v1.37.X

Upgrade Notice

Before upgrading from earlier releases, be sure to read the Kubernetes Urgent Upgrade Notes.
Version Release date Kubernetes Kine SQLite Etcd Containerd Runc Flannel Metrics-server Traefik CoreDNS Helm-controller Local-path-provisioner

v1.37.1+k3s1

Sep 30 2026

v1.37.1

v0.17.1

3.53.4

v3.7.1-k3s3

v2.3.4-k3s1

v1.4.2

v0.28.4

v0.9.0

v3.7.13

v1.14.7

v0.17.9

v0.0.37

v1.37.0+k3s1

Sep 14 2026

v1.37.0

v0.17.0

3.53.4

v3.7.1-k3s1

v2.3.4-k3s1

v1.4.2

v0.28.4

v0.9.0

v3.7.13

v1.14.7

v0.17.7

v0.0.37

Release v1.37.1+k3s1

This release updates Kubernetes to v1.37.1, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.37.0+k3s1:

  • Backports for 2026-09 (#14631)

    • Fix restore from compressed etcd snapshot #14528

    • Enable seccomp in riscv64 builds #14529

    • Use ginkgo CLI to run tests #14531

    • Bump kine to v0.17.1 #14627

  • Bump helm-controller (#14684)

  • Bump k3s-io/kubernetes and Go references (#14695)

  • Bump cadvisor to v0.60.5-k3s1 (#14698)

  • Reject anonymous access to supervisor router (spegel/pprof/metrics) (#14701)

  • Improve CA hash validation (#14705)

Release v1.37.0+k3s1

This release updates Kubernetes to v1.37.0, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.36.3+k3s1:

  • Bump mirrored-pause to 3.10.2 (#14339)

  • Build(deps): bump the action-deps group with 14 updates (#14394)

  • Bump dynamiclistener for atomic write fix (#14382)

  • Bump helm-controller/klipper-helm (#14403)

  • Simplify WriteSubnetFile cleanup and make atomic (#14405)

  • Fix typo in snapshot prune event (#14410)

  • Bump rancher/mirrored-coredns-coredns image version (#14415)

  • Add updatecli manifest to bump Kubernetes across multiple release branches (#14402)

  • Bump metrics-server to v0.9.0 (#14416)

  • Updatecli: relax metrics-server semver filter et al. (#14429)

  • Updatecli: add missing requiredEnv (#14434)

  • Bump helm-controller and klipper-helm for --force-conflicts support (#14446)

  • Bump k3s-io/kubernetes and Go references (#14457)

  • Bump etcd to v3.6.14 (#14460)

  • Fix production builds always enabling Go coverage instrumentation (#14465)

  • Feat: support custom kubeconfig name (#14440)

    • Added --write-kubeconfig-name server flag to set the name for cluster, user and context in generated kubeconfig.

  • Require node password informer sync before using cache (#14459)

  • Bump helm-controller and klipper-helm (#14474)

  • Enable unit tests (#14480)

  • Fix: change sles to use slemicro rpms instead of microos (#14472)

  • Tests: make rootless uidmap install robust against stale apt cache (#14490)

  • Update stable channel to v1.36.3+k3s1 (#14492)

  • Etcd client locking (#14488)

  • Tests: Install rke2-multus-crd chart for multus e2e test (#14489)

  • Filter large untemplated issues (#14435)

  • Fix typo in spegel deferred store comment (#14485)

  • Make explicit where coredns customizations should be made (#14503)

  • Bump docker version in CI to 29 (#14506)

  • Don’t retag images for a registry they are already hosted by (#14484)

    • Fixed an issue where airgap image imports could fail with an "already exists" error, or accumulate duplicate image tags on every restart, when system-default-registry matched the registry the images were already tagged for.

  • Tidy dockerfile and build stages (#14511)

  • Add advertise-address to SANs before generating apiserver cert (#14516)

    • Fixed the apiserver serving certificate not including the value of --advertise-address in its subject alternative names.

  • Bump Local Path Provisioner version (#14496)

  • Bump containerd to v2.3.4-k3s1.36 (#14510)

  • Bump kine to v0.16.4 for nats replay fix (#14521)

  • Feat: Add Project Bluefin to adopters list (#14549)

  • Bump k8s to v1.37 (#14509)

  • Bump Traefik and bundle gateway-api crds (#14573)

  • Bump rancher/mirrored-coredns-coredns image version (#14577)

  • Bump critools to v1.37 (#14579)

  • Bump gateway-api-crd version 3, which includes the keep annotation (#14586)

  • Bump Traefik to v3.7.13 (#14606)

  • Bump google.golang.org/grpc to v1.83.2 for CVE-2026-84445 (#14614)

  • Bump google.golang.org/grpc to v1.83.2, not v1.82.2 (#14619)