chore(deps): update dependency talos to v1.12.4 (master)

[renovate]

This PR contains the following updates:

Package	Update	Change
talos	patch	v1.12.3 → v1.12.4

---

Release Notes

siderolabs/talos (talos)

v1.12.4

Compare Source

Talos 1.12.4 (2026-02-13)

Welcome to the v1.12.4 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

KubeSpan Advertised Network Filters

KubeSpan now supports filtering of advertised networks using the excludeAdvertisedNetworks field in the KubeSpanConfig document.
This allows users to specify a list of CIDRs to exclude from the advertised networks. Please note that routing must be symmetric for any
pair of peers, so if one peer excludes a certain network, the other peer must also exclude it. In other words, for any given pair of peers,
and any pair of their addresses, the traffic should either go through KubeSpan or not, but not one way or the other.

Component Updates

Linux: 6.18.9

Talos is built with Go 1.25.7.

Contributors

• Andrey Smirnov
• Daniil Kivenko
• Florian Ströger
• Fritz Schaal
• Mateusz Urbanek

Changes

9 commits

• @​fc8e600 release(v1.12.4): prepare release
• @​14dde14 feat: add filter for KubeSpan advertised networks
• @​c277d01 fix: ignore volumes in wave calculation without provisioning
• @​f90af88 fix: use node podCIDRs for kubespan advertiseKubernetesNetworks
• @​a025ea4 feat: add IPv6 GRE support
• @​9241254 fix: typo with rpi_5 profile name
• @​64f4985 fix: swap volume configuration for min/max size
• @​19354ab feat: update Linux to 6.18.9
• @​639c1c9 fix: mismerge of nft with json support

Changes from siderolabs/discovery-api

2 commits

• siderolabs/discovery-api@9c06846 feat: change the way excluded addresses are specified
• siderolabs/discovery-api@f71a14a feat: add advertised filters to discovery data

Changes from siderolabs/pkgs

4 commits

• siderolabs/pkgs@b1fc4c6 feat: update NVIDIA LTS to 580.126.16
• siderolabs/pkgs@f7a8163 feat: update Linux to 6.18.9
• siderolabs/pkgs@32290ff feat: enable ip6_gre
• siderolabs/pkgs@da46073 feat: enable NFT_BRIDGE config

Dependency Changes

• github.com/siderolabs/discovery-api v0.1.6 -> v0.1.8
• github.com/siderolabs/pkgs v1.12.0-35-g15d5d78 -> v1.12.0-39-gb1fc4c6

Previous release can be found at v1.12.3

Images

ghcr.io/siderolabs/flannel:v0.27.4
registry.k8s.io/coredns/coredns:v1.13.2
registry.k8s.io/etcd:v3.6.7
registry.k8s.io/kube-apiserver:v1.35.0
registry.k8s.io/kube-controller-manager:v1.35.0
registry.k8s.io/kube-scheduler:v1.35.0
registry.k8s.io/kube-proxy:v1.35.0
ghcr.io/siderolabs/kubelet:v1.35.0
registry.k8s.io/pause:3.10
ghcr.io/siderolabs/installer:v1.12.4
ghcr.io/siderolabs/installer-base:v1.12.4
ghcr.io/siderolabs/imager:v1.12.4
ghcr.io/siderolabs/talos:v1.12.4
ghcr.io/siderolabs/talosctl-all:v1.12.4
ghcr.io/siderolabs/overlays:v1.12.4
ghcr.io/siderolabs/extensions:v1.12.4

---

Configuration

📅 Schedule: Branch creation - Between 03:00 PM and 11:59 PM ( * 15-23 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coveralls]

Pull Request Test Coverage Report for Build 22268667928

Details

• 0 of 0 changed or added relevant lines in 0 files are covered.
• 2 unchanged lines in 1 file lost coverage.
• Overall coverage remained the same at 23.057%

---

Files with Coverage Reduction	New Missed Lines	%
pkg/ovs/ovn-nb-logical_router_route.go	2	74.6%

Totals
Change from base Build 22268634790:	0.0%
Covered Lines:	12533
Relevant Lines:	54357

---

💛 - Coveralls