Kubernetes
v1.36.4Kubernetes CoreAug 20, 2026
A maintenance release with correctness fixes and a security-related dependency update. The dependency update is recorded in the manifest and has no standalone operator impact.
Action needed (1)
securitySecurity updates for
golang.andorg/x/text golang.org/x/net The dependency manifest updates
golang.andorg/x/text golang.to include security updates.org/x/net
All 4 other recorded changesfixes 4
fixes (4)
- - Client-go: FakeCustomStore implements the Bookmark and LastStoreSyncResourceVersion methods added to the cache.Store interface in v0.36, so it satisfies cache.Store again ([#141001](https://github.com/kubernetes/kubernetes/pull/141001), [@alancaldelas](https://github.com/alancaldelas)) [SIG API Machinery]
- - Fixed a DRA scheduling bug where the structured allocator keyed its shared-counter caches by pool name alone, so two drivers publishing a pool with the same name on a node could use each other's counter definitions and incorrectly accept or reject device allocations in the second driver's pool. ([#140504](https://github.com/kubernetes/kubernetes/pull/140504), [@thc1006](https://github.com/thc1006)) [SIG Node]
- - Fixed a race condition in preemption, where a preemptor pod could get stuck in unschedulable state. NONE NONE ([#140685](https://github.com/kubernetes/kubernetes/pull/140685), [@iomarsayed](https://github.com/iomarsayed)) [SIG Scheduling and Testing]
- - Kubelet/DRA: fixed a bug where retrying a partially-failed PrepareResources caused duplicate CDI device IDs to be passed to the CRI runtime, which could cause container start to fail. ([#140955](https://github.com/kubernetes/kubernetes/pull/140955), [@bart0sh](https://github.com/bart0sh)) [SIG Node]
Add Kubernetes to your stack
A weekly email arrives when a release needs action. Like the security patches in this release.