Repository navigation
fix(deps): update module github.com/siderolabs/talos/pkg/machinery to v1.14.5 - #5764
Conversation
![botantler-1[bot]](https://avatars.githubusercontent.com/in/1025824?s=60&v=4){kind=small}
@codex review for whether moving the Talos machinery library to v1.14.5 changes how this repo's Talos and Longhorn inventory code behaves |
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
|
Codex Review: Didn't find any major issues. Already looking forward to the next diff. Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
fd503b7 to
a521c06
Compare
|
Codex Review: Didn't find any major issues. Swish! Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
a521c06 to
b49b918
Compare
Repaired the deterministic module-tidiness failure at Reviewed the publisher's v1.14.5 notes and the complete 24-commit patch range. The client proxy resolver and configuration-merge corrections are library changes; the existing consumer regressions remain green. Kernel/module loading, node boot/storage/networking, image fetching, etcd, VM tooling and their integration-test changes do not activate through this Go-library update. No additional product adaptation or workaround removal was identified, and the production OS/image pins are unchanged. The guarded adaptation push confirmed draft state, no auto-merge request and no queue entry before publishing. Fresh hosted CI and a semantic review of this new head remain required. The separately queued prevention fix #5832 is retained. Readiness verified at the same repaired head: CI 41661620291 passes, including the complete Go regression job. All 64 reported checks are settled green/skipped, the required aggregate and three required workflows pass, and Codex's current-head review is clean. The complete thread counter reports zero open threads, no non-thread findings or maintainer controls remain, and native merge state is I evaluated the real operator command against the committed production configuration: |
Edited/Blocked NotificationRenovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR. You can manually request rebase by checking the rebase/retry box above. |
@codex review |
|
Codex Review: Didn't find any major issues. What shall we delve into next? Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
Upstream release review —
Decision: merge as is. |
This PR contains the following updates:
v1.14.4→v1.14.5Warning
Some dependencies could not be looked up. Check the warning logs for more information.
Before merging, complete the pins Renovate cannot derive:
TALOSCTL_SHA256in.github/scripts/setup-talosctl.sh: the🧪 Validate Talos Machine Configsetup step prints the value to set once it has matched the download against the release'ssha256sum.txt.isosnapshot id inksail.prod.yaml.kubernetesVersioninksail.prod.yaml, if this Talos release moves the supported Kubernetes range.expected_talos_versioninscripts/tests/test-talos-apparmor-lsm.sh, after confirming this release's kernel still enables the LSM order that test expects.talos/cluster/enable-apparmor.yaml, together with the AppArmor test above.kube-system/corednsrow ofscripts/pdb-selector-exceptions.tsv, after confirming this release still labels the CoreDNS podsk8s-app=kube-dns.current productionrow inscripts/validate-talos-kubernetes-compatibility/main_test.go, with the Kubernetes version production will run.scripts/tests/test-validate-image-verifier-liveness.sh, after confirming the selected client's YAML output preserves the original zero-prefixed IDs and complete ordered decisions.scripts/verify-email-storage-canary/main.go, its fixtures inscripts/verify-email-storage-canary/version_test.go, anddocs/operations/email-storage-encryption.md, after proving encryption, remount and key-recovery behavior on the new Talos release.A file that names the Talos version without being on this list fails the repository guards.
Release Notes
siderolabs/talos (github.com/siderolabs/talos/pkg/machinery)
v1.14.5Compare Source
Talos 1.14.5 (2026-10-26)
Welcome to the v1.14.5 release of Talos!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
On-demand Kernel Module Loading
The kernel can once again ask Talos to load a module on demand (
request_module()), e.g. when a driver loads a helper module while probing a device,or when DRBD loads its transport module.
Talos handles the kernel's
modprobeusermode helper call and loads the module (shipped with Talos or a system extension) by the requested name,applying the parameters from
KernelModuleConfigif the module is listed in the machine config.Such modules no longer need to be listed in the machine config, and the order of the listed modules is not important.
Requests via subsystem aliases (e.g.
fs-*,net-pf-*,crypto-*), which userspace can trigger via mounts, sockets, etc., are refused,so on-demand loading can't be used to load arbitrary modules from workloads.
The outcome of each request is logged to the kernel log (
talosctl dmesg).Component Updates
Linux: 6.18.58
etcd: 3.7.3
Talos is built with Go 1.26.10.
Contributors
Changes
25 commits
dad8d3erelease(v1.14.5): prepare release2f97b6atest: verify on-demand kernel module loading end-to-endc35fd8cfeat: load kernel modules on demand via the modprobe usermode helperbf34a0efeat: add EDAC_10NM kernel module25c1676fix: race with platform accessing metadata volumesb88cda9feat: update etcd to 3.7.334d4080fix: pull images over HTTP/1.12dc3686fix: preserve project quotas on temporary growfs mountsbffcf9bfix: correctly pass hostname to the proxy in gRPC dial6b3ea90fix: preserve rejected edits in talosctl editb6e5fa2feat: implement RAID1 (md-raid) support in BIOS modefb2b077fix: ignore netlink recoverable errors in watchers2f7efe8fix: skip kexec when the kernel finds no free memory regiond648845fix: provide proper concurrency for health checks0307531fix: preserve omitted CEL expressions when patching configsaca5abcfix: skip EFI boot entries that cannot be decoded9c69456fix: read VMware guestinfo with SecureBoot enabled6c6fec7fix: parse EFI load options with an empty descriptione000232fix: route pod CIDRs matching the KubeSpan ULA purpose byte449f82dfix: wait for inactive MD arrays before volume discovery824b0f9test: reproduce degraded md boot array rebootce2fa41fix: high cpu usage by the bridge keepalive dummy qemu vm51eda9achore: add qemu-ip-family integration suitee700de0feat: update Linux 6.18.58, Go 1.26.103fb46c3release(v1.14.4): prepare releaseChanges since v1.14.4
24 commits
dad8d3erelease(v1.14.5): prepare release2f97b6atest: verify on-demand kernel module loading end-to-endc35fd8cfeat: load kernel modules on demand via the modprobe usermode helperbf34a0efeat: add EDAC_10NM kernel module25c1676fix: race with platform accessing metadata volumesb88cda9feat: update etcd to 3.7.334d4080fix: pull images over HTTP/1.12dc3686fix: preserve project quotas on temporary growfs mountsbffcf9bfix: correctly pass hostname to the proxy in gRPC dial6b3ea90fix: preserve rejected edits in talosctl editb6e5fa2feat: implement RAID1 (md-raid) support in BIOS modefb2b077fix: ignore netlink recoverable errors in watchers2f7efe8fix: skip kexec when the kernel finds no free memory regiond648845fix: provide proper concurrency for health checks0307531fix: preserve omitted CEL expressions when patching configsaca5abcfix: skip EFI boot entries that cannot be decoded9c69456fix: read VMware guestinfo with SecureBoot enabled6c6fec7fix: parse EFI load options with an empty descriptione000232fix: route pod CIDRs matching the KubeSpan ULA purpose byte449f82dfix: wait for inactive MD arrays before volume discovery824b0f9test: reproduce degraded md boot array rebootce2fa41fix: high cpu usage by the bridge keepalive dummy qemu vm51eda9achore: add qemu-ip-family integration suitee700de0feat: update Linux 6.18.58, Go 1.26.10Changes from siderolabs/pkgs
6 commits
f4bda77feat: update Linux to 6.18.58a068a03feat: enable EDAC_10NM kernel optionec11950fix: restore ACPI power button42b6fe2feat: update tools/toolchain2ec10ebchore: update DRBD compat643b731feat: update Linux to 6.18.57Changes from siderolabs/tools
2 commits
8dad45efeat: update ca-certificates to 2026-10-20c6b3f5cchore: update the toolchainDependency Changes
Previous release can be found at v1.14.3
Images
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.