Aleksei Sviridkin cac799518c chore(talos): bump core/talos to Talos v1.13.5 and matchbox v0.11.0 ...

Refreshes the core/talos asset/profile layer onto current upstream to clear the
published advisories the scanner flagged in the stale pinned images.

- profiles: regenerated by hack/gen-profiles.sh v1.13.5, moving the base
  installer and every system extension to the v1.13.5 line (installer v1.13.0 ->
  v1.13.5; amdgpu/i915/drbd/zfs to their -v1.13.5 builds; amd-ucode and the
  firmware blobs to the 20260519/20260512 snapshots). v1.13.5 rebuilds the
  installer on the Go 1.26.4 toolchain and current runtime (kernel, containerd,
  runc, OpenSSL), clearing the Go and libcrypto advisories compiled into the
  stale v1.13.0 installer.
- matchbox: base image quay.io/poseidon/matchbox v0.10.0 -> v0.11.0, clearing
  the libcrypto3 advisories in the matchbox runtime.

cozy-talos ships no runtime templates -- it drives the node image / installer /
matchbox asset builds. The Talos installer and matchbox images are rebuilt from
these sources by the release asset pipeline (the privileged imager build), which
also re-pins the generated matchbox digest; this change is the source bump.

Assisted-By: Claude <noreply@anthropic.com>
Signed-off-by: Aleksei Sviridkin <f@lex.la>

2026-06-23 01:40:23 +03:00

..

flux-aio

feat(fluxcd): retire the hand-rolled flux-tenants shard

2026-06-03 19:47:28 +02:00

installer

Prepare release v1.5.0

2026-06-22 10:55:37 +00:00

platform

Prepare release v1.5.0

2026-06-22 10:55:37 +00:00

talos

chore(talos): bump core/talos to Talos v1.13.5 and matchbox v0.11.0

2026-06-23 01:40:23 +03:00

testing

Prepare release v1.5.0

2026-06-22 10:55:37 +00:00