$ cat kubernetes/week/2026-09-07.log
the week in review · Sep 7 – Sep 13, 2026
Kubernetes patches SSH DoS, ships quantity overflow fix
By RepoJournal · composed from the cited sources · human-reviewed weekly · methodology
The SCTP and quantity changes land in kubernetes, plus golang.org/x/crypto moves to v0.56.0 to close CVE-2026-78662.
Merge pull request #141886 from AboEl3iz/fix-cve-2026-78662 kubernetes/kubernetes
kubernetes/kubernetes and kubernetes/api move golang.org/x/crypto to v0.56.0 to close CVE-2026-78662. If you build from either module, pin past this commit.
kube-cross: pin bullseye apt sources to snapshot.debian.org kubernetes/release
Debian 11 (bullseye) left its LTS window on 2026-08-31, breaking every kube-cross variant that builds on debian:bullseye-slim. The fix pins apt sources to snapshot.debian.org so the images build again; expect the same pin to surface in other bullseye-based images before the next release cycle.
build kube-cross, go-runner, releng-ci with golang 1.27.1/1.26.8 kubernetes/release
The release repo moves kube-cross, go-runner, and releng-ci to golang 1.27.1 / 1.26.8 and deprecates the old Kubernetes version images. This is the build toolchain you get from there going forward.
feat(pvc): add metrics for VolumeAttributesClass support kubernetes/kube-state-metrics
kube-state-metrics now exposes VolumeAttributesClass data for PVCs. The API is GA and default-enabled since v1.34, so dashboards that track PVC-attached storage progress can now be built from the same metrics endpoint.
Merge pull request #141873 from liggitt/kube-openapi kubernetes/kubernetes
The project bumps kube-openapi and drops the go-json-experiment dependency. Most users see no change, but anyone vendoring Kubernetes API machinery should align to avoid duplicate or conflicting dependency paths.
fix: correctly handling duplicate key/value taints on scaleway kubernetes/autoscaler
Taints with the same key and value but different effects were being overridden in the Scaleway provider. The fix reads a new API field that returns the correct taint list, with the previous field still returned for compatibility.
Merge pull request #10171 from pujitha24/auto/issue-10167 kubernetes/autoscaler
An int32 overflow in AWS memory computation from InstanceRequirements is fixed. If you run the AWS autoscaler against machines with large memory requests, this prevents the wrong instance type from being selected.
feat(akamai): Add firewall task and mock in Akamai cloud kubernetes/kops
kops adds a firewall task and mock for the Akamai cloud provider. This is a step toward Akamai parity with the existing cloud integrations, and it means kops can now manage firewall rules on that provider.
$ ls kubernetes/week/ # the briefings behind this review
Keep up with Kubernetes in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.
Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.