139 wires and counting

$ follow Kubernetes

Keep up with Kubernetes in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-09-23
stories 43

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

Watch cache stops broadcasting unchanged resource versions

By RepoJournal · Filed · About Kubernetes · Composed from the cited sources · methodology

The apiserver's watch cache gets two targeted changes from serathius, while test-infra continues its migration off CAPZ CI templates and the kubelet picks up mldsa support.

Merge pull request #142291 from serathius/watchcache-rv-broadcast kubernetes/apiserver

by Kubernetes Publisher

The watch cache previously notified watchers of a resource version change even when the version had not actually moved; it now suppresses that broadcast. This is one of a pair of watch-cache changes landing together, alongside use of Element in storage.

Merge pull request #142298 from serathius/watchcache-element kubernetes/apiserver

by Kubernetes Publisher

Storage in the apiserver now uses Element, the follow-up to the resource version broadcast fix in the same watch cache effort. Together they touch the hot path that every watch request traverses.

Merge pull request #138219 from yashsingh74/fix-apis-handler kubernetes/apiserver

by Kubernetes Publisher

Requests to unregistered apiserver paths used to get a plain text response; they now return a JSON Status 404. Anything parsing error bodies from the apiserver, including proxies and client libraries that branch on content type, will see structured output where it previously saw text.

Merge pull request #142046 from rphillips/feat/kubelet_mldsa_support kubernetes/kubelet

by Kubernetes Publisher

The kubelet gained mldsa support via rphillips' change, pulling in the post-quantum signature scheme at the node agent level. Simultaneously the kubelet took the start-of-cycle tools bump, mirrored in apiserver.

fix: use non-ci templates for for cloud-provider-azure 1.33 and 1.34 test jobs kubernetes/test-infra

by anndono

cloud-provider-azure release-1.33 and release-1.34 test jobs moved off the CAPZ ci-version templates onto stable, non-CI cluster templates hosted in cloud-provider-azure, and the 1.33 periodics were removed. Related work pinned the 1.34 k8s version and added a correctness scenario plus an etcd scraping fix for AWS scale jobs.

Quick answers

What shipped in Kubernetes on September 23, 2026?
The apiserver's watch cache gets two targeted changes from serathius, while test-infra continues its migration off CAPZ CI templates and the kubelet picks up mldsa support. In total, 30 commits and 13 pull requests landed.
Who contributed to Kubernetes on September 23, 2026?
8 developers shipped this update, including serathius, kubernetes-prow[bot], anndono, upodroid, Mohammad Amin Taheri, Eunice(Eunyoung) Shin, SuperSon7, and Kubernetes Publisher.
What were the notable Kubernetes updates?
Merge pull request #142291 from serathius/watchcache-rv-broadcast, Merge pull request #142298 from serathius/watchcache-element, and Merge pull request #138219 from yashsingh74/fix-apis-handler.