Skip to content

sync to release-4.9 - #807

Closed
santhoshdaivajna wants to merge 37 commits into
release-4.9from
rc-4.9
Closed

sync to release-4.9#807
santhoshdaivajna wants to merge 37 commits into
release-4.9from
rc-4.9

Conversation

@santhoshdaivajna

Copy link
Copy Markdown
Collaborator

No description provided.

spectro-prow and others added 30 commits July 10, 2026 11:18
Co-authored-by: lokesh-guduruS <224164205+lokesh-guduruS@users.noreply.github.com>
Point rc-4.9 at the five provider releases cut on 2026-08-18, all of
which target the providers' own rc-4.9 branches:

  K3S_PROVIDER_VERSION        v4.9.7 -> v4.9.8
  KUBEADM_PROVIDER_VERSION    v4.9.8 -> v4.9.9
  RKE2_PROVIDER_VERSION       v4.9.5 -> v4.9.6
  NODEADM_PROVIDER_VERSION    v4.9.3 -> v4.9.4
  CANONICAL_PROVIDER_VERSION  v4.9.3 -> v4.9.4

Each is a single-change patch release carrying the Go 1.26.6 toolchain
bump and the accompanying golang.org/x/* dependency updates backported
to that provider's rc-4.9 branch. Together they clear the stdlib
advisories fixed in go1.26.6 (GO-2026-5972 encoding/asn1, GO-2026-6090
crypto/tls and others depending on the provider) plus CVE-2026-46600
(x/net) and CVE-2026-56852 (x/text) where those modules are linked.

Same five ARGs and the same shape as #769, which did this for the 4.10
line on main. Earthfile is the only site -- the five ARGs at lines
32-36 are consumed by the PROVIDER_BASE definitions at lines 691-703,
and nothing else in the repo pins a provider version.

Verified before committing: all five GitHub releases exist and target
rc-4.9, all five images are published and pullable at
us-docker.pkg.dev/palette-images/edge/kairos-io/<provider>:<tag>, all
five are multi-arch (linux/amd64 + linux/arm64), and `earthly ls`
parses the Earthfile cleanly.

Signed-off-by: Ruturaj Ramchandra Shitole <ruturaj.shitole@spectrocloud.com>
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
kirankn8 and others added 7 commits August 18, 2026 11:16
….10 (#777)

Picks up the kubeadm upgrade health-check fixes for PE-9303: the webhook
exemption now matches the generated Job name, and the upgrade loop bounds
its retries with a preflight escape hatch.

Signed-off-by: Kiran <kiran@spectrocloud.com>
4.9.39 PE release
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants