26 Nov 2025

#### Bug fixes

- ebpf: Fixed loading connecttime load balancer program in 6.12 kernel [calico 11406](https://github.com/projectcalico/calico/pull/11406) (@sridhartigera)
- Felix now explicitly sets priority 1024 for IPv6 routes instead of relying on kernel default, ensuring routes round-trip correctly when read from the kernel. [calico 11395](https://github.com/projectcalico/calico/pull/11395) (@fasaxc)
- Fix AllowSpoofedSourcePrefixes for dual stack clusters. [calico 11373](https://github.com/projectcalico/calico/pull/11373) (@lucastigera)
- fix (release-tool): include image tarballs in release archive file [calico 11296](https://github.com/projectcalico/calico/pull/11296) (@radTuti)
- Default KubeControllersConfiguration.LoadBalancer when not set to AllServices [calico 11267](https://github.com/projectcalico/calico/pull/11267) (@MichalFupso)
- ebpf: Do not adjust gso_size after nodeport tunnel vxlan decap. There is no guarantee that there would be enough data after removing tunnel headers. The packet is shrunk by 50 bytes while the gso_size would grow. Kernel would drop the packet if the original gso packet is too small. [calico 11259](https://github.com/projectcalico/calico/pull/11259) (@tomastigera)
- Fix BGP advertisement of externalIP addresses on Services with type=ClusterIP. [calico 11235](https://github.com/projectcalico/calico/pull/11235) (@caseydavenport)
- ebpf: start only a single kube-proxy health-server in dual stack mode [calico 11222](https://github.com/projectcalico/calico/pull/11222) (@tomastigera)
- Fix typo in FelixConfiguration BPFKubeProxyHealthzPort field. [calico 11209](https://github.com/projectcalico/calico/pull/11209) (@tomastigera)
- Fix IPAM block leak of older blocks when deleting IP pools. [calico 11196](https://github.com/projectcalico/calico/pull/11196) (@gojoy)
