[syscod3]

Talos upgrade

• Talos: v1.13.9
• Kubernetes: v1.36.3
• Schematic: 376567988ad370138ad8b2698212367b8edcb69b5fd68c80be1f2ec7d603b4ba (no official OCI extensions)
• OCI image OCID: ocid1.image.oc1.uk-london-1.aaaaaaaaicso725imd422ltao5z6nzylfuzxfiknwygdt6wifmhplgq6pjhq
• Scope: oci-lab is pinned to this version — machine classes and cluster-templates/oci-lab.yaml updated.

Check Pluto output for deprecated API versions before merging.

Talos v1.13.9 release notes

Talos 1.13.9 (2026-08-19)

Welcome to the v1.13.9 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Component Updates

Linux: 6.18.44
containerd: 2.2.7
Kubernetes: 1.36.3

Talos is built with Go 1.26.6.

Contributors

• Andrey Smirnov
• Noel Georgi

Changes

7 commits

• siderolabs/talos@3ebd10a7c release(v1.13.9): prepare release
• siderolabs/talos@9ade215ce feat: update Kubernetes to 1.36.3
• siderolabs/talos@14343cd29 test: save the provision test logs
• siderolabs/talos@b33e5fce2 fix: support try mode apply without prior config
• siderolabs/talos@6a8f29591 fix: share IPC namespace with the host for extension services
• siderolabs/talos@b525b8290 fix: size the receive/send buffers for nftables netlink
• siderolabs/talos@7ac52642c feat: update Go to 1.26.6

Changes from siderolabs/pkgs

5 commits

• siderolabs/pkgs@f541ca4 feat: bump kernel to 6.18.44
• siderolabs/pkgs@a4f2c26 feat: bump kernel to 6.18.43
• siderolabs/pkgs@79a7531 feat: update Linux firmware to 20260810
• siderolabs/pkgs@89d76bf feat: update backportable dependencies
• siderolabs/pkgs@af6c08a feat: update Go to 1.26.6

Changes from siderolabs/tools

1 commit

• siderolabs/tools@a201d19 feat: update Go to 1.26.6

Dependency Changes

• github.com/siderolabs/pkgs v1.13.0-55-gf677246 -> v1.13.0-60-gf541ca4
• github.com/siderolabs/talos/pkg/machinery v1.13.8 -> v1.13.9
• github.com/siderolabs/tools v1.13.0-8-gc2844e6 -> v1.13.0-9-ga201d19
• golang.org/x/net v0.57.0 -> v0.58.0
• golang.org/x/text v0.40.0 -> v0.41.0
• k8s.io/api v0.36.2 -> v0.36.3
• k8s.io/apiextensions-apiserver v0.36.2 -> v0.36.3
• k8s.io/apimachinery v0.36.2 -> v0.36.3
• k8s.io/apiserver v0.36.2 -> v0.36.3
• k8s.io/client-go v0.36.2 -> v0.36.3
• k8s.io/component-base v0.36.2 -> v0.36.3
• k8s.io/cri-api v0.36.2 -> v0.36.3
• k8s.io/kube-scheduler v0.36.2 -> v0.36.3
• k8s.io/kubectl v0.36.2 -> v0.36.3
• k8s.io/kubelet v0.36.2 -> v0.36.3
• k8s.io/pod-security-admission v0.36.2 -> v0.36.3

Previous release can be found at v1.13.8

Images

ghcr.io/siderolabs/flannel:0.28.8
registry.k8s.io/coredns/coredns:v1.14.6
registry.k8s.io/etcd:v3.6.12
registry.k8s.io/pause:3.10.1
registry.k8s.io/kube-apiserver:v1.36.3
registry.k8s.io/kube-controller-manager:v1.36.3
registry.k8s.io/kube-scheduler:v1.36.3
registry.k8s.io/kube-proxy:v1.36.3
ghcr.io/siderolabs/kubelet:v1.36.3
registry.k8s.io/networking/kube-network-policies:v1.1.0
ghcr.io/siderolabs/installer:v1.13.9
ghcr.io/siderolabs/installer-base:v1.13.9
ghcr.io/siderolabs/imager:v1.13.9
ghcr.io/siderolabs/talos:v1.13.9
ghcr.io/siderolabs/talosctl-all:v1.13.9
ghcr.io/siderolabs/overlays:v1.13.9
ghcr.io/siderolabs/extensions:v1.13.9