v1.36.X
Before upgrading from earlier releases, be sure to read the Kubernetes Urgent Upgrade Notes.
| Version | Release date | Kubernetes | Kine | SQLite | Etcd | Containerd | Runc | Flannel | Metrics-server | Traefik | CoreDNS | Helm-controller | Local-path-provisioner |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| v1.36.2+k3s1 | Jun 24 2026 | v1.36.2 | v0.16.1 | 3.53.0 | v3.6.12-k3s1 | v2.3.2-k3s2 | v1.4.2 | v0.28.4 | v0.8.1 | v3.7.4 | v1.14.4 | v0.17.1 | v0.0.36 |
| v1.36.1+k3s1 | May 20 2026 | v1.36.1 | v0.15.0 | 3.53.0 | v3.6.7-k3s1 | v2.2.3-k3s1 | v1.4.2 | v0.28.4 | v0.8.1 | v3.6.13 | v1.14.3 | v0.17.1 | v0.0.36 |
| v1.36.0+k3s1 | May 06 2026 | v1.36.0 | v0.14.16 | 3.51.3 | v3.6.7-k3s1 | v2.2.3-k3s1 | v1.4.2 | v0.28.4 | v0.8.1 | v3.6.13 | v1.14.2 | v0.17.1 | v0.0.35 |
Release v1.36.2+k3s1
[!WARNING] This release upgrades Traefik chart to v40.x which includes a breaking change for the ingress-nginx migration: the provider name changes from
kubernetesIngressNginxtokubernetesIngressNGINX. Check https://github.com/traefik/traefik-helm-chart/releases/tag/v40.0.0 for more details
This release updates Kubernetes to v1.36.2, and fixes a number of issues.
For more details on what's new, see the Kubernetes release notes.
Changes since v1.36.1+k3s1:
- Backport GitHub Action SHA pin updates from main (#14127)
- Backports for 2026-06 (#14151)
- Bump v3.7.4 Traefik (#14193)
- More backports for 2026-06 (#14211)
- Testing Backports 2026-06 (#14213)
- Bump klipper-helm for CVE reasons (#14235) (#14236)
- Bump containerd with the fix for []byte (#14243)
- Update to v1.36.2-k3s1 and Go 1.26.4 (#14230)
- Bump containerd to v2.3.2-k3s1 (#14254)
- Bump cri-api and containerd for upstream env string fix (#14277)
Release v1.36.1+k3s1
This release updates Kubernetes to v1.36.1, and fixes a number of issues.
For more details on what's new, see the Kubernetes release notes.
Changes since v1.36.0+k3s1:
- Backports for 2026-05 (#14032)
- Update rancher/local-path-provisioner image version (#14042)
- Update to v1.36.1-k3s1 and Go 1.26.2 (#14051)
- Bump klipper-helm image tag (#14055)
Release v1.36.0+k3s1
This release updates Kubernetes to v1.36.0, and fixes a number of issues.
For more details on what's new, see the Kubernetes release notes.
Changes since v1.35.3+k3s1:
- Add sipgate to the list of adopters (#13881)
- Add Rocket Technologies to the list of adopters (#13890)
- Make Dockerfile.test more secure (#13882)
- Make tests/integration/Dockerfile.test more secure (#13883)
- Secure the e2e yaml GHA (#13885)
- Pin govulncheck GHA version (#13887)
- Verify sha256sum for kubelet, vagrant zip and go binary (#13889)
- Check the k3s-root sha256sum (#13888)
- Fix reproducibility of embedded data tarball (#13875)
- Fix S3 test to account for change to s3mock (#13906)
- Bump runc/spegel/helm-controller/kine (#13909)
- Bump runc to v1.4.2
- Bump spegel to v0.6.0-k3s2
- Bump helm-controller to v0.17.1
- Bump kine to v0.14.16
- Fix embedded executor VPN config injection (#13920)
- Bump containerd to v2.2.3 (#13931)
- Bump flannel to v0.28.4 (#13937)
- Immutable release changes (#13902)
- Bump Traefik to 3.6.13 (#13969)
- Switch from draft to pre-release (#13951)
- Fix SANs added from comma-separated node-external-ip list (#13989)
- Fix docker dualstack test (#13994)
- Bump klipper-helm image for revision check fix (#13995)
- Bump upstream to v1.36 (#13986)
- Fix kubectl exec when using docker (#14021)