Kubernetes

v1.37.2Kubernetes Core

Oct 28, 2026

A maintenance release updates the Go toolchain, fixes correctness regressions, and improves compatibility for servers handling large request headers. It does not require operator migration or security action.

All 5 other recorded changesfixes 4 · value changes 1

fixes (4)

- Fixed a bug where NoExecute device taints (DeviceTaintRule) did not evict pods using DRA-backed extended resources (pod.Status.ExtendedResourceClaimStatus). ([#142492](https://github.com/kubernetes/kubernetes/pull/142492), [@troychiu](https://github.com/troychiu)) [SIG Apps, Auth, Node and Scheduling]
- Fixed an issue where a Job recreated with the same name as a recently deleted Job could remain unreconciled because it inherited pending Pod expectations from the previous Job. ([#142390](https://github.com/kubernetes/kubernetes/pull/142390), [@6democratickim9](https://github.com/6democratickim9)) [SIG Apps and Testing]
- Kube-apiserver and other servers built on k8s.io/apiserver now accept up to 16384 request header values. Without this, Go 1.27's default of 500 rejects impersonated or proxied users with about 500 or more groups with HTTP 431. Releases built with Go 1.26 had no separate header-count limit. ([#142770](https://github.com/kubernetes/kubernetes/pull/142770), [@cwedgwood](https://github.com/cwedgwood)) [SIG API Machinery and Auth]
This fixes a regression in 1.36 on systems where kube-proxy does not have permission to modify the sysctls

value changes (1)

- Kubernetes is now built with Go 1.26.10 ([#143204](https://github.com/kubernetes/kubernetes/pull/143204), [@dims](https://github.com/dims)) [SIG Release]

Add Kubernetes to your stack

A weekly email arrives when a release needs action. Weeks with nothing to act on, like this one, send no email.

Add to stack →

Official release note ↗All Kubernetes releases →