K3s 1.35.7+k3s1 → 1.36.4+k3s1
7 releases · 0 breaking changes · 1 security fix · 0 advisories fixed
1security0breaking0deprecated4feature12fix
Breaking changes
None in the release notes.
Security changes
- security Bump google.golang.org/grpc to v1.83.2 for CVE-2026-84445 (#14621) in 1.35.9+k3s1
Every release in between
otherBackport tests changes (#14517)
otherBump Local Path Provisioner version (#14498)
otherBump containerd to v2.3.4-k3s1.36 (#14512)
otherBackports for 2026-08 (#14522)
otherUpdate to v1.36.4-k3s1 and Go 1.26.7 (#14545)
otherOpen issues here
otherJoin our Slack channel
otherCheck out our documentation for guidance on how to get started or to dive deep into K3s.
otherRead how you can contribute here
otherBump dynamiclistener to v0.9.0-rc.2 for wildcard tls-san support (#14312)
featureAdd support for wildcard domains in --tls-san (e.g. --tls-san=*.example.com).
otherJuly Testing Backports (#14328)
otherJuly K3s Build Rework + GHA bumps (#14332)
otherBackports for 2026-07 (#14348)
otherBump mirrored-pause to 3.10.2 (#14389)
otherBump Traefik to v3.7.7 (#14381)
otherMore backports for 2026-07 (#14406)
fixFix typo in snapshot prune event (#14411)
otherBump rancher/mirrored-coredns-coredns image version (#14424)
otherBump golang:alpine image version (#14432)
otherBump rancher/mirrored-metrics-server image version (#14437)
featureUse new Traefik v3.7.8 (#14426)
otherBump helm-controller and klipper-helm for --force-conflicts support (#14442)
otherBump k3s-io/kubernetes and Go references (#14456)
otherBump etcd to v3.6.14 (#14461)
fixFix production builds always enabling Go coverage instrumentation (#14466)
otherBump helm-controller and klipper-helm (#14475)
otherOpen issues here
otherJoin our Slack channel
otherCheck out our documentation for guidance on how to get started or to dive deep into K3s.
otherRead how you can contribute here
otherBackport GitHub Action SHA pin updates from main (#14127)
otherBackports for 2026-06 (#14151)
otherBump v3.7.4 Traefik (#14193)
otherMore backports for 2026-06 (#14211)
otherTesting Backports 2026-06 (#14213)
otherBump klipper-helm for CVE reasons (#14235) (#14236)
fixBump containerd with the fix for []byte (#14243)
otherUpdate to v1.36.2-k3s1 and Go 1.26.4 (#14230)
otherBump containerd to v2.3.2-k3s1 (#14254)
otherBump cri-api and containerd for upstream env string fix (#14277)
otherOpen issues here
otherJoin our Slack channel
otherCheck out our documentation for guidance on how to get started or to dive deep into K3s.
otherRead how you can contribute here
otherBackports for 2026-05 (#14032)
otherUpdate rancher/local-path-provisioner image version (#14042)
otherUpdate to v1.36.1-k3s1 and Go 1.26.2 (#14051)
otherBump klipper-helm image tag (#14055)
otherOpen issues here
otherJoin our Slack channel
otherCheck out our documentation for guidance on how to get started or to dive deep into K3s.
otherRead how you can contribute here
featureAdd sipgate to the list of adopters (#13881)
featureAdd Rocket Technologies to the list of adopters (#13890)
otherMake Dockerfile.test more secure (#13882)
otherMake tests/integration/Dockerfile.test more secure (#13883)
otherSecure the e2e yaml GHA (#13885)
otherPin govulncheck GHA version (#13887)
otherVerify sha256sum for kubelet, vagrant zip and go binary (#13889)
otherCheck the k3s-root sha256sum (#13888)
fixFix reproducibility of embedded data tarball (#13875)
fixFix S3 test to account for change to s3mock (#13906)
otherBump runc/spegel/helm-controller/kine (#13909)
otherBump runc to v1.4.2
otherBump spegel to v0.6.0-k3s2
otherBump helm-controller to v0.17.1
otherBump kine to v0.14.16
fixFix embedded executor VPN config injection (#13920)
otherBump containerd to v2.2.3 (#13931)
otherBump flannel to v0.28.4 (#13937)
otherImmutable release changes (#13902)
otherBump Traefik to 3.6.13 (#13969)
otherSwitch from draft to pre-release (#13951)
fixFix SANs added from comma-separated node-external-ip list (#13989)
fixFix docker dualstack test (#13994)
otherBump klipper-helm image for revision check fix (#13995)
otherBump upstream to v1.36 (#13986)
fixFix kubectl exec when using docker (#14021)
otherOpen issues here
otherJoin our Slack channel
otherCheck out our documentation for guidance on how to get started or to dive deep into K3s.
otherRead how you can contribute here
otherBump rancher/mirrored-coredns-coredns image version (#14533)
otherBump gateway-api and traefik image versions (#14584)
otherBump Traefik to v3.7.13 (#14611)
securityBump google.golang.org/grpc to v1.83.2 for CVE-2026-84445 (#14621)
otherBackports for 2026-09 (#14633)
fixFix restore from compressed etcd snapshot #14528
otherEnable seccomp in riscv64 builds #14529
otherUse ginkgo CLI to run tests #14531
otherBump k3s-io/api to v0.2.0 #14570
otherServicelb multiple lbpools #14547
otherClose minio.Object after read #14580
otherBump k3s-io/apis again #14589
fixFix --flannel-cni-conf not reaching the embedded flannel #14598
otherCheck-config: suppress colors when stdout is not a terminal #14595
fixFix deploy controller not re-applying manifests when mtime is pinned to the epoch #14568
otherBump etcd to v3.7.1-k3s3 for nonblocking logging support #14628
otherBump kine to v0.17.1 #14627
otherRequire node password informer sync before using cache (#14674)
otherBump helm-controller (#14686)
otherBump k3s-io/kubernetes and Go references (#14696)
otherReject anonymous access to supervisor router (spegel/pprof/metrics) (#14703)
otherImprove CA hash validation (#14707)
otherOpen issues here
otherJoin our Slack channel
otherCheck out our documentation for guidance on how to get started or to dive deep into K3s.
otherRead how you can contribute here
otherBackport tests changes (#14518)
otherBump Local Path Provisioner version (#14497)
otherBump containerd to v2.2.7-k3s1 (#14513)
otherBackports for 2026-08 (#14523)
otherUpdate to v1.35.8-k3s1 and Go 1.26.7 (#14544)
otherOpen issues here
otherJoin our Slack channel
otherCheck out our documentation for guidance on how to get started or to dive deep into K3s.
otherRead how you can contribute here