GKE 1.36 changelog

This document lists the changes for the patch versions of the Google Kubernetes Engine (GKE) 1.36 minor version.

These changelogs are supplementary information about the updates to specific GKE system components. For information about features, changes, and security issues in GKE, see the following documents:

1.36.3-gke.1767000

The following sections describe changes in this patch version when compared with the previous patch version, 1.36.3-gke.1640000. For information about upstream Kubernetes changes, see the Kubernetes v1.36.3 changelog.

Component Updates

The following sections provide information about updates to specific GKE system components in this patch version.

clouddns

Updated clouddns component from version 36.3.2 to 36.3.3.

  • Bug Fixes:
    • Fix crash loop by mounting tmp as read-write in clouddns container.

gcsfusecsi

Updated gcsfusecsi component from version 1.36.38 to 1.36.41.

  • Security Fixes:
    • Updated golang.org/x/mod from v0.37.0 to v0.40.0 to address security vulnerability GO-2026-6179.

networkpolicy-calico

Updated networkpolicy-calico component from version 4.36.0 to 4.36.1.

  • Security Fixes:
    • Fixed CVE-2026-39822 by updating the Go build version to 1.25.12.
    • Updated golang.org/x/crypto to v0.52.0 to remediate security vulnerabilities in the Calico node component.