What's Changed

• Bump platformdirs from 4.4.0 to 4.5.0 in /docs by @dependabot[bot] in #6503
• Bump golang.org/x/mod from 0.28.0 to 0.29.0 by @dependabot[bot] in #6499
• Bump korthout/backport-action from 3.3.0 to 3.4.1 by @dependabot[bot] in #6502
• Bump golang.org/x/text from 0.29.0 to 0.30.0 by @dependabot[bot] in #6500
• Bump renovatebot/github-action from 43.0.11 to 43.0.16 by @dependabot[bot] in #6505
• Update dependency k3s-io/kine to v0.14.5 by @k0s-bot in #6504
• Update docker.io/curlimages/curl Docker tag to v8.16.0 by @k0s-bot in #6389
• Update dependency sigstore/cosign to v3 by @k0s-bot in #6482
• CIS bechmark 1.11: change file permissions to 0600 for admin.conf and kubelet config.yaml by @sakshisharma84 in #6507
• Bump golang.org/x/crypto from 0.42.0 to 0.43.0 by @dependabot[bot] in #6498
• Bump golang.org/x/tools from 0.37.0 to 0.38.0 by @dependabot[bot] in #6501
• Bump renovatebot/github-action from 43.0.16 to 43.0.17 by @dependabot[bot] in #6509
• Bump idna from 3.10 to 3.11 in /docs by @dependabot[bot] in #6511
• Bump sigs.k8s.io/controller-runtime from 0.22.2 to 0.22.3 by @dependabot[bot] in #6510
• Update dependency k0sproject/k0sctl to v0.26.0 by @k0s-bot in #6516
• Update dependency replicatedhq/troubleshoot to v0.123.8 by @k0s-bot in #6513
• CIS benchmark 1.1.15 and 1.1.17: change file permissions to 0600 for ccm.conf and scheduler.conf by @sakshisharma84 in #6512
• Bump mkdocs-material from 9.6.21 to 9.6.22 in /docs in the mkdocs group by @dependabot[bot] in #6518
• Update dependency replicatedhq/troubleshoot to v0.123.9 by @k0s-bot in #6521
• Update dependency replicatedhq/troubleshoot to v0.123.10 by @k0s-bot in #6529
• Always generate SBOM, but only sign it when releasing by @twz123 in #6530
• Bump renovatebot/github-action from 43.0.17 to 43.0.18 by @dependabot[bot] in #6532
• Update docker.io/anchore/syft Docker tag to v1.34.2 by @k0s-bot in #6533
• Fix kubeProxy configuration options table formatting by @valleyflowerbear in #6534
• Bump regex from 2025.9.18 to 2025.10.22 in /docs by @dependabot[bot] in #6539
• Update dependency go to v1.25.3 by @k0s-bot in #6479
• Disable BuildKit's InvalidDefaultArgInFrom build check by @twz123 in #6409
• Bump regex from 2025.10.22 to 2025.10.23 in /docs by @dependabot[bot] in #6541
• Update docker.io/anchore/syft Docker tag to v1.36.0 by @k0s-bot in #6542
• Update dependency replicatedhq/troubleshoot to v0.123.11 by @k0s-bot in #6544
• Update dependency k0sproject/k0sctl to v0.27.0 by @k0s-bot in #6546
• Update dependency Mirantis/cri-dockerd to v0.4.0 by @k0s-bot in #6543
• Bump termcolor from 3.1.0 to 3.2.0 in /docs by @dependabot[bot] in #6550
• Fix image bundle hash key calculation by @twz123 in #6549
• Bump mkdocs-macros-plugin from 1.4.0 to 1.4.1 in /docs in the mkdocs group by @dependabot[bot] in #6554
• Bump pip from 25.2 to 25.3 in /docs by @dependabot[bot] in #6551
• Bump github.com/containerd/cgroups/v3 from 3.0.5 to 3.1.0 by @dependabot[bot] in #6556
• Update docker.io/library/traefik Docker tag to v3.5.4 by @k0s-bot in #6558
• Update docker.io/library/nginx Docker tag to v1.29.3 by @k0s-bot in #6559
• Update dependency k3s-io/kine to v0.14.6 by @k0s-bot in #6557
• Optimize GitHub Actions cache usage by @twz123 in #6555
• Update docs around firewalld by @twz123 in #6565
• Enable dependency bumps on release-1.34 by @twz123 in #6575
• Bump mkdocs-material from 9.6.22 to 9.6.23 in /docs in the mkdocs group by @dependabot[bot] in #6580
• Set E2E_SKIP to the empty string when running conformance tests by @twz123 in #6584
• Add backup test case for kine by @twz123 in #6568
• Bump markdown from 3.9 to 3.10 in /docs by @dependabot[bot] in #6592
• Update docker.io/anchore/syft Docker tag to v1.37.0 by @k0s-bot in #6586
• Bump regex from 2025.10.23 to 2025.11.3 in /docs by @dependabot[bot] in #6591
• Update quay.io/k0sproject/envoy-distroless Docker tag to v1.36.2 by @k0s-bot in #6587
• Update docker.io/curlimages/curl Docker tag to v8.17.0 by @k0s-bot in #6597
• Update dependency mergiraf/mergiraf to v0.16.1 by @k0s-bot in #6607
• Demote CoreDNS configuration log message by @twz123 in #6603
• Use Kubernetes namespace constants by @twz123 in #6594
• Update dependency opencontainers/runc to v1.3.3 by @k0s-bot in #6596
• Set golangi-lint cache directory by @twz123 in #6610
• Retry resync in etcd member reconciler by @twz123 in #6608
• Update dependency go to v1.25.4 by @k0s-bot in #6600
• Add --feature-gates flag to the k0s config subcommand by @twz123 in #6613
• Wait for all workers in backup inttest by @twz123 in #6618
• Bump sigs.k8s.io/controller-runtime from 0.22.3 to 0.22.4 by @dependabot[bot] in #6589
• Update dependency opentofu/opentofu to v1.10.7 by @k0s-bot in #6606
• Bump github.com/opencontainers/selinux from 1.11.1 to 1.13.0 by @dependabot[bot] in #6620
• Don't block fsnotify watcher during stack application by @twz123 in #6420
• Update docker.io/library/traefik Docker tag to v3.6.0 by @k0s-bot in #6628
• Fix go mod directive renovate updates by @twz123 in #6624
• Update dependency go to v1.25 by @k0s-bot in #6629
• Bump golang.org/x/sys from 0.37.0 to 0.38.0 by @dependabot[bot] in #6631
• Bump golang.org/x/sync from 0.17.0 to 0.18.0 by @dependabot[bot] in #6632
• Update dependency replicatedhq/troubleshoot to v0.123.12 by @k0s-bot in #6593
• docs: Contributing Guide broken link by @skl in #6635
• Bump certifi from 2025.10.5 to 2025.11.12 in /docs by @dependabot[bot] in #6642
• Bump golang.org/x/text from 0.30.0 to 0.31.0 by @dependabot[bot] in #6639
• Bump pymdown-extensions from 10.16.1 to 10.17.1 in /docs by @dependabot[bot] in #6641
• More Renovate version bumps by @twz123 in #6427
• Bump golang.org/x/crypto from 0.43.0 to 0.44.0 by @dependabot[bot] in #6640
• Add short roadmap page to point to GH projects by @jnummelin in #6588
• Bump etcd to v3.6.6 by @k0s-bot in #6646
• Add honorLabels to pushgateway ServiceMonitor example in the Docs by @hille721 in #6654
• List RISC-V as supported architecture by @twz123 in #6615
• Disable RenovateBot vulnerability alerts by @twz123 in #6650
• Bump mkdocs-material from 9.6.23 to 9.7.0 in /docs in the mkdocs group by @dependabot[bot] in #6634
• Bump github.com/cilium/ebpf from 0.19.0 to 0.20.0 by @dependabot[bot] in #6579
• Disable kine's automatic compaction by @twz123 in #6578
• Replace rqlite with modernc.org/sqlite by @s3rj1k in #6515
• Bump containerd to v1.7.29 by @k0s-bot in #6645
• Bump golang.org/x/mod from 0.29.0 to 0.30.0 by @dependabot[bot] in #6662
• Fix lints on Darwin by @twz123 in #6656
• Bump mode...

What's Changed

• [Backport release-1.34] Bump quay.io/k0sproject/kube-router Docker tag to v2.6.3 by @k0s-bot in #6892
• [Backport release-1.34] Don't do an etcd self-leave by @k0s-bot in #6893
• [Backport release-1.34] Close etcd clients after use by @k0s-bot in #6918
• [Backport release-1.34] Cleanup GitHub Workflow path-ignore by @k0s-bot in #6920
• [Backport release-1.34] Make etcd member leave wait for controller shutdown by @k0s-bot in #6922
• [Backport release-1.34] Include k0s reference version in smoketest artifact names by @k0s-bot in #6919
• [Backport release-1.34] Bump k3s-io/kine to v0.14.10 by @twz123 in #6933
• [Backport release-1.34] Make NLLB pods tolerate NoExecute taints by @k0s-bot in #6959
• [Backport release-1.34] Downgrade setup-go to v5 on ARMv7 by @k0s-bot in #6961
• Bump quay.io/k0sproject/envoy-distroless Docker tag to v1.34.12 (release-1.34) by @k0s-bot in #6974
• Bump go to v1.24.12 (release-1.34) by @k0s-bot in #6979
• [Backport release-1.34] Reclassify controller readiness failures in Autopilot by @k0s-bot in #6962
• [Backport release-1.34] Reclaim GH runner disk space when building k0s by @k0s-bot in #6969
• [Backport release-1.34] Only reconcile Autopilot signals in the expected phase by @k0s-bot in #6989
• [Backport release-1.34] Merge embedded-bins ldflags in Makefile by @k0s-bot in #7007
• [Backport release-1.34] Requeue Autopilot signal node updates on conflict by @k0s-bot in #7031
• [Backport release-1.34] Fix error message related to version update inttests by @k0s-bot in #7033
• [Backport release-1.34] Add possibility to customize keepalived build flags by @k0s-bot in #7043
• [Backport release-1.34] docs: fix documentation issue #7039 by @k0s-bot in #7054
• Bump go to v1.24.13 (release-1.34) by @k0s-bot in #7066
• [Backport release-1.34] Fix NLLB SELinux labeling on enforcing systems by @k0s-bot in #7073
• [Backport release-1.34] Bump k3s-io/kine to v0.14.11 by @k0s-bot in #7071
• [Backport release-1.34] Use registry.k8s.io for Windows pause image by @k0s-bot in #7079
• [Backport release-1.34] Fix SELinux labels for containerd binaries by @k0s-bot in #7099
• [release-1.34] Bump kubernetes to v1.34.4 by @juanluisvaladas in #7101
• [release-1.34] Bump bootloose to 0.9.6 by @juanluisvaladas in #7121
• [Backport release-1.34] Handle SELinux missing labels gracefully by @k0s-bot in #7120
• [Backport release-1.34] Bump etcd to v3.6.8 by @k0s-bot in #7119
• Bump docker.io/library/alpine Docker tag to v3.22.3 (release-1.34) by @k0s-bot in #7146

Full Changelog: v1.34.3+k0s.0...v1.34.4+k0s.0

What's Changed

• [Backport release-1.33] Close etcd clients after use by @k0s-bot in #6921
• [Backport release-1.33] Downgrade setup-go to v5 on ARMv7 by @k0s-bot in #6970
• [Backport release-1.33] Bump go to v1.24.12 by @twz123 in #6983
• [Backport release-1.33] Make NLLB pods tolerate NoExecute taints by @k0s-bot in #6965
• [Backport release-1.33] Reclassify controller readiness failures in Autopilot by @twz123 in #6996
• [Backport release-1.33] Reclaim GH runner disk space when building k0s by @k0s-bot in #7001
• [Backport release-1.33] Determine inttest configs from smoke test name by @twz123 in #7012
• [Backport release-1.33] Merge embedded-bins ldflags in Makefile by @k0s-bot in #7032
• [Backport release-1.33] Requeue Autopilot signal node updates on conflict by @k0s-bot in #7035
• [Backport release-1.33] Add possibility to customize keepalived build flags by @k0s-bot in #7045
• [Backport release-1.33] Only reconcile Autopilot signals in the expected phase by @twz123 in #7009
• [Backport release-1.33] Bump go to v1.24.13 by @twz123 in #7070
• [Backport release-1.33] Fix NLLB SELinux labeling on enforcing systems by @k0s-bot in #7077
• [release-1.33] Bump kubernetes to v1.33.8 by @juanluisvaladas in #7102
• [release-1.33] Fix CI for release-1.33 by @juanluisvaladas in #7110
• [release-1.33] Bump etcd to v3.5.27 by @juanluisvaladas in #7132
• Bump etcd-io/etcd to v3.5.27 (release-1.33) by @k0s-bot in #7140
• [Release 1.33] Bump alpine to 3.21.6 by @jnummelin in #7145

Full Changelog: v1.33.7+k0s.0...v1.33.8+k0s.1

What's Changed

• [Backport release-1.32] Close etcd clients after use by @k0s-bot in #6928
• [Backport release-1.32] Downgrade setup-go to v5 on ARMv7 by @k0s-bot in #6984
• [Backport release-1.32] Make NLLB pods tolerate NoExecute taints by @k0s-bot in #6990
• [Backport release-1.32] Bump go to v1.24.12 by @k0s-bot in #6985
• [Backport release-1.32] Reclaim GH runner disk space when building k0s by @k0s-bot in #7005
• [Backport release-1.32] Determine inttest configs from smoke test name by @k0s-bot in #7018
• [Backport release-1.32] Reclassify controller readiness failures in Autopilot by @twz123 in #7008
• [Backport release-1.32] Requeue Autopilot signal node updates on conflict by @k0s-bot in #7041
• [Backport release-1.32] Merge embedded-bins ldflags in Makefile by @k0s-bot in #7034
• [Backport release-1.32] Add possibility to customize keepalived build flags by @k0s-bot in #7048
• [Backport release-1.32] Only reconcile Autopilot signals in the expected phase by @k0s-bot in #7062
• [Backport release-1.32] Bump go to v1.24.13 by @k0s-bot in #7078
• [Backport release-1.32] Fix NLLB SELinux labeling on enforcing systems by @k0s-bot in #7080
• [release-1.32] Bump kubernetes to v1.32.12 by @juanluisvaladas in #7103
• [release-1.32] Bump bootloose to 0.9.6 by @juanluisvaladas in #7141
• [Backport release-1.32] Bump etcd to v3.5.27 by @k0s-bot in #7133

Full Changelog: v1.32.11+k0s.0...v1.32.12+k0s.1

What's Changed

• [Backport release-1.34] host:port support for konnectivity externalAddress by @k0s-bot in #6748
• [Backport release-1.34] Bump setup-go to v6 by @k0s-bot in #6762
• [Backport release-1.34] More Renovate version bumps by @twz123 in #6759
• [Backport release-1.34] Enable "k0s status" on Windows workers by @k0s-bot in #6767
• Bump go to v1.24.11 (release-1.34) by @k0s-bot in #6758
• [Backport release-1.34] Retry leave check in etcd member inttest a few times by @k0s-bot in #6793
• [Backport release-1.34] Bump coredns to 1.13.2 by @k0s-bot in #6847
• [Backport release-1.34] Omit calico windows installer host prefic for CNI_NET_DIR by @k0s-bot in #6807
• [Backport release-1.34] Bump calico to v3.29.7 by @k0s-bot in #6850
• [Backport release-1.34] Bump Helm to v3.19.3 by @k0s-bot in #6826
• [Backport release-1.34] Add missing linux node selector to pushgateway by @k0s-bot in #6808
• [Backport release-1.34] Fix internal/http/TestDownload_CancelDownload by @k0s-bot in #6713
• Bump docker.io/calico/node Docker tag to v3.29.7 (release-1.34) by @k0s-bot in #6649
• [Backport release-1.34] Apply Autopilot RBAC only when Autopilot is enabled by @k0s-bot in #6728
• [Backport release-1.34] Bump containerd to v1.7.30 by @k0s-bot in #6870
• [Backport release-1.34] Bump etcd to v3.6.7 by @k0s-bot in #6869
• [Backport release-1.34] Bump kubernetes to 1.34.3 by @juanluisvaladas in #6856

Full Changelog: v1.34.2+k0s.0...v1.34.3+k0s.0

What's Changed

• [Backport release-1.33] Bridge GRPC logs to logrus by @k0s-bot in #6716
• [Backport release-1.33] host:port support for konnectivity externalAddress by @k0s-bot in #6747
• [Backport release-1.33] Bump setup-go to v6 by @twz123 in #6765
• [Backport release-1.33] Bump go to v1.24.11 by @twz123 in #6782
• [release-1.33] Bump coredns to 1.12.4 by @juanluisvaladas in #6841
• [release-1.33] Bump kubernetes to 1.33.7 by @juanluisvaladas in #6845
• [Backport release-1.33] Retry leave check in etcd member inttest a few times by @k0s-bot in #6802
• [Backport release-1.33] Bump calico to v3.29.7 by @twz123 in #6857
• [Backport release-1.33] Bump github.com/opencontainers/selinux from 1.11.1 to 1.13.0 by @k0s-bot in #6871
• [Backport release-1.33] Apply Autopilot RBAC only when Autopilot is enabled by @k0s-bot in #6862
• [Backport release-1.33] Fix internal/http/TestDownload_CancelDownload by @k0s-bot in #6861
• [Backport release-1.33] Bump containerd to v1.7.30 by @twz123 in #6872

Full Changelog: v1.33.6+k0s.0...v1.33.7+k0s.0

What's Changed

• [Backport release-1.32] host:port support for konnectivity externalAddress by @k0s-bot in #6746
• [Backport release-1.32] Bump setup-go to v6 by @k0s-bot in #6776
• [Backport release-1.32] Bump coredns to 1.12.4 by @k0s-bot in #6851
• [Backport release-1.32] Bump go to v1.24.11 by @k0s-bot in #6791
• [Backport release-1.32] Bridge GRPC logs to logrus by @k0s-bot in #6724
• [Backport release-1.32] Bump calico to v3.29.7 by @twz123 in #6859
• [Backport release-1.32] Retry leave check in etcd member inttest a few times by @k0s-bot in #6860
• [Backport release-1.32] Bump github.com/opencontainers/selinux from 1.11.1 to 1.13.0 by @twz123 in #6875
• [Backport release-1.32] Bump containerd to v1.7.30 by @k0s-bot in #6880
• [Backport release-1.32] Fix internal/http/TestDownload_CancelDownload by @k0s-bot in #6878
• [release-1.32] Bump kubernetes to v1.32.11 by @juanluisvaladas in #6855

Full Changelog: v1.32.10+k0s.0...v1.32.11+k0s.0

What's Changed

• Update dependency go to v1.24.10 (release-1.34) by @k0s-bot in #6601
• [Backport release-1.34] Set golangi-lint cache directory by @k0s-bot in #6614
• [Backport release-1.34] Bump github.com/opencontainers/selinux from 1.11.1 to 1.13.0 by @k0s-bot in #6622
• [Backport release-1.34] Bump etcd to v3.6.6 by @k0s-bot in #6652
• [Backport release-1.34] Add honorLabels to pushgateway ServiceMonitor example in the Docs by @k0s-bot in #6655
• [Backport release-1.34] Update dependency opencontainers/runc to v1.3.3 by @k0s-bot in #6612
• [Backport release-1.34] Add --feature-gates flag to the k0s config subcommand by @k0s-bot in #6619
• [Backport release-1.34] Demote CoreDNS configuration log message by @k0s-bot in #6609
• [Backport release-1.34] List RISC-V as supported architecture by @k0s-bot in #6659
• [Backport release-1.34] Retry resync in etcd member reconciler by @k0s-bot in #6616
• [Backport release-1.34] Bump containerd to v1.7.29 by @twz123 in #6672
• [Backport release-1.34] Disable kine's automatic compaction by @k0s-bot in #6664
• [Backport release-1.34] Bump Helm to v3.19.2 by @k0s-bot in #6682
• [Backport release-1.34] Add test for Windows kube-proxy version by @k0s-bot in #6692
• [Backport release-1.34] Sync etcd unsupported arch detection with etcd 3.6 by @k0s-bot in #6694
• [Backport release-1.34] Bump kube-router to v2.6.2 by @k0s-bot in #6703
• [Backport release-1.34] Implement CPLB reconciler healtcheck by @juanluisvaladas in #6708
• [Backport release-1.34] Graceful shutdown for the join API process by @k0s-bot in #6714
• [Backport release-1.34] Bridge GRPC logs to logrus by @k0s-bot in #6715
• [Backport release-1.34] Bump Kubernetes to v1.34.2 by @twz123 in #6718
• [Backport release-1.34] Fix kubeProxy configuration options table formatting by @k0s-bot in #6725

Full Changelog: v1.34.1+k0s.1...v1.34.2+k0s.0

What's Changed

• [Backport release-1.33] Use custom API port in autopilot by @k0s-bot in #6316
• [Backport release-1.33] Update dependency k3s-io/kine to v0.13.19 by @k0s-bot in #6356
• [Backport release-1.33] Push k0s image to quay registry by @k0s-bot in #6383
• [Backport release-1.33] Add ExternalAddress for konnectivity by @k0s-bot in #6432
• [release-1.33] Bump kubernetes to v1.33.5 by @juanluisvaladas in #6436
• [Backport release-1.33] Replace links to Medium with links to the community blog by @twz123 in #6445
• [release-1.33] Bump calico to v3.29.6-0 by @juanluisvaladas in #6386
• [release-1.33] Bump Go to v1.24.8 by @twz123 in #6485
• [Backport release-1.33] Allow update-prober to be disabled by @k0s-bot in #6328
• [Backport release-1.33] CIS bechmark 1.11: change file permissions to 0600 for admin.conf and kubelet config.yaml by @k0s-bot in #6536
• [Backport release-1.33] Bump Go to 1.24.10 by @twz123 in #6605
• [release-1.33] Bump runc to v1.2.8 by @twz123 in #6623
• [Backport release-1.33] Add honorLabels to pushgateway ServiceMonitor example in the Docs by @k0s-bot in #6657
• [Backport release-1.33] Bump containerd to v1.7.28 by @twz123 in #6621
• [Backport release-1.33] Demote CoreDNS configuration log message by @k0s-bot in #6660
• [Backport release-1.33] List RISC-V as supported architecture by @twz123 in #6685
• [Backport release-1.33] Bump containerd to v1.7.29 by @k0s-bot in #6683
• [Backport release-1.33] Update Helm dependencies to v3.18.6 by @twz123 in #6684
• [release-1.33] Bump Kubernetes to v1.33.6 by @twz123 in #6677
• [release-1.33] Bump etcd to v3.5.25 by @twz123 in #6710

Full Changelog: v1.33.4+k0s.0...v1.33.6+k0s.0

What's Changed

• [Backport release-1.32] Use custom API port in autopilot by @k0s-bot in #6315
• [Backport release-1.32] Update dependency k3s-io/kine to v0.13.19 by @k0s-bot in #6355
• [Backport release-1.32] Push k0s image to quay registry by @k0s-bot in #6382
• [Backport release-1.32] Add ExternalAddress for konnectivity by @k0s-bot in #6431
• [release-1.32] Bump kubernetes to v1.32.9 by @juanluisvaladas in #6435
• [Backport release-1.32] Allow update-prober to be disabled by @twz123 in #6524
• [Backport release-1.32] CIS bechmark 1.11: change file permissions to 0600 for admin.conf and kubelet config.yaml by @k0s-bot in #6535
• [Backport release-1.32] Bump runc to v1.2.8 by @k0s-bot in #6658
• [Backport release-1.32] Add honorLabels to pushgateway ServiceMonitor example in the Docs by @k0s-bot in #6666
• [Backport release-1.32] Update dependency go to v1.24.10 by @twz123 in #6679
• [Backport release-1.32] Demote CoreDNS configuration log message by @k0s-bot in #6680
• [release-1.32] Bump Kubernetes to v1.32.10 by @twz123 in #6676
• [Backport release-1.32] Bump etcd 3.5.19 by @twz123 in #6687
• [Backport release-1.32] Bump Helm to v3.17.3 by @twz123 in #6691
• [Backport release-1.32] Bump containerd to v1.7.29 by @twz123 in #6698
• [Backport release-1.32] Bump etcd to v3.5.25 by @twz123 in #6711

Full Changelog: v1.32.8+k0s.0...v1.32.10+k0s.0