chore(deps): update cluster-talos infra to v1.13.3

[Varashi]

This PR contains the following updates:

Package	Update	Change
ghcr.io/siderolabs/installer	patch	v1.13.2 → v1.13.3
siderolabs/talos	patch	v1.13.2 → v1.13.3

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

siderolabs/talos (siderolabs/talos)

v1.13.3

Compare Source

Talos 1.13.3 (2026-05-26)

Welcome to the v1.13.3 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Component Updates

Linux: 6.18.33
Kubernetes: 1.36.1
containerd: 2.2.4

Talos is built with Go 1.26.3.

Contributors

• Andrey Smirnov
• Noel Georgi
• Lukasz Raczylo
• Maja Bojarska
• Mateusz Urbanek
• Utku Ozdemir

Changes

19 commits

• @​befeda7 release(v1.13.3): prepare release
• @​f4d4510 feat(ci): rotate credentials
• @​01b4348 fix: guard apply config API call
• @​a42c37f feat(machined): support instance tags on Akamai
• @​d62d54c fix: memorymodules resource reporting
• @​b673b4b fix: bump Go golang.org/x modules
• @​19755ad feat: add bnxt_re module to the rootfs
• @​532bc6b fix: relax hostname config validation
• @​3bbd3ed fix: bump Kubernetes to 1.36.1 in one more place
• @​472b9d9 feat: update default Kubernetes version to 1.36.1
• @​6d53ce0 chore(ci): fix cloud image upload job name
• @​5633c77 fix: rework how scheduler config is marshaled
• @​52f0560 fix: restore some shared (and some lower tier slave) mount propagation
• @​9de3c12 fix: image verification issue with registry.k8s.io
• @​7dc716d feat: redact more machine config secrets and audit redactors
• @​d5448c6 chore(ci): try fixing homebrew action
• @​ef9f0bf docs: drop controlplane endpoint examples
• @​7ee3e78 feat: update Linux to 6.18.33
• @​e99744b fix: update containerd to 2.2.4

Changes from siderolabs/go-smbios

1 commit

• siderolabs/go-smbios@063f5dc chore: rekres + new testdata

Changes from siderolabs/pkgs

12 commits

• siderolabs/pkgs@8c18616 feat: pre-generate drbd patches using spatch out of tree
• siderolabs/pkgs@82e70a0 feat: update Linux to 6.18.33
• siderolabs/pkgs@993d4a6 feat: enable PPP and INFINIBAND_BNXT_RE
• siderolabs/pkgs@12d5337 feat: enable more options for CRI-U checkpoint/restore
• siderolabs/pkgs@c2e43aa feat: preserve System.map on kernel builds
• siderolabs/pkgs@230b4bc chore: update deps
• siderolabs/pkgs@847a37e feat: bump kernel 6.18.32
• siderolabs/pkgs@d7ae843 feat: update Linux to 6.18.31
• siderolabs/pkgs@a26d3c0 feat: update ZFS & NVIDIA LTS
• siderolabs/pkgs@94d28c5 feat: update Linux to 6.18.30
• siderolabs/pkgs@b3dd525 fix: macb silent TX stall on BCM2712/RP1 (v2 patches from netdev)
• siderolabs/pkgs@8bdd5e0 feat: update containerd to 2.2.4

Dependency Changes

• github.com/containerd/containerd/v2 v2.2.2 -> v2.2.4
• github.com/siderolabs/go-smbios v0.3.3 -> v0.3.4
• github.com/siderolabs/pkgs v1.13.0-11-g969f61c -> v1.13.0-23-g8c18616
• github.com/siderolabs/talos/pkg/machinery v1.13.2 -> v1.13.3
• golang.org/x/net v0.53.0 -> v0.55.0
• golang.org/x/sys v0.43.0 -> v0.45.0
• golang.org/x/term v0.42.0 -> v0.43.0
• golang.org/x/text v0.36.0 -> v0.37.0
• google.golang.org/grpc v1.79.3 -> v1.81.0
• k8s.io/api v0.36.0 -> v0.36.1
• k8s.io/apiextensions-apiserver v0.36.0 -> v0.36.1
• k8s.io/apimachinery v0.36.0 -> v0.36.1
• k8s.io/apiserver v0.36.0 -> v0.36.1
• k8s.io/client-go v0.36.0 -> v0.36.1
• k8s.io/component-base v0.36.0 -> v0.36.1
• k8s.io/kube-scheduler v0.36.0 -> v0.36.1
• k8s.io/kubectl v0.36.0 -> v0.36.1
• k8s.io/kubelet v0.36.0 -> v0.36.1
• k8s.io/pod-security-admission v0.36.0 -> v0.36.1

Previous release can be found at v1.13.2

Images

ghcr.io/siderolabs/flannel:v0.28.4
registry.k8s.io/coredns/coredns:v1.14.2
registry.k8s.io/etcd:v3.6.11
registry.k8s.io/pause:3.10.1
registry.k8s.io/kube-apiserver:v1.36.1
registry.k8s.io/kube-controller-manager:v1.36.1
registry.k8s.io/kube-scheduler:v1.36.1
registry.k8s.io/kube-proxy:v1.36.1
ghcr.io/siderolabs/kubelet:v1.36.1
registry.k8s.io/networking/kube-network-policies:v1.0.0
ghcr.io/siderolabs/installer:v1.13.3
ghcr.io/siderolabs/installer-base:v1.13.3
ghcr.io/siderolabs/imager:v1.13.3
ghcr.io/siderolabs/talos:v1.13.3
ghcr.io/siderolabs/talosctl-all:v1.13.3
ghcr.io/siderolabs/overlays:v1.13.3
ghcr.io/siderolabs/extensions:v1.13.3

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 1285ad37-0840-4d25-9c11-ac89ecdaa9a4

📥 Commits

Reviewing files that changed from the base of the PR and between dbb48e6 and fb11165.

⛔ Files ignored due to path filters (1)

• cluster-talos/talos/values.yaml is excluded by !cluster-talos/talos/**

📒 Files selected for processing (1)

• cluster-talos/kubernetes/infrastructure/platform/tuppr/upgrades/talosupgrade.yaml

---

📝 Walkthrough

Walkthrough

Single-field version bump in the TalosUpgrade resource manifest. The spec.talos.version field incremented from v1.13.2 to v1.13.3. One manifest file, one line changed.

Changes

Talos Version Update

Layer / File(s)	Summary
Talos version bump cluster-talos/kubernetes/infrastructure/platform/tuppr/upgrades/talosupgrade.yaml	spec.talos.version field updated from v1.13.2 to v1.13.3.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	Title accurately describes the main change: updating Talos infrastructure from v1.13.2 to v1.13.3, directly matching the single file modification shown in the changeset.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}