v1.35.3+k0s.0

What's Changed

• [Backport release-1.35] Use filepath.Join for local filesystem paths by @k0s-bot in #7282
• [Backport release-1.35] Bump k3s-io/kine to v0.14.15 by @k0s-bot in #7328
• [Backport release-1.35] Modify Kine build flags to match upstream by @k0s-bot in #7341
• [Backport release-1.35] Bump etcd to v3.6.9 by @k0s-bot in #7330
• [Backport release-1.35] Fix kube-dns address on dualstack clusters by @k0s-bot in #7345
• [release-1.35] Bump kubernetes to v1.35.3 by @juanluisvaladas in #7343

Full Changelog: v1.35.2+k0s.0...v1.35.3+k0s.0

v1.34.6+k0s.0

What's Changed

• [Backport release-1.34] Use filepath.Join for local filesystem paths by @twz123 in #7313
• Bump opencontainers/runc to v1.3.5 (release-1.34) by @k0s-bot in #7317
• Bump Kubernetes to v1.34.6 (release-1.34) by @k0s-bot in #7312
• [Backport release-1.34] Bump k3s-io/kine to v0.14.15 by @juanluisvaladas in #7335
• [Backport release-1.34] Modify Kine build flags to match upstream by @k0s-bot in #7340
• [Backport release-1.34] Fix kube-dns address on dualstack clusters by @juanluisvaladas in #7354
• [Backport release-1.34] Bump go to v1.25.8 by @twz123 in #7359
• [Backport release-1.34] Bump etcd to v3.6.9 by @twz123 in #7357

Full Changelog: v1.34.5+k0s.0...v1.34.6+k0s.0

v1.33.10+k0s.0

What's Changed

• [Backport release-1.33] Use filepath.Join for local filesystem paths by @k0s-bot in #7314
• Bump Kubernetes to v1.33.10 (release-1.33) by @k0s-bot in #7311
• [Backport release-1.33] Bump go to v1.25.8 by @juanluisvaladas in #7360
• [release-1.33] Bump etcd v3.5.28 by @juanluisvaladas in #7361

Full Changelog: v1.33.9+k0s.0...v1.33.10+k0s.0

v1.35.2+k0s.0

What's Changed

• [Backport release-1.35] Bump modernc.org/sqlite from 1.45.0 to 1.46.0 by @k0s-bot in #7157
• [Backport release-1.35] Bump k3s-io/kine to v0.14.12 by @k0s-bot in #7165
• [Backport release-1.35] Add CI job to lint for invisible Unicode characters by @k0s-bot in #7196
• [Backport release-1.35] Bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 by @k0s-bot in #7206
• [Backport release-1.35] Delay join token parsing on worker until it is known that it is needed by @k0s-bot in #7213
• [Backport release-1.35] Fix calico-node restarts on BIRD mode by @juanluisvaladas in #7216
• [Backport release-1.35] Bump k3s-io/kine to v0.14.14 by @k0s-bot in #7232
• Bump go to v1.25.8 (release-1.35) by @k0s-bot in #7237
• Bump docker.io/calico/node Docker tag to v3.31.4 (release-1.35) by @k0s-bot in #7236
• [Backport release-1.35] docs: fix typo in UpdaterConfig to UpdateConfig by @k0s-bot in #7250
• [Backport release-1.35] Fix EtcdMember lease name mismatch by @k0s-bot in #7254
• [Backport release-1.35] Make Helm chart reconciliation interruption-aware and recover interrupted installs by @k0s-bot in #7251
• [Backport release-1.35] Remove retry cap when waiting for Helm CRDs by @k0s-bot in #7252
• [Backport release-1.35] Bump quay.io/k0sproject/envoy-distroless Docker tag to v1.37.1 by @k0s-bot in #7265
• [Backport release-1.35] Bump Helm to v3.20.1 by @k0s-bot in #7272
• [Backport release-1.35] Bump CoreDNS to v1.14.2 by @k0s-bot in #7276
• [Backport release-1.35] Add cgroups v1 clarification to docs by @k0s-bot in #7279
• [Backport release-1.35] Bump kubernetes to v1.35.2 by @twz123 in #7281
• [Backport release-1.35] Check Go module versions more thoroughly by @twz123 in #7285
• [Backport release-1.35] Bump opencontainers/runc to v1.4.1 by @k0s-bot in #7287

Full Changelog: v1.35.1+k0s.0...v1.35.2+k0s.0

v1.34.5+k0s.0

What's Changed

• [release-1.34] Bump kubernetes to v1.34.5 by @juanluisvaladas in #7183
• [release-1.34] Bump metrics-server image to v0.7.2-1 by @twz123 in #7205
• [Backport release-1.34] Bump k3s-io/kine to v0.14.12 by @twz123 in #7172
• [Backport release-1.34] Add CI job to lint for invisible Unicode characters by @k0s-bot in #7203
• [Backport release-1.34] Bump k3s-io/kine to v0.14.14 by @twz123 in #7235
• [Backport release-1.34] Fix EtcdMember lease name mismatch by @k0s-bot in #7253
• [Backport release-1.34] docs: fix typo in UpdaterConfig to UpdateConfig by @k0s-bot in #7255
• Bump quay.io/k0sproject/envoy-distroless Docker tag to v1.34.13 (release-1.34) by @k0s-bot in #7258
• [Backport release-1.34] Remove retry cap when waiting for Helm CRDs by @k0s-bot in #7259

Full Changelog: v1.34.4+k0s.0...v1.34.5+k0s.0

v1.33.9+k0s.0

What's Changed

• [release-1.33] Bump etcd to v3.5.27 by @juanluisvaladas in #7132
• Bump etcd-io/etcd to v3.5.27 (release-1.33) by @k0s-bot in #7140
• [Release 1.33] Bump alpine to 3.21.6 by @jnummelin in #7145
• [release-1.33] Bump kubernetes to v1.33.9 by @juanluisvaladas in #7182
• [Backport release-1.33] Use fake version in update server inttest by @twz123 in #7197
• [Backport release-1.33] Remove hack/tool folder by @twz123 in #7198
• [Backport release-1.33] Deduce alpine_version from alpine_patch_version by @twz123 in #7199
• [Backport release-1.33] Bump metrics-server image to v0.7.2-1 by @k0s-bot in #7209
• [Backport release-1.33] Add CI job to lint for invisible Unicode characters by @k0s-bot in #7220
• [Backport release-1.33] More generic renovate updates via comments by @twz123 in #7200
• [Backport release-1.33] More Renovate version bumps by @twz123 in #7201
• [Backport release-1.33] docs: fix typo in UpdaterConfig to UpdateConfig by @k0s-bot in #7256
• [Backport release-1.33] Remove retry cap when waiting for Helm CRDs by @k0s-bot in #7273

Full Changelog: v1.33.8+k0s.0...v1.33.9+k0s.0

v1.32.13+k0s.0

What's Changed

• [release-1.32] Bump bootloose to 0.9.6 by @juanluisvaladas in #7141
• [Backport release-1.32] Bump etcd to v3.5.27 by @k0s-bot in #7133
• [Backport release-1.32] Bump alpine to 3.21.6 by @k0s-bot in #7148
• [release-1.32] Bump kubernetes to v1.32.13 by @juanluisvaladas in #7181

Full Changelog: v1.32.12+k0s.0...v1.32.13+k0s.0

v1.35.1+k0s.1

What's Changed

• [Backport release-1.35] Bump modernc.org/sqlite from 1.45.0 to 1.46.0 by @k0s-bot in #7157
• [Backport release-1.35] Bump k3s-io/kine to v0.14.12 by @k0s-bot in #7165
• [Backport release-1.35] Add CI job to lint for invisible Unicode characters by @k0s-bot in #7196
• [Backport release-1.35] Bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 by @k0s-bot in #7206
• [Backport release-1.35] Delay join token parsing on worker until it is known that it is needed by @k0s-bot in #7213
• [Backport release-1.35] Fix calico-node restarts on BIRD mode by @juanluisvaladas in #7216

Full Changelog: v1.35.1+k0s.0...v1.35.1+k0s.1

v1.35.1+k0s.0

What's Changed

• Bump platformdirs from 4.4.0 to 4.5.0 in /docs by @dependabot[bot] in #6503
• Bump golang.org/x/mod from 0.28.0 to 0.29.0 by @dependabot[bot] in #6499
• Bump korthout/backport-action from 3.3.0 to 3.4.1 by @dependabot[bot] in #6502
• Bump golang.org/x/text from 0.29.0 to 0.30.0 by @dependabot[bot] in #6500
• Bump renovatebot/github-action from 43.0.11 to 43.0.16 by @dependabot[bot] in #6505
• Update dependency k3s-io/kine to v0.14.5 by @k0s-bot in #6504
• Update docker.io/curlimages/curl Docker tag to v8.16.0 by @k0s-bot in #6389
• Update dependency sigstore/cosign to v3 by @k0s-bot in #6482
• CIS bechmark 1.11: change file permissions to 0600 for admin.conf and kubelet config.yaml by @sakshisharma84 in #6507
• Bump golang.org/x/crypto from 0.42.0 to 0.43.0 by @dependabot[bot] in #6498
• Bump golang.org/x/tools from 0.37.0 to 0.38.0 by @dependabot[bot] in #6501
• Bump renovatebot/github-action from 43.0.16 to 43.0.17 by @dependabot[bot] in #6509
• Bump idna from 3.10 to 3.11 in /docs by @dependabot[bot] in #6511
• Bump sigs.k8s.io/controller-runtime from 0.22.2 to 0.22.3 by @dependabot[bot] in #6510
• Update dependency k0sproject/k0sctl to v0.26.0 by @k0s-bot in #6516
• Update dependency replicatedhq/troubleshoot to v0.123.8 by @k0s-bot in #6513
• CIS benchmark 1.1.15 and 1.1.17: change file permissions to 0600 for ccm.conf and scheduler.conf by @sakshisharma84 in #6512
• Bump mkdocs-material from 9.6.21 to 9.6.22 in /docs in the mkdocs group by @dependabot[bot] in #6518
• Update dependency replicatedhq/troubleshoot to v0.123.9 by @k0s-bot in #6521
• Update dependency replicatedhq/troubleshoot to v0.123.10 by @k0s-bot in #6529
• Always generate SBOM, but only sign it when releasing by @twz123 in #6530
• Bump renovatebot/github-action from 43.0.17 to 43.0.18 by @dependabot[bot] in #6532
• Update docker.io/anchore/syft Docker tag to v1.34.2 by @k0s-bot in #6533
• Fix kubeProxy configuration options table formatting by @valleyflowerbear in #6534
• Bump regex from 2025.9.18 to 2025.10.22 in /docs by @dependabot[bot] in #6539
• Update dependency go to v1.25.3 by @k0s-bot in #6479
• Disable BuildKit's InvalidDefaultArgInFrom build check by @twz123 in #6409
• Bump regex from 2025.10.22 to 2025.10.23 in /docs by @dependabot[bot] in #6541
• Update docker.io/anchore/syft Docker tag to v1.36.0 by @k0s-bot in #6542
• Update dependency replicatedhq/troubleshoot to v0.123.11 by @k0s-bot in #6544
• Update dependency k0sproject/k0sctl to v0.27.0 by @k0s-bot in #6546
• Update dependency Mirantis/cri-dockerd to v0.4.0 by @k0s-bot in #6543
• Bump termcolor from 3.1.0 to 3.2.0 in /docs by @dependabot[bot] in #6550
• Fix image bundle hash key calculation by @twz123 in #6549
• Bump mkdocs-macros-plugin from 1.4.0 to 1.4.1 in /docs in the mkdocs group by @dependabot[bot] in #6554
• Bump pip from 25.2 to 25.3 in /docs by @dependabot[bot] in #6551
• Bump github.com/containerd/cgroups/v3 from 3.0.5 to 3.1.0 by @dependabot[bot] in #6556
• Update docker.io/library/traefik Docker tag to v3.5.4 by @k0s-bot in #6558
• Update docker.io/library/nginx Docker tag to v1.29.3 by @k0s-bot in #6559
• Update dependency k3s-io/kine to v0.14.6 by @k0s-bot in #6557
• Optimize GitHub Actions cache usage by @twz123 in #6555
• Update docs around firewalld by @twz123 in #6565
• Enable dependency bumps on release-1.34 by @twz123 in #6575
• Bump mkdocs-material from 9.6.22 to 9.6.23 in /docs in the mkdocs group by @dependabot[bot] in #6580
• Set E2E_SKIP to the empty string when running conformance tests by @twz123 in #6584
• Add backup test case for kine by @twz123 in #6568
• Bump markdown from 3.9 to 3.10 in /docs by @dependabot[bot] in #6592
• Update docker.io/anchore/syft Docker tag to v1.37.0 by @k0s-bot in #6586
• Bump regex from 2025.10.23 to 2025.11.3 in /docs by @dependabot[bot] in #6591
• Update quay.io/k0sproject/envoy-distroless Docker tag to v1.36.2 by @k0s-bot in #6587
• Update docker.io/curlimages/curl Docker tag to v8.17.0 by @k0s-bot in #6597
• Update dependency mergiraf/mergiraf to v0.16.1 by @k0s-bot in #6607
• Demote CoreDNS configuration log message by @twz123 in #6603
• Use Kubernetes namespace constants by @twz123 in #6594
• Update dependency opencontainers/runc to v1.3.3 by @k0s-bot in #6596
• Set golangi-lint cache directory by @twz123 in #6610
• Retry resync in etcd member reconciler by @twz123 in #6608
• Update dependency go to v1.25.4 by @k0s-bot in #6600
• Add --feature-gates flag to the k0s config subcommand by @twz123 in #6613
• Wait for all workers in backup inttest by @twz123 in #6618
• Bump sigs.k8s.io/controller-runtime from 0.22.3 to 0.22.4 by @dependabot[bot] in #6589
• Update dependency opentofu/opentofu to v1.10.7 by @k0s-bot in #6606
• Bump github.com/opencontainers/selinux from 1.11.1 to 1.13.0 by @dependabot[bot] in #6620
• Don't block fsnotify watcher during stack application by @twz123 in #6420
• Update docker.io/library/traefik Docker tag to v3.6.0 by @k0s-bot in #6628
• Fix go mod directive renovate updates by @twz123 in #6624
• Update dependency go to v1.25 by @k0s-bot in #6629
• Bump golang.org/x/sys from 0.37.0 to 0.38.0 by @dependabot[bot] in #6631
• Bump golang.org/x/sync from 0.17.0 to 0.18.0 by @dependabot[bot] in #6632
• Update dependency replicatedhq/troubleshoot to v0.123.12 by @k0s-bot in #6593
• docs: Contributing Guide broken link by @skl in #6635
• Bump certifi from 2025.10.5 to 2025.11.12 in /docs by @dependabot[bot] in #6642
• Bump golang.org/x/text from 0.30.0 to 0.31.0 by @dependabot[bot] in #6639
• Bump pymdown-extensions from 10.16.1 to 10.17.1 in /docs by @dependabot[bot] in #6641
• More Renovate version bumps by @twz123 in #6427
• Bump golang.org/x/crypto from 0.43.0 to 0.44.0 by @dependabot[bot] in #6640
• Add short roadmap page to point to GH projects by @jnummelin in #6588
• Bump etcd to v3.6.6 by @k0s-bot in #6646
• Add honorLabels to pushgateway ServiceMonitor example in the Docs by @hille721 in #6654
• List RISC-V as supported architecture by @twz123 in #6615
• Disable RenovateBot vulnerability alerts by @twz123 in #6650
• Bump mkdocs-material from 9.6.23 to 9.7.0 in /docs in the mkdocs group by @dependabot[bot] in #6634
• Bump github.com/cilium/ebpf from 0.19.0 to 0.20.0 by @dependabot[bot] in #6579
• Disable kine's automatic compaction by @twz123 in #6578
• Replace rqlite with modernc.org/sqlite by @s3rj1k in #6515
• Bump containerd to v1.7.29 by @k0s-bot in #6645
• Bump golang.org/x/mod from 0.29.0 to 0.30.0 by @dependabot[bot] in #6662
• Fix lints on Darwin by @twz123 in #6656
• Bump mode...

v1.34.4+k0s.0

What's Changed

• [Backport release-1.34] Bump quay.io/k0sproject/kube-router Docker tag to v2.6.3 by @k0s-bot in #6892
• [Backport release-1.34] Don't do an etcd self-leave by @k0s-bot in #6893
• [Backport release-1.34] Close etcd clients after use by @k0s-bot in #6918
• [Backport release-1.34] Cleanup GitHub Workflow path-ignore by @k0s-bot in #6920
• [Backport release-1.34] Make etcd member leave wait for controller shutdown by @k0s-bot in #6922
• [Backport release-1.34] Include k0s reference version in smoketest artifact names by @k0s-bot in #6919
• [Backport release-1.34] Bump k3s-io/kine to v0.14.10 by @twz123 in #6933
• [Backport release-1.34] Make NLLB pods tolerate NoExecute taints by @k0s-bot in #6959
• [Backport release-1.34] Downgrade setup-go to v5 on ARMv7 by @k0s-bot in #6961
• Bump quay.io/k0sproject/envoy-distroless Docker tag to v1.34.12 (release-1.34) by @k0s-bot in #6974
• Bump go to v1.24.12 (release-1.34) by @k0s-bot in #6979
• [Backport release-1.34] Reclassify controller readiness failures in Autopilot by @k0s-bot in #6962
• [Backport release-1.34] Reclaim GH runner disk space when building k0s by @k0s-bot in #6969
• [Backport release-1.34] Only reconcile Autopilot signals in the expected phase by @k0s-bot in #6989
• [Backport release-1.34] Merge embedded-bins ldflags in Makefile by @k0s-bot in #7007
• [Backport release-1.34] Requeue Autopilot signal node updates on conflict by @k0s-bot in #7031
• [Backport release-1.34] Fix error message related to version update inttests by @k0s-bot in #7033
• [Backport release-1.34] Add possibility to customize keepalived build flags by @k0s-bot in #7043
• [Backport release-1.34] docs: fix documentation issue #7039 by @k0s-bot in #7054
• Bump go to v1.24.13 (release-1.34) by @k0s-bot in #7066
• [Backport release-1.34] Fix NLLB SELinux labeling on enforcing systems by @k0s-bot in #7073
• [Backport release-1.34] Bump k3s-io/kine to v0.14.11 by @k0s-bot in #7071
• [Backport release-1.34] Use registry.k8s.io for Windows pause image by @k0s-bot in #7079
• [Backport release-1.34] Fix SELinux labels for containerd binaries by @k0s-bot in #7099
• [release-1.34] Bump kubernetes to v1.34.4 by @juanluisvaladas in #7101
• [release-1.34] Bump bootloose to 0.9.6 by @juanluisvaladas in #7121
• [Backport release-1.34] Handle SELinux missing labels gracefully by @k0s-bot in #7120
• [Backport release-1.34] Bump etcd to v3.6.8 by @k0s-bot in #7119
• Bump docker.io/library/alpine Docker tag to v3.22.3 (release-1.34) by @k0s-bot in #7146

Full Changelog: v1.34.3+k0s.0...v1.34.4+k0s.0