chore: update dependencies

Updated various dependencies.

Signed-off-by: Mateusz Urbanek <[email protected]>

Author: shanduur

CHANGELOG.md

@@ -17,7 +17,6 @@ crun: 1.24
 drbd: 9.2.15
 ecr-credential-provider: 1.34.1
 fuse3: 3.17.4
-glibc: 2.42
 gvisor: 20251020.0
 hailort: 4.23.0
 kata-containers: 3.21.0
@@ -3506,4 +3505,3 @@ System extensions are compatible with Talos v1.0.x.
 ### Dependency Changes
 
 This release has no dependency changes
-

README.md

@@ -62,10 +62,10 @@ tiers based on support level:
 | ---- | ---- | ----- | ------- | ----------- |
 | [crun](container-runtime/crun) | :yellow_square: extra | [ghcr.io/siderolabs/crun](https://github.com/siderolabs/extensions/pkgs/container/crun) | `1.25.1` |  This system extension provides crun using containerd's runtime handler. |
 | [ecr-credential-provider](container-runtime/ecr-credential-provider) | :yellow_square: extra | [ghcr.io/siderolabs/ecr-credential-provider](https://github.com/siderolabs/extensions/pkgs/container/ecr-credential-provider) | `v1.34.1` |  This system extension provides a binary which implements Kubelet's CredentialProvider API to authenticate against AWS' Elastic Container Registry and pull images. |
-| [gvisor](container-runtime/gvisor) | :green_square: core | [ghcr.io/siderolabs/gvisor](https://github.com/siderolabs/extensions/pkgs/container/gvisor) | `20251103.0` |  This system extension provides gVisor using containerd's runtime handler. |
+| [gvisor](container-runtime/gvisor) | :green_square: core | [ghcr.io/siderolabs/gvisor](https://github.com/siderolabs/extensions/pkgs/container/gvisor) | `20251118.0` |  This system extension provides gVisor using containerd's runtime handler. |
 | [gvisor-debug](container-runtime/gvisor-debug) | :yellow_square: extra | [ghcr.io/siderolabs/gvisor-debug](https://github.com/siderolabs/extensions/pkgs/container/gvisor-debug) | `v1.0.0` |  This system extension enables gVisor debug logging. |
-| [kata-containers](container-runtime/kata-containers) | :yellow_square: extra | [ghcr.io/siderolabs/kata-containers](https://github.com/siderolabs/extensions/pkgs/container/kata-containers) | `3.22.0` |  This system extension provides kata-container using containerd's runtime handler. |
-| [soci-snapshotter](container-runtime/soci-snapshotter) | :yellow_square: extra | [ghcr.io/siderolabs/soci-snapshotter](https://github.com/siderolabs/extensions/pkgs/container/soci-snapshotter) | `v0.11.1` |  This system extension provides AWS SOCI Snapshotter using containerd's runtime handler. |
+| [kata-containers](container-runtime/kata-containers) | :yellow_square: extra | [ghcr.io/siderolabs/kata-containers](https://github.com/siderolabs/extensions/pkgs/container/kata-containers) | `3.23.0` |  This system extension provides kata-container using containerd's runtime handler. |
+| [soci-snapshotter](container-runtime/soci-snapshotter) | :yellow_square: extra | [ghcr.io/siderolabs/soci-snapshotter](https://github.com/siderolabs/extensions/pkgs/container/soci-snapshotter) | `v0.12.0` |  This system extension provides AWS SOCI Snapshotter using containerd's runtime handler. |
 | [spin](container-runtime/spin) | :yellow_square: extra | [ghcr.io/siderolabs/spin](https://github.com/siderolabs/extensions/pkgs/container/spin) | `v0.22.0` |  This system extension provides support for spin runtime (WebAssembly) containers. |
 | [stargz-snapshotter](container-runtime/stargz-snapshotter) | :green_square: core | [ghcr.io/siderolabs/stargz-snapshotter](https://github.com/siderolabs/extensions/pkgs/container/stargz-snapshotter) | `v0.18.1` |  This system extension provides Stargz Snapshotter using containerd's runtime handler. |
 | [wasmedge](container-runtime/wasmedge) | :yellow_square: extra | [ghcr.io/siderolabs/wasmedge](https://github.com/siderolabs/extensions/pkgs/container/wasmedge) | `v0.6.0` |  This system extension provides support for WasmEdge runtime (WebAssembly) containers. |
@@ -132,7 +132,7 @@ tiers based on support level:
 | [cloudflared](network/cloudflared) | :white_large_square: contrib | [ghcr.io/siderolabs/cloudflared](https://github.com/siderolabs/extensions/pkgs/container/cloudflared) | `2025.11.1` |  Cloudflare Tunnel securely connects resources to Cloudflare without a public IP. A lightweight daemon (cloudflared) creates outbound-only connections to Cloudflare, allowing safe access to services like HTTP, SSH, remote desktops, and other protocols. More info: https://github.com/cloudflare/cloudflared/ |
 | [lldpd](network/lldpd) | :yellow_square: extra | [ghcr.io/siderolabs/lldpd](https://github.com/siderolabs/extensions/pkgs/container/lldpd) | `1.0.20` |  LLDP adds a LLDP discovery service to Talos. LLDP cli can be used to interface with the daemon. |
 | [nebula](network/nebula) | :white_large_square: contrib | [ghcr.io/siderolabs/nebula](https://github.com/siderolabs/extensions/pkgs/container/nebula) | `1.9.7` |  A scalable overlay networking tool with a focus on performance, simplicity and security |
-| [netbird](network/netbird) | :white_large_square: contrib | [ghcr.io/siderolabs/netbird](https://github.com/siderolabs/extensions/pkgs/container/netbird) | `0.59.12` |  NetBird combines a WireGuard®-based overlay network with Zero Trust Network Access, providing a unified open source platform for reliable and secure connectivity. |
+| [netbird](network/netbird) | :white_large_square: contrib | [ghcr.io/siderolabs/netbird](https://github.com/siderolabs/extensions/pkgs/container/netbird) | `0.60.2` |  NetBird combines a WireGuard®-based overlay network with Zero Trust Network Access, providing a unified open source platform for reliable and secure connectivity. |
 | [newt](network/newt) | :white_large_square: contrib | [ghcr.io/siderolabs/newt](https://github.com/siderolabs/extensions/pkgs/container/newt) | `1.6.0` |  Newt is a fully user space WireGuard tunnel client and TCP/UDP proxy, designed to securely expose private resources controlled by Pangolin. By using Newt, you don't need to manage complex WireGuard tunnels and NATing. More info: https://github.com/fosrl/newt |
 | [tailscale](network/tailscale) | :yellow_square: extra | [ghcr.io/siderolabs/tailscale](https://github.com/siderolabs/extensions/pkgs/container/tailscale) | `1.90.9` |  Tailscale connects your team's devices and development environments for easy access to remote resources. |
 | [zerotier](network/zerotier) | :white_large_square: contrib | [ghcr.io/siderolabs/zerotier](https://github.com/siderolabs/extensions/pkgs/container/zerotier) | `1.16.0` |  Connect your Talos cluster into a zerotier network |

container-runtime/vars.yaml

@@ -1,19 +1,19 @@
 # renovate: datasource=github-tags extractVersion=^release-(?<version>.*)$ depName=google/gvisor
-GVISOR_VERSION: 20251103.0
+GVISOR_VERSION: 20251118.0
 # gvisor repo 'master' branch is Bazel-bazed, so we need to find matching commit in the "go" branch
 # find the go-branch specific merge commit ("Merge release-... (automated)") which has the release-tagged commit as a parent
-GVISOR_REV: 4c7af19427e66ca797303d092d1463b1c9481405
-GVISOR_SHA256: 29ea6a22b70a0bed789b998c8b1b57e35707f5a6d5f0b7e85e7ad789ac4d98ed
-GVISOR_SHA512: 038631f7b6e03ca14b2a038b51756b0ce8e3f9b490deebe4938419e82f98c9e81f891e39b8338f217c170b32bdedde6004f325ad9c0508ae3fdd864e8a446155
+GVISOR_REV: 311ceac0642f619915e80b926bac6ec1aed471f4
+GVISOR_SHA256: eb614e5075101073d8e0a01359720b3f0600232224c36ec3bf4b1a9146b17056
+GVISOR_SHA512: 41c300712037d996fb152c77bac375877b55dd16e18806e9f9670240fee4e5ec455ee280263b606e988c6a900c5feafed0be420f7a58bc3f40a0656ea29f28ed
 # renovate: datasource=github-releases depName=containerd/stargz-snapshotter
 STARGZ_SNAPSHOTTER_VERSION: v0.18.1
 STARGZ_SNAPSHOTTER_SHA256: 42e9bf7536a3c1eca2160b58fc865de47f6a338f30bb88a25fe50ed8b0d130e3
 STARGZ_SNAPSHOTTER_SHA512: 076943cd8488bf58b0fd54b41471f99d0289b4fc63f66549fb946c82fdb7e68794c215b8b9ed0e858cf12227db59bf7a360004d5232b6c090decdbb36a1bd323
 # renovate: datasource=github-releases depName=awslabs/soci-snapshotter
-SOCI_SNAPSHOTTER_VERSION: v0.11.1
-SOCI_SNAPSHOTTER_REV: 28781de6731978b2e2f0f43573a345e9fa14dbd1
-SOCI_SNAPSHOTTER_SHA256: cabeac915c9bd31c5ab16dd11ef3fb46ce9f9b707428b88319aa8940b9de3b5a
-SOCI_SNAPSHOTTER_SHA512: f42bf8bf1121cce918ed9cfab542d81e2ee5562fe42ef2d4806b7cf78da2e3e15f830eb86fc1dbc17fc0f1f2566723a4db3feadb473e66c06f2f5bbf21f69588
+SOCI_SNAPSHOTTER_VERSION: v0.12.0
+SOCI_SNAPSHOTTER_REV: eef118c6072dc125f0e030089833c4230540929f
+SOCI_SNAPSHOTTER_SHA256: bc7e07b7732fa83dc1e90ed29b11abdfeec6827d3666f4a5051c7b63602b80f5
+SOCI_SNAPSHOTTER_SHA512: 6e0c236b985526fc551c44e1b8b580cafa776f277ab29751a22fbe9e53c7308a953b90572eef40239091da9daab0c0b577ba404ff332e13b6bbd15b3200a4242
 # renovate: datasource=github-releases depName=kubernetes/cloud-provider-aws
 CLOUD_PROVIDER_AWS_VERSION: v1.34.1
 CLOUD_PROVIDER_AWS_SHA256: 41acb02dcbf3357d2f2f910a9dcc2a115b1f8eecc9d02c3df089e116a0a63905
@@ -31,13 +31,13 @@ SPIN_ARM64_SHA512: cd3dae66c9415758812f142721a3405a45ede487352d46ffcfcfd515a886e
 SPIN_AMD64_SHA256: adeb94339c673f09cffe8c45c04f9b18d410f9375d1570b6d1939758b507d257
 SPIN_AMD64_SHA512: ee8f89c13451d9fd99686a18aee1b4c8117d44da64c6e69f55eb3b7ec4bad3fc22b05dd7703ae58ab9b2721935e262f061c32f76bb0af7c95fd451807cc358bb
 # renovate: datasource=github-releases depName=kata-containers/kata-containers
-KATA_CONTAINERS_VERSION: 3.22.0
-KATA_CONTAINERS_SHA256: 1c425fefa6bb2ab3956a6066eb160591fdead776c2ed3c0b3977bf28d246c1db
-KATA_CONTAINERS_SHA512: 142bc70b6455f545d534371a845980ed00985d7225b5f672f3fef046a6f0a31871bd69ee2c931ab94c10089086123fe5987ec6615d7a7308027531269c4dae48
-KATA_CONTAINERS_STATIC_ARM64_SHA256: cba2c7c0be7b71c7d8c02d064927ff88ae4fff7f9a50298706e51a90f757d824
-KATA_CONTAINERS_STATIC_ARM64_SHA512: 2724fb89abd24e524a1f7cac08d47ec7cff4ee2aa0dea7aa9a96a2f6946a54f90c880d678190d1e06cb1a0dd7c5b3725650c0adfb1eb471aa284cf0eabfeee77
-KATA_CONTAINERS_STATIC_AMD64_SHA256: 9c8a1e8832a53bbb821b57b1fd8bda077c2d99adb22b655b7b6a567423b3cc3a
-KATA_CONTAINERS_STATIC_AMD64_SHA512: ac9e3c6c2dabe9b30cd92556e99b397d85f01e2574beea2287b6f33b9d49717f02397db4c0dbf8350b8beb5602237e4ab8629f7355ef8f54cb558c7f009d50fe
+KATA_CONTAINERS_VERSION: 3.23.0
+KATA_CONTAINERS_SHA256: 187f570e8c2ace76d2bb59e6ce8eadf7c9f63ed6cda0eaa66dbf60a82592c6ab
+KATA_CONTAINERS_SHA512: d921dace40545fab47647c68357d88bf2807b74d5b3546ed0d91416b98fbad4ecaabf449abcc20e34cee8fbcacffe4a66a6012b63815e6b2c60c0319f982cc6e
+KATA_CONTAINERS_STATIC_ARM64_SHA256: 6b15dee4fdad4dd57d0d4bb9d9bcfbc8a8657286a90a95d248b92b7c779c2f29
+KATA_CONTAINERS_STATIC_ARM64_SHA512: be39cf41763e88ac0d7e4290933653ed968f87db4362a7e6d66128683212f018fb14f06b5fb0b910eb1bb69be1ebad68d19d590aec35e34498bc8b674ad5bc37
+KATA_CONTAINERS_STATIC_AMD64_SHA256: 3b72a0e43424cda460c956619321656b5520493462d3c171a18f7e4dfde22edc
+KATA_CONTAINERS_STATIC_AMD64_SHA512: e6cf5064c091da7c7f41c23a881767f15b5d616026944b5384e8f90d64e9d03cdc6c15c10f2c09db07fccd93ac2cb47ffaac0fa749ff7c258b1d36d6f55b14f9
 # renovate: datasource=github-releases depName=containers/crun
 CRUN_VERSION: 1.25.1
 CRUN_ARM64_SHA256: 3a6463b3b633132c0c13218e019084ca156156973a81a544725cd7253c19c3e9

hack/release.toml

@@ -27,15 +27,15 @@ ctr: 2.1.5
 crun: 1.25.1
 drbd: 9.2.16
 ecr-credential-provider: 1.34.1
+soci-snapshotter: v0.12.0
 fuse3: 3.17.4
-glibc: 2.42
-gvisor: 20251103.0
+gvisor: 20251118.0
 hailort: 4.23.0
-kata-containers: 3.22.0
+kata-containers: 3.23.0
 lldpd: 1.0.20
 cloudflared: 2025.11.1
 nebula: 1.9.7
-netbird: 0.59.12
+netbird: 0.60.2
 newt: 1.6.0
 nut-client: 2.8.4
 qemu: 10.1.2

network/vars.yaml

@@ -25,6 +25,6 @@ NEWT_VERSION: 1.6.0
 NEWT_SHA256: 71d3b27e2802c6b0f42aef3badf58e3599360d54a836195836e93214fda7dc93
 NEWT_SHA512: 021cb93f8616a907f5d0d2e5c2979cc28669042b2cc77322633a23e49cae48e0498904536745f03fdeed03f23543d68fbd76dd6a04ca507585b6dc49b7e131a3
 # renovate: datasource=github-releases extractVersion=^v(?<version>.*)$ depName=netbirdio/netbird
-NETBIRD_VERSION: 0.59.12
-NETBIRD_SHA256: 2f0bdd45996f46f2e2c1dbf5a6712bba38a06cbfb7e4c00f814b0ffe149d7c6d
-NETBIRD_SHA512: c1c171de52b2d65130cfdf3fb54add154dcbefdaf4d753f9ab0ca2371924ae927eff2fc504175ab0951f4e5e4986ae56006518706eb1d0312ae56c4ba19d62f6
+NETBIRD_VERSION: 0.60.2
+NETBIRD_SHA256: e3ec023aff48d86ed1302708aa0522f610ec02891da8f24e6d98b9e9680bbc4e
+NETBIRD_SHA512: 8bebc0412932eb0c278749b282bae366ff032ca95c5e9032ad54e84e91b47c6f530c4f4bcf9d5843fdd4025516efdad46913f73d18976b177c2534bd7258affe