3.6.12
• @​c83dad3 fix: health request server-side
• @​577cc6f fix: bring in a change to BCM2712_MIP
• @​29da68a fix: touch rootfs files with SOURCE_DATE_EPOCH
• @​b19a03b fix: ignore cgroups with zero rank in OOM handler

Changes from siderolabs/go-kubernetes

1 commit

• siderolabs/go-kubernetes@131a2bd fix: handle cluster-scoped resources with a ns correctly

Changes from siderolabs/pkgs

5 commits

• siderolabs/pkgs@54ec9fc fix: disable PAGE_TABLE_CHECK_ENFORCED in kernel config
• siderolabs/pkgs@0d5985a feat: enable USB hiddev for apcupsd support
• siderolabs/pkgs@593e34c feat: bump kernel to 6.18.34
• siderolabs/pkgs@366f575 fix: enable CONFIG_BCM2712_MIP as built-in in arm64 kernel config
• siderolabs/pkgs@b45e84c feat: bump Go to 1.26.4

Changes from siderolabs/tools

2 commits

• siderolabs/tools@a06bb31 feat: bump go to 1.26.4
• siderolabs/tools@9bb7abe feat: update libcap to 2.78

Dependency Changes

• github.com/siderolabs/go-kubernetes v0.2.37 -> v0.2.38
• github.com/siderolabs/pkgs v1.13.0-23-g8c18616 -> v1.13.0-28-g54ec9fc
• github.com/siderolabs/talos/pkg/machinery v1.13.3 -> v1.13.4
• github.com/siderolabs/tools v1.13.0-2-g1fb762a -> v1.13.0-4-ga06bb31
• go.etcd.io/etcd/api/v3 v3.6.11 -> v3.6.12
• go.etcd.io/etcd/client/pkg/v3 v3.6.11 -> v3.6.12
• go.etcd.io/etcd/client/v3 v3.6.11 -> v3.6.12
• go.etcd.io/etcd/etcdutl/v3 v3.6.11 -> v3.6.12

Previous release can be found at v1.13.3

Images

ghcr.io/siderolabs/flannel:v0.28.5
registry.k8s.io/coredns/coredns:v1.14.2
registry.k8s.io/etcd:v3.6.12
registry.k8s.io/pause:3.10.1
registry.k8s.io/kube-apiserver:v1.36.1
registry.k8s.io/kube-controller-manager:v1.36.1
registry.k8s.io/kube-scheduler:v1.36.1
registry.k8s.io/kube-proxy:v1.36.1
ghcr.io/siderolabs/kubelet:v1.36.1
registry.k8s.io/networking/kube-network-policies:v1.0.0
ghcr.io/siderolabs/installer:v1.13.4
ghcr.io/siderolabs/installer-base:v1.13.4
ghcr.io/siderolabs/imager:v1.13.4
ghcr.io/siderolabs/talos:v1.13.4
ghcr.io/siderolabs/talosctl-all:v1.13.4
ghcr.io/siderolabs/overlays:v1.13.4
ghcr.io/siderolabs/extensions:v1.13.4

v1.13.3

Compare Source

Talos 1.13.3 (2026-05-26)

Welcome to the v1.13.3 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Component Updates

Linux: 6.18.33
Kubernetes: 1.36.1
containerd: 2.2.4

Talos is built with Go 1.26.3.

Contributors

• Andrey Smirnov
• Noel Georgi
• Lukasz Raczylo
• Maja Bojarska
• Mateusz Urbanek
• Utku Ozdemir

Changes

19 commits

• @​befeda7 release(v1.13.3): prepare release
• @​f4d4510 feat(ci): rotate credentials
• @​01b4348 fix: guard apply config API call
• @​a42c37f feat(machined): support instance tags on Akamai
• @​d62d54c fix: memorymodules resource reporting
• @​b673b4b fix: bump Go golang.org/x modules
• @​19755ad feat: add bnxt_re module to the rootfs
• @​532bc6b fix: relax hostname config validation
• @​3bbd3ed fix: bump Kubernetes to 1.36.1 in one more place
• @​472b9d9 feat: update default Kubernetes version to 1.36.1
• @​6d53ce0 chore(ci): fix cloud image upload job name
• @​5633c77 fix: rework how scheduler config is marshaled
• @​52f0560 fix: restore some shared (and some lower tier slave) mount propagation
• @​9de3c12 fix: image verification issue with registry.k8s.io
• @​7dc716d feat: redact more machine config secrets and audit redactors
• @​d5448c6 chore(ci): try fixing homebrew action
• @​ef9f0bf docs: drop controlplane endpoint examples
• @​7ee3e78 feat: update Linux to 6.18.33
• @​e99744b fix: update containerd to 2.2.4

Changes from siderolabs/go-smbios

1 commit

• siderolabs/go-smbios@063f5dc chore: rekres + new testdata

Changes from siderolabs/pkgs

12 commits

• siderolabs/pkgs@8c18616 feat: pre-generate drbd patches using spatch out of tree
• siderolabs/pkgs@82e70a0 feat: update Linux to 6.18.33
• siderolabs/pkgs@993d4a6 feat: enable PPP and INFINIBAND_BNXT_RE
• siderolabs/pkgs@12d5337 feat: enable more options for CRI-U checkpoint/restore
• siderolabs/pkgs@c2e43aa feat: preserve System.map on kernel builds
• siderolabs/pkgs@230b4bc chore: update deps
• siderolabs/pkgs@847a37e feat: bump kernel 6.18.32
• siderolabs/pkgs@d7ae843 feat: update Linux to 6.18.31
• siderolabs/pkgs@a26d3c0 feat: update ZFS & NVIDIA LTS
• siderolabs/pkgs@94d28c5 feat: update Linux to 6.18.30
• siderolabs/pkgs@b3dd525 fix: macb silent TX stall on BCM2712/RP1 (v2 patches from netdev)
• siderolabs/pkgs@8bdd5e0 feat: update containerd to 2.2.4

Dependency Changes

• github.com/containerd/containerd/v2 v2.2.2 -> v2.2.4
• github.com/siderolabs/go-smbios v0.3.3 -> v0.3.4
• github.com/siderolabs/pkgs v1.13.0-11-g969f61c -> v1.13.0-23-g8c18616
• github.com/siderolabs/talos/pkg/machinery v1.13.2 -> v1.13.3
• golang.org/x/net v0.53.0 -> v0.55.0
• golang.org/x/sys v0.43.0 -> v0.45.0
• golang.org/x/term v0.42.0 -> v0.43.0
• golang.org/x/text v0.36.0 -> v0.37.0
• google.golang.org/grpc v1.79.3 -> v1.81.0
• k8s.io/api v0.36.0 -> v0.36.1
• k8s.io/apiextensions-apiserver v0.36.0 -> v0.36.1
• k8s.io/apimachinery v0.36.0 -> v0.36.1
• k8s.io/apiserver v0.36.0 -> v0.36.1
• k8s.io/client-go v0.36.0 -> v0.36.1
• k8s.io/component-base v0.36.0 -> v0.36.1
• k8s.io/kube-scheduler v0.36.0 -> v0.36.1
• k8s.io/kubectl v0.36.0 -> v0.36.1
• k8s.io/kubelet v0.36.0 -> v0.36.1
• k8s.io/pod-security-admission v0.36.0 -> v0.36.1

Previous release can be found at v1.13.2

Images

ghcr.io/siderolabs/flannel:v0.28.4
registry.k8s.io/coredns/coredns:v1.14.2
registry.k8s.io/etcd:v3.6.11
registry.k8s.io/pause:3.10.1
registry.k8s.io/kube-apiserver:v1.36.1
registry.k8s.io/kube-controller-manager:v1.36.1
registry.k8s.io/kube-scheduler:v1.36.1
registry.k8s.io/kube-proxy:v1.36.1
ghcr.io/siderolabs/kubelet:v1.36.1
registry.k8s.io/networking/kube-network-policies:v1.0.0
ghcr.io/siderolabs/installer:v1.13.3
ghcr.io/siderolabs/installer-base:v1.13.3
ghcr.io/siderolabs/imager:v1.13.3
ghcr.io/siderolabs/talos:v1.13.3
ghcr.io/siderolabs/talosctl-all:v1.13.3
ghcr.io/siderolabs/overlays:v1.13.3
ghcr.io/siderolabs/extensions:v1.13.3

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.