chore(deps): update terraform talos to v0.11.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
talos (source)	required_provider	minor	0.10.1 → 0.11.0

---

Release Notes

siderolabs/terraform-provider-talos (talos)

v0.11.0

Compare Source

Welcome to the v0.11.0 release of terraform-provider-talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/terraform-provider-talos/issues.

ephemeral resources

New ephemeral resources are added, please see docs.

Component Updates

Talos sdk: v1.13.0

Contributors

• Noel Georgi
• Mickaël Canévet
• Nikita COEUR
• Dennis Witt
• Nahue
• purajit

Changes

20 commits

• 1c68732 release(v0.11.0): prepare release
• b5affe3 fix(docs): update talos_version description
• ce4ede8 fix: handle unknown-whole-list config_patches on machine_configuration_apply
• 000a3ec fix(ephemeral): detect machine_configuration_input_wo changes via hash
• 032a5ac chore: bump deps
• 7b6a3e4 fix: prevent empty resolved_apply_mode when reusing state
• f427339 release(v0.11.0-beta.2): prepare release
• 6ed1274 feat: add sboms to release
• 4729352 feat(ephemeral): rewrite talos_cluster_kubeconfig to generate from machine_secrets
• 4992c4a fix(ephemeral): rewrite talos_client_configuration to generate from machine_secrets
• 4c8def5 release(v0.11.0-beta.1): prepare release
• 01330a9 chore: update goreleaser schema
• 1585aed fix: remove unsupported windows/arm build target for Go 1.25
• d7bb719 release(v0.11.0-beta.0): prepare release
• 09f6c83 fix: restore correct skip_kubernetes_checks behavior
• eaedcfd chore: bump deps
• f4d673f feat: add ephemeral resources to prevent secrets from leaking to state
• 5f07e0f feat: add staged_if_needing_reboot apply mode for automatic reboot prevention
• c8e3b87 feat: add exact_filters attribute to talos_image_factory_extensions_versions
• efe146e fix: gracefully handle Unknown config_patches values

Changes since v0.11.0-beta.2

6 commits

• 1c68732 release(v0.11.0): prepare release
• b5affe3 fix(docs): update talos_version description
• ce4ede8 fix: handle unknown-whole-list config_patches on machine_configuration_apply
• 000a3ec fix(ephemeral): detect machine_configuration_input_wo changes via hash
• 032a5ac chore: bump deps
• 7b6a3e4 fix: prevent empty resolved_apply_mode when reusing state

Dependency Changes

• github.com/hashicorp/terraform-plugin-framework v1.17.0 -> v1.19.0
• github.com/hashicorp/terraform-plugin-go v0.29.0 -> v0.31.0
• github.com/hashicorp/terraform-plugin-sdk/v2 v2.38.1 -> v2.40.0
• github.com/hashicorp/terraform-plugin-testing v1.14.0 -> v1.15.0
• github.com/siderolabs/crypto v0.6.4 -> v0.6.5
• github.com/siderolabs/image-factory v0.9.0 -> v1.1.0
• github.com/siderolabs/talos v1.12.0 -> v1.13.0
• github.com/siderolabs/talos/pkg/machinery v1.12.0 -> v1.13.0
• go.yaml.in/yaml/v4 v4.0.0-rc.3 -> v4.0.0-rc.4
• golang.org/x/crypto v0.50.0 new
• golang.org/x/mod v0.31.0 -> v0.35.0
• k8s.io/client-go v0.35.0 -> v0.35.4

Previous release can be found at v0.10.1

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Terraform Plan (02-infrastructure)

→ Resource Changes: 1 to create, 5 to update, 0 to re-create, 0 to delete, 0 ephemeral.

✨ Create

local_sensitive_file.ansible_ssh_key

+ content              = (sensitive value)
+ content_base64sha256 = (known after apply)
+ content_base64sha512 = (known after apply)
+ content_md5          = (known after apply)
+ content_sha1         = (known after apply)
+ content_sha256       = (known after apply)
+ content_sha512       = (known after apply)
+ directory_permission = "0700"
+ file_permission      = "0600"
+ filename             = "./.ansible/ssh_key"
+ id                   = (known after apply)

♻️ Update

talos_machine_configuration_apply.controlplane

  id                          = "machine_configuration_apply"
+ machine_configuration_hash  = "f12f2eae93ecd8e95ffc806c03316506e2c0c5e1183739b1712f2362e8307eeb"
  # (7 unchanged attributes hidden)

talos_machine_configuration_apply.db_worker

  id                          = "machine_configuration_apply"
+ machine_configuration_hash  = "c1a0f99c447efaf3b72b95c13f668cec8254693e6de56c3ddc5d621262253e81"
  # (7 unchanged attributes hidden)

talos_machine_configuration_apply.workers["talos-worker-1"]

  id                          = "machine_configuration_apply"
! machine_configuration       = (sensitive value)
+ machine_configuration_hash  = "5370e3eb90984fba3e0b9e93ffb35659a3851a0f7be17e3129f61c5c3d6a75db"
! machine_configuration_input = (sensitive value)
  # (5 unchanged attributes hidden)

talos_machine_configuration_apply.workers["talos-worker-2"]

  id                          = "machine_configuration_apply"
! machine_configuration       = (sensitive value)
+ machine_configuration_hash  = "5370e3eb90984fba3e0b9e93ffb35659a3851a0f7be17e3129f61c5c3d6a75db"
! machine_configuration_input = (sensitive value)
  # (5 unchanged attributes hidden)

talos_machine_configuration_apply.workers["talos-worker-3"]

  id                          = "machine_configuration_apply"
! machine_configuration       = (sensitive value)
+ machine_configuration_hash  = "5370e3eb90984fba3e0b9e93ffb35659a3851a0f7be17e3129f61c5c3d6a75db"
! machine_configuration_input = (sensitive value)
  # (5 unchanged attributes hidden)

---

Triggered by @renovate[bot], Commit: 1734939d852d5ae0fcfe404b2eee045ceda16ca0