v1.12.0

Urgent Upgrade Notes

(No, really, you MUST read this before you upgrade)

• Action required
  If you are importing CAPG APIs and are using SetupWebhookWithManager you'll need to update your call sites.
  SetupWebhookWithManager methods have been removed from all api packages for all exported types. Callers importing CAPG as a Go library can no longer use these methods. (#1615, @mdbooth)
• Action required
  The short names for GCPManagedClusterTemplate, GCPManagedControlPlaneTemplate, and GCPManagedMachinePoolTemplate have changed from amct, amcpt, and ammpt to gcpmct, gcpmcpt, and gcpmmpt, respectively.
  If you have any automation that relies on the short names, they will need to be updated accordingly. (#1618, @furkatgofurov7)

Changes by Kind

Feature

• Add support for advanced firewall rule management in Network via the enhanced Firewall field.
  Users can now toggle default rule creation using DefaultRulesManagement or provide custom rules via FirewallRules (#1538, @barbacbd)

Bug or Regression

• Fix nil pointer dereference when creating GKE clusters with useIPAliases enabled and optional pod/service CIDR blocks omitted (#1624, @pkieszcz)
• Fix nil pointer dereferences when creating/reconciling private GKE clusters with PSC mode (#1591, @pkieszcz)

Uncategorized

• Bump cloudbuild to use gcb-docker-gcloud image with Go v1.25.5 (#1643, @Prajyot-Parab)
• Bump dependencies to k8s v1.34, CAPI v1.12 (#1598, @damdo)

Dependencies

Added

• cloud.google.com/go/pubsub/v2: v2.0.0
• github.com/cenkalti/backoff/v5: v5.0.3
• github.com/golang-jwt/jwt/v5: v5.2.2
• github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus: v1.0.1
• github.com/grpc-ecosystem/go-grpc-middleware/v2: v2.3.0
• github.com/moby/moby/api: v1.54.1
• github.com/moby/moby/client: v0.4.0
• github.com/olekukonko/cat: 50322a0
• github.com/olekukonko/errors: v1.1.0
• github.com/olekukonko/ll: v0.1.1
• github.com/olekukonko/ts: 78ecb04
• github.com/russross/blackfriday: v1.6.0
• github.com/santhosh-tekuri/jsonschema/v5: v5.3.1
• go.etcd.io/raft/v3: v3.6.0
• pgregory.net/rapid: v1.2.0
• sigs.k8s.io/structured-merge-diff/v6: v6.3.2

Changed

• cel.dev/expr: v0.24.0 → v0.25.1
• cloud.google.com/go/accessapproval: v1.8.6 → v1.8.8
• cloud.google.com/go/accesscontextmanager: v1.9.6 → v1.9.7
• cloud.google.com/go/aiplatform: v1.89.0 → v1.114.0
• cloud.google.com/go/analytics: v0.28.1 → v0.30.1
• cloud.google.com/go/apigateway: v1.7.6 → v1.7.7
• cloud.google.com/go/apigeeconnect: v1.7.6 → v1.7.7
• cloud.google.com/go/apigeeregistry: v0.9.6 → v0.10.0
• cloud.google.com/go/appengine: v1.9.6 → v1.9.7
• cloud.google.com/go/area120: v0.9.6 → v0.9.7
• cloud.google.com/go/artifactregistry: v1.17.1 → v1.19.0
• cloud.google.com/go/asset: v1.21.1 → v1.22.0
• cloud.google.com/go/assuredworkloads: v1.12.6 → v1.13.0
• cloud.google.com/go/auth: v0.17.0 → v0.18.1
• cloud.google.com/go/automl: v1.14.7 → v1.15.0
• cloud.google.com/go/baremetalsolution: v1.3.6 → v1.4.0
• cloud.google.com/go/batch: v1.12.2 → v1.14.0
• cloud.google.com/go/beyondcorp: v1.1.6 → v1.2.0
• cloud.google.com/go/bigquery: v1.69.0 → v1.72.0
• cloud.google.com/go/bigtable: v1.37.0 → v1.41.0
• cloud.google.com/go/billing: v1.20.4 → v1.21.0
• cloud.google.com/go/binaryauthorization: v1.9.5 → v1.10.0
• cloud.google.com/go/certificatemanager: v1.9.5 → v1.9.6
• cloud.google.com/go/channel: v1.19.5 → v1.21.0
• cloud.google.com/go/cloudbuild: v1.22.2 → v1.25.0
• cloud.google.com/go/clouddms: v1.8.7 → v1.8.8
• cloud.google.com/go/cloudtasks: v1.13.6 → v1.13.7
• cloud.google.com/go/compute: v1.48.0 → v1.54.0
• cloud.google.com/go/contactcenterinsights: v1.17.3 → v1.17.4
• cloud.google.com/go/container: v1.44.1 → v1.46.0
• cloud.google.com/go/containeranalysis: v0.14.1 → v0.14.2
• cloud.google.com/go/datacatalog: v1.26.0 → v1.26.1
• cloud.google.com/go/dataflow: v0.11.0 → v0.11.1
• cloud.google.com/go/dataform: v0.12.0 → v0.12.1
• cloud.google.com/go/datafusion: v1.8.6 → v1.8.7
• cloud.google.com/go/datalabeling: v0.9.6 → v0.9.7
• cloud.google.com/go/dataplex: v1.25.3 → v1.28.0
• cloud.google.com/go/dataproc/v2: v2.11.2 → v2.15.0
• cloud.google.com/go/dataqna: v0.9.7 → v0.9.8
• cloud.google.com/go/datastore: v1.20.0 → v1.21.0
• cloud.google.com/go/datastream: v1.14.1 → v1.15.1
• cloud.google.com/go/deploy: v1.27.2 → v1.27.3
• cloud.google.com/go/dialogflow: v1.68.2 → v1.74.0
• cloud.google.com/go/dlp: v1.23.0 → v1.28.0
• cloud.google.com/go/documentai: v1.37.0 → v1.39.0
• cloud.google.com/go/domains: v0.10.6 → v0.10.7
• cloud.google.com/go/edgecontainer: v1.4.3 → v1.4.4
• cloud.google.com/go/errorreporting: v0.3.2 → v0.4.0
• cloud.google.com/go/essentialcontacts: v1.7.6 → v1.7.7
• cloud.google.com/go/eventarc: v1.15.5 → v1.18.0
• cloud.google.com/go/filestore: v1.10.2 → v1.10.3
• cloud.google.com/go/firestore: v1.18.0 → v1.21.0
• cloud.google.com/go/functions: v1.19.6 → v1.19.7
• cloud.google.com/go/gkebackup: v1.8.0 → v1.8.1
• cloud.google.com/go/gkeconnect: v0.12.4 → v0.12.5
• cloud.google.com/go/gkehub: v0.15.6 → v0.16.0
• cloud.google.com/go/gkemulticloud: v1.5.3 → v1.6.0
• cloud.google.com/go/gsuiteaddons: v1.7.7 → v1.7.8
• cloud.google.com/go/iap: v1.11.2 → v1.11.3
• cloud.google.com/go/ids: v1.5.6 → v1.5.7
• cloud.google.com/go/iot: v1.8.6 → v1.8.7
• cloud.google.com/go/kms: v1.22.0 → v1.25.0
• cloud.google.com/go/language: v1.14.5 → v1.14.6
• cloud.google.com/go/lifesciences: v0.10.6 → v0.10.7
• cloud.google.com/go/logging: v1.13.0 → v1.13.1
• cloud.google.com/go/longrunning: v0.6.7 → v0.8.0
• cloud.google.com/go/managedidentities: v1.7.6 → v1.7.7
• cloud.google.com/go/maps: v1.21.0 → v1.26.0
• cloud.google.com/go/mediatranslation: v0.9.6 → v0.9.7
• cloud.google.com/go/memcache: v1.11.6 → v1.11.7
• cloud.google.com/go/metastore: v1.14.7 → v1.14.8
• cloud.google.com/go/monitoring: v1.24.2 → v1.24.3
• cloud.google.com/go/networkconnectivity: v1.17.1 → v1.20.0
• cloud.google.com/go/networkmanagement: v1.19.1 → v1.21.0
• cloud.google.com/go/networksecurity: v0.10.6 → v0.11.0
• cloud.google.com/go/notebooks: v1.12.6 → v1.12.7
• cloud.google.com/go/optimization: v1.7.6 → v1.7.7
• cloud.google.com/go/orchestration: v1.11.9 → v1.11.10
• cloud.google.com/go/orgpolicy: v1.15.0 → v1.15.1
• cloud.google.com/go/osconfig: v1.14.6 → v1.15.1
• cloud.google.com/go/oslogin: v1.14.6 → v1.14.7
• cloud.google.com/go/phishingprotection: v0.9.6 → v0.9.7
• cloud.google.com/go/policytroubleshooter: v1.11.6 → v1.11.7
• cloud.google.com/go/privatecatalog: v0.10.7 → v0.10.8
• cloud.google.com/go/pubsub: v1.49.0 → v1.50.1
• cloud.google.com/go/recaptchaenterprise/v2: v2.20.4 → v2.21.0
• cloud.google.com/go/recommendationengine: v0.9.6 → v0.9.7
• cloud.google.com/go/recommender: v1.13.5 → v1.13.6
• cloud.google.com/go/redis: v1.18.2 → v1.18.3
• cloud.google.com/go/retail: v1.21.0 → v1.25.1
• cloud.google.com/go/run: v1.10.0 → v1.15.0
• cloud.google.com/go/scheduler: v1.11.7 → v1.11.8
• cloud.google.com/go/secretmanager: v1.14.7 → v1.16.0
• cloud.google.com/go/security: v1.18.5 → v1.19.2
• cloud.google.com/go/securitycenter: v1.36.2 → v1.38.1
• cloud.google.com/go/servicedirectory: v1.12.6 → v1.12.7
• cloud.google.com/go/shell: v1.8.6 → v1.8.7
• cloud.google.com/go/spanner: v1.82.0 → v1.87.0
• cloud.google.com/go/speech: v1.27.1 → v1.29.0
• cloud.google.com/go/storagetransfer: v1.13.0 → v1.13.1
• cloud.google.com/go/talent: v1.8.3 → v1.8.4
• cloud.google.com/go/texttospeech: v1.13.0 → v1.16.0
• cloud.google.com/go/tpu: v1.8.3 → v1.8.4
• cloud.google.com/go/trace: v1.11.6 → v1.11.7
• cloud.google.com/go/translate: v1.12.5 → v1.12.7
• cloud.google.com/go/video: v1.24.0 → v1.27.1
• cloud.google.com/go/videointelligence: v1.12.6 → v1.12.7
• cloud.google.com/go/vision/v2: v2.9.5 → v2.9.6
• cloud.google.com/go/vmmigration: v1.8.6 → v1.10.0
• cloud.google.com/go/vmwareengine: v1.3.5 → v1.3.6
• cloud.google.com/go/vpcaccess: v1.8.6 → v1.8.7
• cloud.google.com/go/webrisk: v1.11.1 → v1.11.2
• cloud.google.com/go/websecurityscanner: v1.7.6 → v1.7.7
• cloud.google.com/go/workflows: v1.14.2 → v1.14.3
• cloud.google.com/go: v0.121.6 → v0.123.0
• github.com/Azure/go-ansiterm: 306776e → faa5f7b
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: v1.29.0 → v1.31.0
• github.com/Microsoft/go-winio: v0.5.0 → v0.6.2
• github.com/cloudflare/circl: v1.6.1 → v1.6.3
• github.com/cncf/xds/go: 2ac532f → ee656c7
• github.com/coredns/corefile-migration: v1.0.28 → v1.0.32
• github.com/creack/pty: v1.1.9 → v1.1.24
• github.com/docker/go-connections: v0.5.0 → v0.6.0
• github.com/docker/go-units: v0.4.0 → v0.5.0
• github.com/emicklei/go-restful/v3: v3.12.2 → v3.13.0
• github.com/envoyproxy/go-control-plane/envoy: v1.32.4 → v1.36.0
• github.com/envoyproxy/go-control-plane: v0.13.4 → v0.14.0
• github.com/envoyproxy/protoc-gen-validate: v1.2.1 → v1.3.0
• github.com/fsnotify/fsnotify: v1.8.0 → v1.9.0
• github.com/fxamacker/cbor/v2: v2.7.0 → v2.9.0
• github.com/gkampitakis/go-snaps: v0.5.14 → v0.5.15
• github.com/go-jose/go-jose/v4: v4.1.2 → v4.1.3
• github.com/google/cel-go: v0.23.2 → v0.26.0
• github.com/google/gnostic-models: v0.6.9 → v0.7.0
• github.com/google/pprof: 27863c8 → 294ebfa
• github.com/googleapis/enterprise-certificate-proxy: v0.3.6 → v0.3.11
• github.com/googleapis/gax-go/v2: v2.15.0 → v2.17.0
• github.com/grpc-ecosystem/grpc-gateway/v2: v2.24.0 → v2.27.7
• github.com/ianlancetaylor/demangle: bd984b5 → f615e6b
• github.com/jonboulle/clockwork: v0.4.0 → v0.5.0
• github.com/mattn/go-colorable: v0.1.13 → v0.1.14
• github.com/mattn/go-runewidth: v0.0.14 → v0.0.16
• github.com/moby/spdystream: v0.5.0 → v0.5.1
• github.com/moby/term: v0.5.0 → v0.5.2
• github.com/modern-go/reflect2: v1.0.2 → 35a7c28
• github.com/olekukonko/tablewriter: v0.0.5 → v1.0.9
• github.com/onsi/ginkgo/v2: v2.26.0 → v2.28.2
• github.com/onsi/gomega: v1.38.2 → v1.40.0
• github.com/opencontainers/image-spec: v1.0.2 → v1.1.1
• github.com/pelletier/go-toml/v2: v2.2.3 → v2.2.4
• github.com/prometheus/client_model: v0.6.1 → v0.6.2
• github.com/rivo/uniseg: v0.4.2 → v0.4.7
• github.com/rogpeppe/go-internal: v1.13.1 → v1.14.1
• github.com/sagikazarmark/locafero: v0.7.0 → v0.11.0
• github.com/sourcegraph/conc: v0.3.0 → 5f936ab
• github.com/spf13/afero: v1.12.0 → v1.15.0
• github.com/spf13/cast: v1.7.1 → v1.10.0
• github.com/spf13/cobra: v1.9.1 → v1.10.1
• github.com/spf13/viper: v1.20.1 → v1.21.0
• github.com/spiffe/go-spiffe/v2: v2.5.0 → v2.6.0
• go.etcd.io/bbolt: v1.3.11 → v1.4.2
• go.etcd.io/etcd/api/v3: v3.5.22 → v3.6.6
• go.etcd.io/etcd/client/pkg/v3: v3.5.22 → v3.6.6
• go.etcd.io/etcd/client/v3: v3.5.22 → v3.6.6
• go.etcd.io/etcd/pkg/v3: v3.5.21 → v3.6.4
• go.etcd.io/etcd/server/v3: v3.5.21 → v3.6.4
• go.opentelemetry.io/auto/sdk: v1.1.0 → v1.2.1
• go.opentelemetry.io/contrib/detectors/gcp: v1.36.0 → v1.39.0
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc: v0.61.0 → v0.65.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.61.0 → v0.65.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.33.0 → v1.40.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.33.0 → v1.40.0
• go.opentelemetry.io/otel/metric: v1.37.0 → v1.41.0
• go.opentelemetry.io/otel/sdk/metric: v1.37.0 → v1.40.0
• go.opentelemetry.io/otel/sdk: v1.37.0 → v1.40.0
• go.opentelemetry.io/otel/trace: v1.37.0 → v1.41.0
• go.opentelemetry.io/otel: v1.37.0 → v1.41.0
• go.opentelemetry.io/proto/otlp: v1.4.0 → v1.9.0
• go.uber.org/zap: v1.27.0 → v1.27.1
• golang.org/x/crypto: v0.43.0 → v0.48.0
• golang.org/x/mod: v0.29.0 → v0.33.0
• golang.org/x/net: v0.45.0 → v0.49.0
• golang.org/x/oauth2: v0.31.0 → v0.35.0
• golang.org/x/sync: v0.17.0 → v0.19.0
• golang.org/x/sys: v0.37.0 → v0.41.0
• golang.org/x/telemetry: aef8a43 → bd525da
• golang.org/x/term: v0.36.0 → v0.40.0
• golang.org/x/text: v0.30.0 → v0.34.0
• golang.org/x/time: v0.13.0 → v0.14.0
• golang.org/x/tools: v0.37.0 → v0.41.0
• gonum.org/v1/gonum: v0.16.0 → v0.17.0
• google.golang.org/api: v0.252.0 → v0.267.0
• google.golang.org/genproto/googleapis/api: 3122310 → 8636f87
• google.golang.org/genproto/googleapis/bytestream: 7c0ddcb → 546029d
• google.golang.org/genproto/googleapis/rpc: 7c0ddcb → 546029d
• google.golang.org/genproto: 513f239 → 8636f87
• google.golang.org/grpc: v1.76.0 → v1.80.0
• google.golang.org/protobuf: v1.36.10 → v1.36.11
• gotest.tools/v3: v3.4.0 → v3.5.2
• k8s.io/api: v0.33.3 → v0.34.8
• k8s.io/apiextensions-apiserver: v0.33.3 → v0.34.8
• k8s.io/apimachinery: v0.33.3 → v0.34.8
• k8s.io/apiserver: v0.33.3 → v0.34.8
• k8s.io/client-go: v0.33.3 → v0.34.8
• k8s.io/cluster-bootstrap: v0.33.3 → v0.34.8
• k8s.io/code-generator: v0.33.3 → v0.34.8
• k8s.io/component-base: v0.33.3 → v0.34.8
• k8s.io/gengo/v2: 1244d31 → 85fd79d
• k8s.io/klog/v2: v2.130.1 → v2.140.0
• k8s.io/kms: v0.33.3 → v0.34.8
• k8s.io/kube-openapi: c8a335a → f3f2b99
• k8s.io/utils: 3ea5e8c → 4c0f3b2
• sigs.k8s.io/cluster-api/test: v1.11.0 → v1.12.8
• sigs.k8s.io/cluster-api: v1.11.2 → v1.12.8
• sigs.k8s.io/controller-runtime: v0.21.0 → v0.22.5
• sigs.k8s.io/json: 9aa6b5e → cfa47c3
• sigs.k8s.io/kind: v0.29.0 → v0.31.0

Removed

• github.com/census-instrumentation/opencensus-proto: v0.4.1
• github.com/containerd/log: v0.1.0
• github.com/docker/docker: v28.3.3+incompatible
• github.com/golang-jwt/jwt/v4: v4.5.2
• github.com/grpc-ecosystem/go-grpc-middleware: v1.3.0
• github.com/grpc-ecosystem/grpc-gateway: v1.16.0
• github.com/kr/fs: v0.1.0
• github.com/moby/sys/atomicwriter: v0.1.0
• github.com/moby/sys/sequential: v0.6.0
• github.com/morikuni/aec: v1.0.0
• github.com/pkg/sftp: v1.13.7
• github.com/prashantv/gostub: v1.1.0
• go.etcd.io/etcd/client/v2: v2.305.21
• go.etcd.io/etcd/raft/v3: v3.5.21
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp: v1.22.0
• go.uber.org/atomic: v1.9.0
• go.uber.org/automaxprocs: v1.6.0
• sigs.k8s.io/structured-merge-diff/v4: v4.6.0