[breaking] chore: update rancher/k3s (v1.36.4-k3s1 → v1.37.1-k3s1) #264

Merged

Wuast94 merged 1 commit from updatarr/rancher-k3s-faf6dbfc5f into main 2026-10-15 01:44:24 +02:00

Conversation 0 Commits 1 Files changed 1 +1 -1

Wuast94 commented 2026-10-14 02:30:38 +02:00

Owner

• Copy link
• Copy Markdown

Updates rancher/k3s.
Breaking change detected. Review the release notes before merging.

Automerge: Disabled because breaking change release notes were detected

Updates

Dependency	From	To	Type	Locations
rancher/k3s	v1.36.4-k3s1	v1.37.1-k3s1	minor	scripts/test-images.env L5

Release notes: rancher/k3s

Source comparison unavailable: source refs for this transition are not known.

v1.36.4-rc1+k3s1 v1.36.4-rc1+k3s1

What's Changed

• [Release-1.36] Backport tests changes by @vitorsavian in https://github.com/k3s-io/k3s/pull/14517
• [release-1.36] Bump Local Path Provisioner version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/14498
• [Release-1.36] Bump containerd to v2.3.4-k3s1.36 by @vitorsavian in https://github.com/k3s-io/k3s/pull/14512
• [release-1.36] Backports for 2026-08 by @brandond in https://github.com/k3s-io/k3s/pull/14522
• [release-1.36] Update to v1.36.4-k3s1 and Go 1.26.7 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/14545

Full Changelog: https://github.com/k3s-io/k3s/compare/v1.36.3+k3s1...v1.36.4-rc1+k3s1

Source

Release

v1.36.4+k3s1 v1.36.4+k3s1

Warning

This release upgrades Traefik chart to v40.x which includes a breaking change for the ingress-nginx migration: the provider name changes from kubernetesIngressNginx to kubernetesIngressNGINX. Check https://github.com/traefik/traefik-helm-chart/releases/tag/v40.0.0 for more details

This release updates Kubernetes to v1.36.4, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.36.3+k3s1:

• Backport tests changes (#14517)
• Bump Local Path Provisioner version (#14498)
• Bump containerd to v2.3.4-k3s1.36 (#14512)
• Backports for 2026-08 (#14522)
• Update to v1.36.4-k3s1 and Go 1.26.7 (#14545)

Embedded Component Versions

Component	Version
Kubernetes	v1.36.4
Kine	v0.16.4
SQLite	3.53.4
Etcd	v3.6.14-k3s1
Containerd	v2.3.4-k3s1.36
Runc	v1.4.2
Flannel	v0.28.4
Metrics-server	v0.9.0
Traefik	v3.7.8
CoreDNS	v1.14.6
Helm-controller	v0.17.7
Local-path-provisioner	v0.0.37

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

Source

Release

v1.36.5-rc1+k3s1 v1.36.5-rc1+k3s1

What's Changed

• [release-1.36] Bump rancher/mirrored-coredns-coredns image version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/14534
• Bump gateway-api and traefik image versions for K3s 1.36 by @manuelbuil in https://github.com/k3s-io/k3s/pull/14567
• [Release 1.36] Bump Traefik to v3.7.13 by @manuelbuil in https://github.com/k3s-io/k3s/pull/14610
• [release-1.36] Bump google.golang.org/grpc to v1.83.2 for CVE-2026-84445 by @brandond in https://github.com/k3s-io/k3s/pull/14620
• [release-1.36] Backports for 2026-09 by @brandond in https://github.com/k3s-io/k3s/pull/14632
• [release-1.36] Require node password informer sync before using cache by @brandond in https://github.com/k3s-io/k3s/pull/14673
• [release-1.36] Bump helm-controller by @brandond in https://github.com/k3s-io/k3s/pull/14685
• [release-1.36] Bump k3s-io/kubernetes and Go references by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/14694

Full Changelog: https://github.com/k3s-io/k3s/compare/v1.36.4+k3s1...v1.36.5-rc1+k3s1

Source

Release

v1.36.5-rc2+k3s1 v1.36.5-rc2+k3s1

What's Changed

• [Release-1.36] Reject anonymous access to supervisor router (spegel/pprof/metrics) by @dereknola in https://github.com/k3s-io/k3s/pull/14702
• [Release-1.36] Improve CA hash validation by @dereknola in https://github.com/k3s-io/k3s/pull/14706

Full Changelog: https://github.com/k3s-io/k3s/compare/v1.36.5-rc1+k3s1...v1.36.5-rc2+k3s1

Source

Release

v1.36.5+k3s1 v1.36.5+k3s1

Warning

This release upgrades Traefik chart to v40.x which includes a breaking change for the ingress-nginx migration: the provider name changes from kubernetesIngressNginx to kubernetesIngressNGINX. Check https://github.com/traefik/traefik-helm-chart/releases/tag/v40.0.0 for more details

This release updates Kubernetes to v1.36.5, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.36.4+k3s1:

• Bump rancher/mirrored-coredns-coredns image version (#14534)
• Bump gateway-api and traefik image versions for K3s 1.36 (#14567)
  • Bump Traefik image to 3.7.12 and gateway-api to 1.6.1
• Bump Traefik to v3.7.13 (#14610)
• Bump google.golang.org/grpc to v1.83.2 for CVE-2026-84445 (#14620)
• Backports for 2026-09 (#14632)
  • Fix restore from compressed etcd snapshot #14528
  • Enable seccomp in riscv64 builds #14529
  • Use ginkgo CLI to run tests #14531
  • Bump k3s-io/api to v0.2.0 #14570
  • Servicelb multiple lbpools #14547
  • Close minio.Object after read #14580
  • Bump k3s-io/apis again #14589
  • Fix --flannel-cni-conf not reaching the embedded flannel #14598
  • Check-config: suppress colors when stdout is not a terminal #14595
  • Fix deploy controller not re-applying manifests when mtime is pinned to the epoch #14568
  • Bump etcd to v3.7.1-k3s3 for nonblocking logging support #14628
  • Bump kine to v0.17.1 #14627
• Require node password informer sync before using cache (#14673)
• Bump helm-controller (#14685)
• Bump k3s-io/kubernetes and Go references (#14694)
• Reject anonymous access to supervisor router (spegel/pprof/metrics) (#14702)
• Improve CA hash validation (#14706)

Embedded Component Versions

Component	Version
Kubernetes	v1.36.5
Kine	v0.16.5
SQLite	3.53.4
Etcd	v3.6.14-k3s3
Containerd	v2.3.4-k3s1.36
Runc	v1.4.2
Flannel	v0.28.4
Metrics-server	v0.9.0
Traefik	v3.7.13
CoreDNS	v1.14.7
Helm-controller	v0.17.9
Local-path-provisioner	v0.0.37

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

Source

Release

v1.37.0-rc1+k3s1 v1.37.0-rc1+k3s1

What's Changed

• Expand docker upgrade test, sunset E2E upgrade test by @dereknola in https://github.com/k3s-io/k3s/pull/13338
• Add firewall section to check-config.sh by @dereknola in https://github.com/k3s-io/k3s/pull/13234
• Update golangci-lint and re-enable CI linting step by @brandond in https://github.com/k3s-io/k3s/pull/13343
• Fix PR lint checkout depth by @brandond in https://github.com/k3s-io/k3s/pull/13369
• Update stable channel to v1.34.3+k3s1 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13374
• Bump actions/download-artifact from 6 to 7 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13346
• Bump stable to 1.34 and add 1.35 by @brandond in https://github.com/k3s-io/k3s/pull/13373
• Enable secret encryption on existing clusters by @dereknola in https://github.com/k3s-io/k3s/pull/13370
• Bump Local Path Provisioner version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/13387
• Use Get, not Head for channel page by @dereknola in https://github.com/k3s-io/k3s/pull/13402
• Fix typos in documentation by @oglok in https://github.com/k3s-io/k3s/pull/13411
• Bump actions/cache from 4 to 5 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13347
• Replace temporary etcd server with raw mvcc store access by @brandond in https://github.com/k3s-io/k3s/pull/13368
• Bump Traefik and CoreDNS - Jan 2025 by @dereknola in https://github.com/k3s-io/k3s/pull/13424
• Remove flannel external-ip annotations when disabled by @brandond in https://github.com/k3s-io/k3s/pull/13431
• Bump local path provisioner to v0.0.34 by @dereknola in https://github.com/k3s-io/k3s/pull/13430
• [main] Publish GA images to staging registry by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13438
• Bump cni plugins by @brandond in https://github.com/k3s-io/k3s/pull/13439
• Fix atomic write in WriteSubnetFile by @luojiyin1987 in https://github.com/k3s-io/k3s/pull/13380
• Bump expr-lang/expr by @brandond in https://github.com/k3s-io/k3s/pull/13440
• Bump spegel to v0.6.0 by @brandond in https://github.com/k3s-io/k3s/pull/13198
• Update longhorn version in integration test from v1.4.0 to v1.10.1 by @brandond in https://github.com/k3s-io/k3s/pull/13443
• Bump kine to v0.14.10 for NATS conformance fixes by @brandond in https://github.com/k3s-io/k3s/pull/13441
• Remove download/generate from vulncheck by @brandond in https://github.com/k3s-io/k3s/pull/13445
• Bump to coredns 1.14.0 by @mgfritch in https://github.com/k3s-io/k3s/pull/13449
• Add Momentum Coach AI to K3S adopters list by @geoffreyPerrin in https://github.com/k3s-io/k3s/pull/13467
• Fix lines to satisfy lint and fix CI by @manuelbuil in https://github.com/k3s-io/k3s/pull/13475
• Update Traefik version to v3.6.7 by @manuelbuil in https://github.com/k3s-io/k3s/pull/13474
• Prevent caching on PR of golangci-lint entries by @dereknola in https://github.com/k3s-io/k3s/pull/13487
• Move to rootlesskit v2 by @dereknola in https://github.com/k3s-io/k3s/pull/13486
• Bump actions/stale from 10.1.0 to 10.1.1 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13296
• Fix CVE-2025-54410: Update docker/docker to v25.0.13 by @rahulrairai59 in https://github.com/k3s-io/k3s/pull/13473
• Bump golang:alpine image version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/13345
• Update install tests with new images, add alma10 by @dereknola in https://github.com/k3s-io/k3s/pull/13489
• Bump etcd to v3.6.7 by @brandond in https://github.com/k3s-io/k3s/pull/13495
• Add Percona and Solanica to k3s adopters by @edithturn in https://github.com/k3s-io/k3s/pull/13510
• [main] Update to v1.35.0-k3s3 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13524
• Fix restart of control-plane-only nodes attempting to reconcile from local datastore by @brandond in https://github.com/k3s-io/k3s/pull/13534
• Fix spegel filter for wildcards by @brandond in https://github.com/k3s-io/k3s/pull/13527
• Add IPv6 loopback to kubelet-serving cert by @brandond in https://github.com/k3s-io/k3s/pull/13532
• Fix handling of empty token file by @brandond in https://github.com/k3s-io/k3s/pull/13529
• Use channel.yaml instead of curling for stable for kubectl install by @dereknola in https://github.com/k3s-io/k3s/pull/13531
• Fix VPN node IP not being applied to kubelet by @zijiren233 in https://github.com/k3s-io/k3s/pull/13457
• Bump aws-actions/configure-aws-credentials from 4 to 5 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13185
• Bump scorecard checkout to match all other versions by @dereknola in https://github.com/k3s-io/k3s/pull/13568
• Bump kine for list/watch revision fixes by @brandond in https://github.com/k3s-io/k3s/pull/13575
• Explicitly close mvcc backend to fix high CPU on initial etcd server after restart by @brandond in https://github.com/k3s-io/k3s/pull/13569
• Support commit builds via GHA artifacts by @dereknola in https://github.com/k3s-io/k3s/pull/13559
• Bump rancher/mirrored-coredns-coredns image version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/13499
• [main] Update stable channel to v1.34.3+k3s3 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13554
• Bump metrics-server to v0.8.1 by @mgfritch in https://github.com/k3s-io/k3s/pull/13594
• [main] Add registry prefix to image-list file by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13603
• Bump klipper-helm and klipper-lb images by @brandond in https://github.com/k3s-io/k3s/pull/13613
• Fix removal of init node via annotation by @brandond in https://github.com/k3s-io/k3s/pull/13624
• [master] Update to v1.35.1-k3s1 and Go 1.25.6 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13638
• Update stable to v1.34.4+k3s1 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13642
• Make artifact URL prefix configurable by @manuelbuil in https://github.com/k3s-io/k3s/pull/13367
• Bump kine to v0.14.12 by @brandond in https://github.com/k3s-io/k3s/pull/13661
• Install binutils-gold only for arm64 builds by @mmoll in https://github.com/k3s-io/k3s/pull/13654
• Rootlesskit Revert + Test Fixes by @dereknola in https://github.com/k3s-io/k3s/pull/13681
• Improve resilience of datastore bootstrap reconcile from etcd by @brandond in https://github.com/k3s-io/k3s/pull/13677
• Bump Traefik to v3.6.9 by @manuelbuil in https://github.com/k3s-io/k3s/pull/13693
• [main] Update to v1.35.2-k3s1 and Go 1.25.7 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13708
• Assign github.event to env first by @dereknola in https://github.com/k3s-io/k3s/pull/13715
• config: Add default imports to containerd base templates by @fidencio in https://github.com/k3s-io/k3s/pull/13680
• update channel server to 1.34.5 by @briandowns in https://github.com/k3s-io/k3s/pull/13732
• Add nix-snapshotter support to the embedded containerd by @nuketownada in https://github.com/k3s-io/k3s/pull/13676
• Do not create etcd name file if etcd is not in use by @brandond in https://github.com/k3s-io/k3s/pull/13727
• Bump actions/download-artifact from 7 to 8 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13714
• build(deps): bump actions/stale from 10.1.1 to 10.2.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13670
• build(deps): bump aquasecurity/trivy-action from 0.33.1 to 0.34.1 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13669
• build(deps): bump aws-actions/configure-aws-credentials from 5 to 6 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13596
• Bump softprops/action-gh-release from 2.2.1 to 2.5.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13376
• Bump rancher/mirrored-coredns-coredns image version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/13743
• Bump klipper-lb and klipper-helm by @brandond in https://github.com/k3s-io/k3s/pull/13761
• Bump golang:alpine image version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/13653
• Update packages to remove unmaintained dependencies by @brandond in https://github.com/k3s-io/k3s/pull/13724
• Bump DeterminateSystems/nix-installer-action from 17 to 21 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13744
• Bump docker/build-push-action from 6 to 7 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13745
• Bump docker/setup-qemu-action from 3 to 4 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13746
• Bump docker/setup-docker-action from 4 to 5 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13747
• Save cluster state before reencyrpting secrets with newly created key by @dereknola in https://github.com/k3s-io/k3s/pull/13764
• Bump docker/metadata-action from 5 to 6 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13748
• Bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13713
• Bump github.com/docker/cli from 28.3.2+incompatible to 29.2.0+incompatible by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13730
• build(deps): bump github.com/pion/dtls/v3 from 3.0.6 to 3.0.11 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13645
• Use etcd-snapshot-retention as default for s3 if etcd-s3-retention is not set by @brandond in https://github.com/k3s-io/k3s/pull/13770
• Bump traefik and local-path-provisioner by @brandond in https://github.com/k3s-io/k3s/pull/13787
• install.sh: Simplify handling for fedora rpm-ostree based distributions by @becarusys in https://github.com/k3s-io/k3s/pull/13712
• Bump containerd to v2.2.2 by @brandond in https://github.com/k3s-io/k3s/pull/13788
• Bump runc to v1.4.1 by @brandond in https://github.com/k3s-io/k3s/pull/13796
• Bump Traefik helm chart version by @manuelbuil in https://github.com/k3s-io/k3s/pull/13805
• Fix trivy updatecli config by @manuelbuil in https://github.com/k3s-io/k3s/pull/13816
• Bump cni plugins to v1.9.1 by @brandond in https://github.com/k3s-io/k3s/pull/13817
• Simplify snapshot compress/decompress logic by @brandond in https://github.com/k3s-io/k3s/pull/13826
• build(deps): bump docker/login-action from 3 to 4 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13804
• build(deps): bump softprops/action-gh-release from 2.5.0 to 2.6.1 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13803
• build(deps): bump aquasecurity/trivy-action from 0.34.1 to 0.35.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13802
• [main] Update to v1.35.3-k3s1 and Go 1.25.7 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13836
• Bump Trivy version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/13845
• Fix typo: overriden -> overridden in snapshot_handler.go in https://github.com/k3s-io/k3s/pull/13847
• fix: typo in etcd membership error message by @DT1mote in https://github.com/k3s-io/k3s/pull/13848
• Bump helm-controller for job race fix by @brandond in https://github.com/k3s-io/k3s/pull/13853
• Add context to controller event recorders by @brandond in https://github.com/k3s-io/k3s/pull/13856
• Pin GH Actions to commit sha by @cwayne18 in https://github.com/k3s-io/k3s/pull/13861
• Dapper is kill by @cwayne18 in https://github.com/k3s-io/k3s/pull/13860
• Update to flannel v0.28.2 by @mgfritch in https://github.com/k3s-io/k3s/pull/13863
• [main] Update stable to v1.34.6+k3s1 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13873
• Add sipgate to the list of adopters by @caesarakalaeii in https://github.com/k3s-io/k3s/pull/13881
• Add Rocket Technologies to the list of adopters by @BenBo17 in https://github.com/k3s-io/k3s/pull/13890
• Make Dockerfile.test more secure by @manuelbuil in https://github.com/k3s-io/k3s/pull/13882
• Make tests/integration/Dockerfile.test more secure by @manuelbuil in https://github.com/k3s-io/k3s/pull/13883
• Secure the vagrant-setup action.yaml by @manuelbuil in https://github.com/k3s-io/k3s/pull/13884
• Secure the e2e yaml GHA by @manuelbuil in https://github.com/k3s-io/k3s/pull/13885
• Pin govulncheck GHA version by @manuelbuil in https://github.com/k3s-io/k3s/pull/13887
• Verify sha256sum for kubelet, vagrant zip and go binary by @manuelbuil in https://github.com/k3s-io/k3s/pull/13889
• Check the k3s-root sha256sum by @manuelbuil in https://github.com/k3s-io/k3s/pull/13888
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13891
• build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13880
• build(deps): bump github/codeql-action from 4.34.1 to 4.35.1 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13879
• build(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13878
• build(deps): bump updatecli/updatecli-action from 2.100.0 to 3.0.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13876
• Fix reproducibility of embedded data tarball by @jonhermansen in https://github.com/k3s-io/k3s/pull/13875
• build(deps): bump github.com/buger/jsonparser from 1.1.1 to 1.1.2 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13837
• build(deps): bump github.com/nats-io/nats-server/v2 from 2.12.2 to 2.12.6 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13852
• Fix S3 test to account for change to s3mock by @brandond in https://github.com/k3s-io/k3s/pull/13906
• Bump klipper helm to v0.9.16-build20260410 by @vitorsavian in https://github.com/k3s-io/k3s/pull/13908
• Bump runc/spegel/helm-controller/kine by @brandond in https://github.com/k3s-io/k3s/pull/13909
• build(deps): bump actions/github-script from 8.0.0 to 9.0.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13914
• build(deps): bump aws-actions/configure-aws-credentials from 6.0.0 to 6.1.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13915
• build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13916
• build(deps): bump softprops/action-gh-release from 2.6.1 to 3.0.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13917
• build(deps): bump docker/build-push-action from 7.0.0 to 7.1.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13918
• Bump traefik to 3.6.12 by @manuelbuil in https://github.com/k3s-io/k3s/pull/13912
• Fix embedded executor VPN config injection by @brandond in https://github.com/k3s-io/k3s/pull/13920
• Bump containerd to v2.2.3 by @brandond in https://github.com/k3s-io/k3s/pull/13931
• Bump flannel to v0.28.4 by @thomasferrandiz in https://github.com/k3s-io/k3s/pull/13937
• [main] Update to v1.35.4-k3s1 and Go 1.25.9 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13946
• [main] Immutable release changes by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13902
• Bump Traefik to 3.6.13 by @cwayne18 in https://github.com/k3s-io/k3s/pull/13969
• [main] Switch from draft to pre-release by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13951
• Fix SANs added from comma-separated node-external-ip list by @brandond in https://github.com/k3s-io/k3s/pull/13989
• Fix docker dualstack test by @brandond in https://github.com/k3s-io/k3s/pull/13994
• Bump klipper-helm image for revision check fix by @brandond in https://github.com/k3s-io/k3s/pull/13995
• Bump upstream to v1.36 by @vitorsavian in https://github.com/k3s-io/k3s/pull/13986
• Add k8gb to adopters list in ADOPTERS.md by @ytsarev in https://github.com/k3s-io/k3s/pull/13978
• Bump Klipper LB version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/13976
• Update stable to v1.35.4+k3s1 and add v1.36 entry by @rafaelbreno in https://github.com/k3s-io/k3s/pull/14016
• Replace PreparingExecutor with explicit embedded executor init by @brandond in https://github.com/k3s-io/k3s/pull/14000
• Bump spegel to v0.7.0 by @brandond in https://github.com/k3s-io/k3s/pull/14003
• Bump rancher/mirrored-coredns-coredns image version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/14005
• Fix kubectl exec when using docker by @vitorsavian in https://github.com/k3s-io/k3s/pull/14019
• Improve K3s BUILDING and CONTRIBUTING guides by @manuelbuil in https://github.com/k3s-io/k3s/pull/13985
• Bump Klipper LB version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/14026
• [main] Fix s3 path by @rafaelbreno in https://github.com/k3s-io/k3s/pull/14015
• add lost return by @nameearly in https://github.com/k3s-io/k3s/pull/14020
• Bump kine to v0.15.0 by @brandond in https://github.com/k3s-io/k3s/pull/14030
• Bump Local Path Provisioner version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/14038
• Update Orlin's mail by @OrlinVasilev in https://github.com/k3s-io/k3s/pull/14047
• [main] Update to v1.36.1-k3s1 and Go 1.26.2 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/14052
• Fix cron to run everyday at 6PM UTC by @rafaelbreno in https://github.com/k3s-io/k3s/pull/14041
• Bump klipper-helm image tag by @brandond in https://github.com/k3s-io/k3s/pull/14054
• chore: fix duplicated "the" in etcd/s3 and permissions doc comments by @quyentonndbs in https://github.com/k3s-io/k3s/pull/14072
• Add AI contribution guide by @brandond in https://github.com/k3s-io/k3s/pull/14090
• [main] Update stable channel to v1.35.5+k3s1 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/14091
• fix: use same package manager for k3s-selinux removal as for installation by @becarusys in https://github.com/k3s-io/k3s/pull/13711
• Nit: Wrong integration test name by @manuelbuil in https://github.com/k3s-io/k3s/pull/14097
• Use 0600 permissions for compressed etcd snapshots by @eran132 in https://github.com/k3s-io/k3s/pull/14092
• fix: populate IfaceName in LookupExtInterface for VXLAN recreation by @jkubo in https://github.com/k3s-io/k3s/pull/14086
• Fix token delete argument handling by @elysia090 in https://github.com/k3s-io/k3s/pull/14076
• Skip bridge-nf-call sysctls when kube-proxy and flannel are disabled by @eran132 in https://github.com/k3s-io/k3s/pull/14093
• build(deps): bump updatecli/updatecli-action from 3.0.0 to 3.1.2 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13980
• build(deps): bump github/codeql-action from 4.35.1 to 4.35.2 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13982
• build(deps): bump docker/login-action from 4.0.0 to 4.1.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13981
• Bump kine to v0.16.0 by @brandond in https://github.com/k3s-io/k3s/pull/14123
• Bump spegel to v0.7.1 for libp2p-kad-dht panic fix by @brandond in https://github.com/k3s-io/k3s/pull/14128
• Bump Traefik to v3.7.1 by @manuelbuil in https://github.com/k3s-io/k3s/pull/14134
• Bump kine for t4 fixes by @brandond in https://github.com/k3s-io/k3s/pull/14132
• build(deps): bump actions/cache from 5.0.4 to 5.0.5 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13979
• Stop opening depedabot PRs for GitHub Action patch versions by @dereknola in https://github.com/k3s-io/k3s/pull/14143
• Bump klipper-helm to v0.11 for helmv4 by @brandond in https://github.com/k3s-io/k3s/pull/14145
• Bump containerd to v2.3.1 by @brandond in https://github.com/k3s-io/k3s/pull/14136
• bump etcd to v3.6.12 by @brandond in https://github.com/k3s-io/k3s/pull/14149
• Agentic workflows by @dereknola in https://github.com/k3s-io/k3s/pull/14129
• Use of CNCF Runners in CI by @dereknola in https://github.com/k3s-io/k3s/pull/14144
• Optimize Test order by @dereknola in https://github.com/k3s-io/k3s/pull/14186
• Bump v3.7.4 Traefik by @manuelbuil in https://github.com/k3s-io/k3s/pull/14192
• test(kubeflags): add K3sCleanup between server restarts to fix flake by @amaanx86 in https://github.com/k3s-io/k3s/pull/14189
• Passthru KINE_ environment variables in install.sh and added new hash by @dnoland1 in https://github.com/k3s-io/k3s/pull/14188
• Bump golang.org/x/net to v0.55.0 to fix CVE-2026-39821 by @jimmykarily in https://github.com/k3s-io/k3s/pull/14203
• Reduce GRPC console spam by @brandond in https://github.com/k3s-io/k3s/pull/14202
• build(deps): bump docker/metadata-action from 6.0.0 to 6.1.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/14147
• build(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/14139
• build(deps): bump github/codeql-action from 4.35.2 to 4.36.1 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/14148
• Fix cloud-controller-manager exiting due to missing core RBAC by @brandond in https://github.com/k3s-io/k3s/pull/14201
• Bump k3s-root to v0.15.2 by @brandond in https://github.com/k3s-io/k3s/pull/14205
• Bump rancher/mirrored-coredns-coredns image version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/14208
• Address new linting requirements by @dereknola in https://github.com/k3s-io/k3s/pull/14210
• Revert "Add runtime checking of golang version" by @brandond in https://github.com/k3s-io/k3s/pull/14219
• Dualstack spegel by @dereknola in https://github.com/k3s-io/k3s/pull/13831
• Update github actions in a single grouped PR every month by @dereknola in https://github.com/k3s-io/k3s/pull/14221
• Bump klipper-helm for CVE reasons by @cwayne18 in https://github.com/k3s-io/k3s/pull/14235
• Bump containerd with the fix for []byte envvar value by @vitorsavian in https://github.com/k3s-io/k3s/pull/14240
• [main] Update to v1.36.2-k3s1 and Go 1.26.4 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/14231
• Use built-in etcd bootstrap defrag threshold if specified by @alexander-demicev in https://github.com/k3s-io/k3s/pull/14099
• build(deps): bump the action-deps group with 7 updates by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/14226
• build(deps): bump ubuntu from 24.04 to 26.04 in /tests/e2e/scripts by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/14040
• build(deps): bump alpine from 3.22 to 3.24 in /package by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/14225
• Unit test expansion by @dereknola in https://github.com/k3s-io/k3s/pull/14249
• Fix codecov reports for E2E and Integration tests by @dereknola in https://github.com/k3s-io/k3s/pull/14252
• Bump containerd to v2.3.2-k3s1 by @vitorsavian in https://github.com/k3s-io/k3s/pull/14253
• Add image names to file cache by @brandond in https://github.com/k3s-io/k3s/pull/14266
• Bump cri-api and containerd for upstream env string fix by @brandond in https://github.com/k3s-io/k3s/pull/14276
• [main] Update stable channel to v1.36.2+k3s1 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/14281
• Add Sophotech to the list of adopters by @archy-rock3t-cloud in https://github.com/k3s-io/k3s/pull/14285
• Migrate from local targets to defaults by @dereknola in https://github.com/k3s-io/k3s/pull/14204
• Fix image-endpoint assignment in run_linux.go by @neiltalap in https://github.com/k3s-io/k3s/pull/14246
• Preserve logical paths for symlinked manifests by @immanuwell in https://github.com/k3s-io/k3s/pull/14087
• Bump dynamiclistener to v0.9.0-rc.2 for wildcard tls-san support by @Eshaan-Lumba in https://github.com/k3s-io/k3s/pull/14280
• fix: pre-apply feature gates before embedded API server starts by @SebTardif in https://github.com/k3s-io/k3s/pull/14287
• Add helm-controller-arg flag by @manuelbuil in https://github.com/k3s-io/k3s/pull/14185
• Bump kine to v0.16.3 for perf improvements by @brandond in https://github.com/k3s-io/k3s/pull/14310
• Bump spegel to v0.7.2 by @brandond in https://github.com/k3s-io/k3s/pull/14311
• fix: re-import airgap images when timestamp changes even if size is same by @bheemareddy in https://github.com/k3s-io/k3s/pull/14288
• Use xx for multiarch builds without emulation by @dereknola in https://github.com/k3s-io/k3s/pull/14291
• Bump golang:alpine image version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/14247
• Add backoff to initial snapshot reconcile by @brandond in https://github.com/k3s-io/k3s/pull/14322
• Synchronize egress map and CIDR trie reads in tunnel dialBackend by @archy-rock3t-cloud in https://github.com/k3s-io/k3s/pull/14341
• Redact single-dash secret flags in the node args annotation by @archy-rock3t-cloud in https://github.com/k3s-io/k3s/pull/14340
• Emit events attached to node when snapshot retention fails by @brandond in https://github.com/k3s-io/k3s/pull/14345
• Run Conformance tests nightly by @dereknola in https://github.com/k3s-io/k3s/pull/14338
• Bump Traefik to v3.7.7 by @manuelbuil in https://github.com/k3s-io/k3s/pull/14326
• Bump mirrored-pause to 3.10.2 by @dereknola in https://github.com/k3s-io/k3s/pull/14339
• build(deps): bump the action-deps group with 14 updates by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/14394
• Bump dynamiclistener for atomic write fix by @brandond in https://github.com/k3s-io/k3s/pull/14382
• Bump helm-controller/klipper-helm by @brandond in https://github.com/k3s-io/k3s/pull/14403
• Simplify WriteSubnetFile cleanup and make atomic by @brandond in https://github.com/k3s-io/k3s/pull/14405
• Fix typo in snapshot prune event by @brandond in https://github.com/k3s-io/k3s/pull/14410
• Bump rancher/mirrored-coredns-coredns image version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/14415
• Add updatecli manifest to bump Kubernetes across multiple release branches by @rafaelbreno in https://github.com/k3s-io/k3s/pull/14402
• Use new Traefik v3.7.8 by @manuelbuil in https://github.com/k3s-io/k3s/pull/14404
• Bump metrics-server to v0.9.0 by @mgfritch in https://github.com/k3s-io/k3s/pull/14416
• updatecli: relax metrics-server semver filter et al. by @mgfritch in https://github.com/k3s-io/k3s/pull/14429
• updatecli: add missing requiredEnv by @mgfritch in https://github.com/k3s-io/k3s/pull/14434
• Bump helm-controller and klipper-helm for --force-conflicts support by @brandond in https://github.com/k3s-io/k3s/pull/14446
• [main] Bump k3s-io/kubernetes and Go references by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/14457
• Bump etcd to v3.6.14 by @brandond in https://github.com/k3s-io/k3s/pull/14460
• Fix production builds always enabling Go coverage instrumentation by @mgfritch in https://github.com/k3s-io/k3s/pull/14465
• feat: support custom kubeconfig name by @kasefuchs in https://github.com/k3s-io/k3s/pull/14440
• Require node password informer sync before using cache by @brandond in https://github.com/k3s-io/k3s/pull/14459
• Bump helm-controller and klipper-helm by @brandond in https://github.com/k3s-io/k3s/pull/14474
• Enable unit tests by @manuelbuil in https://github.com/k3s-io/k3s/pull/14480
• fix: change sles to use slemicro rpms instead of microos by @vitorsavian in https://github.com/k3s-io/k3s/pull/14472
• tests: make rootless uidmap install robust against stale apt cache by @mgfritch in https://github.com/k3s-io/k3s/pull/14490
• [main] Update stable channel to v1.36.3+k3s1 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/14492
• Etcd client locking by @dcermak in https://github.com/k3s-io/k3s/pull/14488
• tests: Install rke2-multus-crd chart for multus e2e test by @mgfritch in https://github.com/k3s-io/k3s/pull/14489
• Filter large untemplated issues by @dereknola in https://github.com/k3s-io/k3s/pull/14435
• Fix typo in spegel deferred store comment by @Lcos-000 in https://github.com/k3s-io/k3s/pull/14485
• make explicit where coredns customizations should be made by @turettn in https://github.com/k3s-io/k3s/pull/14503
• Bump docker version in CI to 29 by @brandond in https://github.com/k3s-io/k3s/pull/14506
• Don't retag images for a registry they are already hosted by by @boothb in https://github.com/k3s-io/k3s/pull/14484
• Tidy dockerfile and build stages by @brandond in https://github.com/k3s-io/k3s/pull/14511
• Add advertise-address to SANs before generating apiserver cert by @somaz94 in https://github.com/k3s-io/k3s/pull/14516
• [main] Bump Local Path Provisioner version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/14496
• Bump containerd to v2.3.4-k3s1.36 by @vitorsavian in https://github.com/k3s-io/k3s/pull/14510
• Bump kine to v0.16.4 for nats replay fix by @brandond in https://github.com/k3s-io/k3s/pull/14521
• updatecli: remove release-1.33 branch by @mgfritch in https://github.com/k3s-io/k3s/pull/14537
• [main] Update to v1.36.4-k3s1 and Go 1.26.7 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/14546
• feat: Add Project Bluefin to adopters list by @castrojo in https://github.com/k3s-io/k3s/pull/14549
• Bump k8s to v1.37 by @vitorsavian in https://github.com/k3s-io/k3s/pull/14509
• Bump Traefik and bundle gateway-api crds by @manuelbuil in https://github.com/k3s-io/k3s/pull/14573

New Contributors

• @oglok made their first contribution in https://github.com/k3s-io/k3s/pull/13411
• @luojiyin1987 made their first contribution in https://github.com/k3s-io/k3s/pull/13380
• @geoffreyPerrin made their first contribution in https://github.com/k3s-io/k3s/pull/13467
• @rahulrairai59 made their first contribution in https://github.com/k3s-io/k3s/pull/13473
• @edithturn made their first contribution in https://github.com/k3s-io/k3s/pull/13510
• @zijiren233 made their first contribution in https://github.com/k3s-io/k3s/pull/13457
• @mmoll made their first contribution in https://github.com/k3s-io/k3s/pull/13654
• @fidencio made their first contribution in https://github.com/k3s-io/k3s/pull/13680
• @nuketownada made their first contribution in https://github.com/k3s-io/k3s/pull/13676
• @becarusys made their first contribution in https://github.com/k3s-io/k3s/pull/13712
• @DT1mote made their first contribution in https://github.com/k3s-io/k3s/pull/13848
• @caesarakalaeii made their first contribution in https://github.com/k3s-io/k3s/pull/13881
• @BenBo17 made their first contribution in https://github.com/k3s-io/k3s/pull/13890
• @jonhermansen made their first contribution in https://github.com/k3s-io/k3s/pull/13875
• @ytsarev made their first contribution in https://github.com/k3s-io/k3s/pull/13978
• @nameearly made their first contribution in https://github.com/k3s-io/k3s/pull/14020
• @quyentonndbs made their first contribution in https://github.com/k3s-io/k3s/pull/14072
• @eran132 made their first contribution in https://github.com/k3s-io/k3s/pull/14092
• @jkubo made their first contribution in https://github.com/k3s-io/k3s/pull/14086
• @elysia090 made their first contribution in https://github.com/k3s-io/k3s/pull/14076
• @amaanx86 made their first contribution in https://github.com/k3s-io/k3s/pull/14189
• @jimmykarily made their first contribution in https://github.com/k3s-io/k3s/pull/14203
• @alexander-demicev made their first contribution in https://github.com/k3s-io/k3s/pull/14099
• @archy-rock3t-cloud made their first contribution in https://github.com/k3s-io/k3s/pull/14285
• @neiltalap made their first contribution in https://github.com/k3s-io/k3s/pull/14246
• @immanuwell made their first contribution in https://github.com/k3s-io/k3s/pull/14087
• @SebTardif made their first contribution in https://github.com/k3s-io/k3s/pull/14287
• @bheemareddy made their first contribution in https://github.com/k3s-io/k3s/pull/14288
• @kasefuchs made their first contribution in https://github.com/k3s-io/k3s/pull/14440
• @Lcos-000 made their first contribution in https://github.com/k3s-io/k3s/pull/14485
• @turettn made their first contribution in https://github.com/k3s-io/k3s/pull/14503
• @boothb made their first contribution in https://github.com/k3s-io/k3s/pull/14484
• @somaz94 made their first contribution in https://github.com/k3s-io/k3s/pull/14516
• @castrojo made their first contribution in https://github.com/k3s-io/k3s/pull/14549

Full Changelog: https://github.com/k3s-io/k3s/compare/v1.35.0+k3s1...v1.37.0-rc1+k3s1

Source

Release

v1.37.0-rc2+k3s1 v1.37.0-rc2+k3s1

What's Changed

• [release-1.37] Bump rancher/mirrored-coredns-coredns image version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/14577
• [Release-1.37] Bump critools to v1.37 by @vitorsavian in https://github.com/k3s-io/k3s/pull/14579

Full Changelog: https://github.com/k3s-io/k3s/compare/v1.37.0-rc1+k3s1...v1.37.0-rc2+k3s1

Source

Release

v1.37.0-rc3+k3s1 v1.37.0-rc3+k3s1

What's Changed

• [Release 1.37] Bump gateway-api-crd version 3, which includes the keep annotation by @manuelbuil in https://github.com/k3s-io/k3s/pull/14586

Full Changelog: https://github.com/k3s-io/k3s/compare/v1.37.0-rc2+k3s1...v1.37.0-rc3+k3s1

Source

Release

v1.37.0-rc4+k3s1 v1.37.0-rc4+k3s1

What's Changed

• [Release 1.37] Bump Traefik to v3.7.13 by @manuelbuil in https://github.com/k3s-io/k3s/pull/14606

Full Changelog: https://github.com/k3s-io/k3s/compare/v1.37.0-rc3+k3s1...v1.37.0-rc4+k3s1

Source

Release

v1.37.0-rc5+k3s1 v1.37.0-rc5+k3s1

What's Changed

• [release-1.37] Bump google.golang.org/grpc to v1.83.2 for CVE-2026-84445 by @brandond in https://github.com/k3s-io/k3s/pull/14614
• [release-1.37] Bump google.golang.org/grpc to v1.83.2, not v1.82.2 by @brandond in https://github.com/k3s-io/k3s/pull/14619

Full Changelog: https://github.com/k3s-io/k3s/compare/v1.37.0-rc4+k3s1...v1.37.0-rc5+k3s1

Source

Release

v1.37.0+k3s1 v1.37.0+k3s1

This release updates Kubernetes to v1.37.0, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.36.3+k3s1:

• Bump mirrored-pause to 3.10.2 (#14339)
• Build(deps): bump the action-deps group with 14 updates (#14394)
• Bump dynamiclistener for atomic write fix (#14382)
• Bump helm-controller/klipper-helm (#14403)
• Simplify WriteSubnetFile cleanup and make atomic (#14405)
• Fix typo in snapshot prune event (#14410)
• Bump rancher/mirrored-coredns-coredns image version (#14415)
• Add updatecli manifest to bump Kubernetes across multiple release branches (#14402)
• Bump metrics-server to v0.9.0 (#14416)
• Updatecli: relax metrics-server semver filter et al. (#14429)
• Updatecli: add missing requiredEnv (#14434)
• Bump helm-controller and klipper-helm for --force-conflicts support (#14446)
• Bump k3s-io/kubernetes and Go references (#14457)
• Bump etcd to v3.6.14 (#14460)
• Fix production builds always enabling Go coverage instrumentation (#14465)
• Feat: support custom kubeconfig name (#14440)
  • Added --write-kubeconfig-name server flag to set the name for cluster, user and context in generated kubeconfig.
• Require node password informer sync before using cache (#14459)
• Bump helm-controller and klipper-helm (#14474)
• Enable unit tests (#14480)
• Fix: change sles to use slemicro rpms instead of microos (#14472)
• Tests: make rootless uidmap install robust against stale apt cache (#14490)
• Update stable channel to v1.36.3+k3s1 (#14492)
• Etcd client locking (#14488)
• Tests: Install rke2-multus-crd chart for multus e2e test (#14489)
• Filter large untemplated issues (#14435)
• Fix typo in spegel deferred store comment (#14485)
• Make explicit where coredns customizations should be made (#14503)
• Bump docker version in CI to 29 (#14506)
• Don't retag images for a registry they are already hosted by (#14484)
  • Fixed an issue where airgap image imports could fail with an "already exists" error, or accumulate duplicate image tags on every restart, when system-default-registry matched the registry the images were already tagged for.
• Tidy dockerfile and build stages (#14511)
• Add advertise-address to SANs before generating apiserver cert (#14516)
  • Fixed the apiserver serving certificate not including the value of --advertise-address in its subject alternative names.
• Bump Local Path Provisioner version (#14496)
• Bump containerd to v2.3.4-k3s1.36 (#14510)
• Bump kine to v0.16.4 for nats replay fix (#14521)
• Feat: Add Project Bluefin to adopters list (#14549)
• Bump k8s to v1.37 (#14509)
• Bump Traefik and bundle gateway-api crds (#14573)
• Bump rancher/mirrored-coredns-coredns image version (#14577)
• Bump critools to v1.37 (#14579)
• Bump gateway-api-crd version 3, which includes the keep annotation (#14586)
• Bump Traefik to v3.7.13 (#14606)
• Bump google.golang.org/grpc to v1.83.2 for CVE-2026-84445 (#14614)
• Bump google.golang.org/grpc to v1.83.2, not v1.82.2 (#14619)

Embedded Component Versions

Component	Version
Kubernetes	v1.37.0
Kine	v0.17.0
SQLite	3.53.4
Etcd	v3.7.1-k3s1
Containerd	v2.3.4-k3s1
Runc	v1.4.2
Flannel	v0.28.4
Metrics-server	v0.9.0
Traefik	v3.7.13
CoreDNS	v1.14.7
Helm-controller	v0.17.7
Local-path-provisioner	v0.0.37

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

Source

Release

Updates <code>rancher/k3s</code>. **Breaking change detected.** Review the release notes before merging. Automerge: Disabled because breaking change release notes were detected ### Updates | Dependency | From | To | Type | Locations | | --- | --- | --- | --- | --- | | <code>rancher/k3s</code> | <code>v1.36.4-k3s1</code> | <code>v1.37.1-k3s1</code> | minor | <code>scripts/test-images.env</code> L5 | <details> <summary>Release notes: <code>rancher/k3s</code></summary> Source comparison unavailable: source refs for this transition are not known. #### <code>v1.36.4-rc1+k3s1</code> <code>v1.36.4-rc1+k3s1</code> ## What's Changed * [Release-1.36] Backport tests changes by @vitorsavian in https://github.com/k3s-io/k3s/pull/14517 * [release-1.36] Bump Local Path Provisioner version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/14498 * [Release-1.36] Bump containerd to v2.3.4-k3s1.36 by @vitorsavian in https://github.com/k3s-io/k3s/pull/14512 * [release-1.36] Backports for 2026-08 by @brandond in https://github.com/k3s-io/k3s/pull/14522 * [release-1.36] Update to v1.36.4-k3s1 and Go 1.26.7 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/14545 **Full Changelog**: https://github.com/k3s-io/k3s/compare/v1.36.3+k3s1...v1.36.4-rc1+k3s1 <a href="https://github.com/k3s-io/k3s">Source</a> <a href="https://github.com/k3s-io/k3s/releases/tag/v1.36.4-rc1%2Bk3s1">Release</a> #### <code>v1.36.4+k3s1</code> <code>v1.36.4+k3s1</code> <!-- v1.36.4+k3s1 --> > [!WARNING] > This release upgrades Traefik chart to v40.x which includes a breaking change for the ingress-nginx migration: the provider name changes from `kubernetesIngressNginx` to `kubernetesIngressNGINX`. Check https://github.com/traefik/traefik-helm-chart/releases/tag/v40.0.0 for more details This release updates Kubernetes to v1.36.4, and fixes a number of issues. For more details on what's new, see the [Kubernetes release notes](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.36.md#changelog-since-v1363). ## Changes since v1.36.3+k3s1: * Backport tests changes [(#14517)](https://github.com/k3s-io/k3s/pull/14517) * Bump Local Path Provisioner version [(#14498)](https://github.com/k3s-io/k3s/pull/14498) * Bump containerd to v2.3.4-k3s1.36 [(#14512)](https://github.com/k3s-io/k3s/pull/14512) * Backports for 2026-08 [(#14522)](https://github.com/k3s-io/k3s/pull/14522) * Update to v1.36.4-k3s1 and Go 1.26.7 [(#14545)](https://github.com/k3s-io/k3s/pull/14545) ## Embedded Component Versions | Component | Version | |---|---| | Kubernetes | [v1.36.4](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.36.md#v1364) | | Kine | [v0.16.4](https://github.com/k3s-io/kine/releases/tag/v0.16.4) | | SQLite | [3.53.4](https://sqlite.org/releaselog/3_53_4.html) | | Etcd | [v3.6.14-k3s1](https://github.com/k3s-io/etcd/releases/tag/v3.6.14-k3s1) | | Containerd | [v2.3.4-k3s1.36](https://github.com/k3s-io/containerd/releases/tag/v2.3.4-k3s1.36) | | Runc | [v1.4.2](https://github.com/opencontainers/runc/releases/tag/v1.4.2) | | Flannel | [v0.28.4](https://github.com/flannel-io/flannel/releases/tag/v0.28.4) | | Metrics-server | [v0.9.0](https://github.com/kubernetes-sigs/metrics-server/releases/tag/v0.9.0) | | Traefik | [v3.7.8](https://github.com/traefik/traefik/releases/tag/v3.7.8) | | CoreDNS | [v1.14.6](https://github.com/coredns/coredns/releases/tag/v1.14.6) | | Helm-controller | [v0.17.7](https://github.com/k3s-io/helm-controller/releases/tag/v0.17.7) | | Local-path-provisioner | [v0.0.37](https://github.com/rancher/local-path-provisioner/releases/tag/v0.0.37) | ## Helpful Links As always, we welcome and appreciate feedback from our community of users. Please feel free to: - [Open issues here](https://github.com/rancher/k3s/issues/new/choose) - [Join our Slack channel](https://slack.rancher.io/) - [Check out our documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on how to get started or to dive deep into K3s. - [Read how you can contribute here](https://github.com/rancher/k3s/blob/master/CONTRIBUTING.md) <a href="https://github.com/k3s-io/k3s">Source</a> <a href="https://github.com/k3s-io/k3s/releases/tag/v1.36.4%2Bk3s1">Release</a> #### <code>v1.36.5-rc1+k3s1</code> <code>v1.36.5-rc1+k3s1</code> ## What's Changed * [release-1.36] Bump rancher/mirrored-coredns-coredns image version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/14534 * Bump gateway-api and traefik image versions for K3s 1.36 by @manuelbuil in https://github.com/k3s-io/k3s/pull/14567 * [Release 1.36] Bump Traefik to v3.7.13 by @manuelbuil in https://github.com/k3s-io/k3s/pull/14610 * [release-1.36] Bump google.golang.org/grpc to v1.83.2 for CVE-2026-84445 by @brandond in https://github.com/k3s-io/k3s/pull/14620 * [release-1.36] Backports for 2026-09 by @brandond in https://github.com/k3s-io/k3s/pull/14632 * [release-1.36] Require node password informer sync before using cache by @brandond in https://github.com/k3s-io/k3s/pull/14673 * [release-1.36] Bump helm-controller by @brandond in https://github.com/k3s-io/k3s/pull/14685 * [release-1.36] Bump k3s-io/kubernetes and Go references by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/14694 **Full Changelog**: https://github.com/k3s-io/k3s/compare/v1.36.4+k3s1...v1.36.5-rc1+k3s1 <a href="https://github.com/k3s-io/k3s">Source</a> <a href="https://github.com/k3s-io/k3s/releases/tag/v1.36.5-rc1%2Bk3s1">Release</a> #### <code>v1.36.5-rc2+k3s1</code> <code>v1.36.5-rc2+k3s1</code> ## What's Changed * [Release-1.36] Reject anonymous access to supervisor router (spegel/pprof/metrics) by @dereknola in https://github.com/k3s-io/k3s/pull/14702 * [Release-1.36] Improve CA hash validation by @dereknola in https://github.com/k3s-io/k3s/pull/14706 **Full Changelog**: https://github.com/k3s-io/k3s/compare/v1.36.5-rc1+k3s1...v1.36.5-rc2+k3s1 <a href="https://github.com/k3s-io/k3s">Source</a> <a href="https://github.com/k3s-io/k3s/releases/tag/v1.36.5-rc2%2Bk3s1">Release</a> #### <code>v1.36.5+k3s1</code> <code>v1.36.5+k3s1</code> <!-- v1.36.5+k3s1 --> > [!WARNING] > This release upgrades Traefik chart to v40.x which includes a breaking change for the ingress-nginx migration: the provider name changes from `kubernetesIngressNginx` to `kubernetesIngressNGINX`. Check https://github.com/traefik/traefik-helm-chart/releases/tag/v40.0.0 for more details This release updates Kubernetes to v1.36.5, and fixes a number of issues. For more details on what's new, see the [Kubernetes release notes](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.36.md#changelog-since-v1364). ## Changes since v1.36.4+k3s1: * Bump rancher/mirrored-coredns-coredns image version [(#14534)](https://github.com/k3s-io/k3s/pull/14534) * Bump gateway-api and traefik image versions for K3s 1.36 [(#14567)](https://github.com/k3s-io/k3s/pull/14567) * Bump Traefik image to 3.7.12 and gateway-api to 1.6.1 * Bump Traefik to v3.7.13 [(#14610)](https://github.com/k3s-io/k3s/pull/14610) * Bump google.golang.org/grpc to v1.83.2 for CVE-2026-84445 [(#14620)](https://github.com/k3s-io/k3s/pull/14620) * Backports for 2026-09 [(#14632)](https://github.com/k3s-io/k3s/pull/14632) * Fix restore from compressed etcd snapshot #14528 * Enable seccomp in riscv64 builds #14529 * Use ginkgo CLI to run tests #14531 * Bump k3s-io/api to v0.2.0 #14570 * Servicelb multiple lbpools #14547 * Close minio.Object after read #14580 * Bump k3s-io/apis again #14589 * Fix --flannel-cni-conf not reaching the embedded flannel #14598 * Check-config: suppress colors when stdout is not a terminal #14595 * Fix deploy controller not re-applying manifests when mtime is pinned to the epoch #14568 * Bump etcd to v3.7.1-k3s3 for nonblocking logging support #14628 * Bump kine to v0.17.1 #14627 * Require node password informer sync before using cache [(#14673)](https://github.com/k3s-io/k3s/pull/14673) * Bump helm-controller [(#14685)](https://github.com/k3s-io/k3s/pull/14685) * Bump k3s-io/kubernetes and Go references [(#14694)](https://github.com/k3s-io/k3s/pull/14694) * Reject anonymous access to supervisor router (spegel/pprof/metrics) [(#14702)](https://github.com/k3s-io/k3s/pull/14702) * Improve CA hash validation [(#14706)](https://github.com/k3s-io/k3s/pull/14706) ## Embedded Component Versions | Component | Version | |---|---| | Kubernetes | [v1.36.5](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.36.md#v1365) | | Kine | [v0.16.5](https://github.com/k3s-io/kine/releases/tag/v0.16.5) | | SQLite | [3.53.4](https://sqlite.org/releaselog/3_53_4.html) | | Etcd | [v3.6.14-k3s3](https://github.com/k3s-io/etcd/releases/tag/v3.6.14-k3s3) | | Containerd | [v2.3.4-k3s1.36](https://github.com/k3s-io/containerd/releases/tag/v2.3.4-k3s1.36) | | Runc | [v1.4.2](https://github.com/opencontainers/runc/releases/tag/v1.4.2) | | Flannel | [v0.28.4](https://github.com/flannel-io/flannel/releases/tag/v0.28.4) | | Metrics-server | [v0.9.0](https://github.com/kubernetes-sigs/metrics-server/releases/tag/v0.9.0) | | Traefik | [v3.7.13](https://github.com/traefik/traefik/releases/tag/v3.7.13) | | CoreDNS | [v1.14.7](https://github.com/coredns/coredns/releases/tag/v1.14.7) | | Helm-controller | [v0.17.9](https://github.com/k3s-io/helm-controller/releases/tag/v0.17.9) | | Local-path-provisioner | [v0.0.37](https://github.com/rancher/local-path-provisioner/releases/tag/v0.0.37) | ## Helpful Links As always, we welcome and appreciate feedback from our community of users. Please feel free to: - [Open issues here](https://github.com/rancher/k3s/issues/new/choose) - [Join our Slack channel](https://slack.rancher.io/) - [Check out our documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on how to get started or to dive deep into K3s. - [Read how you can contribute here](https://github.com/rancher/k3s/blob/master/CONTRIBUTING.md) <a href="https://github.com/k3s-io/k3s">Source</a> <a href="https://github.com/k3s-io/k3s/releases/tag/v1.36.5%2Bk3s1">Release</a> #### <code>v1.37.0-rc1+k3s1</code> <code>v1.37.0-rc1+k3s1</code> ## What's Changed * Expand docker upgrade test, sunset E2E upgrade test by @dereknola in https://github.com/k3s-io/k3s/pull/13338 * Add firewall section to check-config.sh by @dereknola in https://github.com/k3s-io/k3s/pull/13234 * Update golangci-lint and re-enable CI linting step by @brandond in https://github.com/k3s-io/k3s/pull/13343 * Fix PR lint checkout depth by @brandond in https://github.com/k3s-io/k3s/pull/13369 * Update stable channel to v1.34.3+k3s1 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13374 * Bump actions/download-artifact from 6 to 7 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13346 * Bump stable to 1.34 and add 1.35 by @brandond in https://github.com/k3s-io/k3s/pull/13373 * Enable secret encryption on existing clusters by @dereknola in https://github.com/k3s-io/k3s/pull/13370 * Bump Local Path Provisioner version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/13387 * Use Get, not Head for channel page by @dereknola in https://github.com/k3s-io/k3s/pull/13402 * Fix typos in documentation by @oglok in https://github.com/k3s-io/k3s/pull/13411 * Bump actions/cache from 4 to 5 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13347 * Replace temporary etcd server with raw mvcc store access by @brandond in https://github.com/k3s-io/k3s/pull/13368 * Bump Traefik and CoreDNS - Jan 2025 by @dereknola in https://github.com/k3s-io/k3s/pull/13424 * Remove flannel external-ip annotations when disabled by @brandond in https://github.com/k3s-io/k3s/pull/13431 * Bump local path provisioner to v0.0.34 by @dereknola in https://github.com/k3s-io/k3s/pull/13430 * [main] Publish GA images to staging registry by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13438 * Bump cni plugins by @brandond in https://github.com/k3s-io/k3s/pull/13439 * Fix atomic write in WriteSubnetFile by @luojiyin1987 in https://github.com/k3s-io/k3s/pull/13380 * Bump expr-lang/expr by @brandond in https://github.com/k3s-io/k3s/pull/13440 * Bump spegel to v0.6.0 by @brandond in https://github.com/k3s-io/k3s/pull/13198 * Update longhorn version in integration test from v1.4.0 to v1.10.1 by @brandond in https://github.com/k3s-io/k3s/pull/13443 * Bump kine to v0.14.10 for NATS conformance fixes by @brandond in https://github.com/k3s-io/k3s/pull/13441 * Remove download/generate from vulncheck by @brandond in https://github.com/k3s-io/k3s/pull/13445 * Bump to coredns 1.14.0 by @mgfritch in https://github.com/k3s-io/k3s/pull/13449 * Add Momentum Coach AI to K3S adopters list by @geoffreyPerrin in https://github.com/k3s-io/k3s/pull/13467 * Fix lines to satisfy lint and fix CI by @manuelbuil in https://github.com/k3s-io/k3s/pull/13475 * Update Traefik version to v3.6.7 by @manuelbuil in https://github.com/k3s-io/k3s/pull/13474 * Prevent caching on PR of golangci-lint entries by @dereknola in https://github.com/k3s-io/k3s/pull/13487 * Move to rootlesskit v2 by @dereknola in https://github.com/k3s-io/k3s/pull/13486 * Bump actions/stale from 10.1.0 to 10.1.1 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13296 * Fix CVE-2025-54410: Update docker/docker to v25.0.13 by @rahulrairai59 in https://github.com/k3s-io/k3s/pull/13473 * Bump golang:alpine image version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/13345 * Update install tests with new images, add alma10 by @dereknola in https://github.com/k3s-io/k3s/pull/13489 * Bump etcd to v3.6.7 by @brandond in https://github.com/k3s-io/k3s/pull/13495 * Add Percona and Solanica to k3s adopters by @edithturn in https://github.com/k3s-io/k3s/pull/13510 * [main] Update to v1.35.0-k3s3 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13524 * Fix restart of control-plane-only nodes attempting to reconcile from local datastore by @brandond in https://github.com/k3s-io/k3s/pull/13534 * Fix spegel filter for wildcards by @brandond in https://github.com/k3s-io/k3s/pull/13527 * Add IPv6 loopback to kubelet-serving cert by @brandond in https://github.com/k3s-io/k3s/pull/13532 * Fix handling of empty token file by @brandond in https://github.com/k3s-io/k3s/pull/13529 * Use channel.yaml instead of curling for stable for kubectl install by @dereknola in https://github.com/k3s-io/k3s/pull/13531 * Fix VPN node IP not being applied to kubelet by @zijiren233 in https://github.com/k3s-io/k3s/pull/13457 * Bump aws-actions/configure-aws-credentials from 4 to 5 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13185 * Bump scorecard checkout to match all other versions by @dereknola in https://github.com/k3s-io/k3s/pull/13568 * Bump kine for list/watch revision fixes by @brandond in https://github.com/k3s-io/k3s/pull/13575 * Explicitly close mvcc backend to fix high CPU on initial etcd server after restart by @brandond in https://github.com/k3s-io/k3s/pull/13569 * Support commit builds via GHA artifacts by @dereknola in https://github.com/k3s-io/k3s/pull/13559 * Bump rancher/mirrored-coredns-coredns image version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/13499 * [main] Update stable channel to `v1.34.3+k3s3` by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13554 * Bump metrics-server to v0.8.1 by @mgfritch in https://github.com/k3s-io/k3s/pull/13594 * [main] Add registry prefix to image-list file by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13603 * Bump klipper-helm and klipper-lb images by @brandond in https://github.com/k3s-io/k3s/pull/13613 * Fix removal of init node via annotation by @brandond in https://github.com/k3s-io/k3s/pull/13624 * [master] Update to v1.35.1-k3s1 and Go 1.25.6 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13638 * Update stable to `v1.34.4+k3s1` by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13642 * Make artifact URL prefix configurable by @manuelbuil in https://github.com/k3s-io/k3s/pull/13367 * Bump kine to v0.14.12 by @brandond in https://github.com/k3s-io/k3s/pull/13661 * Install binutils-gold only for arm64 builds by @mmoll in https://github.com/k3s-io/k3s/pull/13654 * Rootlesskit Revert + Test Fixes by @dereknola in https://github.com/k3s-io/k3s/pull/13681 * Improve resilience of datastore bootstrap reconcile from etcd by @brandond in https://github.com/k3s-io/k3s/pull/13677 * Bump Traefik to v3.6.9 by @manuelbuil in https://github.com/k3s-io/k3s/pull/13693 * [main] Update to v1.35.2-k3s1 and Go 1.25.7 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13708 * Assign github.event to env first by @dereknola in https://github.com/k3s-io/k3s/pull/13715 * config: Add default imports to containerd base templates by @fidencio in https://github.com/k3s-io/k3s/pull/13680 * update channel server to 1.34.5 by @briandowns in https://github.com/k3s-io/k3s/pull/13732 * Add nix-snapshotter support to the embedded containerd by @nuketownada in https://github.com/k3s-io/k3s/pull/13676 * Do not create etcd name file if etcd is not in use by @brandond in https://github.com/k3s-io/k3s/pull/13727 * Bump actions/download-artifact from 7 to 8 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13714 * build(deps): bump actions/stale from 10.1.1 to 10.2.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13670 * build(deps): bump aquasecurity/trivy-action from 0.33.1 to 0.34.1 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13669 * build(deps): bump aws-actions/configure-aws-credentials from 5 to 6 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13596 * Bump softprops/action-gh-release from 2.2.1 to 2.5.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13376 * Bump rancher/mirrored-coredns-coredns image version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/13743 * Bump klipper-lb and klipper-helm by @brandond in https://github.com/k3s-io/k3s/pull/13761 * Bump golang:alpine image version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/13653 * Update packages to remove unmaintained dependencies by @brandond in https://github.com/k3s-io/k3s/pull/13724 * Bump DeterminateSystems/nix-installer-action from 17 to 21 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13744 * Bump docker/build-push-action from 6 to 7 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13745 * Bump docker/setup-qemu-action from 3 to 4 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13746 * Bump docker/setup-docker-action from 4 to 5 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13747 * Save cluster state before reencyrpting secrets with newly created key by @dereknola in https://github.com/k3s-io/k3s/pull/13764 * Bump docker/metadata-action from 5 to 6 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13748 * Bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13713 * Bump github.com/docker/cli from 28.3.2+incompatible to 29.2.0+incompatible by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13730 * build(deps): bump github.com/pion/dtls/v3 from 3.0.6 to 3.0.11 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13645 * Use etcd-snapshot-retention as default for s3 if etcd-s3-retention is not set by @brandond in https://github.com/k3s-io/k3s/pull/13770 * Bump traefik and local-path-provisioner by @brandond in https://github.com/k3s-io/k3s/pull/13787 * install.sh: Simplify handling for fedora rpm-ostree based distributions by @becarusys in https://github.com/k3s-io/k3s/pull/13712 * Bump containerd to v2.2.2 by @brandond in https://github.com/k3s-io/k3s/pull/13788 * Bump runc to v1.4.1 by @brandond in https://github.com/k3s-io/k3s/pull/13796 * Bump Traefik helm chart version by @manuelbuil in https://github.com/k3s-io/k3s/pull/13805 * Fix trivy updatecli config by @manuelbuil in https://github.com/k3s-io/k3s/pull/13816 * Bump cni plugins to v1.9.1 by @brandond in https://github.com/k3s-io/k3s/pull/13817 * Simplify snapshot compress/decompress logic by @brandond in https://github.com/k3s-io/k3s/pull/13826 * build(deps): bump docker/login-action from 3 to 4 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13804 * build(deps): bump softprops/action-gh-release from 2.5.0 to 2.6.1 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13803 * build(deps): bump aquasecurity/trivy-action from 0.34.1 to 0.35.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13802 * [main] Update to v1.35.3-k3s1 and Go 1.25.7 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13836 * Bump Trivy version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/13845 * Fix typo: overriden -> overridden in snapshot_handler.go in https://github.com/k3s-io/k3s/pull/13847 * fix: typo in etcd membership error message by @DT1mote in https://github.com/k3s-io/k3s/pull/13848 * Bump helm-controller for job race fix by @brandond in https://github.com/k3s-io/k3s/pull/13853 * Add context to controller event recorders by @brandond in https://github.com/k3s-io/k3s/pull/13856 * Pin GH Actions to commit sha by @cwayne18 in https://github.com/k3s-io/k3s/pull/13861 * Dapper is kill by @cwayne18 in https://github.com/k3s-io/k3s/pull/13860 * Update to flannel v0.28.2 by @mgfritch in https://github.com/k3s-io/k3s/pull/13863 * [main] Update stable to `v1.34.6+k3s1` by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13873 * Add sipgate to the list of adopters by @caesarakalaeii in https://github.com/k3s-io/k3s/pull/13881 * Add Rocket Technologies to the list of adopters by @BenBo17 in https://github.com/k3s-io/k3s/pull/13890 * Make Dockerfile.test more secure by @manuelbuil in https://github.com/k3s-io/k3s/pull/13882 * Make tests/integration/Dockerfile.test more secure by @manuelbuil in https://github.com/k3s-io/k3s/pull/13883 * Secure the vagrant-setup action.yaml by @manuelbuil in https://github.com/k3s-io/k3s/pull/13884 * Secure the e2e yaml GHA by @manuelbuil in https://github.com/k3s-io/k3s/pull/13885 * Pin govulncheck GHA version by @manuelbuil in https://github.com/k3s-io/k3s/pull/13887 * Verify sha256sum for kubelet, vagrant zip and go binary by @manuelbuil in https://github.com/k3s-io/k3s/pull/13889 * Check the k3s-root sha256sum by @manuelbuil in https://github.com/k3s-io/k3s/pull/13888 * build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13891 * build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13880 * build(deps): bump github/codeql-action from 4.34.1 to 4.35.1 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13879 * build(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13878 * build(deps): bump updatecli/updatecli-action from 2.100.0 to 3.0.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13876 * Fix reproducibility of embedded data tarball by @jonhermansen in https://github.com/k3s-io/k3s/pull/13875 * build(deps): bump github.com/buger/jsonparser from 1.1.1 to 1.1.2 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13837 * build(deps): bump github.com/nats-io/nats-server/v2 from 2.12.2 to 2.12.6 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13852 * Fix S3 test to account for change to s3mock by @brandond in https://github.com/k3s-io/k3s/pull/13906 * Bump klipper helm to v0.9.16-build20260410 by @vitorsavian in https://github.com/k3s-io/k3s/pull/13908 * Bump runc/spegel/helm-controller/kine by @brandond in https://github.com/k3s-io/k3s/pull/13909 * build(deps): bump actions/github-script from 8.0.0 to 9.0.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13914 * build(deps): bump aws-actions/configure-aws-credentials from 6.0.0 to 6.1.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13915 * build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13916 * build(deps): bump softprops/action-gh-release from 2.6.1 to 3.0.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13917 * build(deps): bump docker/build-push-action from 7.0.0 to 7.1.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13918 * Bump traefik to 3.6.12 by @manuelbuil in https://github.com/k3s-io/k3s/pull/13912 * Fix embedded executor VPN config injection by @brandond in https://github.com/k3s-io/k3s/pull/13920 * Bump containerd to v2.2.3 by @brandond in https://github.com/k3s-io/k3s/pull/13931 * Bump flannel to v0.28.4 by @thomasferrandiz in https://github.com/k3s-io/k3s/pull/13937 * [main] Update to v1.35.4-k3s1 and Go 1.25.9 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13946 * [main] Immutable release changes by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13902 * Bump Traefik to 3.6.13 by @cwayne18 in https://github.com/k3s-io/k3s/pull/13969 * [main] Switch from draft to pre-release by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13951 * Fix SANs added from comma-separated node-external-ip list by @brandond in https://github.com/k3s-io/k3s/pull/13989 * Fix docker dualstack test by @brandond in https://github.com/k3s-io/k3s/pull/13994 * Bump klipper-helm image for revision check fix by @brandond in https://github.com/k3s-io/k3s/pull/13995 * Bump upstream to v1.36 by @vitorsavian in https://github.com/k3s-io/k3s/pull/13986 * Add k8gb to adopters list in ADOPTERS.md by @ytsarev in https://github.com/k3s-io/k3s/pull/13978 * Bump Klipper LB version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/13976 * Update stable to `v1.35.4+k3s1` and add `v1.36` entry by @rafaelbreno in https://github.com/k3s-io/k3s/pull/14016 * Replace PreparingExecutor with explicit embedded executor init by @brandond in https://github.com/k3s-io/k3s/pull/14000 * Bump spegel to v0.7.0 by @brandond in https://github.com/k3s-io/k3s/pull/14003 * Bump rancher/mirrored-coredns-coredns image version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/14005 * Fix kubectl exec when using docker by @vitorsavian in https://github.com/k3s-io/k3s/pull/14019 * Improve K3s BUILDING and CONTRIBUTING guides by @manuelbuil in https://github.com/k3s-io/k3s/pull/13985 * Bump Klipper LB version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/14026 * [main] Fix s3 path by @rafaelbreno in https://github.com/k3s-io/k3s/pull/14015 * add lost return by @nameearly in https://github.com/k3s-io/k3s/pull/14020 * Bump kine to v0.15.0 by @brandond in https://github.com/k3s-io/k3s/pull/14030 * Bump Local Path Provisioner version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/14038 * Update Orlin's mail by @OrlinVasilev in https://github.com/k3s-io/k3s/pull/14047 * [main] Update to v1.36.1-k3s1 and Go 1.26.2 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/14052 * Fix cron to run everyday at 6PM UTC by @rafaelbreno in https://github.com/k3s-io/k3s/pull/14041 * Bump klipper-helm image tag by @brandond in https://github.com/k3s-io/k3s/pull/14054 * chore: fix duplicated "the" in etcd/s3 and permissions doc comments by @quyentonndbs in https://github.com/k3s-io/k3s/pull/14072 * Add AI contribution guide by @brandond in https://github.com/k3s-io/k3s/pull/14090 * [main] Update stable channel to `v1.35.5+k3s1` by @rafaelbreno in https://github.com/k3s-io/k3s/pull/14091 * fix: use same package manager for k3s-selinux removal as for installation by @becarusys in https://github.com/k3s-io/k3s/pull/13711 * Nit: Wrong integration test name by @manuelbuil in https://github.com/k3s-io/k3s/pull/14097 * Use 0600 permissions for compressed etcd snapshots by @eran132 in https://github.com/k3s-io/k3s/pull/14092 * fix: populate IfaceName in LookupExtInterface for VXLAN recreation by @jkubo in https://github.com/k3s-io/k3s/pull/14086 * Fix token delete argument handling by @elysia090 in https://github.com/k3s-io/k3s/pull/14076 * Skip bridge-nf-call sysctls when kube-proxy and flannel are disabled by @eran132 in https://github.com/k3s-io/k3s/pull/14093 * build(deps): bump updatecli/updatecli-action from 3.0.0 to 3.1.2 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13980 * build(deps): bump github/codeql-action from 4.35.1 to 4.35.2 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13982 * build(deps): bump docker/login-action from 4.0.0 to 4.1.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13981 * Bump kine to v0.16.0 by @brandond in https://github.com/k3s-io/k3s/pull/14123 * Bump spegel to v0.7.1 for libp2p-kad-dht panic fix by @brandond in https://github.com/k3s-io/k3s/pull/14128 * Bump Traefik to v3.7.1 by @manuelbuil in https://github.com/k3s-io/k3s/pull/14134 * Bump kine for t4 fixes by @brandond in https://github.com/k3s-io/k3s/pull/14132 * build(deps): bump actions/cache from 5.0.4 to 5.0.5 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13979 * Stop opening depedabot PRs for GitHub Action patch versions by @dereknola in https://github.com/k3s-io/k3s/pull/14143 * Bump klipper-helm to v0.11 for helmv4 by @brandond in https://github.com/k3s-io/k3s/pull/14145 * Bump containerd to v2.3.1 by @brandond in https://github.com/k3s-io/k3s/pull/14136 * bump etcd to v3.6.12 by @brandond in https://github.com/k3s-io/k3s/pull/14149 * Agentic workflows by @dereknola in https://github.com/k3s-io/k3s/pull/14129 * Use of CNCF Runners in CI by @dereknola in https://github.com/k3s-io/k3s/pull/14144 * Optimize Test order by @dereknola in https://github.com/k3s-io/k3s/pull/14186 * Bump v3.7.4 Traefik by @manuelbuil in https://github.com/k3s-io/k3s/pull/14192 * test(kubeflags): add K3sCleanup between server restarts to fix flake by @amaanx86 in https://github.com/k3s-io/k3s/pull/14189 * Passthru KINE_ environment variables in install.sh and added new hash by @dnoland1 in https://github.com/k3s-io/k3s/pull/14188 * Bump golang.org/x/net to v0.55.0 to fix CVE-2026-39821 by @jimmykarily in https://github.com/k3s-io/k3s/pull/14203 * Reduce GRPC console spam by @brandond in https://github.com/k3s-io/k3s/pull/14202 * build(deps): bump docker/metadata-action from 6.0.0 to 6.1.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/14147 * build(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/14139 * build(deps): bump github/codeql-action from 4.35.2 to 4.36.1 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/14148 * Fix cloud-controller-manager exiting due to missing core RBAC by @brandond in https://github.com/k3s-io/k3s/pull/14201 * Bump k3s-root to v0.15.2 by @brandond in https://github.com/k3s-io/k3s/pull/14205 * Bump rancher/mirrored-coredns-coredns image version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/14208 * Address new linting requirements by @dereknola in https://github.com/k3s-io/k3s/pull/14210 * Revert "Add runtime checking of golang version" by @brandond in https://github.com/k3s-io/k3s/pull/14219 * Dualstack spegel by @dereknola in https://github.com/k3s-io/k3s/pull/13831 * Update github actions in a single grouped PR every month by @dereknola in https://github.com/k3s-io/k3s/pull/14221 * Bump klipper-helm for CVE reasons by @cwayne18 in https://github.com/k3s-io/k3s/pull/14235 * Bump containerd with the fix for []byte envvar value by @vitorsavian in https://github.com/k3s-io/k3s/pull/14240 * [main] Update to v1.36.2-k3s1 and Go 1.26.4 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/14231 * Use built-in etcd bootstrap defrag threshold if specified by @alexander-demicev in https://github.com/k3s-io/k3s/pull/14099 * build(deps): bump the action-deps group with 7 updates by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/14226 * build(deps): bump ubuntu from 24.04 to 26.04 in /tests/e2e/scripts by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/14040 * build(deps): bump alpine from 3.22 to 3.24 in /package by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/14225 * Unit test expansion by @dereknola in https://github.com/k3s-io/k3s/pull/14249 * Fix codecov reports for E2E and Integration tests by @dereknola in https://github.com/k3s-io/k3s/pull/14252 * Bump containerd to v2.3.2-k3s1 by @vitorsavian in https://github.com/k3s-io/k3s/pull/14253 * Add image names to file cache by @brandond in https://github.com/k3s-io/k3s/pull/14266 * Bump cri-api and containerd for upstream env string fix by @brandond in https://github.com/k3s-io/k3s/pull/14276 * [main] Update stable channel to `v1.36.2+k3s1` by @rafaelbreno in https://github.com/k3s-io/k3s/pull/14281 * Add Sophotech to the list of adopters by @archy-rock3t-cloud in https://github.com/k3s-io/k3s/pull/14285 * Migrate from `local` targets to defaults by @dereknola in https://github.com/k3s-io/k3s/pull/14204 * Fix image-endpoint assignment in run_linux.go by @neiltalap in https://github.com/k3s-io/k3s/pull/14246 * Preserve logical paths for symlinked manifests by @immanuwell in https://github.com/k3s-io/k3s/pull/14087 * Bump dynamiclistener to v0.9.0-rc.2 for wildcard tls-san support by @Eshaan-Lumba in https://github.com/k3s-io/k3s/pull/14280 * fix: pre-apply feature gates before embedded API server starts by @SebTardif in https://github.com/k3s-io/k3s/pull/14287 * Add helm-controller-arg flag by @manuelbuil in https://github.com/k3s-io/k3s/pull/14185 * Bump kine to v0.16.3 for perf improvements by @brandond in https://github.com/k3s-io/k3s/pull/14310 * Bump spegel to v0.7.2 by @brandond in https://github.com/k3s-io/k3s/pull/14311 * fix: re-import airgap images when timestamp changes even if size is same by @bheemareddy in https://github.com/k3s-io/k3s/pull/14288 * Use xx for multiarch builds without emulation by @dereknola in https://github.com/k3s-io/k3s/pull/14291 * Bump golang:alpine image version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/14247 * Add backoff to initial snapshot reconcile by @brandond in https://github.com/k3s-io/k3s/pull/14322 * Synchronize egress map and CIDR trie reads in tunnel dialBackend by @archy-rock3t-cloud in https://github.com/k3s-io/k3s/pull/14341 * Redact single-dash secret flags in the node args annotation by @archy-rock3t-cloud in https://github.com/k3s-io/k3s/pull/14340 * Emit events attached to node when snapshot retention fails by @brandond in https://github.com/k3s-io/k3s/pull/14345 * Run Conformance tests nightly by @dereknola in https://github.com/k3s-io/k3s/pull/14338 * Bump Traefik to v3.7.7 by @manuelbuil in https://github.com/k3s-io/k3s/pull/14326 * Bump mirrored-pause to 3.10.2 by @dereknola in https://github.com/k3s-io/k3s/pull/14339 * build(deps): bump the action-deps group with 14 updates by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/14394 * Bump dynamiclistener for atomic write fix by @brandond in https://github.com/k3s-io/k3s/pull/14382 * Bump helm-controller/klipper-helm by @brandond in https://github.com/k3s-io/k3s/pull/14403 * Simplify WriteSubnetFile cleanup and make atomic by @brandond in https://github.com/k3s-io/k3s/pull/14405 * Fix typo in snapshot prune event by @brandond in https://github.com/k3s-io/k3s/pull/14410 * Bump rancher/mirrored-coredns-coredns image version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/14415 * Add updatecli manifest to bump Kubernetes across multiple release branches by @rafaelbreno in https://github.com/k3s-io/k3s/pull/14402 * Use new Traefik v3.7.8 by @manuelbuil in https://github.com/k3s-io/k3s/pull/14404 * Bump metrics-server to v0.9.0 by @mgfritch in https://github.com/k3s-io/k3s/pull/14416 * updatecli: relax metrics-server semver filter et al. by @mgfritch in https://github.com/k3s-io/k3s/pull/14429 * updatecli: add missing requiredEnv by @mgfritch in https://github.com/k3s-io/k3s/pull/14434 * Bump helm-controller and klipper-helm for `--force-conflicts` support by @brandond in https://github.com/k3s-io/k3s/pull/14446 * [main] Bump k3s-io/kubernetes and Go references by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/14457 * Bump etcd to v3.6.14 by @brandond in https://github.com/k3s-io/k3s/pull/14460 * Fix production builds always enabling Go coverage instrumentation by @mgfritch in https://github.com/k3s-io/k3s/pull/14465 * feat: support custom kubeconfig name by @kasefuchs in https://github.com/k3s-io/k3s/pull/14440 * Require node password informer sync before using cache by @brandond in https://github.com/k3s-io/k3s/pull/14459 * Bump helm-controller and klipper-helm by @brandond in https://github.com/k3s-io/k3s/pull/14474 * Enable unit tests by @manuelbuil in https://github.com/k3s-io/k3s/pull/14480 * fix: change sles to use slemicro rpms instead of microos by @vitorsavian in https://github.com/k3s-io/k3s/pull/14472 * tests: make rootless uidmap install robust against stale apt cache by @mgfritch in https://github.com/k3s-io/k3s/pull/14490 * [main] Update stable channel to v1.36.3+k3s1 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/14492 * Etcd client locking by @dcermak in https://github.com/k3s-io/k3s/pull/14488 * tests: Install rke2-multus-crd chart for multus e2e test by @mgfritch in https://github.com/k3s-io/k3s/pull/14489 * Filter large untemplated issues by @dereknola in https://github.com/k3s-io/k3s/pull/14435 * Fix typo in spegel deferred store comment by @Lcos-000 in https://github.com/k3s-io/k3s/pull/14485 * make explicit where coredns customizations should be made by @turettn in https://github.com/k3s-io/k3s/pull/14503 * Bump docker version in CI to 29 by @brandond in https://github.com/k3s-io/k3s/pull/14506 * Don't retag images for a registry they are already hosted by by @boothb in https://github.com/k3s-io/k3s/pull/14484 * Tidy dockerfile and build stages by @brandond in https://github.com/k3s-io/k3s/pull/14511 * Add advertise-address to SANs before generating apiserver cert by @somaz94 in https://github.com/k3s-io/k3s/pull/14516 * [main] Bump Local Path Provisioner version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/14496 * Bump containerd to v2.3.4-k3s1.36 by @vitorsavian in https://github.com/k3s-io/k3s/pull/14510 * Bump kine to v0.16.4 for nats replay fix by @brandond in https://github.com/k3s-io/k3s/pull/14521 * updatecli: remove `release-1.33` branch by @mgfritch in https://github.com/k3s-io/k3s/pull/14537 * [main] Update to v1.36.4-k3s1 and Go 1.26.7 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/14546 * feat: Add Project Bluefin to adopters list by @castrojo in https://github.com/k3s-io/k3s/pull/14549 * Bump k8s to v1.37 by @vitorsavian in https://github.com/k3s-io/k3s/pull/14509 * Bump Traefik and bundle gateway-api crds by @manuelbuil in https://github.com/k3s-io/k3s/pull/14573 ## New Contributors * @oglok made their first contribution in https://github.com/k3s-io/k3s/pull/13411 * @luojiyin1987 made their first contribution in https://github.com/k3s-io/k3s/pull/13380 * @geoffreyPerrin made their first contribution in https://github.com/k3s-io/k3s/pull/13467 * @rahulrairai59 made their first contribution in https://github.com/k3s-io/k3s/pull/13473 * @edithturn made their first contribution in https://github.com/k3s-io/k3s/pull/13510 * @zijiren233 made their first contribution in https://github.com/k3s-io/k3s/pull/13457 * @mmoll made their first contribution in https://github.com/k3s-io/k3s/pull/13654 * @fidencio made their first contribution in https://github.com/k3s-io/k3s/pull/13680 * @nuketownada made their first contribution in https://github.com/k3s-io/k3s/pull/13676 * @becarusys made their first contribution in https://github.com/k3s-io/k3s/pull/13712 * @DT1mote made their first contribution in https://github.com/k3s-io/k3s/pull/13848 * @caesarakalaeii made their first contribution in https://github.com/k3s-io/k3s/pull/13881 * @BenBo17 made their first contribution in https://github.com/k3s-io/k3s/pull/13890 * @jonhermansen made their first contribution in https://github.com/k3s-io/k3s/pull/13875 * @ytsarev made their first contribution in https://github.com/k3s-io/k3s/pull/13978 * @nameearly made their first contribution in https://github.com/k3s-io/k3s/pull/14020 * @quyentonndbs made their first contribution in https://github.com/k3s-io/k3s/pull/14072 * @eran132 made their first contribution in https://github.com/k3s-io/k3s/pull/14092 * @jkubo made their first contribution in https://github.com/k3s-io/k3s/pull/14086 * @elysia090 made their first contribution in https://github.com/k3s-io/k3s/pull/14076 * @amaanx86 made their first contribution in https://github.com/k3s-io/k3s/pull/14189 * @jimmykarily made their first contribution in https://github.com/k3s-io/k3s/pull/14203 * @alexander-demicev made their first contribution in https://github.com/k3s-io/k3s/pull/14099 * @archy-rock3t-cloud made their first contribution in https://github.com/k3s-io/k3s/pull/14285 * @neiltalap made their first contribution in https://github.com/k3s-io/k3s/pull/14246 * @immanuwell made their first contribution in https://github.com/k3s-io/k3s/pull/14087 * @SebTardif made their first contribution in https://github.com/k3s-io/k3s/pull/14287 * @bheemareddy made their first contribution in https://github.com/k3s-io/k3s/pull/14288 * @kasefuchs made their first contribution in https://github.com/k3s-io/k3s/pull/14440 * @Lcos-000 made their first contribution in https://github.com/k3s-io/k3s/pull/14485 * @turettn made their first contribution in https://github.com/k3s-io/k3s/pull/14503 * @boothb made their first contribution in https://github.com/k3s-io/k3s/pull/14484 * @somaz94 made their first contribution in https://github.com/k3s-io/k3s/pull/14516 * @castrojo made their first contribution in https://github.com/k3s-io/k3s/pull/14549 **Full Changelog**: https://github.com/k3s-io/k3s/compare/v1.35.0+k3s1...v1.37.0-rc1+k3s1 <a href="https://github.com/k3s-io/k3s">Source</a> <a href="https://github.com/k3s-io/k3s/releases/tag/v1.37.0-rc1%2Bk3s1">Release</a> #### <code>v1.37.0-rc2+k3s1</code> <code>v1.37.0-rc2+k3s1</code> ## What's Changed * [release-1.37] Bump rancher/mirrored-coredns-coredns image version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/14577 * [Release-1.37] Bump critools to v1.37 by @vitorsavian in https://github.com/k3s-io/k3s/pull/14579 **Full Changelog**: https://github.com/k3s-io/k3s/compare/v1.37.0-rc1+k3s1...v1.37.0-rc2+k3s1 <a href="https://github.com/k3s-io/k3s">Source</a> <a href="https://github.com/k3s-io/k3s/releases/tag/v1.37.0-rc2%2Bk3s1">Release</a> #### <code>v1.37.0-rc3+k3s1</code> <code>v1.37.0-rc3+k3s1</code> ## What's Changed * [Release 1.37] Bump gateway-api-crd version 3, which includes the keep annotation by @manuelbuil in https://github.com/k3s-io/k3s/pull/14586 **Full Changelog**: https://github.com/k3s-io/k3s/compare/v1.37.0-rc2+k3s1...v1.37.0-rc3+k3s1 <a href="https://github.com/k3s-io/k3s">Source</a> <a href="https://github.com/k3s-io/k3s/releases/tag/v1.37.0-rc3%2Bk3s1">Release</a> #### <code>v1.37.0-rc4+k3s1</code> <code>v1.37.0-rc4+k3s1</code> ## What's Changed * [Release 1.37] Bump Traefik to v3.7.13 by @manuelbuil in https://github.com/k3s-io/k3s/pull/14606 **Full Changelog**: https://github.com/k3s-io/k3s/compare/v1.37.0-rc3+k3s1...v1.37.0-rc4+k3s1 <a href="https://github.com/k3s-io/k3s">Source</a> <a href="https://github.com/k3s-io/k3s/releases/tag/v1.37.0-rc4%2Bk3s1">Release</a> #### <code>v1.37.0-rc5+k3s1</code> <code>v1.37.0-rc5+k3s1</code> ## What's Changed * [release-1.37] Bump google.golang.org/grpc to v1.83.2 for CVE-2026-84445 by @brandond in https://github.com/k3s-io/k3s/pull/14614 * [release-1.37] Bump google.golang.org/grpc to v1.83.2, not v1.82.2 by @brandond in https://github.com/k3s-io/k3s/pull/14619 **Full Changelog**: https://github.com/k3s-io/k3s/compare/v1.37.0-rc4+k3s1...v1.37.0-rc5+k3s1 <a href="https://github.com/k3s-io/k3s">Source</a> <a href="https://github.com/k3s-io/k3s/releases/tag/v1.37.0-rc5%2Bk3s1">Release</a> #### <code>v1.37.0+k3s1</code> <code>v1.37.0+k3s1</code> <!-- v1.37.0+k3s1 --> This release updates Kubernetes to v1.37.0, and fixes a number of issues. For more details on what's new, see the [Kubernetes release notes](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.37.md#changelog-since-v1360). ## Changes since v1.36.3+k3s1: * Bump mirrored-pause to 3.10.2 [(#14339)](https://github.com/k3s-io/k3s/pull/14339) * Build(deps): bump the action-deps group with 14 updates [(#14394)](https://github.com/k3s-io/k3s/pull/14394) * Bump dynamiclistener for atomic write fix [(#14382)](https://github.com/k3s-io/k3s/pull/14382) * Bump helm-controller/klipper-helm [(#14403)](https://github.com/k3s-io/k3s/pull/14403) * Simplify WriteSubnetFile cleanup and make atomic [(#14405)](https://github.com/k3s-io/k3s/pull/14405) * Fix typo in snapshot prune event [(#14410)](https://github.com/k3s-io/k3s/pull/14410) * Bump rancher/mirrored-coredns-coredns image version [(#14415)](https://github.com/k3s-io/k3s/pull/14415) * Add updatecli manifest to bump Kubernetes across multiple release branches [(#14402)](https://github.com/k3s-io/k3s/pull/14402) * Bump metrics-server to v0.9.0 [(#14416)](https://github.com/k3s-io/k3s/pull/14416) * Updatecli: relax metrics-server semver filter et al. [(#14429)](https://github.com/k3s-io/k3s/pull/14429) * Updatecli: add missing requiredEnv [(#14434)](https://github.com/k3s-io/k3s/pull/14434) * Bump helm-controller and klipper-helm for `--force-conflicts` support [(#14446)](https://github.com/k3s-io/k3s/pull/14446) * Bump k3s-io/kubernetes and Go references [(#14457)](https://github.com/k3s-io/k3s/pull/14457) * Bump etcd to v3.6.14 [(#14460)](https://github.com/k3s-io/k3s/pull/14460) * Fix production builds always enabling Go coverage instrumentation [(#14465)](https://github.com/k3s-io/k3s/pull/14465) * Feat: support custom kubeconfig name [(#14440)](https://github.com/k3s-io/k3s/pull/14440) * Added `--write-kubeconfig-name` server flag to set the name for cluster, user and context in generated kubeconfig. * Require node password informer sync before using cache [(#14459)](https://github.com/k3s-io/k3s/pull/14459) * Bump helm-controller and klipper-helm [(#14474)](https://github.com/k3s-io/k3s/pull/14474) * Enable unit tests [(#14480)](https://github.com/k3s-io/k3s/pull/14480) * Fix: change sles to use slemicro rpms instead of microos [(#14472)](https://github.com/k3s-io/k3s/pull/14472) * Tests: make rootless uidmap install robust against stale apt cache [(#14490)](https://github.com/k3s-io/k3s/pull/14490) * Update stable channel to v1.36.3+k3s1 [(#14492)](https://github.com/k3s-io/k3s/pull/14492) * Etcd client locking [(#14488)](https://github.com/k3s-io/k3s/pull/14488) * Tests: Install rke2-multus-crd chart for multus e2e test [(#14489)](https://github.com/k3s-io/k3s/pull/14489) * Filter large untemplated issues [(#14435)](https://github.com/k3s-io/k3s/pull/14435) * Fix typo in spegel deferred store comment [(#14485)](https://github.com/k3s-io/k3s/pull/14485) * Make explicit where coredns customizations should be made [(#14503)](https://github.com/k3s-io/k3s/pull/14503) * Bump docker version in CI to 29 [(#14506)](https://github.com/k3s-io/k3s/pull/14506) * Don't retag images for a registry they are already hosted by [(#14484)](https://github.com/k3s-io/k3s/pull/14484) * Fixed an issue where airgap image imports could fail with an "already exists" error, or accumulate duplicate image tags on every restart, when system-default-registry matched the registry the images were already tagged for. * Tidy dockerfile and build stages [(#14511)](https://github.com/k3s-io/k3s/pull/14511) * Add advertise-address to SANs before generating apiserver cert [(#14516)](https://github.com/k3s-io/k3s/pull/14516) * Fixed the apiserver serving certificate not including the value of --advertise-address in its subject alternative names. * Bump Local Path Provisioner version [(#14496)](https://github.com/k3s-io/k3s/pull/14496) * Bump containerd to v2.3.4-k3s1.36 [(#14510)](https://github.com/k3s-io/k3s/pull/14510) * Bump kine to v0.16.4 for nats replay fix [(#14521)](https://github.com/k3s-io/k3s/pull/14521) * Feat: Add Project Bluefin to adopters list [(#14549)](https://github.com/k3s-io/k3s/pull/14549) * Bump k8s to v1.37 [(#14509)](https://github.com/k3s-io/k3s/pull/14509) * Bump Traefik and bundle gateway-api crds [(#14573)](https://github.com/k3s-io/k3s/pull/14573) * Bump rancher/mirrored-coredns-coredns image version [(#14577)](https://github.com/k3s-io/k3s/pull/14577) * Bump critools to v1.37 [(#14579)](https://github.com/k3s-io/k3s/pull/14579) * Bump gateway-api-crd version 3, which includes the keep annotation [(#14586)](https://github.com/k3s-io/k3s/pull/14586) * Bump Traefik to v3.7.13 [(#14606)](https://github.com/k3s-io/k3s/pull/14606) * Bump google.golang.org/grpc to v1.83.2 for CVE-2026-84445 [(#14614)](https://github.com/k3s-io/k3s/pull/14614) * Bump google.golang.org/grpc to v1.83.2, not v1.82.2 [(#14619)](https://github.com/k3s-io/k3s/pull/14619) ## Embedded Component Versions | Component | Version | |---|---| | Kubernetes | [v1.37.0](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.37.md#v1370) | | Kine | [v0.17.0](https://github.com/k3s-io/kine/releases/tag/v0.17.0) | | SQLite | [3.53.4](https://sqlite.org/releaselog/3_53_4.html) | | Etcd | [v3.7.1-k3s1](https://github.com/k3s-io/etcd/releases/tag/v3.7.1-k3s1) | | Containerd | [v2.3.4-k3s1](https://github.com/k3s-io/containerd/releases/tag/v2.3.4-k3s1) | | Runc | [v1.4.2](https://github.com/opencontainers/runc/releases/tag/v1.4.2) | | Flannel | [v0.28.4](https://github.com/flannel-io/flannel/releases/tag/v0.28.4) | | Metrics-server | [v0.9.0](https://github.com/kubernetes-sigs/metrics-server/releases/tag/v0.9.0) | | Traefik | [v3.7.13](https://github.com/traefik/traefik/releases/tag/v3.7.13) | | CoreDNS | [v1.14.7](https://github.com/coredns/coredns/releases/tag/v1.14.7) | | Helm-controller | [v0.17.7](https://github.com/k3s-io/helm-controller/releases/tag/v0.17.7) | | Local-path-provisioner | [v0.0.37](https://github.com/rancher/local-path-provisioner/releases/tag/v0.0.37) | ## Helpful Links As always, we welcome and appreciate feedback from our community of users. Please feel free to: - [Open issues here](https://github.com/rancher/k3s/issues/new/choose) - [Join our Slack channel](https://slack.rancher.io/) - [Check out our documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on how to get started or to dive deep into K3s. - [Read how you can contribute here](https://github.com/rancher/k3s/blob/master/CONTRIBUTING.md) <a href="https://github.com/k3s-io/k3s">Source</a> <a href="https://github.com/k3s-io/k3s/releases/tag/v1.37.0%2Bk3s1">Release</a> </details>

Wuast94 added 1 commit 2026-10-14 02:30:39 +02:00

chore: update rancher/k3s (v1.36.4-k3s1 → v1.37.1-k3s1) 6329eae479

Wuast94 scheduled this pull request to auto merge when all checks succeed 2026-10-14 02:30:41 +02:00

Wuast94 changed title from chore: update rancher/k3s (v1.36.4-k3s1 → v1.37.1-k3s1) to [breaking] chore: update rancher/k3s (v1.36.4-k3s1 → v1.37.1-k3s1) 2026-10-14 10:02:39 +02:00

Wuast94 force-pushed updatarr/rancher-k3s-faf6dbfc5f from 6329eae479 to bbd739f31b 2026-10-14 10:02:43 +02:00 Compare

Wuast94 changed title from [breaking] chore: update rancher/k3s (v1.36.4-k3s1 → v1.37.1-k3s1) to chore: update rancher/k3s (v1.36.4-k3s1 → v1.37.1-k3s1) 2026-10-14 19:40:18 +02:00

Wuast94 force-pushed updatarr/rancher-k3s-faf6dbfc5f from bbd739f31b to bc16f7bd18 2026-10-14 19:40:19 +02:00 Compare

Wuast94 force-pushed updatarr/rancher-k3s-faf6dbfc5f from bc16f7bd18 to 29a87084b6 2026-10-14 23:30:53 +02:00 Compare

Wuast94 changed title from chore: update rancher/k3s (v1.36.4-k3s1 → v1.37.1-k3s1) to [breaking] chore: update rancher/k3s (v1.36.4-k3s1 → v1.37.1-k3s1) 2026-10-15 01:21:18 +02:00

Wuast94 force-pushed updatarr/rancher-k3s-faf6dbfc5f from 29a87084b6 to 53f731678d 2026-10-15 01:21:18 +02:00 Compare

Wuast94 merged commit 4337d55723 into main 2026-10-15 01:44:24 +02:00

Wuast94 referenced this pull request from a commit 2026-10-15 01:44:25 +02:00

Merge pull request '[breaking] chore: update rancher/k3s (v1.36.4-k3s1 → v1.37.1-k3s1)' (#264) from updatarr/rancher-k3s-faf6dbfc5f into main

Wuast94 deleted branch updatarr/rancher-k3s-faf6dbfc5f 2026-10-15 01:44:27 +02:00

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

Wuast94/kumaste!264

No description provided.