What's Changed
Fixes GHSA-qjgc-wmg7-3jc3.
- [Backport release-1.36] Stop and wait for svc deletion on Windows before re-install by @k0s-bot in #8197
- [release-1.36] Bump Traefik to v3.7.12-k0s.0 by @twz123 in #8193
- [Backport release-1.36] Bump quay.io/k0sproject/envoy-distroless Docker tag to v1.39.1 by @k0s-bot in #8225
- Bump go to v1.26.8 (release-1.36) by @k0s-bot in #8229
- [Backport release-1.36] Bump Traefik to v3.7.13-k0s.0 by @k0s-bot in #8261
- [Backport release-1.36] Bump github.com/containerd/platforms from 1.0.0-rc.4 to 1.0.0-rc.5 by @k0s-bot in #8253
- [Backport release-1.36] Wire up context for all reset steps by @k0s-bot in #8219
- [Backport release-1.36] autopilot: reuse a completed download on retry by @k0s-bot in #8273
- [Backport release-1.36] autopilot: refresh discovery before the removed API check by @k0s-bot in #8282
- [Backport release-1.36] Correct the supported version skew by @k0s-bot in #8300
- Bump k3s-io/kine to v0.16.5 (release-1.36) by @k0s-bot in #8303
- [Backport release-1.36] Bump containerd to v2.3.5 by @k0s-bot in #8250
- Bump Helm to v3.21.4 (release-1.36) by @k0s-bot in #8317
- Bump docker.io/library/alpine Docker tag to v3.23.6 (release-1.36) by @k0s-bot in #8326
- [Backport release-1.36] Harden the csr-approver component by @twz123 in #8334
Full Changelog: v1.36.4+k0s.0...v1.36.4+k0s.1