kubernetes · minikube-bot · Nov 1, 2025 · Nov 1, 2025 · Nov 1, 2025
diff --git a/Makefile b/Makefile
@@ -24,7 +24,7 @@ KIC_VERSION ?= $(shell grep -E "Version =" pkg/drivers/kic/types.go | cut -d \"
 HUGO_VERSION ?= $(shell grep -E "HUGO_VERSION = \"" netlify.toml | cut -d \" -f2)
 
 # Default to .0 for higher cache hit rates, as build increments typically don't require new ISO versions
-ISO_VERSION ?= v1.37.0-1761658712-21800
+ISO_VERSION ?= v1.37.0-1762003444-21836
 
 # Dashes are valid in semver, but not Linux packaging. Use ~ to delimit alpha/beta
 DEB_VERSION ?= $(subst -,~,$(RAW_VERSION))

diff --git a/deploy/iso/minikube-iso/arch/aarch64/package/nerdctl-bin-aarch64/nerdctl-bin.hash b/deploy/iso/minikube-iso/arch/aarch64/package/nerdctl-bin-aarch64/nerdctl-bin.hash
@@ -9,3 +9,4 @@ sha256 d8df47708ca57b9cd7f498055126ba7dcfc811d9ba43aae1830c93a09e70e22d  nerdctl
 sha256 a53d87fc7d1f4ffeec55e5e08d2397b02ada0d334874c3cece306ad36f828a6c  nerdctl-1.7.5-linux-arm64.tar.gz
 sha256 4fa0a6e936c7a9cb9bb81e784fddaa593cb00afb48b08842e3f0503748c21348  nerdctl-1.7.6-linux-arm64.tar.gz
 sha256 230ad8f4f88100774d123213a427d3d43071e0dcf9f70efbea50ab9efff1cd4c  nerdctl-1.7.7-linux-arm64.tar.gz
+sha256 5c30be3ec118eb222bf635f8049c2f96b4c46d9343ec445058e9bc2ee9531c28  nerdctl-2.1.6-linux-arm64.tar.gz
diff --git a/deploy/iso/minikube-iso/arch/aarch64/package/nerdctl-bin-aarch64/nerdctl-bin.mk b/deploy/iso/minikube-iso/arch/aarch64/package/nerdctl-bin-aarch64/nerdctl-bin.mk
@@ -4,8 +4,8 @@
 #
 ################################################################################
 
-NERDCTL_BIN_AARCH64_VERSION = 1.7.7
-NERDCTL_BIN_AARCH64_COMMIT = 5882c720f4e7f358fb26b759e514b3ae9dd8ea83
+NERDCTL_BIN_AARCH64_VERSION = 2.1.6
+NERDCTL_BIN_AARCH64_COMMIT = 59253e9931873e79b92fe3400f14e69d6be34025
 NERDCTL_BIN_AARCH64_SITE = https://github.com/containerd/nerdctl/releases/download/v$(NERDCTL_BIN_AARCH64_VERSION)
 NERDCTL_BIN_AARCH64_SOURCE = nerdctl-$(NERDCTL_BIN_AARCH64_VERSION)-linux-arm64.tar.gz
 NERDCTL_BIN_AARCH64_STRIP_COMPONENTS = 0

diff --git a/deploy/iso/minikube-iso/arch/x86_64/package/nerdctl-bin/nerdctl-bin.hash b/deploy/iso/minikube-iso/arch/x86_64/package/nerdctl-bin/nerdctl-bin.hash
@@ -9,3 +9,4 @@ sha256 71aee9d987b7fad0ff2ade50b038ad7e2356324edc02c54045960a3521b3e6a7  nerdctl
 sha256 775f8bddd5e93acc4162c568dd6b84d5925549180991b83cfd4b7e33d4844921  nerdctl-1.7.5-linux-amd64.tar.gz
 sha256 0326d6a42dbec5c104ed9d7aa8cbc62727433dbe000cf21cc29d06b22507e0f0  nerdctl-1.7.6-linux-amd64.tar.gz
 sha256 298bb95aee485b24d566115ef7e4e90951dd232447b05de5646a652a23db70a9  nerdctl-1.7.7-linux-amd64.tar.gz
+sha256 22857b373edea479a4534ba62cae1c77f2af38f0aac4c91c1c68cf09e29d6f9e  nerdctl-2.1.6-linux-amd64.tar.gz
diff --git a/deploy/iso/minikube-iso/arch/x86_64/package/nerdctl-bin/nerdctl-bin.mk b/deploy/iso/minikube-iso/arch/x86_64/package/nerdctl-bin/nerdctl-bin.mk
@@ -4,8 +4,8 @@
 # 
 ################################################################################
 
-NERDCTL_BIN_VERSION = 1.7.7
-NERDCTL_BIN_COMMIT = 5882c720f4e7f358fb26b759e514b3ae9dd8ea83
+NERDCTL_BIN_VERSION = 2.1.6
+NERDCTL_BIN_COMMIT = 59253e9931873e79b92fe3400f14e69d6be34025
 NERDCTL_BIN_SITE = https://github.com/containerd/nerdctl/releases/download/v$(NERDCTL_BIN_VERSION)
 NERDCTL_BIN_SOURCE = nerdctl-$(NERDCTL_BIN_AARCH64_VERSION)-linux-amd64.tar.gz
 NERDCTL_BIN_STRIP_COMPONENTS = 0

diff --git a/deploy/kicbase/Dockerfile b/deploy/kicbase/Dockerfile
@@ -48,7 +48,7 @@ ARG CRI_DOCKERD_VERSION="v0.4.0"
 ARG CRI_DOCKERD_COMMIT="b9b889355f3002c01db294427964e454dfbc3feb"
 ARG CNI_PLUGINS_VERSION="v1.4.0"
 ARG TARGETARCH
-ARG NERDCTL_VERSION="1.7.7"
+ARG NERDCTL_VERSION="2.1.6"
 ARG NERDCTLD_VERSION="0.7.0"
 
 # copy in static files (configs, scripts)

diff --git a/hack/kicbase_version/os-package-list.txt b/hack/kicbase_version/os-package-list.txt
@@ -8,9 +8,9 @@ ii  apt                             2.6.1                          amd64
 ii  base-files                      12.4+deb12u12                  amd64        Debian base system miscellaneous files
 ii  base-passwd                     3.6.1                          amd64        Debian base system master password and group files
 ii  bash                            5.2.15-2+b9                    amd64        GNU Bourne Again SHell
-ii  bind9-dnsutils                  1:9.18.33-1~deb12u2            amd64        Clients provided with BIND 9
-ii  bind9-host                      1:9.18.33-1~deb12u2            amd64        DNS Lookup Utility
-ii  bind9-libs:amd64                1:9.18.33-1~deb12u2            amd64        Shared Libraries used by BIND 9
+ii  bind9-dnsutils                  1:9.18.41-1~deb12u1            amd64        Clients provided with BIND 9
+ii  bind9-host                      1:9.18.41-1~deb12u1            amd64        DNS Lookup Utility
+ii  bind9-libs:amd64                1:9.18.41-1~deb12u1            amd64        Shared Libraries used by BIND 9
 ii  bsdutils                        1:2.38.1-5+deb12u3             amd64        basic utilities from 4.4BSD-Lite
 ii  ca-certificates                 20230311+deb12u1               all          Common CA certificates
 ii  catatonit                       0.1.7-1+b2                     amd64        init process for containers
@@ -19,7 +19,7 @@ ii  conntrack                       1:1.4.7-1+b2                   amd64
 ii  containerd.io                   1.7.28-1~debian.12~bookworm    amd64        An open and reliable container runtime
 ii  containernetworking-plugins     1.1.1+ds1-3+b5                 amd64        standard networking plugins - binaries
 ii  coreutils                       9.1-1                          amd64        GNU core utilities
-ii  cri-o                           1.34.1-1.1                     amd64        Open Container Initiative-based implementation of Kubernetes Container Runtime Interface
+ii  cri-o                           1.34.1-1.2                     amd64        Open Container Initiative-based implementation of Kubernetes Container Runtime Interface
 ii  crun                            1.8.1-1+deb12u1                amd64        lightweight OCI runtime for running containers
 ii  curl                            7.88.1-10+deb12u14             amd64        command line tool for transferring data with URL syntax
 ii  dash                            0.5.12-2                       amd64        POSIX-compliant shell
@@ -34,7 +34,7 @@ ii  debianutils                     5.7-0.5~deb12u1                amd64
 ii  diffutils                       1:3.8-4                        amd64        File comparison utilities
 ii  dirmngr                         2.2.40-1.1+deb12u1             amd64        GNU privacy guard - network certificate management service
 ii  dmsetup                         2:1.02.185-2                   amd64        Linux Kernel Device Mapper userspace library
-ii  dnsutils                        1:9.18.33-1~deb12u2            all          Transitional package for bind9-dnsutils
+ii  dnsutils                        1:9.18.41-1~deb12u1            all          Transitional package for bind9-dnsutils
 ii  docker-buildx-plugin            0.29.1-1~debian.12~bookworm    amd64        Docker Buildx plugin extends build capabilities with BuildKit.
 ii  docker-ce                       5:28.5.1-1~debian.12~bookworm  amd64        Docker: the open-source application container engine
 ii  docker-ce-cli                   5:28.5.1-1~debian.12~bookworm  amd64        Docker CLI: the open-source application container engine
@@ -139,8 +139,8 @@ ii  libnftnl11:amd64                1.2.4-2                        amd64
 ii  libnghttp2-14:amd64             1.52.0-1+deb12u2               amd64        library implementing HTTP/2 protocol (shared library)
 ii  libnpth0:amd64                  1.6-3                          amd64        replacement for GNU Pth using system threads
 ii  libnsl2:amd64                   1.3.0-2                        amd64        Public client interface for NIS(YP) and NIS+
-ii  libnvidia-container-tools       1.17.9-1                       amd64        NVIDIA container runtime library (command-line tools)
-ii  libnvidia-container1:amd64      1.17.9-1                       amd64        NVIDIA container runtime library
+ii  libnvidia-container-tools       1.18.0-1                       amd64        NVIDIA container runtime library (command-line tools)
+ii  libnvidia-container1:amd64      1.18.0-1                       amd64        NVIDIA container runtime library
 ii  libp11-kit0:amd64               0.24.1-2                       amd64        library for loading and coordinating access to PKCS#11 modules - runtime
 ii  libpam-modules:amd64            1.5.2-6+deb12u1                amd64        Pluggable Authentication Modules for PAM
 ii  libpam-modules-bin              1.5.2-6+deb12u1                amd64        Pluggable Authentication Modules for PAM - helper binaries
@@ -197,8 +197,8 @@ ii  ncurses-bin                     6.4-4                          amd64
 ii  netbase                         6.4                            all          Basic TCP/IP networking system
 ii  netcat-openbsd                  1.219-1                        amd64        TCP/IP swiss army knife
 ii  nfs-common                      1:2.6.2-4+deb12u1              amd64        NFS support files common to client and server
-ii  nvidia-container-toolkit        1.17.9-1                       amd64        NVIDIA Container toolkit
-ii  nvidia-container-toolkit-base   1.17.9-1                       amd64        NVIDIA Container Toolkit Base
+ii  nvidia-container-toolkit        1.18.0-1                       amd64        NVIDIA Container toolkit
+ii  nvidia-container-toolkit-base   1.18.0-1                       amd64        NVIDIA Container Toolkit Base
 ii  openssh-client                  1:9.2p1-2+deb12u7              amd64        secure shell (SSH) client, for secure access to remote machines
 ii  openssh-server                  1:9.2p1-2+deb12u7              amd64        secure shell (SSH) server, for secure access from remote machines
 ii  openssh-sftp-server             1:9.2p1-2+deb12u7              amd64        secure shell (SSH) sftp server module, for SFTP access from remote machines

diff --git a/pkg/drivers/kic/types.go b/pkg/drivers/kic/types.go
@@ -24,10 +24,10 @@ import (
 
 const (
 	// Version is the current version of kic
-	Version = "v0.0.48-1760939008-21773"
+	Version = "v0.0.48-1761986897-21836"
 
 	// SHA of the kic base image
-	baseImageSHA = "d8d8a3f29f027433bea12764bddd1aa26c7ad9bb912e016c1bc51278db1343d8"
+	baseImageSHA = "d672afe26d1684a09e5cdf1d94c0075c7856082cfd81332ee12f71a4781e2d6d"
 	// The name of the GCR kicbase repository
 	gcrRepo = "gcr.io/k8s-minikube/kicbase-builds"
 	// The name of the Dockerhub kicbase repository

diff --git a/pkg/minikube/download/iso.go b/pkg/minikube/download/iso.go
@@ -41,7 +41,7 @@ const fileScheme = "file"
 // DefaultISOURLs returns a list of ISO URL's to consult by default, in priority order
 func DefaultISOURLs() []string {
 	v := version.GetISOVersion()
-	isoBucket := "minikube-builds/iso/21800"
+	isoBucket := "minikube-builds/iso/21836"
 
 	return []string{
 		fmt.Sprintf("https://storage.googleapis.com/%s/minikube-%s-%s.iso", isoBucket, v, runtime.GOARCH),

diff --git a/site/content/en/docs/commands/start.md b/site/content/en/docs/commands/start.md
@@ -27,7 +27,7 @@ minikube start [flags]
       --apiserver-port int                The apiserver listening port (default 8443)
       --auto-pause-interval duration      Duration of inactivity before the minikube VM is paused (default 1m0s) (default 1m0s)
       --auto-update-drivers               If set, automatically updates drivers to the latest version. Defaults to true. (default true)
-      --base-image string                 The base image to use for docker/podman drivers. Intended for local development. (default "gcr.io/k8s-minikube/kicbase-builds:v0.0.48-1760939008-21773@sha256:d8d8a3f29f027433bea12764bddd1aa26c7ad9bb912e016c1bc51278db1343d8")
+      --base-image string                 The base image to use for docker/podman drivers. Intended for local development. (default "gcr.io/k8s-minikube/kicbase-builds:v0.0.48-1761986897-21836@sha256:d672afe26d1684a09e5cdf1d94c0075c7856082cfd81332ee12f71a4781e2d6d")
       --binary-mirror string              Location to fetch kubectl, kubelet, & kubeadm binaries from.
       --cache-images                      If true, cache docker images for the current bootstrapper and load them into the machine. Always false with --driver=none. (default true)
       --cert-expiration duration          Duration until minikube certificate expiration, defaults to three years (26280h). (default 26280h0m0s)