release(v1.4.3): prepare release

This is the official v1.4.3 release.

Signed-off-by: Noel Georgi <git@frezbo.dev>

CHANGELOG.md

@@ -1,3 +1,37 @@
+## [Talos 1.4.3](https://github.com/siderolabs/talos/releases/tag/v1.4.3) (2023-05-10)
+
+Welcome to the v1.4.3 release of Talos!
+
+
+
+Please try out the release binaries and report any issues at
+https://github.com/siderolabs/talos/issues.
+
+### Fixes
+
+This release fixes a bug that was introduced in Talos v1.4.2 by updating Go to 1.20.4 which sets the default file rlimit to 1024.
+
+See: #7198
+
+
+### Contributors
+
+* Noel Georgi
+
+### Changes
+<details><summary>1 commit</summary>
+<p>
+
+* [`1ad8b7448`](https://github.com/siderolabs/talos/commit/1ad8b744812cf20c892af7cc7ef1ee12adb03b00) fix: set rlimit explicitly in wrapperd
+</p>
+</details>
+
+### Dependency Changes
+
+This release has no dependency changes
+
+Previous release can be found at [v1.4.2](https://github.com/siderolabs/talos/releases/tag/v1.4.2)
+
 ## [Talos 1.4.2](https://github.com/siderolabs/talos/releases/tag/v1.4.2) (2023-05-08)
 
 Welcome to the v1.4.2 release of Talos!

go.mod

@@ -111,7 +111,7 @@ require (
 	github.com/siderolabs/grpc-proxy v0.4.0
 	github.com/siderolabs/net v0.4.0
 	github.com/siderolabs/siderolink v0.3.1
-	github.com/siderolabs/talos/pkg/machinery v1.4.2
+	github.com/siderolabs/talos/pkg/machinery v1.4.3
 	github.com/spf13/cobra v1.6.1
 	github.com/spf13/pflag v1.0.5
 	github.com/stretchr/testify v1.8.2

hack/release.toml

@@ -6,7 +6,7 @@ github_repo = "siderolabs/talos"
 match_deps = "^github.com/((talos-systems|siderolabs)/[a-zA-Z0-9-]+)$"
 
 # previous release
-previous = "v1.4.1"
+previous = "v1.4.2"
 
 pre_release = false
 
@@ -15,14 +15,12 @@ preface = """\
 
 [notes]
 
-    [notes.updates]
-        title = "Component Updates"
+    [notes.fixes]
+        title = "Fixes"
         description="""\
-* Linux: 6.1.27
-* containerd: 1.6.21
-* runc: 1.1.7
+This release fixes a bug that was introduced in Talos v1.4.2 by updating Go to 1.20.4 which sets the default file rlimit to 1024.
 
-Talos is built with Go 1.20.4.
+See: #7198
 """
 
 [make_deps]

pkg/machinery/gendata/data/tag

@@ -1 +1 @@
-v1.4.2
+v1.4.3

website/content/v1.4/reference/cli.md

@@ -96,7 +96,7 @@ talosctl cluster create [flags]
       --bad-rtc                                  launch VM with bad RTC state (QEMU only)
       --cidr string                              CIDR of the cluster network (IPv4, ULA network for IPv6 is derived in automated way) (default "10.5.0.0/24")
       --cni-bin-path strings                     search path for CNI binaries (VM only) (default [/home/user/.talos/cni/bin])
-      --cni-bundle-url string                    URL to download CNI bundle from (VM only) (default "https://github.com/siderolabs/talos/releases/download/v1.4.2/talosctl-cni-bundle-${ARCH}.tar.gz")
+      --cni-bundle-url string                    URL to download CNI bundle from (VM only) (default "https://github.com/siderolabs/talos/releases/download/v1.4.3/talosctl-cni-bundle-${ARCH}.tar.gz")
       --cni-cache-dir string                     CNI cache directory path (VM only) (default "/home/user/.talos/cni/cache")
       --cni-conf-dir string                      CNI config directory path (VM only) (default "/home/user/.talos/cni/conf.d")
       --config-patch stringArray                 patch generated machineconfigs (applied to all node types), use @file to read a patch from file
@@ -2622,7 +2622,7 @@ talosctl upgrade [flags]
       --debug              debug operation from kernel logs. --wait is set to true when this flag is set
   -f, --force              force the upgrade (skip checks on etcd health and members, might lead to data loss)
   -h, --help               help for upgrade
-  -i, --image string       the container image to use for performing the install (default "ghcr.io/siderolabs/installer:v1.4.2")
+  -i, --image string       the container image to use for performing the install (default "ghcr.io/siderolabs/installer:v1.4.3")
       --insecure           upgrade using the insecure (encrypted with no auth) maintenance service
   -p, --preserve           preserve data
   -s, --stage              stage the upgrade to perform it after a reboot