v1.6.5

[oguzkilcan]

Omni 1.6.5 (2026-04-09)

Welcome to the v1.6.5 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Urgent Upgrade Notes (No, really, you MUST read this before you upgrade)

The deprecated flags and config fields that were kept for the SQLite migration period (introduced in v1.4.0) have been removed.

If you still have any of the following flags or config keys set, you must remove them before upgrading, as they will cause startup errors:

• --audit-log-dir (.logs.audit.path)
• --secondary-storage-path (.storage.secondary.path)
• --machine-log-storage-path (.logs.machine.storage.path)
• --machine-log-storage-enabled (.logs.machine.storage.enabled)
• --log-storage-path (.logs.machine.storage.path)
• --embedded-discovery-service-snapshot-path (.services.embeddedDiscoveryService.snapshotsPath)
• --machine-log-buffer-capacity (.logs.machine.bufferInitialCapacity)
• --machine-log-buffer-max-capacity (.logs.machine.bufferMaxCapacity)
• --machine-log-buffer-safe-gap (.logs.machine.bufferSafetyGap)
• --machine-log-num-compressed-chunks (.logs.machine.storage.numCompressedChunks)

The automatic migration code for BoltDB secondary storage, file-based audit logs, file-based discovery service snapshots, and circular buffer machine logs has also been removed. If you are upgrading from a version older than v1.4.0, you must first upgrade to v1.4.x to complete the migrations, then upgrade to this version.

Contributors

• Andrey Smirnov
• Utku Ozdemir
• Oguz Kilcan
• Orzelius
• Artem Chernyshev
• Dmitriy Matrenichev
• Hector Monsalve

Changes

4 commits

• f81832d2 release(v1.6.5): prepare release
• 3640387a fix: batch SQLite cleanup deletes to reduce write lock contention
• 2c7de540 chore: bump go to v1.26.2
• bcf85902 chore: bump dependencies and rekres

Changes from siderolabs/crypto

1 commit

• 6d82f0c fix: bump minimum TLS version to v1.3

Changes from siderolabs/discovery-service

4 commits

• f1fdd95 release(v1.0.17): prepare release
• 2267f4c feat: store relative expiration (TTL) instead of absolute
• f708818 release(v1.0.16): prepare release
• 379016a feat: add option to disable client IP reporting in Hello response

Changes from siderolabs/go-kubernetes

5 commits

• 503792d chore: add retry to main kubernetes operations
• 6a00c4f feat: handle CR defined alongside their CRD in the same apply
• 4ff2602 feat: update deprecations to Kuberntes 1.36.0-beta.0
• 691a26b feat: add StateProvider for per-node COSI state in upgrade checks
• 92163c3 fix: set a the context logger

Changes from siderolabs/go-talos-support

2 commits

• 6ec24a7 feat: add per-node Talos client provider for support bundle collection
• 5e0155f fix: add trailing new line when writing to logger

Changes from siderolabs/grpc-proxy

3 commits

• d670c42 chore: bump dependencies
• 8614c71 chore: bump deps
• 80677e0 fix: propagate the headers before the message

Changes from siderolabs/proto-codec

1 commit

• 9b8a14e chore: bump dependencies

Changes from siderolabs/siderolink

1 commit

• 0a1933c chore: bump dependencies

Dependency Changes

• github.com/ProtonMail/gopenpgp/v2 v2.9.0 -> v2.10.0
• github.com/aws/aws-sdk-go-v2 v1.41.3 -> v1.41.5
• github.com/aws/aws-sdk-go-v2/config v1.32.11 -> v1.32.14
• github.com/aws/aws-sdk-go-v2/credentials v1.19.11 -> v1.19.14
• github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.22.6 -> v1.22.12
• github.com/aws/aws-sdk-go-v2/service/s3 v1.96.4 -> v1.98.0
• github.com/aws/smithy-go v1.24.2 -> v1.24.3
• github.com/cosi-project/runtime v1.14.0 -> v1.14.1
• github.com/go-jose/go-jose/v4 v4.1.3 -> v4.1.4
• github.com/google/go-containerregistry v0.21.2 -> v0.21.4
• github.com/hashicorp/vault/api v1.22.0 -> v1.23.0
• github.com/hashicorp/vault/api/auth/kubernetes v0.10.0 -> v0.12.0
• github.com/siderolabs/crypto v0.6.4 -> v0.6.5
• github.com/siderolabs/discovery-service v1.0.15 -> v1.0.17
• github.com/siderolabs/go-kubernetes 8364adde8878 -> v0.2.36
• github.com/siderolabs/go-talos-support v0.1.4 -> v0.2.0
• github.com/siderolabs/grpc-proxy v0.5.1 -> v0.5.2
• github.com/siderolabs/omni/client v1.5.9 -> v1.6.1
• github.com/siderolabs/proto-codec v0.1.3 -> v0.1.4
• github.com/siderolabs/siderolink v0.3.15 -> v0.3.16
• github.com/siderolabs/talos/pkg/machinery cc636f1dd1f1 -> v1.13.0-beta.1
• github.com/zitadel/oidc/v3 v3.45.5 -> v3.46.0
• go.etcd.io/etcd/client/pkg/v3 v3.6.8 -> v3.6.10
• go.etcd.io/etcd/client/v3 v3.6.8 -> v3.6.10
• go.etcd.io/etcd/server/v3 v3.6.8 -> v3.6.10
• golang.org/x/tools v0.42.0 -> v0.43.0
• k8s.io/api v0.35.2 -> v0.35.3
• k8s.io/client-go v0.35.2 -> v0.35.3

Previous release can be found at v1.6.4

---

This discussion was created from the release v1.6.5.