Wayfinder: Talos v1.14.0 release through versions.yaml #62

Destination

Produce a mergeable Talos v1.14.0 release path driven by omni/versions.yaml, with the talos-images build, OCI artifact, derived manifests, and cluster-version consumers validated end to end.

Notes

Domain: Talos, Omni, GitHub Actions, and GitOps release automation. Consult omni-talos-ops, omni-infra-providers, and the repository CI/build workflow validation. This map records blockers as tasks; it does not apply live cluster lifecycle changes.

Decisions so far

• Build and publish Talos v1.14.0 installer and OCI artifacts — The talos-images workflow completed successfully and published the common and libvirt installers, imported and verified the OCI image, and opened release PR chore: Talos upgrade to v1.14.0.
• Fix Tailscale Operator manifest validation failure — Changed proxyConfig.defaultTags to the chart-required comma-separated string; manifest validation passes.
• Fix existing Markdown lint failures — Corrected the design-plan Markdown structure; lint passes.
• Reconcile derived GitOps manifests for Talos v1.14.0 — check-version-drift.py --write updated the source pin and three derived OCI files; the drift check passed on the release branch.

Not yet specified

• Whether the release should retain Kubernetes v1.36.3 or move the pin to Talos 1.14.0's default v1.37.0, pending compatibility review.
• The final live rollout and verification sequence for unraid-lab and oci-lab, after the release PR and CI gates are ready.

Out of scope

• Direct live-cluster reimaging or upgrades while validating the release pipeline.