k0sproject/k0s v1.36.1+k0s.0 on GitHub

What's Changed

Revert "Bump quay.io/k0sproject/kube-router Docker tag to v2.7.1" by @juanluisvaladas in #7152
Use a custom docker network in addons inttest by @twz123 in #7134
[Doc] Update OpenEBS example by @olofvndrhr in #7151
Make renovate calico links automatically by @juanluisvaladas in #7169
Make renovate keep track of release-1.35 by @juanluisvaladas in #7170
Remove Oracle Linux from nightly OS test matrix by @twz123 in #7176
Bump containerd to v2.2.1 by @morlay in #7011
Add CI job to lint for invisible Unicode characters by @twz123 in #7190
Fix calico-node restarts on BIRD mode by @juanluisvaladas in #7194
Delay join token parsing on worker until it is known that it is needed by @kke in #7204
Bump kubernetes to v1.35.2 by @juanluisvaladas in #7184
Fix branch for Renovate's 1.35 release version bumps by @twz123 in #7234
docs: fix typo in UpdaterConfig to UpdateConfig by @smiggiddy in #7247
Make Helm chart reconciliation interruption-aware and recover interrupted installs by @twz123 in #7177
Remove retry cap when waiting for Helm CRDs by @twz123 in #7217
Fix EtcdMember lease name mismatch by @makhov in #7243
Enable Kubernetes version bumps for releases 1.33 and 1.34 by @twz123 in #7210
Bump CoreDNS to v1.14.2 by @twz123 in #7275
Add cgroups v1 clarification to docs by @jnummelin in #7264
Check Go module versions more thoroughly by @twz123 in #7280
Use filepath.Join for local filesystem paths by @twz123 in #7274
Move containerd 1 indirect dependency into right section by @twz123 in #7288
Fix link in godoc for ATTACH_PARENT_PROCESS by @twz123 in #7299
Renovate improvements by @twz123 in #7316
Pin upload-release-asset GH action to node 20 for ARMv7 by @twz123 in #7309
Modify Kine build flags to match upstream by @juanluisvaladas in #7334
adopters/add-adopter-logsightai by @alek-thunder in #7322
Bump Kubernetes to v1.35.3 by @juanluisvaladas in #7333
Fix kube-dns address on dualstack clusters by @juanluisvaladas in #7342
[Docs] Update Traefik ingress documentation and fix MetalLB docs by @olofvndrhr in #7331
Docs: Remove minio from storage.md by @martimmoura in #7329
[renovate] Don't bump go in release-1.34 by @juanluisvaladas in #7356
docs: kubeproxy nftables version mismatch by @lethedata in #7292
Re-enable Helm reconciler concurrency by @jnummelin in #7378
[inttest] containerd v1 to v2 live migration by @juanluisvaladas in #7350
Some more gitattributes settings for Windows by @twz123 in #7409
Teach Renovate the k0s OCI image versioning scheme by @twz123 in #7430
Replace filepath.Glob with a custom loop by @twz123 in #7267
Add healthzBindAddress parameter to kubeProxy conf by @dodgex in #7384
Pin all GitHub Actions using their commit hashes by @twz123 in #7443
[kube-router] generate router-id for IPv6 by @juanluisvaladas in #7469
Check image platform when bundling artifacts by @twz123 in #7298
Switch from embedded bins to appended zip payloads by @twz123 in #6770
Don't bump Calico for release-1.35 by @twz123 in #7465
Hard-code the containerd git revision by @twz123 in #7479
Don't let Renovate bump indirect containerd v1 versions by @twz123 in #7466
Bump Alpine from 3.20 to 3.21 in ostests by @twz123 in #7483
Add GitHub Actions problem matchers for golangci-lint by @twz123 in #7474
Remove Dependabot rule for hack/tool/ by @twz123 in #7486
Let Renovate bump containerd 1.7 for release-1.35 by @twz123 in #7489
Fail on cgroup v1 in pre-flight (#7398) by @ncopa in #7418
Use distinct constants for Calico image versions by @twz123 in #7429
Deprecate disabling worker-config component by @juanluisvaladas in #7441
fix(autopilot): airgapupdate plan stuck on controller+worker nodes by @emosbaugh in #7304
Prevent unnecessary kube-router config reconciliations by @twz123 in #7449
Bump kubernetes to v1.35.4 by @juanluisvaladas in #7492
Let Renovate bump the OpenTofu modules by @twz123 in #7485
Default Chart release name to the object name when unset by @twz123 in #7480
Make airgap list-images platform-aware by @twz123 in #7459
Make StringMap args output deterministic by @twz123 in #7448
dynamic-config: immutable primaryAddressFamily by @juanluisvaladas in #7494
Require v3 configuration on containerd imports by @juanluisvaladas in #7376
Make konnectivity-agent work on Windows by @twz123 in #7520
Publish platform-specific airgap image lists and bundles by @twz123 in #7470
Roll kube-proxy DaemonSet on ConfigMap changes by @twz123 in #7450
docs: add Kubernetes AI conformance evidence page by @bnallapeta in #7537
docs: document version skew policy by @alliasgher in #7540
Bump iptables to 1.8.13 by @juanluisvaladas in #7538
Fix kubelet dual stack kubelet flags by @juanluisvaladas in #7468
docs: document k0s data and run directories by @alliasgher in #7539
Lint doc copyright in docs CI workflow by @twz123 in #7542
Fix the security context of konnectivity-agent by @twz123 in #7515
Bump kubernetes to 1.36.0 by @juanluisvaladas in #7458
Corrections and clarifications for the directory docs by @twz123 in #7543
Use less RBAC-heavy connection probing in k0s status by @twz123 in #7400
Kuberouter IPv6 network conformance tests by @juanluisvaladas in #6263
Bump controller-runtime to v0.24.0 by @juanluisvaladas in #7579
Bump calico to v3.32.0 by @juanluisvaladas in #7562
Document changes related to containerd v2 by @juanluisvaladas in #7526
Add Traefik as an alternative NLLB backend by @twz123 in #7405
Apply Helm Stack in-memory by @twz123 in #6742
[renovate] Fix kuberouter image regex by @juanluisvaladas in #7621
[CI] Split out the unittests job to a separate workflow_call file by @luhenry in #7606
Make controller --init-only work again by @twz123 in #7593
Enable API server's watch termination grace period by default by @twz123 in #7188
Don't use etcd component at all when external etcd is used by @twz123 in #7595
Improve network conformance tests flakyness by @juanluisvaladas in #7561
Only stage iptables if needed by @twz123 in #7596
Skip kuberouter IPv6 network conformance tests by @juanluisvaladas in #7638
Build admin kubeconfig directly from PKI files by @twz123 in #7600
Add emeritus maintainers on MAINTAINERS.md file. by @jnummelin in #7646
Add OpenRC retry settings comparable to systemd's defaults by @twz123 in #7664
Use runtime config lock as liveness guard for reset and worker by @twz123 in #7662
Only generate konnectivity kubeconfig if it's enabled by @twz123 in #7675
Bump kubernetes to v1.36.1 by @juanluisvaladas in #7637
Keep the old names when generating admin kubeconfigs by @twz123 in #7688
More consistently build pod and service CIDRs by @pschichtel in #7684
join new etcd members as learners and auto-promote by @makhov in #7629
Makefile: prune build/cache and inttest from GO_SRCS find by @ncopa in #7697
Set an appropriate status when a leaving member isn't found by @twz123 in #7650
Keep primary IP address family out of cluster-wide config by @twz123 in #7695
Self-remove from etcd cluster before stopping by @twz123 in #7649
Add containerd config drop-in validation to sysprobes by @jnummelin in #7693
Detect and reconcile stale EtcdMember objects by @twz123 in #7644
[renovate] Fix kubernetes version bumps for 1.35 by @juanluisvaladas in #7636
Add --ignore-pre-flight-checks to install cmds by @jnummelin in #7728
Don't use hard-coded containerd version in upgrade inttest by @twz123 in #7733
containerd 2.x: use native config merging instead of custom CRI merge logic by @jnummelin in #7713
Fix Autopilot labeling for worker node leases by @twz123 in #7731
Remove gold linker for ARM architectures by @twz123 in #7734
Makefile: fix chmod on MacOS by @ncopa in #7744
Correctly set lease labels by @twz123 in #7762
Wait for k0s api to boot before checking the cert in customca inttest by @jnummelin in #7765
Group Renovate PRs for konnectivity and Traefik by @twz123 in #7754
Remove v1.34 upgrade path by @twz123 in #7752
Strip default images from the config with non-default repo by @makhov in #7738
Remove bogus log line by @twz123 in #7624
Lint GitHub Actions workflows by @twz123 in #7774
Resource patches by @makhov in #7727
Always use node config when retrieving service CIDR and primary address family by @twz123 in #7781
Fix release signing with cosign v3.1 by @twz123 in #7785

New Contributors

@olofvndrhr made their first contribution in #7151
@morlay made their first contribution in #7011
@smiggiddy made their first contribution in #7247
@alek-thunder made their first contribution in #7322
@martimmoura made their first contribution in #7329
@lethedata made their first contribution in #7292
@dodgex made their first contribution in #7384
@alliasgher made their first contribution in #7540
@luhenry made their first contribution in #7606

Automatic version bumps

Bump modernc.org/sqlite from 1.45.0 to 1.46.0 by @dependabot[bot] in #7149
Bump docker.io/anchore/syft Docker tag to v1.42.1 by @k0s-bot in #7150
Bump quay.io/k0sproject/kube-router Docker tag to v2.7.1 by @k0s-bot in #7153
Bump modernc.org/sqlite from 1.46.0 to 1.46.1 by @dependabot[bot] in #7155
Bump mkdocs-material from 9.7.1 to 9.7.2 in /docs in the mkdocs group by @dependabot[bot] in #7156
Bump sigstore/cosign to v3.0.5 by @k0s-bot in #7158
Bump regex from 2026.1.15 to 2026.2.19 in /docs by @dependabot[bot] in #7164
Bump k3s-io/kine to v0.14.12 by @k0s-bot in #7162
Bump renovatebot/github-action from 46.1.1 to 46.1.2 by @dependabot[bot] in #7166
Bump docker.io/library/traefik Docker tag to v3.6.9 by @k0s-bot in #7168
Bump Calico to v3.31.4 by @k0s-bot in #7163
Bump mkdocs-material from 9.7.2 to 9.7.3 in /docs in the mkdocs group by @dependabot[bot] in #7171
Bump github.com/containerd/containerd/api from 1.9.0 to 1.10.0 by @dependabot[bot] in #7106
Bump go by @k0s-bot in #7092
Bump certifi from 2026.1.4 to 2026.2.25 in /docs by @dependabot[bot] in #7175
Bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 by @dependabot[bot] in #7185
Bump regex from 2026.2.19 to 2026.2.28 in /docs by @dependabot[bot] in #7193
Bump renovatebot/github-action from 46.1.2 to 46.1.3 by @dependabot[bot] in #7192
Bump moby/buildkit to v0.28.0 by @k0s-bot in #7212
Bump github.com/go-openapi/jsonpointer from 0.22.4 to 0.22.5 by @dependabot[bot] in #7207
Bump mkdocs-material from 9.7.3 to 9.7.4 in /docs in the mkdocs group by @dependabot[bot] in #7215
Bump korthout/backport-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #7223
Bump platformdirs from 4.9.2 to 4.9.4 in /docs by @dependabot[bot] in #7225
Bump sigs.k8s.io/controller-runtime from 0.23.1 to 0.23.3 by @dependabot[bot] in #7227
Bump github.com/cilium/ebpf from 0.20.0 to 0.21.0 by @dependabot[bot] in #7224
Bump docker.io/library/traefik Docker tag to v3.6.10 by @k0s-bot in #7230
Bump golangci/golangci-lint to v2.11.1 by @k0s-bot in #7229
Bump Mirantis/cri-dockerd to v0.4.2 by @k0s-bot in #7228
Bump google.golang.org/grpc from 1.79.1 to 1.79.2 by @dependabot[bot] in #7226
Bump k3s-io/kine to v0.14.14 by @k0s-bot in #7231
Bump go to v1.26.1 by @k0s-bot in #7222
Bump golangci/golangci-lint to v2.11.2 by @k0s-bot in #7233
Bump renovatebot/github-action from 46.1.3 to 46.1.4 by @dependabot[bot] in #7240
Bump golang.org/x/sys from 0.41.0 to 0.42.0 by @dependabot[bot] in #7239
Bump golang.org/x/sync from 0.19.0 to 0.20.0 by @dependabot[bot] in #7238
Bump mike from 2.1.3 to 2.1.4 in /docs by @dependabot[bot] in #7241
Bump golangci/golangci-lint to v2.11.3 by @k0s-bot in #7244
Bump docker.io/anchore/syft Docker tag to v1.42.2 by @k0s-bot in #7242
Bump docker/build-push-action from 6 to 7 by @dependabot[bot] in #7245
Bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #7218
Bump docker/login-action from 3 to 4 by @dependabot[bot] in #7214
Bump quay.io/k0sproject/envoy-distroless Docker tag to v1.37.1 by @k0s-bot in #7257
Bump golang.org/x/mod from 0.33.0 to 0.34.0 by @dependabot[bot] in #7261
Bump replicatedhq/troubleshoot to v0.124.0 by @k0s-bot in #7266
Bump golang.org/x/text from 0.34.0 to 0.35.0 by @dependabot[bot] in #7262
Bump docker.io/library/nginx Docker tag to v1.29.6 by @k0s-bot in #7249
Bump golang.org/x/time from 0.14.0 to 0.15.0 by @dependabot[bot] in #7260
Bump replicatedhq/troubleshoot to v0.124.1 by @k0s-bot in #7270
Bump Helm to v3.20.1 by @k0s-bot in #7271
Bump golang.org/x/crypto from 0.48.0 to 0.49.0 by @dependabot[bot] in #7278
Bump replicatedhq/troubleshoot to v0.125.0 by @k0s-bot in #7283
Bump golang.org/x/tools from 0.42.0 to 0.43.0 by @dependabot[bot] in #7277
Bump opencontainers/runc to v1.4.1 by @k0s-bot in #7286
Bump slackapi/slack-github-action from 2.1.1 to 3.0.1 by @dependabot[bot] in #7289
Bump renovatebot/github-action from 46.1.4 to 46.1.5 by @dependabot[bot] in #7296
Bump modernc.org/sqlite from 1.46.1 to 1.47.0 by @dependabot[bot] in #7301
Bump shogo82148/actions-upload-release-asset from 1.8.2 to 1.10.0 by @dependabot[bot] in #7297
Bump google.golang.org/grpc from 1.79.2 to 1.79.3 by @dependabot[bot] in #7306
Bump opentofu/setup-opentofu from 1 to 2 by @dependabot[bot] in #7300
Bump shogo82148/actions-create-release from 1.8.1 to 1.9.0 by @dependabot[bot] in #7295
Bump containerd to v2.2.2 by @k0s-bot in #7248
Bump importlib-metadata from 8.7.1 to 8.8.0 in /docs by @dependabot[bot] in #7318
Bump importlib-metadata from 8.8.0 to 9.0.0 in /docs by @dependabot[bot] in #7323
Bump docker.io/library/traefik Docker tag to v3.6.11 by @k0s-bot in #7320
Bump docker.io/anchore/syft Docker tag to v1.42.3 by @k0s-bot in #7319
Bump k3s-io/kine to v0.14.15 by @k0s-bot in #7326
Bump etcd to v3.6.9 by @k0s-bot in #7325
Bump golangci/golangci-lint to v2.11.4 by @k0s-bot in #7332
Bump replicatedhq/troubleshoot to v0.125.1 by @k0s-bot in #7339
Bump renovatebot/github-action from 46.1.5 to 46.1.6 by @dependabot[bot] in #7336
Bump github.com/containerd/platforms from 1.0.0-rc.2 to 1.0.0-rc.3 by @dependabot[bot] in #7337
Bump k0sproject/k0sctl to v0.29.0 by @k0s-bot in #7349
Bump requests from 2.32.5 to 2.33.0 in /docs by @dependabot[bot] in #7353
Bump DavidAnson/markdownlint-cli2-action from 22.0.0 to 23.0.0 by @dependabot[bot] in #7352
Bump docker.io/library/traefik Docker tag to v3.6.12 by @k0s-bot in #7355
Bump moby/buildkit to v0.28.1 by @k0s-bot in #7347
Bump korthout/backport-action from 4.2.0 to 4.3.0 by @dependabot[bot] in #7351
Bump docker.io/library/nginx Docker tag to v1.29.7 by @k0s-bot in #7344
Bump pymdown-extensions from 10.21 to 10.21.2 in /docs by @dependabot[bot] in #7370
Bump renovatebot/github-action from 46.1.6 to 46.1.7 by @dependabot[bot] in #7366
Bump pygments from 2.19.2 to 2.20.0 in /docs by @dependabot[bot] in #7369
Bump modernc.org/sqlite from 1.47.0 to 1.48.0 by @dependabot[bot] in #7365
Bump regex from 2026.2.28 to 2026.3.32 in /docs by @dependabot[bot] in #7367
Bump github.com/go-playground/validator/v10 from 10.30.1 to 10.30.2 by @dependabot[bot] in #7375
Bump requests from 2.33.0 to 2.33.1 in /docs by @dependabot[bot] in #7374
Bump etcd to v3.6.10 by @k0s-bot in #7382
Bump modernc.org/sqlite from 1.48.0 to 1.48.1 by @dependabot[bot] in #7385
Bump github.com/containerd/platforms from 1.0.0-rc.3 to 1.0.0-rc.4 by @dependabot[bot] in #7381
Bump the mkdocs group across 1 directory with 3 updates by @dependabot[bot] in #7368
Bump opencontainers/runc to v1.4.2 by @k0s-bot in #7383
Bump renovatebot/github-action from 46.1.7 to 46.1.8 by @dependabot[bot] in #7388
Bump click from 8.3.1 to 8.3.2 in /docs by @dependabot[bot] in #7389
Bump regex from 2026.3.32 to 2026.4.4 in /docs by @dependabot[bot] in #7390
Bump sigstore/cosign to v3.0.6 by @k0s-bot in #7392
Bump go to v1.26.2 by @k0s-bot in #7397
Bump docker.io/library/traefik Docker tag to v3.6.13 by @k0s-bot in #7396
Bump moby/buildkit to v0.29.0 by @k0s-bot in #7373
Bump docker.io/library/registry Docker tag to v3.1.0 by @k0s-bot in #7394
Bump docker.io/library/nginx Docker tag to v1.29.8 by @k0s-bot in #7395
Bump google.golang.org/grpc from 1.79.3 to 1.80.0 by @dependabot[bot] in #7380
Bump docker.io/anchore/syft Docker tag to v1.42.4 by @k0s-bot in #7408
Bump containerbase/python-prebuild to v3.14.4 by @k0s-bot in #7407
Bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 by @dependabot[bot] in #7406
Bump docker.io/curlimages/curl Docker tag to v8.19.0 by @k0s-bot in #7403
Bump opentofu/opentofu to v1.11.6 by @k0s-bot in #7402
Bump golang.org/x/sys from 0.42.0 to 0.43.0 by @dependabot[bot] in #7404
Bump replicatedhq/troubleshoot to v0.126.0 by @k0s-bot in #7416
Bump Helm to v3.20.2 by @k0s-bot in #7415
Bump golang.org/x/mod from 0.34.0 to 0.35.0 by @dependabot[bot] in #7410
Bump golang.org/x/text from 0.35.0 to 0.36.0 by @dependabot[bot] in #7411
Bump dependabot/fetch-metadata from 2 to 3 by @dependabot[bot] in #7412
Bump docker.io/library/nginx Docker tag to v1.29.8 by @k0s-bot in #7420
Bump golang.org/x/crypto from 0.49.0 to 0.50.0 by @dependabot[bot] in #7424
Bump actions/github-script from 8 to 9 by @dependabot[bot] in #7421
Bump modernc.org/sqlite from 1.48.1 to 1.48.2 by @dependabot[bot] in #7422
Bump platformdirs from 4.9.4 to 4.9.6 in /docs by @dependabot[bot] in #7413
Bump k3s-io/kine to v0.14.16 by @k0s-bot in #7426
Bump golang.org/x/tools from 0.43.0 to 0.44.0 by @dependabot[bot] in #7423
Bump replicatedhq/troubleshoot to v0.126.1 by @k0s-bot in #7427
Bump quay.io/k0sproject/calico-cni Docker tag to v3.31.4-2 by @k0s-bot in #7431
Bump quay.io/k0sproject/envoy-distroless Docker tag to v1.37.2 by @k0s-bot in #7439
Bump importlib-resources from 6.5.2 to 7.1.0 in /docs by @dependabot[bot] in #7437
Bump renovatebot/github-action from 46.1.8 to 46.1.9 by @dependabot[bot] in #7436
Bump github.com/cloudflare/cfssl from 1.6.4 to 1.6.5 by @dependabot[bot] in #7435
Bump zipp from 3.23.0 to 3.23.1 in /docs by @dependabot[bot] in #7454
Bump mike from 2.1.4 to 2.2.0 in /docs by @dependabot[bot] in #7452
Bump docker.io/library/nginx Docker tag to v1.30.0 by @k0s-bot in #7463
Bump packaging from 26.0 to 26.1 in /docs by @dependabot[bot] in #7473
Bump docker.io/library/alpine Docker tag to v3.23.4 by @k0s-bot in #7475
Bump github.com/go-openapi/jsonpointer from 0.22.5 to 0.23.0 by @dependabot[bot] in #7484
Bump quay.io/k0sproject/pause Docker tag to v3.10.2-0 by @k0s-bot in #7482
Bump containerd to v2.2.3 by @k0s-bot in #7460
Bump quay.io/k0sproject/pushgateway-ttl Docker tag to v1.4.0-k0s.1 by @k0s-bot in #7487
Bump replicatedhq/troubleshoot to v0.127.0 by @k0s-bot in #7497
Bump Terraform external to v2.3.5 by @k0s-bot in #7499
Bump Terraform aws to v5.100.0 by @k0s-bot in #7500
Bump Terraform tls to v4.2.1 by @k0s-bot in #7503
Bump Terraform random to v3.8.1 by @k0s-bot in #7502
Bump Terraform local to v2.7.0 by @k0s-bot in #7501
Bump modernc.org/sqlite from 1.48.2 to 1.49.1 by @dependabot[bot] in #7510
Bump dependabot/fetch-metadata from 3.0.0 to 3.1.0 by @dependabot[bot] in #7508
Bump Calico by @k0s-bot in #7461
Bump github.com/go-openapi/jsonpointer from 0.23.0 to 0.23.1 by @dependabot[bot] in #7509
Bump Terraform aws to v6 by @k0s-bot in #7504
Bump idna from 3.11 to 3.12 in /docs by @dependabot[bot] in #7514
Bump renovatebot/github-action from 46.1.9 to 46.1.10 by @dependabot[bot] in #7513
Bump replicatedhq/troubleshoot to v0.127.1 by @k0s-bot in #7511
Bump certifi from 2026.2.25 to 2026.4.22 in /docs by @dependabot[bot] in #7524
Bump docker.io/anchore/syft Docker tag to v1.43.0 by @k0s-bot in #7525
Bump Terraform aws to v6.42.0 by @k0s-bot in #7528
Bump pathspec from 1.0.4 to 1.1.0 in /docs by @dependabot[bot] in #7532
Bump wheel from 0.46.3 to 0.47.0 in /docs by @dependabot[bot] in #7530
Bump idna from 3.12 to 3.13 in /docs by @dependabot[bot] in #7531
Bump click from 8.3.2 to 8.3.3 in /docs by @dependabot[bot] in #7529
Bump quay.io/k0sproject/apiserver-network-proxy-agent Docker tag to v0.34.0-k0s.2 by @k0s-bot in #7533
Bump docker.io/library/traefik Docker tag to v3.6.14 by @k0s-bot in #7527
Bump quay.io/k0sproject/kube-router Docker tag to v2.8.1-iptables1.8.13-0 by @k0s-bot in #7544
Bump pathspec from 1.1.0 to 1.1.1 in /docs by @dependabot[bot] in #7546
Bump packaging from 26.1 to 26.2 in /docs by @dependabot[bot] in #7548
Bump pip from 26.0.1 to 26.1 in /docs by @dependabot[bot] in #7547
Bump modernc.org/sqlite from 1.49.1 to 1.50.0 by @dependabot[bot] in #7545
Bump quay.io/k0sproject/coredns Docker tag to v1.14.3-k0s.0 by @k0s-bot in #7541
Bump Mirantis/cri-dockerd to v0.4.3 by @k0s-bot in #7550
Bump go.uber.org/zap from 1.27.1 to 1.28.0 by @dependabot[bot] in #7549
Bump Terraform aws to v6.43.0 by @k0s-bot in #7560
Bump github.com/fsnotify/fsnotify from 1.9.0 to 1.10.1 by @dependabot[bot] in #7570
Bump google.golang.org/grpc from 1.80.0 to 1.81.0 by @dependabot[bot] in #7571
Bump pip from 26.1 to 26.1.1 in /docs by @dependabot[bot] in #7572
Bump k0sproject/k0sctl to v0.30.0 by @k0s-bot in #7555
Bump docker.io/library/registry Docker tag to v3.1.1 by @k0s-bot in #7573
Bump golangci/golangci-lint to v2.12.1 by @k0s-bot in #7568
Bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0 by @dependabot[bot] in #7567
Bump replicatedhq/troubleshoot to v0.128.1 by @k0s-bot in #7565
Bump etcd to v3.6.11 by @k0s-bot in #7577
Bump Terraform aws to v6.44.0 by @k0s-bot in #7589
Bump docker.io/anchore/syft Docker tag to v1.44.0 by @k0s-bot in #7574
Bump kubernetes-sigs/controller-tools to v0.21.0 by @k0s-bot in #7588
Bump docker.io/curlimages/curl Docker tag to v8.20.0 by @k0s-bot in #7554
Bump go to v1.26.3 by @k0s-bot in #7592
Bump mergiraf/mergiraf to v0.17.0 by @k0s-bot in #7598
Bump golangci/golangci-lint to v2.12.2 by @k0s-bot in #7582
Bump github.com/opencontainers/selinux from 1.13.1 to 1.14.0 by @dependabot[bot] in #7584
Bump k0sproject/k0sctl to v0.30.1 by @k0s-bot in #7603
Bump opentofu/opentofu to v1.11.7 by @k0s-bot in #7609
Bump containerbase/python-prebuild to v3.14.5 by @k0s-bot in #7617
Bump regex from 2026.4.4 to 2026.5.9 in /docs by @dependabot[bot] in #7614
Bump idna from 3.13 to 3.14 in /docs by @dependabot[bot] in #7615
Bump requests from 2.33.1 to 2.34.0 in /docs by @dependabot[bot] in #7616
Bump golang.org/x/mod from 0.35.0 to 0.36.0 by @dependabot[bot] in #7612
Bump idna from 3.14 to 3.15 in /docs by @dependabot[bot] in #7627
Bump pymdown-extensions from 10.21.2 to 10.21.3 in /docs by @dependabot[bot] in #7626
Bump quay.io/k0sproject/kube-router Docker tag to v2.9.0-iptables1.8.13-k0s.0 by @k0s-bot in #7622
Bump requests from 2.34.0 to 2.34.1 in /docs by @dependabot[bot] in #7631
Bump docker.io/library/nginx Docker tag to v1.31.0 by @k0s-bot in #7630
Bump modernc.org/sqlite from 1.50.0 to 1.50.1 by @dependabot[bot] in #7625
Bump opentofu/opentofu to v1.12.0 by @k0s-bot in #7641
Bump requests from 2.34.1 to 2.34.2 in /docs by @dependabot[bot] in #7643
Bump golang.org/x/sys from 0.43.0 to 0.44.0 by @dependabot[bot] in #7599
Bump k3s-io/kine to v0.15.0 by @k0s-bot in #7597
Bump Terraform aws to v6.45.0 by @k0s-bot in #7648
Bump moby/buildkit to v0.30.0 by @k0s-bot in #7640
Bump replicatedhq/troubleshoot to v0.129.0 by @k0s-bot in #7645
Bump Terraform http to v3.6.0 by @k0s-bot in #7653
Bump Terraform external to v2.4.0 by @k0s-bot in #7652
Bump Terraform tls to v4.3.0 by @k0s-bot in #7659
Bump Terraform random to v3.9.0 by @k0s-bot in #7658
Bump click from 8.3.3 to 8.4.0 in /docs by @dependabot[bot] in #7657
Bump sigs.k8s.io/controller-runtime from 0.24.0 to 0.24.1 by @dependabot[bot] in #7642
Bump zipp from 3.23.1 to 4.1.0 in /docs by @dependabot[bot] in #7656
Bump docker.io/library/traefik Docker tag to v3.7.1 by @k0s-bot in #7557
Bump golang.org/x/text from 0.36.0 to 0.37.0 by @dependabot[bot] in #7661
Bump Helm to v3.21.0 by @k0s-bot in #7632
Bump github.com/opencontainers/selinux from 1.14.0 to 1.14.1 by @dependabot[bot] in #7654
Bump golang.org/x/crypto from 0.50.0 to 0.51.0 by @dependabot[bot] in #7611
Bump mkdocs-include-markdown-plugin from 7.2.2 to 7.3.0 in /docs in the mkdocs group across 1 directory by @dependabot[bot] in #7655
Bump golang.org/x/tools from 0.44.0 to 0.45.0 by @dependabot[bot] in #7613
Bump quay.io/k0sproject/traefik Docker tag to v3.7.1-k0s.0 by @k0s-bot in #7604
Bump certifi from 2026.4.22 to 2026.5.20 in /docs by @dependabot[bot] in #7666
Bump Terraform aws to v6.46.0 by @k0s-bot in #7669
Bump google.golang.org/grpc from 1.81.0 to 1.81.1 by @dependabot[bot] in #7668
Bump click from 8.4.0 to 8.4.1 in /docs by @dependabot[bot] in #7677
Bump idna from 3.15 to 3.16 in /docs by @dependabot[bot] in #7679
Bump docker.io/library/nginx Docker tag to v1.31.1 by @k0s-bot in #7682
Bump github.com/opencontainers/selinux from 1.14.1 to 1.15.0 by @dependabot[bot] in #7680
Bump golang.org/x/crypto from 0.51.0 to 0.52.0 by @dependabot[bot] in #7678
Bump github.com/containerd/containerd from 1.7.30 to 1.7.32 by @dependabot[bot] in #7674
Bump google/renameio to v2.0.2 by @k0s-bot in #6938
Bump konnectivity by @k0s-bot in #7683
Bump opentofu/opentofu to v1.12.1 by @k0s-bot in #7694
Bump k3s-io/kine to v0.16.0 by @k0s-bot in #7696
Bump Terraform aws to v6.47.0 by @k0s-bot in #7702
Bump modernc.org/sqlite from 1.50.1 to 1.51.0 by @dependabot[bot] in #7699
Bump idna from 3.16 to 3.17 in /docs by @dependabot[bot] in #7700
Bump platformdirs from 4.9.6 to 4.10.0 in /docs by @dependabot[bot] in #7701
Bump replicatedhq/troubleshoot to v0.129.1 by @k0s-bot in #7704
Bump k3s-io/kine to v0.16.1 by @k0s-bot in #7705
Bump etcd to v3.6.12 by @k0s-bot in #7709
Bump idna from 3.17 to 3.18 in /docs by @dependabot[bot] in #7720
Bump pip from 26.1.1 to 26.1.2 in /docs by @dependabot[bot] in #7721
Bump docker.io/anchore/syft Docker tag to v1.45.0 by @k0s-bot in #7725
Bump github.com/go-playground/validator/v10 from 10.30.2 to 10.30.3 by @dependabot[bot] in #7719
Bump github.com/opencontainers/selinux from 1.15.0 to 1.15.1 by @dependabot[bot] in #7718
Bump k3s-io/kine to v0.16.2 by @k0s-bot in #7724
Bump quay.io/k0sproject/kube-router Docker tag to v2.10.0-iptables1.8.13-k0s.0 by @k0s-bot in #7737
Bump Terraform aws to v6.48.0 by @k0s-bot in #7740
Bump containerd to v2.3.1 by @k0s-bot in #7566
Bump Terraform aws to v6.49.0 by @k0s-bot in #7751
Bump go to v1.26.4 by @k0s-bot in #7723
Bump docker.io/library/traefik Docker tag to v3.7.3 by @k0s-bot in #7750
Bump konnectivity by @k0s-bot in #7739
Bump quay.io/k0sproject/traefik Docker tag to v3.7.3-k0s.0 by @k0s-bot in #7753
Bump docker.io/anchore/syft Docker tag to v1.45.1 by @k0s-bot in #7755
Bump golang.org/x/sync from 0.20.0 to 0.21.0 by @dependabot[bot] in #7761
Bump replicatedhq/troubleshoot to v0.129.3 by @k0s-bot in #7763
Bump quay.io/k0sproject/traefik Docker tag to v3.7.4-k0s.0 by @k0s-bot in #7758
Bump golang.org/x/sys from 0.45.0 to 0.46.0 by @dependabot[bot] in #7760
Bump docker.io/library/traefik Docker tag to v3.7.4 by @k0s-bot in #7756
Bump modernc.org/sqlite from 1.51.0 to 1.52.0 by @dependabot[bot] in #7759
Bump golang.org/x/text from 0.37.0 to 0.38.0 by @dependabot[bot] in #7768
Bump golang.org/x/mod from 0.36.0 to 0.37.0 by @dependabot[bot] in #7769
Bump sigstore/cosign to v3.1.1 by @k0s-bot in #7773
Bump golang.org/x/crypto from 0.52.0 to 0.53.0 by @dependabot[bot] in #7770
Bump oras.land/oras-go/v2 from 2.6.0 to 2.6.1 by @dependabot[bot] in #7767
Bump Terraform aws to v6.50.0 by @k0s-bot in #7780
Bump replicatedhq/troubleshoot to v0.130.0 by @k0s-bot in #7779
Bump Traefik to v3.7.5-k0s.0 by @k0s-bot in #7778

Full Changelog: v1.35.4+k0s.0...v1.36.1+k0s.0