chore(deps): update dependency k3s-io/k3s to v1.37.1+k3s1

[renovate]

This PR contains the following updates:

Package	Update	Change
k3s-io/k3s	minor	v1.36.4+k3s1 → v1.37.1+k3s1

---

Release Notes

k3s-io/k3s (k3s-io/k3s)

v1.37.1+k3s1: v1.37.1+k3s1

Compare Source

This release updates Kubernetes to v1.37.1, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.37.0+k3s1:

• Backports for 2026-09 (#​14631)
  • Fix restore from compressed etcd snapshot #​14528
  • Enable seccomp in riscv64 builds #​14529
  • Use ginkgo CLI to run tests #​14531
  • Bump k3s-io/api to v0.2.0 #​14570
  • Servicelb multiple lbpools #​14547
  • Close minio.Object after read #​14580
  • Bump k3s-io/apis again #​14589
  • Fix --flannel-cni-conf not reaching the embedded flannel #​14598
  • Check-config: suppress colors when stdout is not a terminal #​14595
  • Fix deploy controller not re-applying manifests when mtime is pinned to the epoch #​14568
  • Bump etcd to v3.7.1-k3s3 for nonblocking logging support #​14628
  • Bump kine to v0.17.1 #​14627
• Bump helm-controller (#​14684)
• Bump k3s-io/kubernetes and Go references (#​14695)
• Bump cadvisor to v0.60.5-k3s1 (#​14698)
• Reject anonymous access to supervisor router (spegel/pprof/metrics) (#​14701)
• Improve CA hash validation (#​14705)

Embedded Component Versions

Component	Version
Kubernetes	v1.37.1
Kine	v0.17.1
SQLite	3.53.4
Etcd	v3.7.1-k3s3
Containerd	v2.3.4-k3s1
Runc	v1.4.2
Flannel	v0.28.4
Metrics-server	v0.9.0
Traefik	v3.7.13
CoreDNS	v1.14.7
Helm-controller	v0.17.9
Local-path-provisioner	v0.0.37

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.37.0+k3s1: v1.37.0+k3s1

Compare Source

This release updates Kubernetes to v1.37.0, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.36.3+k3s1:

• Bump mirrored-pause to 3.10.2 (#​14339)
• Build(deps): bump the action-deps group with 14 updates (#​14394)
• Bump dynamiclistener for atomic write fix (#​14382)
• Bump helm-controller/klipper-helm (#​14403)
• Simplify WriteSubnetFile cleanup and make atomic (#​14405)
• Fix typo in snapshot prune event (#​14410)
• Bump rancher/mirrored-coredns-coredns image version (#​14415)
• Add updatecli manifest to bump Kubernetes across multiple release branches (#​14402)
• Bump metrics-server to v0.9.0 (#​14416)
• Updatecli: relax metrics-server semver filter et al. (#​14429)
• Updatecli: add missing requiredEnv (#​14434)
• Bump helm-controller and klipper-helm for --force-conflicts support (#​14446)
• Bump k3s-io/kubernetes and Go references (#​14457)
• Bump etcd to v3.6.14 (#​14460)
• Fix production builds always enabling Go coverage instrumentation (#​14465)
• Feat: support custom kubeconfig name (#​14440)
  • Added --write-kubeconfig-name server flag to set the name for cluster, user and context in generated kubeconfig.
• Require node password informer sync before using cache (#​14459)
• Bump helm-controller and klipper-helm (#​14474)
• Enable unit tests (#​14480)
• Fix: change sles to use slemicro rpms instead of microos (#​14472)
• Tests: make rootless uidmap install robust against stale apt cache (#​14490)
• Update stable channel to v1.36.3+k3s1 (#​14492)
• Etcd client locking (#​14488)
• Tests: Install rke2-multus-crd chart for multus e2e test (#​14489)
• Filter large untemplated issues (#​14435)
• Fix typo in spegel deferred store comment (#​14485)
• Make explicit where coredns customizations should be made (#​14503)
• Bump docker version in CI to 29 (#​14506)
• Don't retag images for a registry they are already hosted by (#​14484)
  • Fixed an issue where airgap image imports could fail with an "already exists" error, or accumulate duplicate image tags on every restart, when system-default-registry matched the registry the images were already tagged for.
• Tidy dockerfile and build stages (#​14511)
• Add advertise-address to SANs before generating apiserver cert (#​14516)
  • Fixed the apiserver serving certificate not including the value of --advertise-address in its subject alternative names.
• Bump Local Path Provisioner version (#​14496)
• Bump containerd to v2.3.4-k3s1.36 (#​14510)
• Bump kine to v0.16.4 for nats replay fix (#​14521)
• Feat: Add Project Bluefin to adopters list (#​14549)
• Bump k8s to v1.37 (#​14509)
• Bump Traefik and bundle gateway-api crds (#​14573)
• Bump rancher/mirrored-coredns-coredns image version (#​14577)
• Bump critools to v1.37 (#​14579)
• Bump gateway-api-crd version 3, which includes the keep annotation (#​14586)
• Bump Traefik to v3.7.13 (#​14606)
• Bump google.golang.org/grpc to v1.83.2 for CVE-2026-84445 (#​14614)
• Bump google.golang.org/grpc to v1.83.2, not v1.82.2 (#​14619)

Embedded Component Versions

Component	Version
Kubernetes	v1.37.0
Kine	v0.17.0
SQLite	3.53.4
Etcd	v3.7.1-k3s1
Containerd	v2.3.4-k3s1
Runc	v1.4.2
Flannel	v0.28.4
Metrics-server	v0.9.0
Traefik	v3.7.13
CoreDNS	v1.14.7
Helm-controller	v0.17.7
Local-path-provisioner	v0.0.37

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.36.5+k3s1: v1.36.5+k3s1

Compare Source

[!WARNING]
This release upgrades Traefik chart to v40.x which includes a breaking change for the ingress-nginx migration: the provider name changes from kubernetesIngressNginx to kubernetesIngressNGINX. Check https://github.com/traefik/traefik-helm-chart/releases/tag/v40.0.0 for more details

This release updates Kubernetes to v1.36.5, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.36.4+k3s1:

• Bump rancher/mirrored-coredns-coredns image version (#​14534)
• Bump gateway-api and traefik image versions for K3s 1.36 (#​14567)
  • Bump Traefik image to 3.7.12 and gateway-api to 1.6.1
• Bump Traefik to v3.7.13 (#​14610)
• Bump google.golang.org/grpc to v1.83.2 for CVE-2026-84445 (#​14620)
• Backports for 2026-09 (#​14632)
  • Fix restore from compressed etcd snapshot #​14528
  • Enable seccomp in riscv64 builds #​14529
  • Use ginkgo CLI to run tests #​14531
  • Bump k3s-io/api to v0.2.0 #​14570
  • Servicelb multiple lbpools #​14547
  • Close minio.Object after read #​14580
  • Bump k3s-io/apis again #​14589
  • Fix --flannel-cni-conf not reaching the embedded flannel #​14598
  • Check-config: suppress colors when stdout is not a terminal #​14595
  • Fix deploy controller not re-applying manifests when mtime is pinned to the epoch #​14568
  • Bump etcd to v3.7.1-k3s3 for nonblocking logging support #​14628
  • Bump kine to v0.17.1 #​14627
• Require node password informer sync before using cache (#​14673)
• Bump helm-controller (#​14685)
• Bump k3s-io/kubernetes and Go references (#​14694)
• Reject anonymous access to supervisor router (spegel/pprof/metrics) (#​14702)
• Improve CA hash validation (#​14706)

Embedded Component Versions

Component	Version
Kubernetes	v1.36.5
Kine	v0.16.5
SQLite	3.53.4
Etcd	v3.6.14-k3s3
Containerd	v2.3.4-k3s1.36
Runc	v1.4.2
Flannel	v0.28.4
Metrics-server	v0.9.0
Traefik	v3.7.13
CoreDNS	v1.14.7
Helm-controller	v0.17.9
Local-path-provisioner	v0.0.37

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.