v1.12.1

What's Changed

Reliability

• Block-volume checkpoints close a write-reorder race, keeping volume data consistent under concurrent writes.

Networking

• Outbound traffic from a second VPC is now SNATed through the transit uplink, restoring its internet egress.
• Rebinding an Elastic IP clears stale NAT rules, so traffic follows the new association.

Kubernetes (EKS)

• Nodegroup and GPU node labels now come from a single source, so labels stay consistent when a node re-registers.

Security

• API server certificates always include the management-bridge IP, so TLS clients on that address no longer hit certificate errors.
• ListBuckets now accepts SigV4 credentials scoped to us-east-1, matching AWS's global S3 endpoint.