k3s v1.37.0-rc1+k3s1 版本更新介绍

发布日期: 2026-09-02
版本号: v1.37.0-rc1+k3s1

K3s 从 v1.35.0+k3s1 到 v1.37.0-rc1+k3s1 的更新包含多项改进：升级了 Kubernetes 至 v1.37，更新了 containerd、Traefik、etcd、Flannel、CoreDNS、metrics-server 等核心组件至最新版本；修复了包括 CVE-2025-54410（Docker 升级）在内的多个安全与功能问题，例如 VPN 节点 IP 处理、etcd 快照压缩、S3 快照配置、VPN 配置注入等；增强了 secret 加密、启动引导恢复、证书生成、节点注册等方面的稳定性与可靠性；改进了测试覆盖率、CI/CD 流程（如使用 CNCF 运行器、优化测试顺序）、文档以及构建安全性（如固定 GitHub Action 版本、验证二进制文件哈希）；并新增了多个 adopter 项目。

更新内容 （中文）

变更内容

• 扩展 Docker 升级测试，淘汰 E2E 升级测试，由 @dereknola 在 https://github.com/k3s-io/k3s/pull/13338 中完成
• 在 check-config.sh 中添加防火墙部分，由 @dereknola 在 https://github.com/k3s-io/k3s/pull/13234 中完成
• 更新 golangci-lint 并重新启用 CI lint 步骤，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13343 中完成
• 修复 PR lint 的检出深度，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13369 中完成
• 将稳定版通道更新至 v1.34.3+k3s1，由 @rafaelbreno 在 https://github.com/k3s-io/k3s/pull/13374 中完成
• 将 actions/download-artifact 从 6 升级到 7，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13346 中完成
• 将稳定版通道升级到 1.34 并添加 1.35，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13373 中完成
• 在现有集群上启用 Secret 加密，由 @dereknola 在 https://github.com/k3s-io/k3s/pull/13370 中完成
• 升级 Local Path Provisioner 版本，由 @github-actions[bot] 在 https://github.com/k3s-io/k3s/pull/13387 中完成
• 对于通道页面使用 Get 而非 Head，由 @dereknola 在 https://github.com/k3s-io/k3s/pull/13402 中完成
• 修复文档中的拼写错误，由 @oglok 在 https://github.com/k3s-io/k3s/pull/13411 中完成
• 将 actions/cache 从 4 升级到 5，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13347 中完成
• 使用原始的 MVCC 存储访问替代临时 etcd 服务器，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13368 中完成
• 2025 年 1 月升级 Traefik 和 CoreDNS，由 @dereknola 在 https://github.com/k3s-io/k3s/pull/13424 中完成
• 禁用时移除 Flannel 的 external-ip 注解，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13431 中完成
• 将 local path provisioner 升级到 v0.0.34，由 @dereknola 在 https://github.com/k3s-io/k3s/pull/13430 中完成
• [main] 将 GA 镜像发布到暂存注册表，由 @rafaelbreno 在 https://github.com/k3s-io/k3s/pull/13438 中完成
• 升级 CNI 插件，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13439 中完成
• 修复 WriteSubnetFile 中的原子写入问题，由 @luojiyin1987 在 https://github.com/k3s-io/k3s/pull/13380 中完成
• 升级 expr-lang/expr，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13440 中完成
• 将 spegel 升级到 v0.6.0，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13198 中完成
• 在集成测试中将 Longhorn 版本从 v1.4.0 更新到 v1.10.1，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13443 中完成
• 升级 kine 到 v0.14.10 以修复 NATS 一致性问题，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13441 中完成
• 从漏洞检查中移除 download/generate，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13445 中完成
• 升级到 coredns 1.14.0，由 @mgfritch 在 https://github.com/k3s-io/k3s/pull/13449 中完成
• 在 K3S 采用者列表中添加 Momentum Coach AI，由 @geoffreyPerrin 在 https://github.com/k3s-io/k3s/pull/13467 中完成
• 修复代码行以满足 lint 要求并修复 CI，由 @manuelbuil 在 https://github.com/k3s-io/k3s/pull/13475 中完成
• 将 Traefik 版本更新到 v3.6.7，由 @manuelbuil 在 https://github.com/k3s-io/k3s/pull/13474 中完成
• 防止在 PR 中缓存 golangci-lint 条目，由 @dereknola 在 https://github.com/k3s-io/k3s/pull/13487 中完成
• 迁移到 rootlesskit v2，由 @dereknola 在 https://github.com/k3s-io/k3s/pull/13486 中完成
• 将 actions/stale 从 10.1.0 升级到 10.1.1，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13296 中完成
• 修复 CVE-2025-54410：将 docker/docker 更新到 v25.0.13，由 @rahulrairai59 在 https://github.com/k3s-io/k3s/pull/13473 中完成
• 升级 golang:alpine 镜像版本，由 @github-actions[bot] 在 https://github.com/k3s-io/k3s/pull/13345 中完成
• 用新镜像更新安装测试，添加 alma10，由 @dereknola 在 https://github.com/k3s-io/k3s/pull/13489 中完成
• 将 etcd 升级到 v3.6.7，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13495 中完成
• 在 k3s 采用者列表中添加 Percona 和 Solanica，由 @edithturn 在 https://github.com/k3s-io/k3s/pull/13510 中完成
• [main] 更新到 v1.35.0-k3s3，由 @rafaelbreno 在 https://github.com/k3s-io/k3s/pull/13524 中完成
• 修复仅控制平面节点从本地数据存储尝试协调时的重启问题，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13534 中完成
• 修复 spegel 的通配符过滤器，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13527 中完成
• 在 kubelet 服务证书中添加 IPv6 回环地址，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13532 中完成
• 修复空令牌文件的处理，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13529 中完成
• 对于 kubectl 安装使用 channel.yaml 代替 curl 获取稳定版，由 @dereknola 在 https://github.com/k3s-io/k3s/pull/13531 中完成
• 修复 VPN 节点 IP 未应用到 kubelet 的问题，由 @zijiren233 在 https://github.com/k3s-io/k3s/pull/13457 中完成
• 将 aws-actions/configure-aws-credentials 从 4 升级到 5，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13185 中完成
• 升级 scorecard checkout 以匹配所有其他版本，由 @dereknola 在 https://github.com/k3s-io/k3s/pull/13568 中完成
• 升级 kine 以修复 list/watch 修订问题，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13575 中完成
• 显式关闭 MVCC 后端以修复 etcd 服务器重启后初始阶段的高 CPU 使用率，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13569 中完成
• 通过 GHA artifacts 支持提交构建，由 @dereknola 在 https://github.com/k3s-io/k3s/pull/13559 中完成
• 升级 rancher/mirrored-coredns-coredns 镜像版本，由 @github-actions[bot] 在 https://github.com/k3s-io/k3s/pull/13499 中完成
• [main] 将稳定版通道更新到 v1.34.3+k3s3，由 @rafaelbreno 在 https://github.com/k3s-io/k3s/pull/13554 中完成
• 将 metrics-server 升级到 v0.8.1，由 @mgfritch 在 https://github.com/k3s-io/k3s/pull/13594 中完成
• [main] 在镜像列表文件中添加注册表前缀，由 @rafaelbreno 在 https://github.com/k3s-io/k3s/pull/13603 中完成
• 升级 klipper-helm 和 klipper-lb 镜像，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13613 中完成
• 修复通过注解移除初始化节点的问题，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13624 中完成
• [master] 更新到 v1.35.1-k3s1 和 Go 1.25.6，由 @rafaelbreno 在 https://github.com/k3s-io/k3s/pull/13638 中完成
• 将稳定版通道更新到 v1.34.4+k3s1，由 @rafaelbreno 在 https://github.com/k3s-io/k3s/pull/13642 中完成
• 使 artifact URL 前缀可配置，由 @manuelbuil 在 https://github.com/k3s-io/k3s/pull/13367 中完成
• 将 kine 升级到 v0.14.12，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13661 中完成
• 仅为 arm64 构建安装 binutils-gold，由 @mmoll 在 https://github.com/k3s-io/k3s/pull/13654 中完成
• Rootlesskit 回退及测试修复，由 @dereknola 在 https://github.com/k3s-io/k3s/pull/13681 中完成
• 改进从 etcd 引导数据存储协调的弹性，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13677 中完成
• 将 Traefik 升级到 v3.6.9，由 @manuelbuil 在 https://github.com/k3s-io/k3s/pull/13693 中完成
• [main] 更新到 v1.35.2-k3s1 和 Go 1.25.7，由 @rafaelbreno 在 https://github.com/k3s-io/k3s/pull/13708 中完成
• 将 github.event 首先分配给环境变量，由 @dereknola 在 https://github.com/k3s-io/k3s/pull/13715 中完成
• 配置：为 containerd 基础模板添加默认导入，由 @fidencio 在 https://github.com/k3s-io/k3s/pull/13680 中完成
• 将通道服务器更新到 1.34.5，由 @briandowns 在 https://github.com/k3s-io/k3s/pull/13732 中完成
• 在嵌入式 containerd 中添加 nix-snapshotter 支持，由 @nuketownada 在 https://github.com/k3s-io/k3s/pull/13676 中完成
• 如果未使用 etcd，则不创建 etcd 名称文件，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13727 中完成
• 将 actions/download-artifact 从 7 升级到 8，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13714 中完成
• build(deps)：将 actions/stale 从 10.1.1 升级到 10.2.0，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13670 中完成
• build(deps)：将 aquasecurity/trivy-action 从 0.33.1 升级到 0.34.1，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13669 中完成
• build(deps)：将 aws-actions/configure-aws-credentials 从 5 升级到 6，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13596 中完成
• 将 softprops/action-gh-release 从 2.2.1 升级到 2.5.0，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13376 中完成
• 升级 rancher/mirrored-coredns-coredns 镜像版本，由 @github-actions[bot] 在 https://github.com/k3s-io/k3s/pull/13743 中完成
• 升级 klipper-lb 和 klipper-helm，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13761 中完成
• 升级 golang:alpine 镜像版本，由 @github-actions[bot] 在 https://github.com/k3s-io/k3s/pull/13653 中完成
• 更新软件包以移除不受支持的依赖项，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13724 中完成
• 将 DeterminateSystems/nix-installer-action 从 17 升级到 21，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13744 中完成
• 将 docker/build-push-action 从 6 升级到 7，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13745 中完成
• 将 docker/setup-qemu-action 从 3 升级到 4，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13746 中完成
• 将 docker/setup-docker-action 从 4 升级到 5，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13747 中完成
• 在使用新创建的密钥重新加密 Secret 之前保存集群状态，由 @dereknola 在 https://github.com/k3s-io/k3s/pull/13764 中完成
• 将 docker/metadata-action 从 5 升级到 6，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13748 中完成
• 将 go.opentelemetry.io/otel/sdk 从 1.39.0 升级到 1.40.0，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13713 中完成
• 将 github.com/docker/cli 从 28.3.2+incompatible 升级到 29.2.0+incompatible，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13730 中完成
• build(deps)：将 github.com/pion/dtls/v3 从 3.0.6 升级到 3.0.11，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13645 中完成
• 如果未设置 etcd-s3-retention，则对 s3 使用 etcd-snapshot-retention 作为默认值，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13770 中完成
• 升级 traefik 和 local-path-provisioner，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13787 中完成
• install.sh：简化基于 fedora rpm-ostree 的发行版的处理，由 @becarusys 在 https://github.com/k3s-io/k3s/pull/13712 中完成
• 将 containerd 升级到 v2.2.2，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13788 中完成
• 将 runc 升级到 v1.4.1，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13796 中完成
• 升级 Traefik helm chart 版本，由 @manuelbuil 在 https://github.com/k3s-io/k3s/pull/13805 中完成
• 修复 trivy updatecli 配置，由 @manuelbuil 在 https://github.com/k3s-io/k3s/pull/13816 中完成
• 将 cni 插件升级到 v1.9.1，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13817 中完成
• 简化快照压缩/解压逻辑，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13826 中完成
• build(deps)：将 docker/login-action 从 3 升级到 4，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13804 中完成
• build(deps)：将 softprops/action-gh-release 从 2.5.0 升级到 2.6.1，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13803 中完成
• build(deps)：将 aquasecurity/trivy-action 从 0.34.1 升级到 0.35.0，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13802 中完成
• [main] 更新到 v1.35.3-k3s1 和 Go 1.25.7，由 @rafaelbreno 在 https://github.com/k3s-io/k3s/pull/13836 中完成
• 升级 Trivy 版本，由 @github-actions[bot] 在 https://github.com/k3s-io/k3s/pull/13845 中完成
• 修复拼写错误：在 snapshot_handler.go 中将 overriden 改为 overridden，在 https://github.com/k3s-io/k3s/pull/13847 中完成
• 修复：etcd 成员资格错误消息中的拼写错误，由 @DT1mote 在 https://github.com/k3s-io/k3s/pull/13848 中完成
• 升级 helm-controller 以修复作业竞争条件，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13853 中完成
• 为控制器事件记录器添加上下文，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13856 中完成
• 将 GH Actions 固定到提交 sha，由 @cwayne18 在 https://github.com/k3s-io/k3s/pull/13861 中完成
• Dapper 已终止，由 @cwayne18 在 https://github.com/k3s-io/k3s/pull/13860 中完成
• 更新到 flannel v0.28.2，由 @mgfritch 在 https://github.com/k3s-io/k3s/pull/13863 中完成
• [main] 将稳定版通道更新到 v1.34.6+k3s1，由 @rafaelbreno 在 https://github.com/k3s-io/k3s/pull/13873 中完成
• 在采用者列表中添加 sipgate，由 @caesarakalaeii 在 https://github.com/k3s-io/k3s/pull/13881 中完成
• 在采用者列表中添加 Rocket Technologies，由 @BenBo17 在 https://github.com/k3s-io/k3s/pull/13890 中完成
• 使 Dockerfile.test 更安全，由 @manuelbuil 在 https://github.com/k3s-io/k3s/pull/13882 中完成
• 使 tests/integration/Dockerfile.test 更安全，由 @manuelbuil 在 https://github.com/k3s-io/k3s/pull/13883 中完成
• 保护 vagrant-setup action.yaml，由 @manuelbuil 在 https://github.com/k3s-io/k3s/pull/13884 中完成
• 保护 e2e yaml GHA，由 @manuelbuil 在 https://github.com/k3s-io/k3s/pull/13885 中完成
• 固定 govulncheck GHA 版本，由 @manuelbuil 在 https://github.com/k3s-io/k3s/pull/13887 中完成
• 验证 kubelet、vagrant zip 和 go 二进制文件的 sha256sum，由 @manuelbuil 在 https://github.com/k3s-io/k3s/pull/13889 中完成
• 检查 k3s-root 的 sha256sum，由 @manuelbuil 在 https://github.com/k3s-io/k3s/pull/13888 中完成
• build(deps)：将 github.com/go-jose/go-jose/v4 从 4.1.3 升级到 4.1.4，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13891 中完成
• build(deps)：将 actions/upload-artifact 从 6.0.0 升级到 7.0.0，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13880 中完成
• build(deps)：将 github/codeql-action 从 4.34.1 升级到 4.35.1，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13879 中完成
• build(deps)：将 docker/setup-buildx-action 从 3.12.0 升级到 4.0.0，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13878 中完成
• build(deps)：将 updatecli/updatecli-action 从 2.100.0 升级到 3.0.0，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13876 中完成
• 修复嵌入式数据 tarball 的可重现性，由 @jonhermansen 在 https://github.com/k3s-io/k3s/pull/13875 中完成
• build(deps)：将 github.com/buger/jsonparser 从 1.1.1 升级到 1.1.2，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13837 中完成
• build(deps)：将 github.com/nats-io/nats-server/v2 从 2.12.2 升级到 2.12.6，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13852 中完成
• 修复 S3 测试以适应 s3mock 的更改，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13906 中完成
• 将 klipper helm 升级到 v0.9.16-build20260410，由 @vitorsavian 在 https://github.com/k3s-io/k3s/pull/13908 中完成
• 升级 runc/spegel/helm-controller/kine，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13909 中完成
• build(deps)：将 actions/github-script 从 8.0.0 升级到 9.0.0，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13914 中完成
• build(deps)：将 aws-actions/configure-aws-credentials 从 6.0.0 升级到 6.1.0，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13915 中完成
• build(deps)：将 actions/upload-artifact 从 7.0.0 升级到 7.0.1，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13916 中完成
• build(deps)：将 softprops/action-gh-release 从 2.6.1 升级到 3.0.0，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13917 中完成
• build(deps)：将 docker/build-push-action 从 7.0.0 升级到 7.1.0，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13918 中完成
• 将 traefik 升级到 3.6.12，由 @manuelbuil 在 https://github.com/k3s-io/k3s/pull/13912 中完成
• 修复嵌入式执行器 VPN 配置注入，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13920 中完成
• 将 containerd 升级到 v2.2.3，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13931 中完成
• 将 flannel 升级到 v0.28.4，由 @thomasferrandiz 在 https://github.com/k3s-io/k3s/pull/13937 中完成
• [main] 更新到 v1.35.4-k3s1 和 Go 1.25.9，由 @rafaelbreno 在 https://github.com/k3s-io/k3s/pull/13946 中完成
• [main] 不可变的发布变更，由 @rafaelbreno 在 https://github.com/k3s-io/k3s/pull/13902 中完成
• 将 Traefik 升级到 3.6.13，由 @cwayne18 在 https://github.com/k3s-io/k3s/pull/13969 中完成
• [main] 从 draft 切换到 pre-release，由 @rafaelbreno 在 https://github.com/k3s-io/k3s/pull/13951 中完成
• 修复从逗号分隔的 node-external-ip 列表添加的 SANs，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13989 中完成
• 修复 docker 双栈测试，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13994 中完成
• 升级 klipper-helm 镜像以修复修订检查问题，由 @brandond 在 https://github.com/k3s-io/k3s/pull/13995 中完成
• 将上游版本升级到 v1.36，由 @vitorsavian 在 https://github.com/k3s-io/k3s/pull/13986 中完成
• 在 ADOPTERS.md 中添加 k8gb 到采用者列表，由 @ytsarev 在 https://github.com/k3s-io/k3s/pull/13978 中完成
• 升级 Klipper LB 版本，由 @github-actions[bot] 在 https://github.com/k3s-io/k3s/pull/13976 中完成
• 将稳定版通道更新到 v1.35.4+k3s1 并添加 v1.36 条目，由 @rafaelbreno 在 https://github.com/k3s-io/k3s/pull/14016 中完成
• 用显式嵌入式执行器初始化替代 PreparingExecutor，由 @brandond 在 https://github.com/k3s-io/k3s/pull/14000 中完成
• 将 spegel 升级到 v0.7.0，由 @brandond 在 https://github.com/k3s-io/k3s/pull/14003 中完成
• 升级 rancher/mirrored-coredns-coredns 镜像版本，由 @github-actions[bot] 在 https://github.com/k3s-io/k3s/pull/14005 中完成
• 修复使用 docker 时 kubectl exec 的问题，由 @vitorsavian 在 https://github.com/k3s-io/k3s/pull/14019 中完成
• 改进 K3s 构建和贡献指南，由 @manuelbuil 在 https://github.com/k3s-io/k3s/pull/13985 中完成
• 升级 Klipper LB 版本，由 @github-actions[bot] 在 https://github.com/k3s-io/k3s/pull/14026 中完成
• [main] 修复 s3 路径，由 @rafaelbreno 在 https://github.com/k3s-io/k3s/pull/14015 中完成
• 添加缺失的返回，由 @nameearly 在 https://github.com/k3s-io/k3s/pull/14020 中完成
• 将 kine 升级到 v0.15.0，由 @brandond 在 https://github.com/k3s-io/k3s/pull/14030 中完成
• 升级 Local Path Provisioner 版本，由 @github-actions[bot] 在 https://github.com/k3s-io/k3s/pull/14038 中完成
• 更新 Orlin 的邮箱，由 @OrlinVasilev 在 https://github.com/k3s-io/k3s/pull/14047 中完成
• [main] 更新到 v1.36.1-k3s1 和 Go 1.26.2，由 @rafaelbreno 在 https://github.com/k3s-io/k3s/pull/14052 中完成
• 修复 cron 以在每天 UTC 18:00 运行，由 @rafaelbreno 在 https://github.com/k3s-io/k3s/pull/14041 中完成
• 升级 klipper-helm 镜像标签，由 @brandond 在 https://github.com/k3s-io/k3s/pull/14054 中完成
• 修复：修复 etcd/s3 和权限文档注释中重复的 “the”，由 @quyentonndbs 在 https://github.com/k3s-io/k3s/pull/14072 中完成
• 添加 AI 贡献指南，由 @brandond 在 https://github.com/k3s-io/k3s/pull/14090 中完成
• [main] 将稳定版通道更新到 v1.35.5+k3s1，由 @rafaelbreno 在 https://github.com/k3s-io/k3s/pull/14091 中完成
• 修复：对 k3s-selinux 移除使用与安装相同的软件包管理器，由 @becarusys 在 https://github.com/k3s-io/k3s/pull/13711 中完成
• 小问题：集成测试名称错误，由 @manuelbuil 在 https://github.com/k3s-io/k3s/pull/14097 中完成
• 对压缩的 etcd 快照使用 0600 权限，由 @eran132 在 https://github.com/k3s-io/k3s/pull/14092 中完成
• 修复：在 LookupExtInterface 中填充 IfaceName 以进行 VXLAN 重建，由 @jkubo 在 https://github.com/k3s-io/k3s/pull/14086 中完成
• 修复令牌删除参数处理，由 @elysia090 在 https://github.com/k3s-io/k3s/pull/14076 中完成
• 当禁用 kube-proxy 和 flannel 时跳过 bridge-nf-call sysctls，由 @eran132 在 https://github.com/k3s-io/k3s/pull/14093 中完成
• build(deps)：将 updatecli/updatecli-action 从 3.0.0 升级到 3.1.2，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13980 中完成
• build(deps)：将 github/codeql-action 从 4.35.1 升级到 4.35.2，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13982 中完成
• build(deps)：将 docker/login-action 从 4.0.0 升级到 4.1.0，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13981 中完成
• 将 kine 升级到 v0.16.0，由 @brandond 在 https://github.com/k3s-io/k3s/pull/14123 中完成
• 将 spegel 升级到 v0.7.1 以修复 libp2p-kad-dht panic，由 @brandond 在 https://github.com/k3s-io/k3s/pull/14128 中完成
• 将 Traefik 升级到 v3.7.1，由 @manuelbuil 在 https://github.com/k3s-io/k3s/pull/14134 中完成
• 升级 kine 以修复 t4 问题，由 @brandond 在 https://github.com/k3s-io/k3s/pull/14132 中完成
• build(deps)：将 actions/cache 从 5.0.4 升级到 5.0.5，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/13979 中完成
• 停止为 GitHub Action 补丁版本打开 dependabot PR，由 @dereknola 在 https://github.com/k3s-io/k3s/pull/14143 中完成
• 将 klipper-helm 升级到 v0.11 以支持 helmv4，由 @brandond 在 https://github.com/k3s-io/k3s/pull/14145 中完成
• 将 containerd 升级到 v2.3.1，由 @brandond 在 https://github.com/k3s-io/k3s/pull/14136 中完成
• 将 etcd 升级到 v3.6.12，由 @brandond 在 https://github.com/k3s-io/k3s/pull/14149 中完成
• Agentic 工作流，由 @dereknola 在 https://github.com/k3s-io/k3s/pull/14129 中完成
• 在 CI 中使用 CNCF Runners，由 @dereknola 在 https://github.com/k3s-io/k3s/pull/14144 中完成
• 优化测试顺序，由 @dereknola 在 https://github.com/k3s-io/k3s/pull/14186 中完成
• 升级 v3.7.4 Traefik，由 @manuelbuil 在 https://github.com/k3s-io/k3s/pull/14192 中完成
• 测试(kubeflags)：在服务器重启之间添加 K3sCleanup 以修复不稳定问题，由 @amaanx86 在 https://github.com/k3s-io/k3s/pull/14189 中完成
• 在 install.sh 中透传 KINE_ 环境变量并添加新哈希，由 @dnoland1 在 https://github.com/k3s-io/k3s/pull/14188 中完成
• 将 golang.org/x/net 升级到 v0.55.0 以修复 CVE-2026-39821，由 @jimmykarily 在 https://github.com/k3s-io/k3s/pull/14203 中完成
• 减少 GRPC 控制台输出，由 @brandond 在 https://github.com/k3s-io/k3s/pull/14202 中完成
• build(deps)：将 docker/metadata-action 从 6.0.0 升级到 6.1.0，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/14147 中完成
• build(deps)：将 aquasecurity/trivy-action 从 0.35.0 升级到 0.36.0，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/14139 中完成
• build(deps)：将 github/codeql-action 从 4.35.2 升级到 4.36.1，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/14148 中完成
• 修复 cloud-controller-manager 因缺少核心 RBAC 而退出的问题，由 @brandond 在 https://github.com/k3s-io/k3s/pull/14201 中完成
• 将 k3s-root 升级到 v0.15.2，由 @brandond 在 https://github.com/k3s-io/k3s/pull/14205 中完成
• 升级 rancher/mirrored-coredns-coredns 镜像版本，由 @github-actions[bot] 在 https://github.com/k3s-io/k3s/pull/14208 中完成
• 解决新的 lint 要求，由 @dereknola 在 https://github.com/k3s-io/k3s/pull/14210 中完成
• 回退 “添加 golang 版本的运行时检查”，由 @brandond 在 https://github.com/k3s-io/k3s/pull/14219 中完成
• 双栈 spegel，由 @dereknola 在 https://github.com/k3s-io/k3s/pull/13831 中完成
• 每月将 GitHub actions 更新合并到单个 PR 中，由 @dereknola 在 https://github.com/k3s-io/k3s/pull/14221 中完成
• 出于 CVE 原因升级 klipper-helm，由 @cwayne18 在 https://github.com/k3s-io/k3s/pull/14235 中完成
• 升级 containerd 并修复 []byte 环境变量值，由 @vitorsavian 在 https://github.com/k3s-io/k3s/pull/14240 中完成
• [main] 更新到 v1.36.2-k3s1 和 Go 1.26.4，由 @rafaelbreno 在 https://github.com/k3s-io/k3s/pull/14231 中完成
• 如果指定了，则使用内置的 etcd 引导整理阈值，由 @alexander-demicev 在 https://github.com/k3s-io/k3s/pull/14099 中完成
• build(deps)：通过 7 个更新升级 action-deps 组，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/14226 中完成
• build(deps)：在 /tests/e2e/scripts 中将 ubuntu 从 24.04 升级到 26.04，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/14040 中完成
• build(deps)：在 /package 中将 alpine 从 3.22 升级到 3.24，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/14225 中完成
• 单元测试扩展，由 @dereknola 在 https://github.com/k3s-io/k3s/pull/14249 中完成
• 修复 E2E 和集成测试的 codecov 报告，由 @dereknola 在 https://github.com/k3s-io/k3s/pull/14252 中完成
• 将 containerd 升级到 v2.3.2-k3s1，由 @vitorsavian 在 https://github.com/k3s-io/k3s/pull/14253 中完成
• 在文件缓存中添加镜像名称，由 @brandond 在 https://github.com/k3s-io/k3s/pull/14266 中完成
• 升级 cri-api 和 containerd 以修复上游环境字符串问题，由 @brandond 在 https://github.com/k3s-io/k3s/pull/14276 中完成
• [main] 将稳定版通道更新到 v1.36.2+k3s1，由 @rafaelbreno 在 https://github.com/k3s-io/k3s/pull/14281 中完成
• 在采用者列表中添加 Sophotech，由 @archy-rock3t-cloud 在 https://github.com/k3s-io/k3s/pull/14285 中完成
• 从 local 目标迁移到默认值，由 @dereknola 在 https://github.com/k3s-io/k3s/pull/14204 中完成
• 修复 run_linux.go 中的镜像端点分配，由 @neiltalap 在 https://github.com/k3s-io/k3s/pull/14246 中完成
• 保留符号链接清单的逻辑路径，由 @immanuwell 在 https://github.com/k3s-io/k3s/pull/14087 中完成
• 升级 dynamiclistener 到 v0.9.0-rc.2 以支持通配符 tls-san，由 @Eshaan-Lumba 在 https://github.com/k3s-io/k3s/pull/14280 中完成
• 修复：在嵌入式 API 服务器启动之前预应用功能门控，由 @SebTardif 在 https://github.com/k3s-io/k3s/pull/14287 中完成
• 添加 helm-controller-arg 标志，由 @manuelbuil 在 https://github.com/k3s-io/k3s/pull/14185 中完成
• 将 kine 升级到 v0.16.3 以改进性能，由 @brandond 在 https://github.com/k3s-io/k3s/pull/14310 中完成
• 将 spegel 升级到 v0.7.2，由 @brandond 在 https://github.com/k3s-io/k3s/pull/14311 中完成
• 修复：当时间戳更改时重新导入气隙镜像，即使大小相同，由 @bheemareddy 在 https://github.com/k3s-io/k3s/pull/14288 中完成
• 使用 xx 进行无模拟多架构构建，由 @dereknola 在 https://github.com/k3s-io/k3s/pull/14291 中完成
• 升级 golang:alpine 镜像版本，由 @github-actions[bot] 在 https://github.com/k3s-io/k3s/pull/14247 中完成
• 为初始快照协调添加退避，由 @brandond 在 https://github.com/k3s-io/k3s/pull/14322 中完成
• 在隧道 dialBackend 中同步出口映射和 CIDR trie 读取，由 @archy-rock3t-cloud 在 https://github.com/k3s-io/k3s/pull/14341 中完成
• 在节点参数注解中隐藏单破折号密钥标志，由 @archy-rock3t-cloud 在 https://github.com/k3s-io/k3s/pull/14340 中完成
• 当快照保留失败时发出附加到节点的事件，由 @brandond 在 https://github.com/k3s-io/k3s/pull/14345 中完成
• 每晚运行一致性测试，由 @dereknola 在 https://github.com/k3s-io/k3s/pull/14338 中完成
• 将 Traefik 升级到 v3.7.7，由 @manuelbuil 在 https://github.com/k3s-io/k3s/pull/14326 中完成
• 将 mirrored-pause 升级到 3.10.2，由 @dereknola 在 https://github.com/k3s-io/k3s/pull/14339 中完成
• build(deps)：通过 14 个更新升级 action-deps 组，由 @dependabot[bot] 在 https://github.com/k3s-io/k3s/pull/14394 中完成
• 升级 dynamiclistener 以修复原子写入问题，由 @brandond 在 https://github.com/k3s-io/k3s/pull/14382 中完成
• 升级 helm-controller/klipper-helm，由 @brandond 在 https://github.com/k3s-io/k3s/pull/14403 中完成
• 简化 WriteSubnetFile 清理并使其原子化，由 @brandond 在 https://github.com/k3s-io/k3s/pull/14405 中完成
• 修复快照整理事件中的拼写错误，由 @brandond 在 https://github.com/k3s-io/k3s/pull/14410 中完成
• 升级 rancher/mirrored-coredns-coredns 镜像版本，由 @github-actions[bot] 在 https://github.com/k3s-io/k3s/pull/14415 中完成
• 添加 updatecli 清单以在多个发布分支中升级 Kubernetes，由 @rafaelbreno 在 https://github.com/k3s-io/k3s/pull/14402 中完成
• 使用新的 Traefik v3.7.8，由 @manuelbuil 在 https://github.com/k3s-io/k3s/pull/14404 中完成
• 将 metrics-server 升级到 v0.9.0，由 @mgfritch 在 https://github.com/k3s-io/k3s/pull/14416 中完成
• updatecli：放宽 metrics-server 语义版本过滤器等，由 @mgfritch 在 https://github.com/k3s-io/k3s/pull/14429 中完成
• updatecli：添加缺失的 requiredEnv，由 @mgfritch 在 https://github.com/k3s-io/k3s/pull/14434 中完成
• 升级 helm-controller 和 klipper-helm 以支持 --force-conflicts，由 @brandond 在 https://github.com/k3s-io/k3s/pull/14446 中完成
• [main] 升级 k3s-io/kubernetes 和 Go 引用，由 @github-actions[bot] 在 https://github.com/k3s-io/k3s/pull/14457 中完成
• 将 etcd 升级到 v3.6.14，由 @brandond 在 https://github.com/k3s-io/k3s/pull/14460 中完成
• 修复生产构建始终启用 Go 覆盖检测的问题，由 @mgfritch 在 https://github.com/k3s-io/k3s/pull/14465 中完成
• 特性：支持自定义 kubeconfig 名称，由 @kasefuchs 在 https://github.com/k3s-io/k3s/pull/14440 中完成
• 在使用缓存之前要求节点密码通知器同步，由 @brandond 在 https://github.com/k3s-io/k3s/pull/14459 中完成
• 升级 helm-controller 和 klipper-helm，由 @brandond 在 https://github.com/k3s-io/k3s/pull/14474 中完成
• 启用单元测试，由 @manuelbuil 在 https://github.com/k3s-io/k3s/pull/14480 中完成
• 修复：将 sles 改为使用 slemicro rpm 而非 microos，由 @vitorsavian 在 https://github.com/k3s-io/k3s/pull/14472 中完成
• 测试：使 rootless uidmap 安装能够抵御陈旧的 apt 缓存，由 @mgfritch 在 https://github.com/k3s-io/k3s/pull/14490 中完成
• [main] 将稳定版通道更新到 v1.36.3+k3s1，由 @rafaelbreno 在 https://github.com/k3s-io/k3s/pull/14492 中完成
• etcd 客户端锁，由 @dcermak 在 https://github.com/k3s-io/k3s/pull/14488 中完成
• 测试：为 multus e2e 测试安装 rke2-multus-crd chart，由 @mgfritch 在 https://github.com/k3s-io/k3s/pull/14489 中完成
• 过滤大型未模板化问题，由 @dereknola 在 https://github.com/k3s-io/k3s/pull/14435 中完成
• 修复 spegel 延迟存储注释中的拼写错误，由 @Lcos-000 在 https://github.com/k3s-io/k3s/pull/14485 中完成
• 明确应在哪里进行 coredns 自定义，由 @turettn 在 https://github.com/k3s-io/k3s/pull/14503 中完成
• 在 CI 中将 Docker 版本升级到 29，由 @brandond 在 https://github.com/k3s-io/k3s/pull/14506 中完成
• 不要为镜像已经托管的注册表重新打标签，由 @boothb 在 https://github.com/k3s-io/k3s/pull/14484 中完成
• 整理 Dockerfile 和构建阶段，由 @brandond 在 https://github.com/k3s-io/k3s/pull/14511 中完成
• 在生成 apiserver 证书之前将 advertise-address 添加到 SANs，由 @somaz94 在 https://github.com/k3s-io/k3s/pull/14516 中完成
• [main] 升级 Local Path Provisioner 版本，由 @github-actions[bot] 在 https://github.com/k3s-io/k3s/pull/14496 中完成
• 将 containerd 升级到 v2.3.4-k3s1.36，由 @vitorsavian 在 https://github.com/k3s-io/k3s/pull/14510 中完成
• 将 kine 升级到 v0.16.4 以修复 nats 重放问题，由 @brandond 在 https://github.com/k3s-io/k3s/pull/14521 中完成
• updatecli：移除 release-1.33 分支，由 @mgfritch 在 https://github.com/k3s-io/k3s/pull/14537 中完成
• [main] 更新到 v1.36.4-k3s1 和 Go 1.26.7，由 @rafaelbreno 在 https://github.com/k3s-io/k3s/pull/14546 中完成
• 特性：在采用者列表中添加 Project Bluefin，由 @castrojo 在 https://github.com/k3s-io/k3s/pull/14549 中完成
• 将 k8s 升级到 v1.37，由 @vitorsavian 在 https://github.com/k3s-io/k3s/pull/14509 中完成
• 升级 Traefik 并捆绑 gateway-api crds，由 @manuelbuil 在 https://github.com/k3s-io/k3s/pull/14573 中完成

新贡献者

• @oglok 在 https://github.com/k3s-io/k3s/pull/13411 中首次贡献
• @luojiyin1987 在 https://github.com/k3s-io/k3s/pull/13380 中首次贡献
• @geoffreyPerrin 在 https://github.com/k3s-io/k3s/pull/13467 中首次贡献
• @rahulrairai59 在 https://github.com/k3s-io/k3s/pull/13473 中首次贡献
• @edithturn 在 https://github.com/k3s-io/k3s/pull/13510 中首次贡献
• @zijiren233 在 https://github.com/k3s-io/k3s/pull/13457 中首次贡献
• @mmoll 在 https://github.com/k3s-io/k3s/pull/13654 中首次贡献
• @fidencio 在 https://github.com/k3s-io/k3s/pull/13680 中首次贡献
• @nuketownada 在 https://github.com/k3s-io/k3s/pull/13676 中首次贡献
• @becarusys 在 https://github.com/k3s-io/k3s/pull/13712 中首次贡献
• @DT1mote 在 https://github.com/k3s-io/k3s/pull/13848 中首次贡献
• @caesarakalaeii 在 https://github.com/k3s-io/k3s/pull/13881 中首次贡献
• @BenBo17 在 https://github.com/k3s-io/k3s/pull/13890 中首次贡献
• @jonhermansen 在 https://github.com/k3s-io/k3s/pull/13875 中首次贡献
• @ytsarev 在 https://github.com/k3s-io/k3s/pull/13978 中首次贡献
• @nameearly 在 https://github.com/k3s-io/k3s/pull/14020 中首次贡献
• @quyentonndbs 在 https://github.com/k3s-io/k3s/pull/14072 中首次贡献
• @eran132 在 https://github.com/k3s-io/k3s/pull/14092 中首次贡献
• @jkubo 在 https://github.com/k3s-io/k3s/pull/14086 中首次贡献
• @elysia090 在 https://github.com/k3s-io/k3s/pull/14076 中首次贡献
• @amaanx86 在 https://github.com/k3s-io/k3s/pull/14189 中首次贡献
• @jimmykarily 在 https://github.com/k3s-io/k3s/pull/14203 中首次贡献
• @alexander-demicev 在 https://github.com/k3s-io/k3s/pull/14099 中首次贡献
• @archy-rock3t-cloud 在 https://github.com/k3s-io/k3s/pull/14285 中首次贡献
• @neiltalap 在 https://github.com/k3s-io/k3s/pull/14246 中首次贡献
• @immanuwell 在 https://github.com/k3s-io/k3s/pull/14087 中首次贡献
• @SebTardif 在 https://github.com/k3s-io/k3s/pull/14287 中首次贡献
• @bheemareddy 在 https://github.com/k3s-io/k3s/pull/14288 中首次贡献
• @kasefuchs 在 https://github.com/k3s-io/k3s/pull/14440 中首次贡献
• @Lcos-000 在 https://github.com/k3s-io/k3s/pull/14485 中首次贡献
• @turettn 在 https://github.com/k3s-io/k3s/pull/14503 中首次贡献
• @boothb 在 https://github.com/k3s-io/k3s/pull/14484 中首次贡献
• @somaz94 在 https://github.com/k3s-io/k3s/pull/14516 中首次贡献
• @castrojo 在 https://github.com/k3s-io/k3s/pull/14549 中首次贡献

完整变更日志: https://github.com/k3s-io/k3s/compare/v1.35.0+k3s1...v1.37.0-rc1+k3s1

更新内容 （原始）

What’s Changed

• Expand docker upgrade test, sunset E2E upgrade test by @dereknola in https://github.com/k3s-io/k3s/pull/13338
• Add firewall section to check-config.sh by @dereknola in https://github.com/k3s-io/k3s/pull/13234
• Update golangci-lint and re-enable CI linting step by @brandond in https://github.com/k3s-io/k3s/pull/13343
• Fix PR lint checkout depth by @brandond in https://github.com/k3s-io/k3s/pull/13369
• Update stable channel to v1.34.3+k3s1 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13374
• Bump actions/download-artifact from 6 to 7 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13346
• Bump stable to 1.34 and add 1.35 by @brandond in https://github.com/k3s-io/k3s/pull/13373
• Enable secret encryption on existing clusters by @dereknola in https://github.com/k3s-io/k3s/pull/13370
• Bump Local Path Provisioner version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/13387
• Use Get, not Head for channel page by @dereknola in https://github.com/k3s-io/k3s/pull/13402
• Fix typos in documentation by @oglok in https://github.com/k3s-io/k3s/pull/13411
• Bump actions/cache from 4 to 5 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13347
• Replace temporary etcd server with raw mvcc store access by @brandond in https://github.com/k3s-io/k3s/pull/13368
• Bump Traefik and CoreDNS - Jan 2025 by @dereknola in https://github.com/k3s-io/k3s/pull/13424
• Remove flannel external-ip annotations when disabled by @brandond in https://github.com/k3s-io/k3s/pull/13431
• Bump local path provisioner to v0.0.34 by @dereknola in https://github.com/k3s-io/k3s/pull/13430
• [main] Publish GA images to staging registry by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13438
• Bump cni plugins by @brandond in https://github.com/k3s-io/k3s/pull/13439
• Fix atomic write in WriteSubnetFile by @luojiyin1987 in https://github.com/k3s-io/k3s/pull/13380
• Bump expr-lang/expr by @brandond in https://github.com/k3s-io/k3s/pull/13440
• Bump spegel to v0.6.0 by @brandond in https://github.com/k3s-io/k3s/pull/13198
• Update longhorn version in integration test from v1.4.0 to v1.10.1 by @brandond in https://github.com/k3s-io/k3s/pull/13443
• Bump kine to v0.14.10 for NATS conformance fixes by @brandond in https://github.com/k3s-io/k3s/pull/13441
• Remove download/generate from vulncheck by @brandond in https://github.com/k3s-io/k3s/pull/13445
• Bump to coredns 1.14.0 by @mgfritch in https://github.com/k3s-io/k3s/pull/13449
• Add Momentum Coach AI to K3S adopters list by @geoffreyPerrin in https://github.com/k3s-io/k3s/pull/13467
• Fix lines to satisfy lint and fix CI by @manuelbuil in https://github.com/k3s-io/k3s/pull/13475
• Update Traefik version to v3.6.7 by @manuelbuil in https://github.com/k3s-io/k3s/pull/13474
• Prevent caching on PR of golangci-lint entries by @dereknola in https://github.com/k3s-io/k3s/pull/13487
• Move to rootlesskit v2 by @dereknola in https://github.com/k3s-io/k3s/pull/13486
• Bump actions/stale from 10.1.0 to 10.1.1 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13296
• Fix CVE-2025-54410: Update docker/docker to v25.0.13 by @rahulrairai59 in https://github.com/k3s-io/k3s/pull/13473
• Bump golang:alpine image version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/13345
• Update install tests with new images, add alma10 by @dereknola in https://github.com/k3s-io/k3s/pull/13489
• Bump etcd to v3.6.7 by @brandond in https://github.com/k3s-io/k3s/pull/13495
• Add Percona and Solanica to k3s adopters by @edithturn in https://github.com/k3s-io/k3s/pull/13510
• [main] Update to v1.35.0-k3s3 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13524
• Fix restart of control-plane-only nodes attempting to reconcile from local datastore by @brandond in https://github.com/k3s-io/k3s/pull/13534
• Fix spegel filter for wildcards by @brandond in https://github.com/k3s-io/k3s/pull/13527
• Add IPv6 loopback to kubelet-serving cert by @brandond in https://github.com/k3s-io/k3s/pull/13532
• Fix handling of empty token file by @brandond in https://github.com/k3s-io/k3s/pull/13529
• Use channel.yaml instead of curling for stable for kubectl install by @dereknola in https://github.com/k3s-io/k3s/pull/13531
• Fix VPN node IP not being applied to kubelet by @zijiren233 in https://github.com/k3s-io/k3s/pull/13457
• Bump aws-actions/configure-aws-credentials from 4 to 5 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13185
• Bump scorecard checkout to match all other versions by @dereknola in https://github.com/k3s-io/k3s/pull/13568
• Bump kine for list/watch revision fixes by @brandond in https://github.com/k3s-io/k3s/pull/13575
• Explicitly close mvcc backend to fix high CPU on initial etcd server after restart by @brandond in https://github.com/k3s-io/k3s/pull/13569
• Support commit builds via GHA artifacts by @dereknola in https://github.com/k3s-io/k3s/pull/13559
• Bump rancher/mirrored-coredns-coredns image version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/13499
• [main] Update stable channel to v1.34.3+k3s3 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13554
• Bump metrics-server to v0.8.1 by @mgfritch in https://github.com/k3s-io/k3s/pull/13594
• [main] Add registry prefix to image-list file by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13603
• Bump klipper-helm and klipper-lb images by @brandond in https://github.com/k3s-io/k3s/pull/13613
• Fix removal of init node via annotation by @brandond in https://github.com/k3s-io/k3s/pull/13624
• [master] Update to v1.35.1-k3s1 and Go 1.25.6 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13638
• Update stable to v1.34.4+k3s1 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13642
• Make artifact URL prefix configurable by @manuelbuil in https://github.com/k3s-io/k3s/pull/13367
• Bump kine to v0.14.12 by @brandond in https://github.com/k3s-io/k3s/pull/13661
• Install binutils-gold only for arm64 builds by @mmoll in https://github.com/k3s-io/k3s/pull/13654
• Rootlesskit Revert + Test Fixes by @dereknola in https://github.com/k3s-io/k3s/pull/13681
• Improve resilience of datastore bootstrap reconcile from etcd by @brandond in https://github.com/k3s-io/k3s/pull/13677
• Bump Traefik to v3.6.9 by @manuelbuil in https://github.com/k3s-io/k3s/pull/13693
• [main] Update to v1.35.2-k3s1 and Go 1.25.7 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13708
• Assign github.event to env first by @dereknola in https://github.com/k3s-io/k3s/pull/13715
• config: Add default imports to containerd base templates by @fidencio in https://github.com/k3s-io/k3s/pull/13680
• update channel server to 1.34.5 by @briandowns in https://github.com/k3s-io/k3s/pull/13732
• Add nix-snapshotter support to the embedded containerd by @nuketownada in https://github.com/k3s-io/k3s/pull/13676
• Do not create etcd name file if etcd is not in use by @brandond in https://github.com/k3s-io/k3s/pull/13727
• Bump actions/download-artifact from 7 to 8 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13714
• build(deps): bump actions/stale from 10.1.1 to 10.2.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13670
• build(deps): bump aquasecurity/trivy-action from 0.33.1 to 0.34.1 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13669
• build(deps): bump aws-actions/configure-aws-credentials from 5 to 6 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13596
• Bump softprops/action-gh-release from 2.2.1 to 2.5.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13376
• Bump rancher/mirrored-coredns-coredns image version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/13743
• Bump klipper-lb and klipper-helm by @brandond in https://github.com/k3s-io/k3s/pull/13761
• Bump golang:alpine image version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/13653
• Update packages to remove unmaintained dependencies by @brandond in https://github.com/k3s-io/k3s/pull/13724
• Bump DeterminateSystems/nix-installer-action from 17 to 21 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13744
• Bump docker/build-push-action from 6 to 7 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13745
• Bump docker/setup-qemu-action from 3 to 4 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13746
• Bump docker/setup-docker-action from 4 to 5 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13747
• Save cluster state before reencyrpting secrets with newly created key by @dereknola in https://github.com/k3s-io/k3s/pull/13764
• Bump docker/metadata-action from 5 to 6 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13748
• Bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13713
• Bump github.com/docker/cli from 28.3.2+incompatible to 29.2.0+incompatible by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13730
• build(deps): bump github.com/pion/dtls/v3 from 3.0.6 to 3.0.11 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13645
• Use etcd-snapshot-retention as default for s3 if etcd-s3-retention is not set by @brandond in https://github.com/k3s-io/k3s/pull/13770
• Bump traefik and local-path-provisioner by @brandond in https://github.com/k3s-io/k3s/pull/13787
• install.sh: Simplify handling for fedora rpm-ostree based distributions by @becarusys in https://github.com/k3s-io/k3s/pull/13712
• Bump containerd to v2.2.2 by @brandond in https://github.com/k3s-io/k3s/pull/13788
• Bump runc to v1.4.1 by @brandond in https://github.com/k3s-io/k3s/pull/13796
• Bump Traefik helm chart version by @manuelbuil in https://github.com/k3s-io/k3s/pull/13805
• Fix trivy updatecli config by @manuelbuil in https://github.com/k3s-io/k3s/pull/13816
• Bump cni plugins to v1.9.1 by @brandond in https://github.com/k3s-io/k3s/pull/13817
• Simplify snapshot compress/decompress logic by @brandond in https://github.com/k3s-io/k3s/pull/13826
• build(deps): bump docker/login-action from 3 to 4 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13804
• build(deps): bump softprops/action-gh-release from 2.5.0 to 2.6.1 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13803
• build(deps): bump aquasecurity/trivy-action from 0.34.1 to 0.35.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13802
• [main] Update to v1.35.3-k3s1 and Go 1.25.7 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13836
• Bump Trivy version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/13845
• Fix typo: overriden -> overridden in snapshot_handler.go in https://github.com/k3s-io/k3s/pull/13847
• fix: typo in etcd membership error message by @DT1mote in https://github.com/k3s-io/k3s/pull/13848
• Bump helm-controller for job race fix by @brandond in https://github.com/k3s-io/k3s/pull/13853
• Add context to controller event recorders by @brandond in https://github.com/k3s-io/k3s/pull/13856
• Pin GH Actions to commit sha by @cwayne18 in https://github.com/k3s-io/k3s/pull/13861
• Dapper is kill by @cwayne18 in https://github.com/k3s-io/k3s/pull/13860
• Update to flannel v0.28.2 by @mgfritch in https://github.com/k3s-io/k3s/pull/13863
• [main] Update stable to v1.34.6+k3s1 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13873
• Add sipgate to the list of adopters by @caesarakalaeii in https://github.com/k3s-io/k3s/pull/13881
• Add Rocket Technologies to the list of adopters by @BenBo17 in https://github.com/k3s-io/k3s/pull/13890
• Make Dockerfile.test more secure by @manuelbuil in https://github.com/k3s-io/k3s/pull/13882
• Make tests/integration/Dockerfile.test more secure by @manuelbuil in https://github.com/k3s-io/k3s/pull/13883
• Secure the vagrant-setup action.yaml by @manuelbuil in https://github.com/k3s-io/k3s/pull/13884
• Secure the e2e yaml GHA by @manuelbuil in https://github.com/k3s-io/k3s/pull/13885
• Pin govulncheck GHA version by @manuelbuil in https://github.com/k3s-io/k3s/pull/13887
• Verify sha256sum for kubelet, vagrant zip and go binary by @manuelbuil in https://github.com/k3s-io/k3s/pull/13889
• Check the k3s-root sha256sum by @manuelbuil in https://github.com/k3s-io/k3s/pull/13888
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13891
• build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13880
• build(deps): bump github/codeql-action from 4.34.1 to 4.35.1 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13879
• build(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13878
• build(deps): bump updatecli/updatecli-action from 2.100.0 to 3.0.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13876
• Fix reproducibility of embedded data tarball by @jonhermansen in https://github.com/k3s-io/k3s/pull/13875
• build(deps): bump github.com/buger/jsonparser from 1.1.1 to 1.1.2 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13837
• build(deps): bump github.com/nats-io/nats-server/v2 from 2.12.2 to 2.12.6 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13852
• Fix S3 test to account for change to s3mock by @brandond in https://github.com/k3s-io/k3s/pull/13906
• Bump klipper helm to v0.9.16-build20260410 by @vitorsavian in https://github.com/k3s-io/k3s/pull/13908
• Bump runc/spegel/helm-controller/kine by @brandond in https://github.com/k3s-io/k3s/pull/13909
• build(deps): bump actions/github-script from 8.0.0 to 9.0.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13914
• build(deps): bump aws-actions/configure-aws-credentials from 6.0.0 to 6.1.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13915
• build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13916
• build(deps): bump softprops/action-gh-release from 2.6.1 to 3.0.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13917
• build(deps): bump docker/build-push-action from 7.0.0 to 7.1.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13918
• Bump traefik to 3.6.12 by @manuelbuil in https://github.com/k3s-io/k3s/pull/13912
• Fix embedded executor VPN config injection by @brandond in https://github.com/k3s-io/k3s/pull/13920
• Bump containerd to v2.2.3 by @brandond in https://github.com/k3s-io/k3s/pull/13931
• Bump flannel to v0.28.4 by @thomasferrandiz in https://github.com/k3s-io/k3s/pull/13937
• [main] Update to v1.35.4-k3s1 and Go 1.25.9 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13946
• [main] Immutable release changes by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13902
• Bump Traefik to 3.6.13 by @cwayne18 in https://github.com/k3s-io/k3s/pull/13969
• [main] Switch from draft to pre-release by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13951
• Fix SANs added from comma-separated node-external-ip list by @brandond in https://github.com/k3s-io/k3s/pull/13989
• Fix docker dualstack test by @brandond in https://github.com/k3s-io/k3s/pull/13994
• Bump klipper-helm image for revision check fix by @brandond in https://github.com/k3s-io/k3s/pull/13995
• Bump upstream to v1.36 by @vitorsavian in https://github.com/k3s-io/k3s/pull/13986
• Add k8gb to adopters list in ADOPTERS.md by @ytsarev in https://github.com/k3s-io/k3s/pull/13978
• Bump Klipper LB version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/13976
• Update stable to v1.35.4+k3s1 and add v1.36 entry by @rafaelbreno in https://github.com/k3s-io/k3s/pull/14016
• Replace PreparingExecutor with explicit embedded executor init by @brandond in https://github.com/k3s-io/k3s/pull/14000
• Bump spegel to v0.7.0 by @brandond in https://github.com/k3s-io/k3s/pull/14003
• Bump rancher/mirrored-coredns-coredns image version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/14005
• Fix kubectl exec when using docker by @vitorsavian in https://github.com/k3s-io/k3s/pull/14019
• Improve K3s BUILDING and CONTRIBUTING guides by @manuelbuil in https://github.com/k3s-io/k3s/pull/13985
• Bump Klipper LB version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/14026
• [main] Fix s3 path by @rafaelbreno in https://github.com/k3s-io/k3s/pull/14015
• add lost return by @nameearly in https://github.com/k3s-io/k3s/pull/14020
• Bump kine to v0.15.0 by @brandond in https://github.com/k3s-io/k3s/pull/14030
• Bump Local Path Provisioner version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/14038
• Update Orlin’s mail by @OrlinVasilev in https://github.com/k3s-io/k3s/pull/14047
• [main] Update to v1.36.1-k3s1 and Go 1.26.2 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/14052
• Fix cron to run everyday at 6PM UTC by @rafaelbreno in https://github.com/k3s-io/k3s/pull/14041
• Bump klipper-helm image tag by @brandond in https://github.com/k3s-io/k3s/pull/14054
• chore: fix duplicated “the” in etcd/s3 and permissions doc comments by @quyentonndbs in https://github.com/k3s-io/k3s/pull/14072
• Add AI contribution guide by @brandond in https://github.com/k3s-io/k3s/pull/14090
• [main] Update stable channel to v1.35.5+k3s1 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/14091
• fix: use same package manager for k3s-selinux removal as for installation by @becarusys in https://github.com/k3s-io/k3s/pull/13711
• Nit: Wrong integration test name by @manuelbuil in https://github.com/k3s-io/k3s/pull/14097
• Use 0600 permissions for compressed etcd snapshots by @eran132 in https://github.com/k3s-io/k3s/pull/14092
• fix: populate IfaceName in LookupExtInterface for VXLAN recreation by @jkubo in https://github.com/k3s-io/k3s/pull/14086
• Fix token delete argument handling by @elysia090 in https://github.com/k3s-io/k3s/pull/14076
• Skip bridge-nf-call sysctls when kube-proxy and flannel are disabled by @eran132 in https://github.com/k3s-io/k3s/pull/14093
• build(deps): bump updatecli/updatecli-action from 3.0.0 to 3.1.2 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13980
• build(deps): bump github/codeql-action from 4.35.1 to 4.35.2 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13982
• build(deps): bump docker/login-action from 4.0.0 to 4.1.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13981
• Bump kine to v0.16.0 by @brandond in https://github.com/k3s-io/k3s/pull/14123
• Bump spegel to v0.7.1 for libp2p-kad-dht panic fix by @brandond in https://github.com/k3s-io/k3s/pull/14128
• Bump Traefik to v3.7.1 by @manuelbuil in https://github.com/k3s-io/k3s/pull/14134
• Bump kine for t4 fixes by @brandond in https://github.com/k3s-io/k3s/pull/14132
• build(deps): bump actions/cache from 5.0.4 to 5.0.5 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13979
• Stop opening depedabot PRs for GitHub Action patch versions by @dereknola in https://github.com/k3s-io/k3s/pull/14143
• Bump klipper-helm to v0.11 for helmv4 by @brandond in https://github.com/k3s-io/k3s/pull/14145
• Bump containerd to v2.3.1 by @brandond in https://github.com/k3s-io/k3s/pull/14136
• bump etcd to v3.6.12 by @brandond in https://github.com/k3s-io/k3s/pull/14149
• Agentic workflows by @dereknola in https://github.com/k3s-io/k3s/pull/14129
• Use of CNCF Runners in CI by @dereknola in https://github.com/k3s-io/k3s/pull/14144
• Optimize Test order by @dereknola in https://github.com/k3s-io/k3s/pull/14186
• Bump v3.7.4 Traefik by @manuelbuil in https://github.com/k3s-io/k3s/pull/14192
• test(kubeflags): add K3sCleanup between server restarts to fix flake by @amaanx86 in https://github.com/k3s-io/k3s/pull/14189
• Passthru KINE_ environment variables in install.sh and added new hash by @dnoland1 in https://github.com/k3s-io/k3s/pull/14188
• Bump golang.org/x/net to v0.55.0 to fix CVE-2026-39821 by @jimmykarily in https://github.com/k3s-io/k3s/pull/14203
• Reduce GRPC console spam by @brandond in https://github.com/k3s-io/k3s/pull/14202
• build(deps): bump docker/metadata-action from 6.0.0 to 6.1.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/14147
• build(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/14139
• build(deps): bump github/codeql-action from 4.35.2 to 4.36.1 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/14148
• Fix cloud-controller-manager exiting due to missing core RBAC by @brandond in https://github.com/k3s-io/k3s/pull/14201
• Bump k3s-root to v0.15.2 by @brandond in https://github.com/k3s-io/k3s/pull/14205
• Bump rancher/mirrored-coredns-coredns image version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/14208
• Address new linting requirements by @dereknola in https://github.com/k3s-io/k3s/pull/14210
• Revert “Add runtime checking of golang version” by @brandond in https://github.com/k3s-io/k3s/pull/14219
• Dualstack spegel by @dereknola in https://github.com/k3s-io/k3s/pull/13831
• Update github actions in a single grouped PR every month by @dereknola in https://github.com/k3s-io/k3s/pull/14221
• Bump klipper-helm for CVE reasons by @cwayne18 in https://github.com/k3s-io/k3s/pull/14235
• Bump containerd with the fix for []byte envvar value by @vitorsavian in https://github.com/k3s-io/k3s/pull/14240
• [main] Update to v1.36.2-k3s1 and Go 1.26.4 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/14231
• Use built-in etcd bootstrap defrag threshold if specified by @alexander-demicev in https://github.com/k3s-io/k3s/pull/14099
• build(deps): bump the action-deps group with 7 updates by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/14226
• build(deps): bump ubuntu from 24.04 to 26.04 in /tests/e2e/scripts by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/14040
• build(deps): bump alpine from 3.22 to 3.24 in /package by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/14225
• Unit test expansion by @dereknola in https://github.com/k3s-io/k3s/pull/14249
• Fix codecov reports for E2E and Integration tests by @dereknola in https://github.com/k3s-io/k3s/pull/14252
• Bump containerd to v2.3.2-k3s1 by @vitorsavian in https://github.com/k3s-io/k3s/pull/14253
• Add image names to file cache by @brandond in https://github.com/k3s-io/k3s/pull/14266
• Bump cri-api and containerd for upstream env string fix by @brandond in https://github.com/k3s-io/k3s/pull/14276
• [main] Update stable channel to v1.36.2+k3s1 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/14281
• Add Sophotech to the list of adopters by @archy-rock3t-cloud in https://github.com/k3s-io/k3s/pull/14285
• Migrate from local targets to defaults by @dereknola in https://github.com/k3s-io/k3s/pull/14204
• Fix image-endpoint assignment in run_linux.go by @neiltalap in https://github.com/k3s-io/k3s/pull/14246
• Preserve logical paths for symlinked manifests by @immanuwell in https://github.com/k3s-io/k3s/pull/14087
• Bump dynamiclistener to v0.9.0-rc.2 for wildcard tls-san support by @Eshaan-Lumba in https://github.com/k3s-io/k3s/pull/14280
• fix: pre-apply feature gates before embedded API server starts by @SebTardif in https://github.com/k3s-io/k3s/pull/14287
• Add helm-controller-arg flag by @manuelbuil in https://github.com/k3s-io/k3s/pull/14185
• Bump kine to v0.16.3 for perf improvements by @brandond in https://github.com/k3s-io/k3s/pull/14310
• Bump spegel to v0.7.2 by @brandond in https://github.com/k3s-io/k3s/pull/14311
• fix: re-import airgap images when timestamp changes even if size is same by @bheemareddy in https://github.com/k3s-io/k3s/pull/14288
• Use xx for multiarch builds without emulation by @dereknola in https://github.com/k3s-io/k3s/pull/14291
• Bump golang:alpine image version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/14247
• Add backoff to initial snapshot reconcile by @brandond in https://github.com/k3s-io/k3s/pull/14322
• Synchronize egress map and CIDR trie reads in tunnel dialBackend by @archy-rock3t-cloud in https://github.com/k3s-io/k3s/pull/14341
• Redact single-dash secret flags in the node args annotation by @archy-rock3t-cloud in https://github.com/k3s-io/k3s/pull/14340
• Emit events attached to node when snapshot retention fails by @brandond in https://github.com/k3s-io/k3s/pull/14345
• Run Conformance tests nightly by @dereknola in https://github.com/k3s-io/k3s/pull/14338
• Bump Traefik to v3.7.7 by @manuelbuil in https://github.com/k3s-io/k3s/pull/14326
• Bump mirrored-pause to 3.10.2 by @dereknola in https://github.com/k3s-io/k3s/pull/14339
• build(deps): bump the action-deps group with 14 updates by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/14394
• Bump dynamiclistener for atomic write fix by @brandond in https://github.com/k3s-io/k3s/pull/14382
• Bump helm-controller/klipper-helm by @brandond in https://github.com/k3s-io/k3s/pull/14403
• Simplify WriteSubnetFile cleanup and make atomic by @brandond in https://github.com/k3s-io/k3s/pull/14405
• Fix typo in snapshot prune event by @brandond in https://github.com/k3s-io/k3s/pull/14410
• Bump rancher/mirrored-coredns-coredns image version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/14415
• Add updatecli manifest to bump Kubernetes across multiple release branches by @rafaelbreno in https://github.com/k3s-io/k3s/pull/14402
• Use new Traefik v3.7.8 by @manuelbuil in https://github.com/k3s-io/k3s/pull/14404
• Bump metrics-server to v0.9.0 by @mgfritch in https://github.com/k3s-io/k3s/pull/14416
• updatecli: relax metrics-server semver filter et al. by @mgfritch in https://github.com/k3s-io/k3s/pull/14429
• updatecli: add missing requiredEnv by @mgfritch in https://github.com/k3s-io/k3s/pull/14434
• Bump helm-controller and klipper-helm for --force-conflicts support by @brandond in https://github.com/k3s-io/k3s/pull/14446
• [main] Bump k3s-io/kubernetes and Go references by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/14457
• Bump etcd to v3.6.14 by @brandond in https://github.com/k3s-io/k3s/pull/14460
• Fix production builds always enabling Go coverage instrumentation by @mgfritch in https://github.com/k3s-io/k3s/pull/14465
• feat: support custom kubeconfig name by @kasefuchs in https://github.com/k3s-io/k3s/pull/14440
• Require node password informer sync before using cache by @brandond in https://github.com/k3s-io/k3s/pull/14459
• Bump helm-controller and klipper-helm by @brandond in https://github.com/k3s-io/k3s/pull/14474
• Enable unit tests by @manuelbuil in https://github.com/k3s-io/k3s/pull/14480
• fix: change sles to use slemicro rpms instead of microos by @vitorsavian in https://github.com/k3s-io/k3s/pull/14472
• tests: make rootless uidmap install robust against stale apt cache by @mgfritch in https://github.com/k3s-io/k3s/pull/14490
• [main] Update stable channel to v1.36.3+k3s1 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/14492
• Etcd client locking by @dcermak in https://github.com/k3s-io/k3s/pull/14488
• tests: Install rke2-multus-crd chart for multus e2e test by @mgfritch in https://github.com/k3s-io/k3s/pull/14489
• Filter large untemplated issues by @dereknola in https://github.com/k3s-io/k3s/pull/14435
• Fix typo in spegel deferred store comment by @Lcos-000 in https://github.com/k3s-io/k3s/pull/14485
• make explicit where coredns customizations should be made by @turettn in https://github.com/k3s-io/k3s/pull/14503
• Bump docker version in CI to 29 by @brandond in https://github.com/k3s-io/k3s/pull/14506
• Don’t retag images for a registry they are already hosted by by @boothb in https://github.com/k3s-io/k3s/pull/14484
• Tidy dockerfile and build stages by @brandond in https://github.com/k3s-io/k3s/pull/14511
• Add advertise-address to SANs before generating apiserver cert by @somaz94 in https://github.com/k3s-io/k3s/pull/14516
• [main] Bump Local Path Provisioner version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/14496
• Bump containerd to v2.3.4-k3s1.36 by @vitorsavian in https://github.com/k3s-io/k3s/pull/14510
• Bump kine to v0.16.4 for nats replay fix by @brandond in https://github.com/k3s-io/k3s/pull/14521
• updatecli: remove release-1.33 branch by @mgfritch in https://github.com/k3s-io/k3s/pull/14537
• [main] Update to v1.36.4-k3s1 and Go 1.26.7 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/14546
• feat: Add Project Bluefin to adopters list by @castrojo in https://github.com/k3s-io/k3s/pull/14549
• Bump k8s to v1.37 by @vitorsavian in https://github.com/k3s-io/k3s/pull/14509
• Bump Traefik and bundle gateway-api crds by @manuelbuil in https://github.com/k3s-io/k3s/pull/14573

New Contributors

• @oglok made their first contribution in https://github.com/k3s-io/k3s/pull/13411
• @luojiyin1987 made their first contribution in https://github.com/k3s-io/k3s/pull/13380
• @geoffreyPerrin made their first contribution in https://github.com/k3s-io/k3s/pull/13467
• @rahulrairai59 made their first contribution in https://github.com/k3s-io/k3s/pull/13473
• @edithturn made their first contribution in https://github.com/k3s-io/k3s/pull/13510
• @zijiren233 made their first contribution in https://github.com/k3s-io/k3s/pull/13457
• @mmoll made their first contribution in https://github.com/k3s-io/k3s/pull/13654
• @fidencio made their first contribution in https://github.com/k3s-io/k3s/pull/13680
• @nuketownada made their first contribution in https://github.com/k3s-io/k3s/pull/13676
• @becarusys made their first contribution in https://github.com/k3s-io/k3s/pull/13712
• @DT1mote made their first contribution in https://github.com/k3s-io/k3s/pull/13848
• @caesarakalaeii made their first contribution in https://github.com/k3s-io/k3s/pull/13881
• @BenBo17 made their first contribution in https://github.com/k3s-io/k3s/pull/13890
• @jonhermansen made their first contribution in https://github.com/k3s-io/k3s/pull/13875
• @ytsarev made their first contribution in https://github.com/k3s-io/k3s/pull/13978
• @nameearly made their first contribution in https://github.com/k3s-io/k3s/pull/14020
• @quyentonndbs made their first contribution in https://github.com/k3s-io/k3s/pull/14072
• @eran132 made their first contribution in https://github.com/k3s-io/k3s/pull/14092
• @jkubo made their first contribution in https://github.com/k3s-io/k3s/pull/14086
• @elysia090 made their first contribution in https://github.com/k3s-io/k3s/pull/14076
• @amaanx86 made their first contribution in https://github.com/k3s-io/k3s/pull/14189
• @jimmykarily made their first contribution in https://github.com/k3s-io/k3s/pull/14203
• @alexander-demicev made their first contribution in https://github.com/k3s-io/k3s/pull/14099
• @archy-rock3t-cloud made their first contribution in https://github.com/k3s-io/k3s/pull/14285
• @neiltalap made their first contribution in https://github.com/k3s-io/k3s/pull/14246
• @immanuwell made their first contribution in https://github.com/k3s-io/k3s/pull/14087
• @SebTardif made their first contribution in https://github.com/k3s-io/k3s/pull/14287
• @bheemareddy made their first contribution in https://github.com/k3s-io/k3s/pull/14288
• @kasefuchs made their first contribution in https://github.com/k3s-io/k3s/pull/14440
• @Lcos-000 made their first contribution in https://github.com/k3s-io/k3s/pull/14485
• @turettn made their first contribution in https://github.com/k3s-io/k3s/pull/14503
• @boothb made their first contribution in https://github.com/k3s-io/k3s/pull/14484
• @somaz94 made their first contribution in https://github.com/k3s-io/k3s/pull/14516
• @castrojo made their first contribution in https://github.com/k3s-io/k3s/pull/14549

Full Changelog: https://github.com/k3s-io/k3s/compare/v1.35.0+k3s1...v1.37.0-rc1+k3s1

下载链接

• k3s
• k3s-airgap-images-amd64.tar
• k3s-airgap-images-amd64.tar.gz
• k3s-airgap-images-amd64.tar.zst
• k3s-airgap-images-arm.tar
• k3s-airgap-images-arm.tar.gz
• k3s-airgap-images-arm.tar.zst
• k3s-airgap-images-arm64.tar
• k3s-airgap-images-arm64.tar.gz
• k3s-airgap-images-arm64.tar.zst
• k3s-arm64
• k3s-armhf
• k3s-images.txt
• sha256sum-amd64.txt
• sha256sum-arm.txt
• sha256sum-arm64.txt