fix(github-release): update release siderolabs/talos ( v1.13.7 → v1.13.8 )

[renovate]

This PR contains the following updates:

Package	Update	Change
siderolabs/talos	patch	v1.13.7 → v1.13.8

---

Release Notes

siderolabs/talos (siderolabs/talos)

v1.13.8

Compare Source

Talos 1.13.8 (2026-08-04)

Welcome to the v1.13.8 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Component Updates

Linux: 6.18.42
CoreDNS: 1.14.6
Flannel: 0.28.8

Talos is built with Go 1.26.5.

Contributors

• Andrey Smirnov
• Mateusz Urbanek
• Noel Georgi
• ctr49
• imusmanmalik
• kastakhov

Changes

14 commits

• @​3de4932 release(v1.13.8): prepare release
• @​76de777 chore: update dependencies
• @​77d5fe2 chore: update pkgs
• @​a7db9b2 fix: verify the public key signed images correctly
• @​d769389 fix: use context without cancelation for etcd locks
• @​3a2abc0 fix: redact resource specs in the merge controllers
• @​1531797 fix(machined): preserve health when services reach running
• @​fc75754 fix: race with PCR extensions and volume unlock
• @​2a51fb1 feat: update Flannel to 0.28.8
• @​05471d3 feat: update CoreDNS to 1.14.6
• @​9e0b1ca fix: volume mount race (third attempt) around service restart
• @​c5cb365 fix: ignore insecure-only imager assets
• @​c67b10d test: update Calico in canal reset test
• @​9eca6ea fix: preserve trailing rate-limited trigger events

Changes from siderolabs/pkgs

6 commits

• siderolabs/pkgs@f677246 chore: update kernel
• siderolabs/pkgs@6c5daf2 chore: replace gnu mirror
• siderolabs/pkgs@4304e87 feat: bump kernel to 6.18.41
• siderolabs/pkgs@e66edeb feat: enable PCF8523 RTC support for arm64
• siderolabs/pkgs@b2e51fc feat: bump kernel to 6.18.40
• siderolabs/pkgs@33195c5 feat: enable CONFIG_NFT_SOCKET in the kernel

Dependency Changes

• github.com/google/cel-go v0.28.0 -> v0.29.0
• github.com/gopacket/gopacket v1.5.0 -> v1.6.1
• github.com/klauspost/compress v1.18.6 -> v1.18.7
• github.com/siderolabs/pkgs v1.13.0-49-g91fe0a0 -> v1.13.0-55-gf677246
• github.com/siderolabs/talos/pkg/machinery v1.13.7 -> v1.13.8
• github.com/sigstore/sigstore-go v1.2.0 -> v1.2.1
• golang.org/x/net v0.55.0 -> v0.57.0
• golang.org/x/sync v0.20.0 -> v0.22.0
• golang.org/x/sys v0.45.0 -> v0.47.0
• golang.org/x/term v0.43.0 -> v0.45.0
• golang.org/x/text v0.37.0 -> v0.40.0
• google.golang.org/grpc v1.81.1 -> v1.82.1

Previous release can be found at v1.13.7

Images

ghcr.io/siderolabs/flannel:0.28.8
registry.k8s.io/coredns/coredns:v1.14.6
registry.k8s.io/etcd:v3.6.12
registry.k8s.io/pause:3.10.1
registry.k8s.io/kube-apiserver:v1.36.2
registry.k8s.io/kube-controller-manager:v1.36.2
registry.k8s.io/kube-scheduler:v1.36.2
registry.k8s.io/kube-proxy:v1.36.2
ghcr.io/siderolabs/kubelet:v1.36.2
registry.k8s.io/networking/kube-network-policies:v1.1.0
ghcr.io/siderolabs/installer:v1.13.8
ghcr.io/siderolabs/installer-base:v1.13.8
ghcr.io/siderolabs/imager:v1.13.8
ghcr.io/siderolabs/talos:v1.13.8
ghcr.io/siderolabs/talosctl-all:v1.13.8
ghcr.io/siderolabs/overlays:v1.13.8
ghcr.io/siderolabs/extensions:v1.13.8

---

Configuration

📅 Schedule: (in timezone Pacific/Auckland)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

konflate — summary

Note

+0 added · 1 changed · −0 removed — 1 resource · 1 app

Blast radius

• Kustomization flux-system/platform — 1 dependent (Kustomization flux-system/apps)

View the full rendered diff →

_{konflate · rendered 779faad · advisory, not a gate}