What's Changed
- Bump github.com/go-openapi/jsonpointer from 0.23.1 to 0.23.2 by @dependabot[bot] in #7907
- Bump Mirantis/cri-dockerd to v0.4.4 by @k0s-bot in #7909
- Bump bracex from 2.6 to 3.0 in /docs by @dependabot[bot] in #7912
- Bump google.golang.org/grpc from 1.81.1 to 1.82.0 by @dependabot[bot] in #7913
- Bump github.com/go-openapi/jsonpointer from 0.23.2 to 0.24.0 by @dependabot[bot] in #7910
- Bump k0sproject/k0sctl to v0.31.1 by @k0s-bot in #7915
- Bump Traefik to v3.7.6 by @k0s-bot in #7914
- Bump Terraform aws to v6.53.0 by @k0s-bot in #7917
- Extend Renovate's OCI image versioning regex by @twz123 in #7921
- Replace WaitForPodLogs with VerifyKonnectivityMesh by @twz123 in #7877
- Bump wcmatch from 10.1 to 10.2.1 in /docs by @dependabot[bot] in #7931
- Bump pymdown-extensions from 11.0 to 11.0.1 in /docs by @dependabot[bot] in #7930
- autopilot: don't wait before first kubelet cert check by @ncopa in #7922
- Bump Kubernetes to v1.37.0-alpha.2 by @k0s-bot in #7859
- Bump golang.org/x/text from 0.38.0 to 0.39.0 by @dependabot[bot] in #7935
- Bump replicatedhq/troubleshoot to v0.130.1 by @k0s-bot in #7933
- Bump golang.org/x/sync from 0.21.0 to 0.22.0 by @dependabot[bot] in #7939
- Bump github.com/go-openapi/jsonpointer from 0.24.0 to 1.0.0 by @dependabot[bot] in #7938
- Bump Terraform aws to v6.54.0 by @k0s-bot in #7945
- Bump go to v1.26.5 by @k0s-bot in #7936
- Bump golang.org/x/sys from 0.46.0 to 0.47.0 by @dependabot[bot] in #7940
- Bump golang.org/x/text from 0.39.0 to 0.40.0 by @dependabot[bot] in #7949
- Bump etcd to v3.7.0 by @k0s-bot in #7943
- Bump golang.org/x/mod from 0.37.0 to 0.38.0 by @dependabot[bot] in #7950
- Bump wcmatch from 10.2.1 to 11.0 in /docs by @dependabot[bot] in #7957
- Bump k0sproject/k0sctl to v0.32.1 by @k0s-bot in #7928
- Bump quay.io/k0sproject/coredns Docker tag to v1.14.6-k0s.0 by @k0s-bot in #7956
- Bump golang.org/x/crypto from 0.53.0 to 0.54.0 by @dependabot[bot] in #7948
- Bump replicatedhq/troubleshoot to v0.131.1 by @k0s-bot in #7962
- Bump golang.org/x/tools from 0.47.0 to 0.48.0 by @dependabot[bot] in #7951
- Bump Traefik to v3.7.7-k0s.0 by @k0s-bot in #7942
- Bump Helm to v3.21.3 by @k0s-bot in #7952
- Bump acassen/keepalived to v2.4.2 by @k0s-bot in #7964
- Bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 by @dependabot[bot] in #7966
- Bump opentofu/opentofu to v1.12.4 by @k0s-bot in #7967
- Bump mergiraf/mergiraf to v0.18.0 by @k0s-bot in #7971
- Bump Terraform aws to v6.55.0 by @k0s-bot in #7977
- Bump quay.io/k0sproject/metrics-server Docker tag to v0.9.0-k0s.0 by @k0s-bot in #7980
- Bump modernc.org/sqlite from 1.53.0 to 1.54.0 by @dependabot[bot] in #7981
- Bump google.golang.org/grpc from 1.82.0 to 1.82.1 by @dependabot[bot] in #7982
- Bump moby/buildkit to v0.31.2 by @k0s-bot in #7983
- Bump docker.io/anchore/syft Docker tag to v1.48.0 by @k0s-bot in #7985
- Bump sigstore/cosign to v3.1.2 by @k0s-bot in #7991
- Bump opencontainers/runc to v1.5.1 by @k0s-bot in #7968
- Bump opentofu/opentofu to v1.12.5 by @k0s-bot in #7996
- Bump platformdirs from 4.10.0 to 4.11.0 in /docs by @dependabot[bot] in #7993
- Bump mkdocs-material from 9.7.6 to 9.7.7 in /docs in the mkdocs group across 1 directory by @dependabot[bot] in #7987
- Bump github.com/go-logr/logr from 1.4.3 to 1.4.4 by @dependabot[bot] in #7994
- Bump bracex from 3.0 to 3.0.1 in /docs by @dependabot[bot] in #7988
- Bump quay.io/k0sproject/envoy-distroless Docker tag to v1.39.0 by @k0s-bot in #7979
- Bump docker.io/library/nginx Docker tag to v1.31.3 by @k0s-bot in #7978
- Bump certifi from 2026.6.17 to 2026.7.22 in /docs by @dependabot[bot] in #7999
- Bump docker.io/anchore/syft Docker tag to v1.49.0 by @k0s-bot in #7998
- Bump containerd to v2.3.3 by @k0s-bot in #7953
- Bump Terraform aws to v6.56.0 by @k0s-bot in #8004
- Allow set network for all bootloose machines by @apedriza in #7894
- Bump Calico to v3.32.1 by @makhov in #7986
- Avoid immortal Renovate PRs for grouped updates by @twz123 in #8008
- Bump etcd to v3.7.1 by @k0s-bot in #8010
- Don't generate trailing commas when building feature gate CLI args by @twz123 in #7990
- Use the direct kubelet kubeconfig consistently by @imantaba in #8019
- Bump backrefs from 7.0 to 8.0 in /docs by @dependabot[bot] in #8020
- Improve cAdvisor metrics verification in basic inttest by @twz123 in #7984
- Omit anonymous-auth default when authentication config has anonymous by @ranyodh in #7976
- Distinguish pending from performed restarts in Autopilot by @twz123 in #8023
- Make cAdvisor metrics tests environment aware by @twz123 in #8024
- Bump acassen/keepalived to v2.4.3 by @k0s-bot in #7992
- Bump k0sproject/k0sctl to v0.32.2 by @k0s-bot in #8031
- docs: use the version src_var for cali_ver in the image example by @youdie006 in #8039
- Bump Terraform aws to v6.57.1 by @k0s-bot in #8037
- Bump pip from 26.1.2 to 26.2 in /docs by @dependabot[bot] in #8042
- Bump docker.io/anchore/syft Docker tag to v1.50.0 by @k0s-bot in #8030
- Bump google.golang.org/grpc from 1.82.1 to 1.83.0 by @dependabot[bot] in #8041
- Bump github.com/prometheus/common from 0.67.5 to 0.70.1 by @dependabot[bot] in #8027
- Stop and wait for svc deletion on Windows before re-install by @jnummelin in #8033
- Bump Kubernetes to v1.37.0-alpha.3 by @twz123 in #8040
- Bump quay.io/k0sproject/pushgateway-ttl Docker tag to v1.4.0-k0s.2 by @k0s-bot in #8052
- Bump Calico to v3.32.1-1 by @k0s-bot in #8054
- Bump markdown from 3.10.2 to 3.10.3 in /docs by @dependabot[bot] in #8047
- Pass CAP_NET_BIND_SERVICE to kube-apiserver by @twz123 in #8045
- Bump moby/buildkit to v0.32.2 by @k0s-bot in #8036
- Bump modernc.org/sqlite from 1.54.0 to 1.55.0 by @dependabot[bot] in #8035
- Bump cni-node to v1.9.1-k0s.1 by @makhov in #8056
- Don't unmount kubelet-root-dir on k0s reset by @dockerpac in #6472
- Bump quay.io/k0sproject/kube-router Docker tag to v2.10.0-iptables1.8.13-k0s.1 by @k0s-bot in #8064
- Bump Traefik to v3.7.8-k0s.0 by @k0s-bot in #7975
- Bump Calico to v3.32.1-2 by @k0s-bot in #8073
- Bump packaging from 26.2 to 26.3 in /docs by @dependabot[bot] in #8070
- Bump Terraform aws to v6.58.0 by @k0s-bot in #8060
- Bump containerbase/python-prebuild to v3.14.7 by @k0s-bot in #8061
- Bump sigstore/cosign to v3.1.3 by @k0s-bot in #8062
- Bump docker.io/anchore/syft Docker tag to v1.51.0 by @k0s-bot in #8074
- Bump platformdirs from 4.11.0 to 4.11.1 in /docs by @dependabot[bot] in #8077
- Bump pip from 26.2 to 26.2.1 in /docs by @dependabot[bot] in #8069
- Bump modernc.org/sqlite from 1.55.0 to 1.56.0 by @dependabot[bot] in #8067
- Bump Terraform aws to v6.59.0 by @k0s-bot in #8081
- Bump go to v1.26.6 by @k0s-bot in #8086
- Track registry.k8s.io images with Renovate by @ncopa in #8083
- Make applyingUpdate reconciler idempotent by @bainaichang in #7706
- Improve docs: enable "content.code.copy" feature by @josef-hak in #8099
- Bump wheel from 0.47.0 to 0.48.0 in /docs by @dependabot[bot] in #8109
- Bump Terraform external to v2.4.1 by @k0s-bot in #8095
- Bump Terraform http to v3.6.1 by @k0s-bot in #8096
- Bump Terraform aws to v6.60.0 by @k0s-bot in #8088
- Bump golang.org/x/crypto from 0.54.0 to 0.55.0 by @dependabot[bot] in #8105
- Bump platformdirs from 4.11.1 to 4.11.3 in /docs by @dependabot[bot] in #8110
- Bump replicatedhq/troubleshoot to v0.132.1 by @k0s-bot in #8078
- Bump k3s-io/kine to v0.16.4 by @k0s-bot in #8098
- Use patched CNI bins by @jnummelin in #8092
- Bump golang.org/x/mod from 0.38.0 to 0.40.0 by @dependabot[bot] in #8104
- Bump wcmatch from 11.0 to 11.0.1 in /docs by @dependabot[bot] in #8114
- Bump mergiraf/mergiraf to v0.19.0 by @k0s-bot in #8112
- Bump github.com/sirupsen/logrus from 1.9.4 to 1.10.0 by @dependabot[bot] in #8106
- Improve docs: link inttest/README.md from testing.md by @soltysh in #8117
- Bump github.com/stretchr/testify from 1.11.1 to 1.12.0 by @dependabot[bot] in #8115
- Add hack/list-images tool and make target by @ncopa in #8082
- Renew etcd certificates generated by custom etcd CA by @byDimasik in #7796
- Pin Go minor per release branch in Renovate by @kke in #8130
- Docs: add kernel inotify instance limit guidance by @tinoha in #8134
- Bump docker.io/library/traefik Docker tag to v3.7.11 by @k0s-bot in #8136
- Bump opentofu/opentofu to v1.12.6 by @k0s-bot in #8122
- Bump containerd to v2.3.4 by @k0s-bot in #8079
- Bump registry.k8s.io/pause Docker tag by @k0s-bot in #8090
- Bump github.com/stretchr/testify from 1.12.0 to 1.12.1 by @dependabot[bot] in #8132
- Bump pygments from 2.20.0 to 2.21.0 in /docs by @dependabot[bot] in #8133
- Bump quay.io/k0sproject/apiserver-network-proxy-agent Docker tag to v0.36.0-k0s.1 to v0.36.0-k0s.1 by @k0s-bot in #8138
- Bump quay.io/k0sproject/traefik Docker tag to v3.7.10-k0s.0 by @k0s-bot in #8143
- Bump quay.io/k0sproject/pushgateway-ttl Docker tag to v1.4.0-k0s.3 by @k0s-bot in #8142
- Bump idna from 3.18 to 3.19 in /docs by @dependabot[bot] in #8140
- Bump quay.io/k0sproject/metrics-server Docker tag to v0.9.0-k0s.1 by @k0s-bot in #8139
- Increase timeout for check-ap-controllerworker to mitigate flakiness by @jnummelin in #8151
- Bump github.com/containerd/platforms from 1.0.0-rc.4 to 1.0.0-rc.5 by @dependabot[bot] in #8131
- Bump google.golang.org/grpc from 1.83.0 to 1.83.1 by @dependabot[bot] in #8157
- Bump github.com/sirupsen/logrus from 1.10.0 to 1.10.1 by @dependabot[bot] in #8155
- Bump Terraform aws to v6.61.0 by @k0s-bot in #8159
- Bump modernc.org/sqlite from 1.56.0 to 1.57.0 by @dependabot[bot] in #8156
- Remove Go version bump configs for release branches by @twz123 in #8158
- Bump replicatedhq/troubleshoot to v0.133.0 by @k0s-bot in #8153
- Don't use renovate.json as Renovate's global config by @twz123 in #8170
- Bump quay.io/k0sproject/kube-router Docker tag to v2.11.1-iptables1.8.13-k0s.0 by @k0s-bot in #8152
- Bump docker.io/library/nginx Docker tag to v1.31.4 by @k0s-bot in #8125
- Bump quay.io/k0sproject/coredns Docker tag to v1.14.7-k0s.0 by @k0s-bot in #8174
- Bump quay.io/k0sproject/traefik Docker tag to v3.7.11-k0s.0 by @k0s-bot in #8175
- Bump Calico to v3.32.1-3 by @k0s-bot in #8173
- Bump golangci/golangci-lint to v2.13.1 by @twz123 in #8167
- Bump pymdown-extensions from 11.0.1 to 11.0.2 in /docs by @dependabot[bot] in #8183
- Refactor feature gates by @twz123 in #7997
- Bump Terraform aws to v6.62.0 by @k0s-bot in #8186
- Bump k3s-io/kine to v0.17.0 by @k0s-bot in #8185
- Let Renovate bump kine 0.16.x for k0s 1.36 by @twz123 in #8188
- Include patch version in minor Go bumps by Renovate by @twz123 in #8187
- Bump Traefik to v3.7.12-k0s.0 by @k0s-bot in #8184
- Bump docker.io/anchore/syft Docker tag to v1.51.1 by @k0s-bot in #8191
- Fix NewCRDStack silently discarding an explicit stack name by @pujitha24 in #8111
- Bump golangci/golangci-lint to v2.13.2 by @k0s-bot in #8192
- Bump platformdirs from 4.11.3 to 4.11.4 in /docs by @dependabot[bot] in #8194
- Disable go modernize's embedlit lint by @twz123 in #8189
- Bump platformdirs from 4.11.4 to 4.11.5 in /docs by @dependabot[bot] in #8216
- Wire up context for all reset steps by @jnummelin in #8066
- Bump google.golang.org/grpc from 1.83.1 to 1.83.2 by @dependabot[bot] in #8217
- Bump click from 8.4.2 to 8.5.0 in /docs by @dependabot[bot] in #8215
- Bump github.com/sirupsen/logrus from 1.10.1 to 1.10.2 by @dependabot[bot] in #8218
- Bump Terraform tls to v4.4.0 by @k0s-bot in #8222
- Bump quay.io/k0sproject/envoy-distroless Docker tag to v1.39.1 by @k0s-bot in #8221
- Bump quay.io/k0sproject/kube-router Docker tag to v2.11.1-iptables1.8.13-k0s.1 by @k0s-bot in #8227
- Bump mergiraf/mergiraf to v0.19.1 by @k0s-bot in #8226
- Bump github.com/bombsimon/logrusr/v4 from 4.1.0 to 4.2.0 by @dependabot[bot] in #8228
- Let Renovate bump Envoy 1.37 for release-1.35 by @twz123 in #8224
- Disallow cfssl log usage outside the logging package by @twz123 in #8232
- Bump kubernetes-sigs/controller-tools to v0.22.0 by @k0s-bot in #8236
- Bump docker.io/curlimages/curl Docker tag to v8.22.0 by @k0s-bot in #8235
- Bump docker.io/library/nginx Docker tag to v1.31.5 by @k0s-bot in #8240
- Bump platformdirs from 4.11.5 to 4.11.7 in /docs by @dependabot[bot] in #8245
- Bump Terraform aws to v6.63.0 by @k0s-bot in #8244
- Bump replicatedhq/troubleshoot to v0.134.0 by @k0s-bot in #8248
- Bump containerd to v2.3.5 by @k0s-bot in #8249
- Bump github.com/prometheus/common from 0.70.1 to 0.71.0 by @dependabot[bot] in #8242
- Bump moby/buildkit to v0.33.0 by @k0s-bot in #8237
- Merge the k0s and Kubernetes sections in go.mod by @twz123 in #8190
- Bump Traefik to v3.7.13-k0s.0 by @k0s-bot in #8247
- Bump golang.org/x/crypto from 0.55.0 to 0.56.0 by @dependabot[bot] in #8257
- Bump github.com/go-playground/validator/v10 from 10.30.3 to 10.30.4 by @dependabot[bot] in #8259
- Bump go to v1.27.1 by @k0s-bot in #8123
- Add test for ToConfigMapData with a nil profile by @magic-peach in #8234
- Bump github.com/prometheus/client_model from 0.6.2 to 0.6.3 by @dependabot[bot] in #8243
- Bump github.com/go-openapi/jsonpointer from 1.0.0 to 1.0.1 by @dependabot[bot] in #8258
- Bump modernc.org/sqlite from 1.57.0 to 1.58.0 by @dependabot[bot] in #8256
- Add unit tests for DecodeJoinToken, JoinEncode, and GetTokenType by @magic-peach in #8260
- [Chore] Enable auto-merge in backport PRs by @jnummelin in #8262
- Bump helm.sh/helm to v4.2.4 by @soltysh in #8085
- inttest: reach the load balancer through its published port by @ncopa in #8268
- Bump golang.org/x/sys from 0.47.0 to 0.48.0 by @dependabot[bot] in #8263
- autopilot: reuse a completed download on retry by @ncopa in #8267
- Reconcile etcd endpoint's peer URL for single-member clusters by @twz123 in #7875
- Bump golang.org/x/mod from 0.40.0 to 0.41.0 by @dependabot[bot] in #8265
- docs(adopters): update ADOPTERS.md - add Defense Unicorns by @wcrum in #8278
- autopilot: refresh discovery before the removed API check by @ncopa in #8275
- Bump Terraform aws to v6.64.0 by @k0s-bot in #8279
- Bump Terraform tls to v4.4.1 by @k0s-bot in #8284
- Bump golang.org/x/sync from 0.22.0 to 0.23.0 by @dependabot[bot] in #8266
- Bump Terraform external to v2.4.2 by @k0s-bot in #8288
- Bump Terraform http to v3.6.2 by @k0s-bot in #8289
- Bump Terraform random to v3.9.1 by @k0s-bot in #8290
- Correct the supported version skew by @twz123 in #8195
- Bump golang.org/x/text from 0.41.0 to 0.42.0 by @dependabot[bot] in #8298
- Bump golang.org/x/crypto from 0.56.0 to 0.57.0 by @dependabot[bot] in #8297
- Bump platformdirs from 4.11.7 to 4.11.8 in /docs by @dependabot[bot] in #8299
- Bump k0sproject/k0sctl to v0.33.0 by @k0s-bot in #8287
- Bump k3s-io/kine to v0.17.1 by @k0s-bot in #8301
- Bump replicatedhq/troubleshoot to v0.134.1 by @k0s-bot in #8302
- Add code guidelines by @twz123 in #8196
- Add a unit test for ToUnstructured's default GVK inference by @magic-peach in #8293
- Bump golang.org/x/tools from 0.49.0 to 0.50.0 by @dependabot[bot] in #8296
- Enable all of usetesting's off-by-default lints by @twz123 in #8307
- Bump docker.io/library/nginx Docker tag to v1.31.6 by @k0s-bot in #8309
- Update security policy by @twz123 in #8311
- Let Renovate bump Helm 3.21.x for k0s 1.36 by @twz123 in #8182
- Let Renovate bump patch and minor k8s releases on main by @twz123 in #8313
- Bump Kubernetes to v1.37.0 by @k0s-bot in #8315
- Re-enable revive's default rules by @twz123 in #8312
- Add a metadata client to the client factory by @twz123 in #8304
- Bump Helm to v4.3.0 by @k0s-bot in #8087
- Bump sigs.k8s.io/controller-runtime from 0.24.1 to 0.25.1 by @dependabot[bot] in #8319
- Bump Terraform aws to v6.65.0 by @k0s-bot in #8316
- Bump docker.io/anchore/syft Docker tag to v1.52.0 by @k0s-bot in #8321
- Bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.45.0 by @dependabot[bot] in #8323
- Wait for nginx to actually serve in the Calico inttest by @twz123 in #8337
- Harden the csr-approver component by @twz123 in #8333
- Bump pymdown-extensions from 11.0.2 to 12.0 in /docs by @dependabot[bot] in #8339
- Bump docker.io/library/alpine Docker tag to v3.24.2 by @k0s-bot in #8325
- Fix IP autodetection in Calico Windows manifests by @twz123 in #8340
- Bump idna from 3.19 to 3.20 in /docs by @dependabot[bot] in #8350
- Bump platformdirs from 4.11.8 to 4.11.10 in /docs by @dependabot[bot] in #8349
- Bump pymdown-extensions from 12.0 to 12.0.1 in /docs by @dependabot[bot] in #8348
- Bump google.golang.org/grpc from 1.83.2 to 1.84.0 by @dependabot[bot] in #8346
- Documentation on spec.network updated by @blicknix in #8277
- Rework the PR template and contributing guidelines by @twz123 in #8310
- Bump platformdirs from 4.11.10 to 4.11.11 in /docs by @dependabot[bot] in #8356
- Prepare for label-based active controller counting by @twz123 in #7889
- Bump Terraform aws to v6.66.0 by @k0s-bot in #8351
- Bump etcd to v3.7.2 by @k0s-bot in #8363
- Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace from 1.44.0 to 1.45.0 by @dependabot[bot] in #8322
- Bump github.com/go-playground/validator/v10 from 10.30.4 to 10.30.5 by @dependabot[bot] in #8374
- Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.44.0 to 1.45.0 by @dependabot[bot] in #8324
- Bump pyparsing from 3.3.2 to 3.3.3 in /docs by @dependabot[bot] in #8375
- Bump platformdirs from 4.11.11 to 4.11.12 in /docs by @dependabot[bot] in #8376
- Pin container images used by inttests by digest by @twz123 in #8341
- Bump platformdirs from 4.11.12 to 4.11.15 in /docs by @dependabot[bot] in #8386
- Pull digest-pinned artifacts by digest when bundling by @twz123 in #8387
- Bump platformdirs from 4.11.15 to 4.12.0 in /docs by @dependabot[bot] in #8388
- Bump markdown from 3.10.3 to 3.11 in /docs by @dependabot[bot] in #8381
- Bump pymdown-extensions from 12.0.1 to 12.1 in /docs by @dependabot[bot] in #8384
- Bump github.com/go-openapi/jsonpointer from 1.0.1 to 1.0.2 by @dependabot[bot] in #8382
- Bump github.com/prometheus/common from 0.71.0 to 0.72.0 by @dependabot[bot] in #8395
- Bump platformdirs from 4.12.0 to 4.12.1 in /docs by @dependabot[bot] in #8394
- removed pkg/performance by @blicknix in #8396
- Bump github.com/segmentio/analytics-go/v3 from 3.3.0 to 3.4.0 by @dependabot[bot] in #8397
- Bump github.com/dustin/go-humanize from 1.0.1 to 1.1.0 by @dependabot[bot] in #8357
- Bump shogo82148/actions-upload-release-asset from 1.8.2 to 1.10.1 by @dependabot[bot] in #7523
- Bump Kubernetes to v1.37.1 by @k0s-bot in #8367
- Bump docker.io/library/registry Docker tag to v3.1.2 by @k0s-bot in #8402
- Bump actions/download-artifact from 5.0.0 to 8.0.1 by @dependabot[bot] in #7455
- Bump containerbase/python-prebuild to v3.14.8 by @k0s-bot in #8401
- Bump actions/upload-artifact from 4.6.2 to 7.0.1 by @dependabot[bot] in #7453
- Bump actions/checkout from 4.3.1 to 7.0.1 by @dependabot[bot] in #7456
- Bump actions/cache from 4.3.0 to 6.1.0 by @dependabot[bot] in #7451
- Bump modernc.org/sqlite from 1.58.0 to 1.60.1 by @dependabot[bot] in #8398
- Bump docker.io/library/nginx:1.31.6-alpine3.24 Docker digest to df221db by @k0s-bot in #8399
- Bump Mirantis/cri-dockerd to v0.4.7 by @k0s-bot in #8403
- Bump docker.io/anchore/syft Docker tag to v1.54.0 by @k0s-bot in #8406
- Bump opencontainers/runc to v1.5.2 by @k0s-bot in #8405
- Always use node config when retrieving the pod CIDR by @twz123 in #8392
- Rely on client-go to reload the kubelet's client certificate by @twz123 in #8389
- Detect unusable DNS resolver configs and handle more systemd-resolved setups by @twz123 in #8372
- Refactor CPLB validation to use apimachinery primitives by @twz123 in #8343
- Fix CoreDNS loop troubleshooting advice by @twz123 in #8373
- Let the applier manage its own discovery cache by @twz123 in #8305
- Fix precedence of kube-apiserver etcd flags and separate the launch config from its supervisor by @twz123 in #8377
- Bump docker/login-action from 4.1.0 to 4.6.0 by @dependabot[bot] in #8422
- Bump mergiraf/mergiraf to v0.20.0 by @k0s-bot in #8412
- Bump actions/cache/restore from 4.3.0 to 6.1.0 by @dependabot[bot] in #8421
- Bump shogo82148/actions-upload-release-asset from 1.10.1 to 1.10.6 by @dependabot[bot] in #8420
- Harden the backport workflow and allow manual runs by @twz123 in #8432
- Bump korthout/backport-action from 4.3.0 to 4.7.0 by @dependabot[bot] in #8419
- Add disclaimers to pull_request_target workflows by @twz123 in #8433
- Bump platformdirs from 4.12.1 to 4.12.2 in /docs by @dependabot[bot] in #8424
- Bump golangci/golangci-lint to v2.14.0 by @k0s-bot in #8407
- Bump github.com/cloudflare/cfssl from 1.6.5 to 1.7.0 by @dependabot[bot] in #8418
- Bump moby/buildkit to v0.33.1 by @k0s-bot in #8404
- Move pkg/featuregate to internal/pkg/featuregate. Part of #8371. by @blicknix in #8393
- Bump docker/build-push-action from 7.1.0 to 7.4.0 by @dependabot[bot] in #8440
- Bump opentofu/opentofu to v1.13.1 by @k0s-bot in #8437
- Bump advanced-security/spdx-dependency-submission-action from 0.2.0 to 0.4.0 by @dependabot[bot] in #8444
- Bump golang.org/x/tools from 0.50.0 to 0.51.0 by @dependabot[bot] in #8443
- Bump renovatebot/github-action from 46.1.10 to 46.3.6 by @dependabot[bot] in #8442
- Bump docker/setup-buildx-action from 4.0.0 to 4.4.1 by @dependabot[bot] in #8445
- Bump robinraju/release-downloader from 1.12 to 1.13 by @dependabot[bot] in #8423
- Hook Helm client transport control via REST config's Dial function by @twz123 in #8385
- Bump markupsafe from 3.0.3 to 3.0.4 in /docs by @dependabot[bot] in #8441
- Bump docker.io/anchore/syft Docker tag to v1.54.1 by @k0s-bot in #8447
- Bump quay.io/k0sproject/envoy-distroless Docker tag to v1.39.2 by @k0s-bot in #8439
- Bump sigs.k8s.io/controller-runtime from 0.25.1 to 0.25.2 by @dependabot[bot] in #8417
- Validate feature gates by @twz123 in #7995
- Bump platformdirs from 4.12.2 to 4.12.3 in /docs by @dependabot[bot] in #8455
- Bump Traefik to v3.7.14-k0s.0 by @k0s-bot in #8450
- Bump sonobuoy to v0.57.5 by @k0s-bot in #8451
- Bump k3s-io/kine to v0.17.2 by @k0s-bot in #8457
- Bump moby/buildkit to v0.34.0 by @k0s-bot in #8458
- Add AI Policy to the main contributors page by @soltysh in #8358
- Add CONTRIBUTORS.md file as described in governance.md by @soltysh in #8359
- Bump Terraform aws to v6.68.0 by @k0s-bot in #8459
- Bump konnectivity to v0.37.0 by @twz123 in #8454
- Document that k0s no longer links against musl libc by @twz123 in #8354
- Bump eps1lon/actions-label-merge-conflict from 3.0.3 to 3.1.0 by @dependabot[bot] in #8466
- Bump shogo82148/actions-create-release from 1.9.0 to 1.9.2 by @dependabot[bot] in #8469
- Bump renovatebot/github-action from 46.3.6 to 46.3.7 by @dependabot[bot] in #8468
- Bump Mirantis/cri-dockerd to v0.4.8 by @k0s-bot in #8474
- Bump go to v1.27.2 by @k0s-bot in #8473
- Bump opentofu/setup-opentofu from 2.0.0 to 2.0.2 by @dependabot[bot] in #8482
- Bump slackapi/slack-github-action from 3.0.1 to 4.0.0 by @dependabot[bot] in #8467
- Scope the worker autopilot to its own Node by @kurarrr in #8379
- Bump actions/stale from 10.2.0 to 11.0.0 by @dependabot[bot] in #8465
- Bump github.com/Microsoft/go-winio from 0.6.3-0.20251027160822-ad3df93bed29 to 0.6.3 by @dependabot[bot] in #8480
- Bump actions/setup-go from 5.6.0 to 7.0.0 by @dependabot[bot] in #8479
- Bump github.com/moby/sys/user from 0.4.0 to 0.4.1 by @dependabot[bot] in #8475
- Bump actions/setup-python from 6.2.0 to 7.0.0 by @dependabot[bot] in #8464
- Bump golang.org/x/sync from 0.23.0 to 0.24.0 by @dependabot[bot] in #8481
- Bump k0sproject/k0sctl to v0.33.1 by @k0s-bot in #8345
- Bump Mirantis/cri-dockerd to v0.4.9 by @k0s-bot in #8490
- Bump containerbase/python-prebuild to v3.15.0 by @k0s-bot in #8494
- Bump DavidAnson/markdownlint-cli2-action from 23.0.0 to 24.2.0 by @dependabot[bot] in #8504
- Bump platformdirs from 4.12.3 to 4.12.4 in /docs by @dependabot[bot] in #8501
- Bump golang.org/x/mod from 0.41.0 to 0.42.0 by @dependabot[bot] in #8498
- Bump backrefs from 8.0 to 8.1 in /docs by @dependabot[bot] in #8502
- Bump wcmatch from 11.0.1 to 11.1 in /docs by @dependabot[bot] in #8499
- Bump actions/download-artifact from 8.0.1 to 8.0.2 by @dependabot[bot] in #8505
- Defer manifest dir creation until first write by @twz123 in #8472
- Bump github.com/cloudflare/cfssl from 1.7.0 to 1.7.1 by @dependabot[bot] in #8497
- Bump actions/upload-artifact from 7.0.1 to 7.0.2 by @dependabot[bot] in #8503
- Bump pymdown-extensions from 12.1 to 12.2 in /docs by @dependabot[bot] in #8500
- Allow backport action to create draft PR for conflicts by @jnummelin in #8493
- Bump golang.org/x/sys from 0.48.0 to 0.49.0 by @dependabot[bot] in #8496
- Moved module pkg/container/runtime to internal/cri by @blicknix in #8485
- Moved package k0scontext into internal and updated the import paths by @a-nu-ragn in #8430
- Bump bracex from 3.0.1 to 3.1 in /docs by @dependabot[bot] in #8517
- Bump platformdirs from 4.12.4 to 4.13.0 in /docs by @dependabot[bot] in #8516
- Remove juanluisvaladas from former maintainers by @juanluisvaladas in #8510
- Run arm unit tests without cgo by @twz123 in #8511
- Bump Terraform aws to v6.69.0 by @k0s-bot in #8524
- Bump docker.io/library/nginx Docker tag to v1.31.7-alpine3.24 by @k0s-bot in #8514
- Bump golang.org/x/text from 0.42.0 to 0.43.0 by @dependabot[bot] in #8495
- Bump golang.org/x/crypto from 0.57.0 to 0.58.0 by @dependabot[bot] in #8515
- Bump docker.io/library/nginx:1.31.7-alpine3.24 Docker digest to 892bb21 by @k0s-bot in #8528
- Bump golang.org/x/tools from 0.51.0 to 0.52.0 by @dependabot[bot] in #8519
- Bump renovatebot/github-action from 46.3.7 to 46.3.8 by @dependabot[bot] in #8525
- Moved package backup into internal and updated the import paths by @a-nu-ragn in #8429
- Bump tigera/operator to v1.44.0 by @k0s-bot in #8011
- Bump github.com/prometheus/common from 0.72.0 to 0.72.1 by @dependabot[bot] in #8518
- Bump Terraform aws to v6.69.1 by @k0s-bot in #8532
- Bump kubernetes-sigs/controller-tools to v0.23.0 by @k0s-bot in #8531
- Bump Calico to v3.32.2-0 by @k0s-bot in #8198
- Tolerate removed config fields in strict decoding by @pujitha24 in #8018
- Bump oras.land/oras-go/v2 from 2.6.2 to 2.6.3 by @dependabot[bot] in #8539
- Moved package assets into internal and updated the import paths by @a-nu-ragn in #8427
- Bump kubernetes/kubernetes by @k0s-bot in #8425
- Bump docker.io/anchore/syft Docker tag to v1.55.0 by @k0s-bot in #8558
- Bump go to v1.27.3 by @k0s-bot in #8559
- Bump moby/buildkit to v0.34.1 by @k0s-bot in #8566
- Bump sigstore/cosign to v3.1.4 by @k0s-bot in #8565
- Bump certifi from 2026.7.22 to 2026.10.19 in /docs by @dependabot[bot] in #8567
- Bump oras.land/oras-go/v2 from 2.6.3 to 2.6.4 by @dependabot[bot] in #8551
- Bump pymdown-extensions from 12.2 to 12.3 in /docs by @dependabot[bot] in #8552
- Bump markdown from 3.11 to 3.11.1 in /docs by @dependabot[bot] in #8555
- Bump platformdirs from 4.13.0 to 4.13.4 in /docs by @dependabot[bot] in #8557
- Bump Helm to v4.3.1 by @k0s-bot in #8523
- Bump opentofu/opentofu to v1.13.2 by @k0s-bot in #8570
- Bump docker.io/library/alpine Docker tag to v3.24.3 by @k0s-bot in #8573
- [Renovate] Track calico v3.31 bumps for release 1.35 by @juanluisvaladas in #8549
- Bump docker.io/library/alpine:3.24.3 Docker digest to b341357 by @k0s-bot in #8575
- Bump docker.io/library/registry:3.1.2 Docker digest to be9a706 by @k0s-bot in #8571
- Bump containerbase/python-prebuild to v3.15.1 by @k0s-bot in #8572
- Bump renovatebot/github-action from 46.3.8 to 46.3.9 by @dependabot[bot] in #8581
- Add JSON Schema for k0s configuration by @seanoseanohay in #8308
- Make konnectivity robust against controller lease dips by @twz123 in #8577
- Bump platformdirs from 4.13.4 to 4.13.5 in /docs by @dependabot[bot] in #8580
- Safe defaults for featuregates to avoid panic on IsEnabled by @makhov in #8548
- Bump docker.io/library/nginx Docker tag to v1.31.8-alpine3.24 by @k0s-bot in #8574
- Add patching for NLLB by @jnummelin in #7895
- Bump docker.io/library/registry:3.1.2 Docker digest to 01cd312 by @k0s-bot in #8583
- Bump docker.io/library/nginx:1.31.8-alpine3.24 Docker digest to 1ef7ca9 by @k0s-bot in #8587
- Fix Renovate Calico rules for release branches by @twz123 in #8604
- Bump docker.io/library/alpine:3.24.3 Docker digest to be26560 by @k0s-bot in #8588
- Bump quay.io/k0sproject/coredns Docker tag to v1.14.7-k0s.1 by @k0s-bot in #8591
- Include the version in Kubernetes group Renovate PR titles by @twz123 in #8607
- Bump markdown from 3.11.1 to 3.11.2 in /docs by @dependabot[bot] in #8613
- Drop the node name label from controller leases by @twz123 in #8608
- Bump quay.io/k0sproject/metrics-server Docker tag to v0.9.0-k0s.2 by @k0s-bot in #8594
- Bump quay.io/k0sproject/envoy-distroless Docker tag to v1.39.2-1 by @k0s-bot in #8592
- Bump quay.io/k0sproject/kube-router Docker tag to v2.11.1-iptables1.8.13-k0s.2 by @k0s-bot in #8609
- Bump quay.io/k0sproject/pushgateway-ttl Docker tag to v1.4.0-k0s.4 by @k0s-bot in #8595
- Bump quay.io/k0sproject/apiserver-network-proxy-agent Docker tag to v0.37.0-k0s.1 by @k0s-bot in #8590
- Bump etcd to v3.7.3 by @k0s-bot in #8589
- Bump quay.io/k0sproject/kube-proxy Docker tag to v1.37.1-1 by @k0s-bot in #8593
- Let Renovate bump cni-node on release branches by @twz123 in #8619
- Bump replicatedhq/troubleshoot to v0.134.2 by @k0s-bot in #8623
- Bump k0sproject's Calico images to v3.32.2-1 by @twz123 in #8616
- Bump cni-node to v1.9.1-k0s.2 by @twz123 in #8617
- Remove unused file.WriteTmpFile by @kke in #8635
- Close the kine backup file after creating it by @kke in #8634
- Fix data race on tcpproxy round-robin counter by @kke in #8633
New Contributors
- @imantaba made their first contribution in #8019
- @ranyodh made their first contribution in #7976
- @youdie006 made their first contribution in #8039
- @dockerpac made their first contribution in #6472
- @bainaichang made their first contribution in #7706
- @josef-hak made their first contribution in #8099
- @soltysh made their first contribution in #8117
- @tinoha made their first contribution in #8134
- @pujitha24 made their first contribution in #8111
- @magic-peach made their first contribution in #8234
- @wcrum made their first contribution in #8278
- @blicknix made their first contribution in #8277
- @kurarrr made their first contribution in #8379
- @a-nu-ragn made their first contribution in #8430
- @seanoseanohay made their first contribution in #8308
Full Changelog: v1.37.0-alpha.1+k0s.0...v1.37.1+k0s.0