18 Mar 2026

#### Deprecations

- We continue testing Calico against OpenStack Caracal, but have stopped testing Calico against OpenStack Yoga. This is because Yoga has now been "unmaintained" for over a year, and is not compatible with current CI platforms based on Ubuntu 22.04. [calico 11746](https://github.com/projectcalico/calico/pull/11746) (@nelljerram)

#### Bug fixes

- ebpf: Fixed issue where VXLAN traffic was dropped on nodes still running Calico 3.30 during a rolling upgrade to 3.31. This caused connectivity failures for host-networked pods communicating via Kubernetes services across nodes at different versions. Upgrading to this 3.30 patch release before upgrading to 3.31 resolves the issue. [calico 12054](https://github.com/projectcalico/calico/pull/12054) (@tomastigera)
- Fix failure to enable ingress bandwidth QoS controls when a non-default qdisc previously existed on the workload interface (handle != 0). [calico 11984](https://github.com/projectcalico/calico/pull/11984) (@coutinhop)
- Fix CNI delete timeout to start after IPAM lock acquisition, preventing "context deadline exceeded" failures during high pod churn. [calico 11943](https://github.com/projectcalico/calico/pull/11943) (@sridhartigera)
- Fix advertisement of /32 LB IP addresses when not present in the Service Spec [calico 11928](https://github.com/projectcalico/calico/pull/11928) (@caseydavenport)
- Prevent nil pointer dereference in LoadBalancer controller `handleBlockUpdate` [calico 11923](https://github.com/projectcalico/calico/pull/11923) (@MichalFupso)
- Bugfix: fix rendering of NatPortRange option when using nftables. [calico 11740](https://github.com/projectcalico/calico/pull/11740) (@nelljerram)
- Don't uninstall CNI and kube-proxy service when using non-Calico CNI on Windows with operator install. [calico 11723](https://github.com/projectcalico/calico/pull/11723) (@coutinhop)
- Fix that the CNI plugin installer generated a malformed URL for IPv4 addresses. This bug was exposed by a fix to the golang URL parser. [calico 11720](https://github.com/projectcalico/calico/pull/11720) (@fasaxc)

#### Other changes

- Update LoadBalancer controller to not run when not explicitly configured as part of `ENABLED_CONTROLLERS` [calico 12055](https://github.com/projectcalico/calico/pull/12055) (@MichalFupso)