From fee216f67b0f256193f29e2db1fe42b50cca6bb0 Mon Sep 17 00:00:00 2001
From: Ka-Ping Yee <zestyping@gmail.com>
Date: Fri, 9 Oct 2026 13:16:46 +0200
Subject: [PATCH] Pin talosctl at v1.13.9 because later versions fail on GitHub
 runners.

---
 tasks/test | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/tasks/test b/tasks/test
index 8124531..8b1b927 100644
--- a/tasks/test
+++ b/tasks/test
@@ -109,6 +109,16 @@ all:
 
   cd {{justfile_directory()}}
 
+  # Pin talosctl at v1.13.9; v1.14.x fails to bootstrap on GitHub runners.
+  TALOS_VERSION="${TALOS_VERSION:-v1.13.9}"
+  if ! talosctl version --client --short 2>/dev/null | grep -q "$TALOS_VERSION"; then
+    mkdir -p "$HOME/.local/bin"
+    curl -fsSL -o "$HOME/.local/bin/talosctl" \
+      "https://github.com/siderolabs/talos/releases/download/${TALOS_VERSION}/talosctl-linux-amd64"
+    chmod +x "$HOME/.local/bin/talosctl"
+  fi
+  export PATH="$HOME/.local/bin:$PATH"
+
   just test chart-ingress-guardrails
   just k8s cluster-available
   just test build-api-image