Talos 1.12.7 (2026-04-24)
Welcome to the v1.12.7 release of Talos!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Component Updates
Linux: 6.18.24
containerd: 2.1.7
etcd: 3.6.9
Kubernetes: v1.35.4
Talos is built with Go 1.25.9.
Contributors
- Noel Georgi
- Andrey Smirnov
- Mateusz Urbanek
- Orzelius
- Utku Ozdemir
Changes
19 commits
- 91c63991e release(v1.12.7): prepare release
- 3b228caf1 feat: bring in apparmor profile files
- 1a05b4a11 feat: update kubernetes to v1.35.4
- b796be09b feat: bump pkgs, spdystream
- a75ce6f00 feat: bump pkgs, tools
- c1ea8dbc7 test: fix OOM test flake
- d5b691b8f fix: watch kubelet's kubeconfig and time out for cache sync
- 27655c5bc fix: propagate route table down to the resource
- fcda84bc4 fix: boot entry detection
- 330561c87 fix: do not flip machine stage to rebooting during shutdown
- 8ef448884 fix: zfs extensions test
- 8bc593d17 fix: wrong slot of encryption key was logged
- 89f561593 fix: panic in reading PCR values
- 317deede0 feat: add dis-vulncheck tool
- 0654a7f7e fix: handle ISOs with zeroes in volume labels
- e16007b44 fix: unseal with "slow" TPM
- 388a56b79 fix: incorrect route source for on-link routes
- 7e42474c5 test: fix the flakes in tests with trusted roots
- d52ebe21d feat: update etcd to 3.6.9
Changes from siderolabs/pkgs
8 commits
- siderolabs/pkgs@86d6af1 fix: install apparmor parser require config files
- siderolabs/pkgs@d6b125f feat: bump systemd
- siderolabs/pkgs@191632c feat: bump kernel to 6.18.24
- siderolabs/pkgs@13cbc68 feat: bump tools, toolchain and containerd
- siderolabs/pkgs@709678d feat: update Linux to 6.18.23
- siderolabs/pkgs@34de6db fix: support disabling module signature verification
- siderolabs/pkgs@e30789a feat: update backportable dependencies
- siderolabs/pkgs@830d895 feat: update Linux to 6.18.21
Changes from siderolabs/tools
3 commits
- siderolabs/tools@bbd753d feat: bump toolchain
- siderolabs/tools@61955e9 feat: bump OpenSSL to 3.6.2
- siderolabs/tools@23de89f feat: update util-linux to 2.41.4
Dependency Changes
- github.com/siderolabs/go-blockdevice/v2 v2.0.26 -> v2.0.28
- github.com/siderolabs/pkgs v1.12.0-50-ga92bed5 -> v1.12.0-58-g86d6af1
- github.com/siderolabs/talos/pkg/machinery v1.12.6 -> v1.12.7
- github.com/siderolabs/tools v1.12.0-7-g57916cb -> v1.12.0-10-gbbd753d
- go.etcd.io/etcd/api/v3 v3.6.6 -> v3.6.9
- go.etcd.io/etcd/client/pkg/v3 v3.6.6 -> v3.6.9
- go.etcd.io/etcd/client/v3 v3.6.6 -> v3.6.9
- go.etcd.io/etcd/etcdutl/v3 v3.6.6 -> v3.6.9
- k8s.io/api v0.35.2 -> v0.35.4
- k8s.io/apiextensions-apiserver v0.35.2 -> v0.35.4
- k8s.io/apimachinery v0.35.2 -> v0.35.4
- k8s.io/apiserver v0.35.2 -> v0.35.4
- k8s.io/client-go v0.35.2 -> v0.35.4
- k8s.io/component-base v0.35.2 -> v0.35.4
- k8s.io/cri-api v0.35.2 -> v0.35.4
- k8s.io/kube-scheduler v0.35.2 -> v0.35.4
- k8s.io/kubectl v0.35.2 -> v0.35.4
- k8s.io/kubelet v0.35.2 -> v0.35.4
- k8s.io/pod-security-admission v0.35.2 -> v0.35.4
Previous release can be found at v1.12.6
Images
ghcr.io/siderolabs/flannel:v0.27.4
registry.k8s.io/coredns/coredns:v1.13.2
registry.k8s.io/etcd:v3.6.9
registry.k8s.io/kube-apiserver:v1.35.4
registry.k8s.io/kube-controller-manager:v1.35.4
registry.k8s.io/kube-scheduler:v1.35.4
registry.k8s.io/kube-proxy:v1.35.4
ghcr.io/siderolabs/kubelet:v1.35.4
registry.k8s.io/pause:3.10
ghcr.io/siderolabs/installer:v1.12.7
ghcr.io/siderolabs/installer-base:v1.12.7
ghcr.io/siderolabs/imager:v1.12.7
ghcr.io/siderolabs/talos:v1.12.7
ghcr.io/siderolabs/talosctl-all:v1.12.7
ghcr.io/siderolabs/overlays:v1.12.7
ghcr.io/siderolabs/extensions:v1.12.7