K3s 1.35.7+k3s1 → 1.36.0+k3s1
3 releases · 0 breaking changes · 1 security fix · 0 advisories fixed
1security0breaking0deprecated2feature9fix
Breaking changes
None in the release notes.
Security changes
- security Bump google.golang.org/grpc to v1.83.2 for CVE-2026-84445 (#14621) in 1.35.9+k3s1
Every release in between
featureAdd sipgate to the list of adopters (#13881)
featureAdd Rocket Technologies to the list of adopters (#13890)
otherMake Dockerfile.test more secure (#13882)
otherMake tests/integration/Dockerfile.test more secure (#13883)
otherSecure the e2e yaml GHA (#13885)
otherPin govulncheck GHA version (#13887)
otherVerify sha256sum for kubelet, vagrant zip and go binary (#13889)
otherCheck the k3s-root sha256sum (#13888)
fixFix reproducibility of embedded data tarball (#13875)
fixFix S3 test to account for change to s3mock (#13906)
otherBump runc/spegel/helm-controller/kine (#13909)
otherBump runc to v1.4.2
otherBump spegel to v0.6.0-k3s2
otherBump helm-controller to v0.17.1
otherBump kine to v0.14.16
fixFix embedded executor VPN config injection (#13920)
otherBump containerd to v2.2.3 (#13931)
otherBump flannel to v0.28.4 (#13937)
otherImmutable release changes (#13902)
otherBump Traefik to 3.6.13 (#13969)
otherSwitch from draft to pre-release (#13951)
fixFix SANs added from comma-separated node-external-ip list (#13989)
fixFix docker dualstack test (#13994)
otherBump klipper-helm image for revision check fix (#13995)
otherBump upstream to v1.36 (#13986)
fixFix kubectl exec when using docker (#14021)
otherOpen issues here
otherJoin our Slack channel
otherCheck out our documentation for guidance on how to get started or to dive deep into K3s.
otherRead how you can contribute here
otherBump rancher/mirrored-coredns-coredns image version (#14533)
otherBump gateway-api and traefik image versions (#14584)
otherBump Traefik to v3.7.13 (#14611)
securityBump google.golang.org/grpc to v1.83.2 for CVE-2026-84445 (#14621)
otherBackports for 2026-09 (#14633)
fixFix restore from compressed etcd snapshot #14528
otherEnable seccomp in riscv64 builds #14529
otherUse ginkgo CLI to run tests #14531
otherBump k3s-io/api to v0.2.0 #14570
otherServicelb multiple lbpools #14547
otherClose minio.Object after read #14580
otherBump k3s-io/apis again #14589
fixFix --flannel-cni-conf not reaching the embedded flannel #14598
otherCheck-config: suppress colors when stdout is not a terminal #14595
fixFix deploy controller not re-applying manifests when mtime is pinned to the epoch #14568
otherBump etcd to v3.7.1-k3s3 for nonblocking logging support #14628
otherBump kine to v0.17.1 #14627
otherRequire node password informer sync before using cache (#14674)
otherBump helm-controller (#14686)
otherBump k3s-io/kubernetes and Go references (#14696)
otherReject anonymous access to supervisor router (spegel/pprof/metrics) (#14703)
otherImprove CA hash validation (#14707)
otherOpen issues here
otherJoin our Slack channel
otherCheck out our documentation for guidance on how to get started or to dive deep into K3s.
otherRead how you can contribute here
otherBackport tests changes (#14518)
otherBump Local Path Provisioner version (#14497)
otherBump containerd to v2.2.7-k3s1 (#14513)
otherBackports for 2026-08 (#14523)
otherUpdate to v1.35.8-k3s1 and Go 1.26.7 (#14544)
otherOpen issues here
otherJoin our Slack channel
otherCheck out our documentation for guidance on how to get started or to dive deep into K3s.
otherRead how you can contribute here