Repository navigation
feat(talos): bump Talos to v1.13.0 - #2546
Conversation
Bumps Talos Linux from v1.12.7 to v1.13.0. The v1.13 release line also contains the kernel fix for CVE-2026-31431 ("Copy Fail"). Refreshes the bundled system extension digests (amdgpu, i915, drbd, zfs) to their 1.13.0-aligned builds. Generated via `make update` in packages/core/talos. Co-Authored-By: Claude <[email protected]> Signed-off-by: Andrei Kvapil <[email protected]>
|
Important Review skippedAuto reviews are disabled on base/target branches other than the default branch. Please check the settings in the CodeRabbit UI or the ⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: CHILL Plan: Pro Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
github-actions
Bot
added
area/platform
dosubot
Bot
added
size/XS
Summary of ChangesHello, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed! This pull request performs a version bump of Talos Linux to v1.13.0. The update includes necessary adjustments to system extension references and image definitions to ensure compatibility with the new release, while also addressing a specific security vulnerability. Highlights
🧠 New Feature in Public Preview: You can now enable Memory to help Gemini Code Assist learn from your team's feedback. This makes future code reviews more consistent and personalized to your project's style. Click here to enable Memory in your admin console. Using Gemini Code AssistThe full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips. Invoking Gemini You can request assistance from Gemini at any point by creating a comment using either
Customization To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a Limitations & Feedback Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on Gemini (@gemini-code-assist) comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for GitHub and other Google products, sign up here. Footnotes
|
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request updates Talos profiles across several configuration files, bumping the version from v1.12.7 to v1.13.0 and updating associated image references for the base installer and system extensions (amdgpu, i915, drbd, and zfs). Feedback was provided to include a digest for the baseInstaller image reference to ensure reproducibility and security, maintaining consistency with the system extensions which already utilize digests.
| path: /usr/install/amd64/initramfs.xz | ||
| baseInstaller: | ||
| imageRef: "ghcr.io/siderolabs/installer:v1.12.7" | ||
| imageRef: "ghcr.io/siderolabs/installer:v1.13.0" |
There was a problem hiding this comment.
The baseInstaller image reference is missing a digest. For production-grade infrastructure, it is a best practice to use immutable image references (tag + digest) to ensure reproducibility and security, especially when bumping to a new major/minor version. While the system extensions below use digests, the installer does not.
2 participants
What this PR does
Bumps Talos Linux from v1.12.7 to v1.13.0. The v1.13 release line also contains the kernel fix for CVE-2026-31431 ("Copy Fail").
Refreshes the bundled system extension digests (amdgpu, i915, drbd, zfs) to their 1.13.0-aligned builds.
Generated via
make updateinpackages/core/talos.Stacked on top of #2545. Targets
fix/talos-1.12.7so the diff shown here is just the v1.12.7 → v1.13.0 delta.References:
Release note