Talos Linux v1.12.12 released on 04-09-2026

Talos Linux v1.12.12 is out now. It brings component updates and a set of hardening and robustness fixes that affect clusters, the CLI and image handling.
Binaries and images are published for testing; consult the release on GitHub and report any problems via the project’s issue tracker: release notes and issue tracker.
What’s in this release
- Component bumps: Go 1.25.14, Kubernetes v1.35.8, Linux kernel 6.18.49, containerd 2.2.7, flannel 0.28.9 and etcd v3.6.14.
- Security and API hardening including improved kubelet client certificate handling and filtering of passed metadata in API proxying.
- Safer archive handling and CLI fixes — tar/untar now creates parent directories and preserves special modes, talosctl extract/untar paths use os.Root, and dashboard output is escaped.
Upgrade notes
- Behaviour change: empty desired roles are now treated as an API access error — check any automation or API clients that set desired roles and adjust calls if necessary; see the release link above for details.
- If you need to revert, the previous release is available at v1.12.11. Test the published binaries and container images before wide deployment and report issues via the issue tracker.
Share your experience after testing the release or report any regressions on the GitHub issue tracker so the maintainers can follow up.


