Kubernetes
v1.35.10Kubernetes CoreOct 28, 2026
A maintenance release with updated Go builds and fixes for several correctness issues. It also expands request-header compatibility, with no required operator configuration change.
All 7 other recorded changesfixes 4 · value changes 2 · constraints 1
fixes (4)
- - Fixed a bug where Pod
.could flap between partial lists of claims, when multiple claims were used in the pod. ([#142023](https://github.com/kubernetes/kubernetes/pull/142023), [@troychiu](https://github.com/troychiu)) [SIG Apps and Node]status. resourceClaimStatuses - - Fixed an issue where a Job recreated with the same name as a recently deleted Job could remain unreconciled because it inherited pending Pod expectations from the previous Job. ([#142392](https://github.com/kubernetes/kubernetes/pull/142392), [@6democratickim9](https://github.com/6democratickim9)) [SIG Apps and Testing]
- - Fixed kube-scheduler evaluation of pod affinity and anti-affinity namespace selectors using negative operators, so pods in excluded namespaces no longer affect node filtering or scoring. ([#142050](https://github.com/kubernetes/kubernetes/pull/142050), [@rahulbabu95](https://github.com/rahulbabu95)) [SIG Scheduling and Testing]
- - Kubelet/DRA: fixed a bug where retrying a partially-failed PrepareResources caused duplicate CDI device IDs to be passed to the CRI runtime, which could cause container start to fail. ([#140954](https://github.com/kubernetes/kubernetes/pull/140954), [@bart0sh](https://github.com/bart0sh)) [SIG Node]
value changes (2)
- - Kubernetes is now built with Go 1.26.10 ([#143256](https://github.com/kubernetes/kubernetes/pull/143256), [@palnabarun](https://github.com/palnabarun)) [SIG Release]
- - Kubernetes is now built using Go 1.26.9 ([#143119](https://github.com/kubernetes/kubernetes/pull/143119), [@xmudrii](https://github.com/xmudrii)) [SIG Release and Testing]
constraints (1)
- - Kube-apiserver and other servers built on k8s.io/apiserver now accept up to 16384 request header values. Without this, Go 1.27's default of 500 rejects impersonated or proxied users with about 500 or more groups with HTTP 431. Releases built with Go 1.26 had no separate header-count limit. ([#142772](https://github.com/kubernetes/kubernetes/pull/142772), [@cwedgwood](https://github.com/cwedgwood)) [SIG API Machinery and Auth]
Add Kubernetes to your stack
A weekly email arrives when a release needs action. Weeks with nothing to act on, like this one, send no email.