v0.8.4

[smira]

image-factory 0.8.4 (2025-09-10)

Welcome to the v0.8.4 release of image-factory!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/image-factory/issues.

Contributors

• Andrey Smirnov
• Noel Georgi
• Oguz Kilcan
• Dmitrii Sharshakov
• Alp Celik
• Amarachi Iheanacho
• Andrew Longwill
• Guillaume LEGRAIN
• Markus Freitag
• Mateusz Urbanek
• Olivier Doucet
• Orzelius
• Sammy ETUR

Changes

3 commits

• a3a7661 release(v0.8.4): prepare release
• 075aa3f fix: update Talos to 1.11.1
• 02723cd fix: translation ID

Changes from siderolabs/go-debug

1 commit

• e21721b chore: add support for Go 1.25

Changes from siderolabs/pkgs

18 commits

• 1a25681 feat: enable ublk support
• 95f0be4 fix: enable memcg v1
• e1c333c feat: update Linux to 6.12.45
• 2ac857a feat: update pcre2 to 10.46
• f31e192 fix: bump NVIDIA production to 570.172.08
• e68ff4a feat: update Linux to 6.12.43
• 42cdb43 chore: update kernel config to support max SMP CPUs
• 3bb9cc9 fix: backport CVE kernel patches to 6.12
• c87dc6c feat: enable Infiniband IRDMA support
• 2598d53 fix: re-enable CPUSETS_V1 cgroups controller
• 6a8bca7 feat: update backportable dependencies
• a150a75 feat: update Go to 1.24.6
• a94734c feat: update containerd to 2.1.4
• 662c5a4 feat: enable F71808E watchdog driver
• 48afc2a fix: enable ISCSI IBFT
• ddb7b5e feat: update Linux to 6.12.40
• 5616981 feat: enable bootloader control on amd64
• 4a840bc chore: allow more than one commit for a PR

Changes from siderolabs/talos

64 commits

• 8e85c8362 release(v1.11.1): prepare release
• ff8644cd2 fix: correctly handle status-code 204
• 7d5fe2d0f feat: update Linux kernel (memcg_v1, ublk)
• 9e310a9dd fix: enable support for VMWare arm64
• f7620f028 feat: update CoreDNS to 1.12.3
• 01bf2f6f9 feat: add SOCKS5 proxy support to dynamic proxy dialer
• 8a578bc4a feat: update Linux to 6.12.45
• d9d89a3a8 release(v1.11.0): prepare release
• 364b48690 feat: update pkgs/tools for pcre2 10.46
• be70ea03f feat: update pkgs for NVIDIA prod 570.172.08
• a5f80b4fe fix: bring back linux/armv7 build and update xz
• 751dae432 fix: drop linux/armv7 build
• 8cbd75320 fix: update xz module (security)
• 803ed1ef9 feat: update Kubernetes to 1.34.0
• a80898da9 feat: update Linux to 6.12.43
• 30c14aa71 feat: update Kubernetes default to v1.34.0-rc.2
• ed7d8cbac docs: link to kubernetes linux swap tuning
• 1ee82120e docs: apply fixes for what is new
• 36102eae1 release(v1.11.0-rc.0): prepare release
• 0f22913d9 fix: image cache lockup on a missing volume
• 46cf25c7c feat: update Linux to 6.12.41
• 62f6c97fe fix: provide mitigation CVE-1999-0524
• 350319063 fix: actually use SIDEROV1_KEYS_DIR env var if it's provided
• 430a27dc2 fix: kubernetes upgrade options for kubelet
• e3a9097c4 fix: set secs field in DHCPv4 packets
• babddd0e4 fix: dial with proxy
• 23efda4db feat: use key provider with fallback option for auth type SideroV1
• e2a5a9b3f chore: re-enable vulncheck
• f5d700a0c release(v1.11.0-beta.2): prepare release
• 6186d1821 chore: disable vulncheck temporarily
• e4a2a8d9c feat: update default Kubernetes to v1.34.0-rc.1
• 4c4236d7e feat: update Go to 1.24.6
• a01a390f6 chore: add deadcode elimination linter
• 49fad0ede feat: add a pause function to dashboard
• 21e8e9dc9 refactor: replace containerd/containerd/v2 module for proper DCE
• bbd01b6b7 refactor: fix deadcode elimination with godbus
• e8d9c81cc refactor: stop using text/template in machined code paths
• 85589662a fix: unmarshal encryption STATE from META
• f10a626d2 docs: add what is new notes for 1.11
• 5a15ce88b release(v1.11.0-beta.1): prepare release
• 614ca2e22 fix: one more attempt to fix volume mount race on restart
• 4b86dfe6f feat: implement encryption locking to STATE
• 8ae76c320 feat: implement talos.config.early command line arg
• 19f8c605e docs: remove talos API flags from mgmt commands
• fa1d6fef8 feat: bootedentry resource
• 7dee810d4 fix: live reload of TLS client config for discovery client
• a5dc22466 fix: enforce minimum size on user volumes if not set explicitly
• 7836e924d feat: update containerd to 2.1.4
• 5012550ec feat: add F71808E watchdog driver
• 10ddc4cdd fix: grype scan
• d108e0a08 fix(ci): use a random suffix for ami names
• 504225546 fix: issues with reading GPT
• bdaf08dd4 feat: update PCI DB module to v0.3.2
• 667dcebec test: wait for service account test job longer
• ae176a4b7 feat: update etcd to 3.6.4
• 201b6801f fix: issue with volume remount on service restart
• 2a911402b chore: tag aws snapshots created via ci with the image name
• d8bd84b56 docs: add SBOM documentation
• 7eec61993 feat: unify disk encryption configuration
• 4ff2bf9e0 feat: update etcd to v3.5.22
• 31a67d379 fix: do not download artifacts for cron Grype scan
• c6b6e0bb3 docs: rewrite the getting started and prod docs for v1.10 and v1.11
• ca1c656e6 chore(ci): add more nvidia test matrix
• 7a2e0f068 feat: sync pkgs, update Linux to 6.12.40

Dependency Changes

• github.com/prometheus/client_golang v1.22.0 -> v1.23.2
• github.com/siderolabs/go-blockdevice/v2 v2.0.18 -> v2.0.19
• github.com/siderolabs/go-debug v0.5.0 -> v0.6.0
• github.com/siderolabs/pkgs v1.11.0 -> v1.11.0-18-g1a25681
• github.com/siderolabs/talos v1.11.0-beta.0 -> v1.11.1
• github.com/siderolabs/talos/pkg/machinery v1.11.0-beta.0 -> v1.11.1
• github.com/stretchr/testify v1.10.0 -> v1.11.1
• github.com/u-root/u-root v0.14.0 -> v0.15.0
• github.com/ulikunitz/xz v0.5.12 -> v0.5.15
• golang.org/x/net v0.42.0 -> v0.44.0
• golang.org/x/sync v0.16.0 -> v0.17.0
• golang.org/x/sys v0.34.0 -> v0.36.0
• golang.org/x/text v0.27.0 -> v0.29.0

Previous release can be found at v0.8.3

---

This discussion was created from the release v0.8.4.