v1.16.2

v1.16.2 (2026-06-04)

• 12506be4b release v1.16.2
• 6b48ab050 PR introduces changes to correctly support multiple network interfaces from same subnet (#6766)
• 65c1fe34b chore(deps): update golang to v1.26.4 (#6808)
• fc230d53f fix(controller): correct egress sync status field on ACL update failure (#6804)
• 280ef5e54 chore(deps): bump containerd/v2 to v2.2.4 to fix CVE-2026-46680
• 16c091067 fix(controller): skip in-pod cleanup when VPC NAT gateway CRD is deleted (#6784) (#6798)
• 90abb973d fix(controller): populate v6ip from cached EIP in handleAddVpcExternalSubnet (#6799)
• 136ed4401 fix: restrict hook log file permissions (#6794)
• 8b51737d6 fix: report VEG workload network readiness (#6790)
• 824d1e680 fix(veg): raise default bfdd CPU limit (#6788)
• 800abb91e fix(controller): avoid panic in external VPC sync when no logical switch is found (#6777)
• d644104ce fix(deps): update golang (#6771)
• 091af00f7 chore: apply modernize fixes flagged by latest gopls modernize (#6758)
• 9f6313404 feat: backport u2o overlay only routing to release-1.16 (#6752)
• 854621c21 fix(controller): make BgpConf/EvpnConf informers optional (#6726) (#6737)
• 50d0f3e7c Block vpc deletion while SNAT, DNAT or FIP rules are using it (#6718)
• 6d9496255 Revert "fix(ha): detect and recover from split-brain leader with incomplete cluster membership (#6363)" (#6722)
• beb902670 fix: use status variable instead of hardcoded ConditionTrue in loopOvn0Check (#6719)
• fb93ec347 fix(deps): update golang (#6709)
• 37e89c63d fix(deps): update module github.com/osrg/gobgp/v4 to v4.5.0
• 8311fce68 chore(deps): update dependency go to v1.26.3 (#6705)
• a8f44752e fix(image): rebase OVN patches for branch-25.03 ARP/ND localnet rename (#6707)
• 55c99c5f7 prepare for next release

Contributors

• 09mulcs
• Gaurav Mehta
• Harisudarsan
• Mengxin Liu
• Rohan
• changluyi
• renovate[bot]
• 张祖建