Talos 1.12.5 (2026-03-09)
Welcome to the v1.12.5 release of Talos!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Component Updates
Linux: 6.18.15
Kubernetes: 1.35.2
etcd: 3.6.8
Talos is built with Go 1.25.8.
Contributors
- Andrey Smirnov
- Mateusz Urbanek
- Dmitrii Sharshakov
- Fritz Schaal
- Jan Paul
- Max Makarov
- Mickaël Canévet
- Nico Berlee
- Orzelius
- Spencer Smith
Changes
19 commits
- da6c6e461 release(v1.12.5): prepare release
- 4f978a747 fix: correctly calculate end ranges for nftables sets
- 8d52e2dbe feat: add trusted roots generation to stdpatches
- 628487715 fix: use correct dhcp option for unicast dhcp renewal
- dcf23be4f fix: ignore image digest when doing upgrade-k8s
- f8a2a9b7a fix(machined): opennebula: process ETH*_ vars regardless of NETWORK context flag
- db9ff23ae fix: patch with delete for LinkConfigs
- e0c38e2ae fix: update path handling on talosctl cgroups
- ca2d4c146 fix: stop Kubernetes client from dynamically reloading the certs
- 70ae2f274 refactor: split locate and provision
- c3b04844e fix: hold user volumes root mountpoint
- d935420b2 fix: handle raw encryption keys with
\nproperly - 7fe1a47af fix: remove stale endpoints
- 3ea08888a fix: allow static hosts in
/etc/hostswithout hostname - 5ebb00fdc fix: switch to better Myers algorithm implementation
- 2b4037935 feat: update etcd to v3.6.8
- 1ce9328e4 fix: disks flag parsing and handling in create qemu command
- 1f989dfb0 fix: read multi-doc machine config with newer talosctl
- 40ba6e3ec feat: update Linux 6.18.15, Go 1.25.8
Changes from siderolabs/go-debug
Changes from siderolabs/pkgs
7 commits
- siderolabs/pkgs@e695c74 feat: update Linux to 6.18.15
- siderolabs/pkgs@7d4ef68 feat: update Linux to 6.18.14
- siderolabs/pkgs@300cd60 feat: update Linux firmware to 20260221
- siderolabs/pkgs@65f9fd3 feat: update Linux to 6.18.13
- siderolabs/pkgs@96fc8e3 feat: enable MLX5 Scalable Functions and TC offload in kernel
- siderolabs/pkgs@f31edf1 feat: add patch for Cilium BPF verifier rejection by the kernel
- siderolabs/pkgs@8b4b129 feat: update Go to 1.25.8
Changes from siderolabs/tools
Dependency Changes
- github.com/docker/cli v29.0.0 -> v29.2.1
- github.com/siderolabs/go-blockdevice/v2 v2.0.23 -> v2.0.24
- github.com/siderolabs/go-debug v0.6.1 -> v0.6.2
- github.com/siderolabs/pkgs v1.12.0-39-gb1fc4c6 -> v1.12.0-46-ge695c74
- github.com/siderolabs/talos/pkg/machinery v1.12.3 -> v1.12.5
- github.com/siderolabs/tools v1.12.0-6-gdc37e09 -> v1.12.0-7-g57916cb
- golang.org/x/net v0.48.0 -> v0.51.0
- golang.org/x/sys v0.40.0 -> v0.41.0
- golang.org/x/term v0.38.0 -> v0.40.0
- golang.org/x/text v0.33.0 -> v0.34.0
- google.golang.org/grpc v1.76.0 -> v1.78.0
- google.golang.org/protobuf v1.36.10 -> v1.36.11
- k8s.io/api v0.35.0 -> v0.35.2
- k8s.io/apiextensions-apiserver v0.35.0 -> v0.35.2
- k8s.io/apiserver v0.35.0 -> v0.35.2
- k8s.io/client-go v0.35.0 -> v0.35.2
- k8s.io/component-base v0.35.0 -> v0.35.2
- k8s.io/kube-scheduler v0.35.0 -> v0.35.2
- k8s.io/kubectl v0.35.0 -> v0.35.2
- k8s.io/kubelet v0.35.0 -> v0.35.2
- k8s.io/pod-security-admission v0.35.0 -> v0.35.2
Previous release can be found at v1.12.4
Images
ghcr.io/siderolabs/flannel:v0.27.4
registry.k8s.io/coredns/coredns:v1.13.2
registry.k8s.io/etcd:v3.6.8
registry.k8s.io/kube-apiserver:v1.35.2
registry.k8s.io/kube-controller-manager:v1.35.2
registry.k8s.io/kube-scheduler:v1.35.2
registry.k8s.io/kube-proxy:v1.35.2
ghcr.io/siderolabs/kubelet:v1.35.2
registry.k8s.io/pause:3.10
ghcr.io/siderolabs/installer:v1.12.5
ghcr.io/siderolabs/installer-base:v1.12.5
ghcr.io/siderolabs/imager:v1.12.5
ghcr.io/siderolabs/talos:v1.12.5
ghcr.io/siderolabs/talosctl-all:v1.12.5
ghcr.io/siderolabs/overlays:v1.12.5
ghcr.io/siderolabs/extensions:v1.12.5