Kargo v1.12.4
security!
Kargo released v1.12.4 on 2026-10-12. The release notes list five changes, one of which is a security item bumping the step-security/harden-runner GitHub Action from 2.21.1 to 2.22.0. The other four are maintenance changes such as dependency bumps, CI, tests and docs.
What changes for platform teams
The only security-related change is a CI action dependency bump, not a fix in Kargo's own code, so teams running Kargo see no concrete behavior change from the notes provided. Teams may still want to confirm the full changelog before upgrading.
Changes
- Bump step-security/harden-runner from 2.21.1 to 2.22.0security
4 maintenance lines (dependency bumps, CI, tests, docs)
- Fix(controller): prevent Stage status.metadata from being deleted by concurrent reconcilemaintenance
- Bump anchore/sbom-action from 0.24.2 to 0.24.3maintenance
- Docs: centralize Enterprise/Beta badges in enterprise-features.jsonmaintenance
- Bump Go to 1.27.2 and golang.org/x/net to v0.60.0maintenance
5 lines1 security4 maintenancetyped from the source notes
Full release notes ↗ · all Kargo releases
written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules