Talos Linux v1.12.12 released on 04-09-2026
Talos Linux v1.12.12 is out now. Operators and cluster maintainers will benefit from updated core components and a range of security, API and archive-handling fixes.
See the full release notes and downloads on the project GitHub: https://github.com/siderolabs/talos/releases/tag/v1.12.12
What’s in this release
- Component bumps: Linux kernel 6.18.49, containerd 2.2.7, Flannel 0.28.9, Etcd v3.6.14 and Kubernetes v1.35.8; Talos built with Go 1.25.14.
- Security and API hardening: improved kubelet client-certificate handling, filtering of passed metadata in API proxying, explicit meta-key checks and treating empty desired roles as an error for Talos API access.
- Filesystem and extraction fixes: create parent directories when extracting tar archives, use os.Root for talosctl extract/untar paths, preserve special file modes and avoid setting extended attributes while decompressing extensions.
Upgrade notes
- API behaviour is stricter: empty desired roles are now treated as an error and metadata handling is tightened — test automation and API clients against a staging cluster and review any proxying rules before upgrading. See the GitHub release for details.
- Images are tagged for this release (eg. ghcr.io/siderolabs/talos:v1.12.12). If you need to roll back, the previous release is available at v1.12.11: https://github.com/siderolabs/talos/releases/tag/v1.12.11
Share your experience or report any issues on the project’s GitHub issues page: https://github.com/siderolabs/talos/issues
