# Talos Linux v1.13.8

- Product: Talos Linux (https://whatsnew.fyi/product/talos-linux)
- Vendor: Sidero Labs
- Date: 2026-08-04
- Version: v1.13.8
- Original notes: https://github.com/siderolabs/talos/releases/tag/v1.13.8
- Permalink: https://whatsnew.fyi/product/talos-linux/releases/v1.13.8

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **fixed** — Verify the public key signed images correctly
- **fixed** — Use context without cancelation for etcd locks
- **fixed** — Redact resource specs in the merge controllers
- **fixed** — Preserve health when services reach running in machined
- **fixed** — Race with PCR extensions and volume unlock
- **changed** — Update Flannel to 0.28.8
- **changed** — Update CoreDNS to 1.14.6
- **fixed** — Volume mount race around service restart
- **fixed** — Ignore insecure-only imager assets
- **fixed** — Preserve trailing rate-limited trigger events
- **changed** — Update Linux kernel to 6.18.42
- **changed** — Enable PCF8523 RTC support for arm64
- **changed** — Enable CONFIG_NFT_SOCKET in the kernel

##### [Talos 1.13.8](https://github.com/siderolabs/talos/releases/tag/v1.13.8) (2026-08-04)

Welcome to the v1.13.8 release of Talos!



Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

###### Component Updates

Linux: 6.18.42
CoreDNS: 1.14.6
Flannel: 0.28.8

Talos is built with Go 1.26.5.


###### Contributors

* Andrey Smirnov
* Mateusz Urbanek
* Noel Georgi
* ctr49
* imusmanmalik
* kastakhov

###### Changes
<details><summary>14 commits</summary>
<p>

* siderolabs/talos@3de493227 release(v1.13.8): prepare release
* siderolabs/talos@76de777df chore: update dependencies
* siderolabs/talos@77d5fe2cc chore: update pkgs
* siderolabs/talos@a7db9b227 fix: verify the public key signed images correctly
* siderolabs/talos@d76938912 fix: use context without cancelation for etcd locks
* siderolabs/talos@3a2abc01e fix: redact resource specs in the merge controllers
* siderolabs/talos@153179702 fix(machined): preserve health when services reach running
* siderolabs/talos@fc757545c fix: race with PCR extensions and volume unlock
* siderolabs/talos@2a51fb18f feat: update Flannel to 0.28.8
* siderolabs/talos@05471d31d feat: update CoreDNS to 1.14.6
* siderolabs/talos@9e0b1caba fix: volume mount race (third attempt) around service restart
* siderolabs/talos@c5cb36528 fix: ignore insecure-only imager assets
* siderolabs/talos@c67b10d29 test: update Calico in canal reset test
* siderolabs/talos@9eca6ea4a fix: preserve trailing rate-limited trigger events
</p>
</details>

###### Changes from siderolabs/pkgs
<details><summary>6 commits</summary>
<p>

* siderolabs/pkgs@f677246 chore: update kernel
* siderolabs/pkgs@6c5daf2 chore: replace gnu mirror
* siderolabs/pkgs@4304e87 feat: bump kernel to 6.18.41
* siderolabs/pkgs@e66edeb feat: enable PCF8523 RTC support for arm64
* siderolabs/pkgs@b2e51fc feat: bump kernel to 6.18.40
* siderolabs/pkgs@33195c5 feat: enable CONFIG_NFT_SOCKET in the kernel
</p>
</details>

###### Dependency Changes

* **github.com/google/cel-go**                   v0.28.0 -> v0.29.0
* **github.com/gopacket/gopacket**               v1.5.0 -> v1.6.1
* **github.com/klauspost/compress**              v1.18.6 -> v1.18.7
* **github.com/siderolabs/pkgs**                 v1.13.0-49-g91fe0a0 -> v1.13.0-55-gf677246
* **github.com/siderolabs/talos/pkg/machinery**  v1.13.7 -> v1.13.8
* **github.com/sigstore/sigstore-go**            v1.2.0 -> v1.2.1
* **golang.org/x/net**                           v0.55.0 -> v0.57.0
* **golang.org/x/sync**                          v0.20.0 -> v0.22.0
* **golang.org/x/sys**                           v0.45.0 -> v0.47.0
* **golang.org/x/term**                          v0.43.0 -> v0.45.0
* **golang.org/x/text**                          v0.37.0 -> v0.40.0
* **google.golang.org/grpc**                     v1.81.1 -> v1.82.1

Previous release can be found at [v1.13.7](https://github.com/siderolabs/talos/releases/tag/v1.13.7)

##### Images

```
ghcr.io/siderolabs/flannel:0.28.8
registry.k8s.io/coredns/coredns:v1.14.6
registry.k8s.io/etcd:v3.6.12
registry.k8s.io/pause:3.10.1
registry.k8s.io/kube-apiserver:v1.36.2
registry.k8s.io/kube-controller-manager:v1.36.2
registry.k8s.io/kube-scheduler:v1.36.2
registry.k8s.io/kube-proxy:v1.36.2
ghcr.io/siderolabs/kubelet:v1.36.2
registry.k8s.io/networking/kube-network-policies:v1.1.0
ghcr.io/siderolabs/installer:v1.13.8
ghcr.io/siderolabs/installer-base:v1.13.8
ghcr.io/siderolabs/imager:v1.13.8
ghcr.io/siderolabs/talos:v1.13.8
ghcr.io/siderolabs/talosctl-all:v1.13.8
ghcr.io/siderolabs/overlays:v1.13.8
ghcr.io/siderolabs/extensions:v1.13.8
```