0.5.12 (2026-11-03)
Features
- rbac: scope Secret and Job access to the controller namespace (#698) (5f6f6bb)
- talosupgrade: wait for cluster health before each batch (#668) (a6c02c9)
- webhook: validate the Talos upgrade path and Kubernetes support per node (#672) (ad3efcb)
Continuous Integration
- govulncheck: run the scan on a schedule (9352e38)
- replace the shared workflow-lint action with zizmor-action (2147d80)
Miscellaneous Chores
- go: update module github.com/netresearch/go-cron (v0.18.0 → v0.19.0) (#693) (60df908)
- go: update module github.com/onsi/ginkgo/v2 (v2.33.1 → v2.34.0) (#694) (abda6b5)
- go: update module github.com/siderolabs/talos/pkg/machinery (v1.14.4 → v1.14.5) (#697) (e2255cc)
- npm: update dependency astro (7.4.4 → 7.4.5) (#695) (90752cb)
- renovate: stop stranding lone Talos updates and match talosctl (#696) (459506b)