kubernetes · k8s-ci-robot · Aug 12, 2025 · Aug 12, 2025
diff --git a/README.md b/README.md
@@ -39,7 +39,9 @@ the versions listed. Ingress-Nginx versions **may** work on older versions, but
 
 | Supported | Ingress-NGINX version | k8s supported version         | Alpine Version | Nginx Version | Helm Chart Version |
 | :-------: | --------------------- | ----------------------------- | -------------- | ------------- | ------------------ |
+|    🔄     | **v1.13.1**           | 1.33, 1.32, 1.31, 1.30, 1.29  | 3.22.1         | 1.27.1        | 4.13.1             |
 |    🔄     | **v1.13.0**           | 1.33, 1.32, 1.31, 1.30, 1.29  | 3.22.0         | 1.27.1        | 4.13.0             |
+|    🔄     | **v1.12.5**           | 1.32, 1.31, 1.30, 1.29, 1.28  | 3.22.1         | 1.25.5        | 4.12.5             |
 |    🔄     | **v1.12.4**           | 1.32, 1.31, 1.30, 1.29, 1.28  | 3.22.0         | 1.25.5        | 4.12.4             |
 |    🔄     | **v1.12.3**           | 1.32, 1.31, 1.30, 1.29, 1.28  | 3.21.3         | 1.25.5        | 4.12.3             |
 |    🔄     | **v1.12.2**           | 1.32, 1.31, 1.30, 1.29, 1.28  | 3.21.3         | 1.25.5        | 4.12.2             |

diff --git a/changelog/controller-1.12.5.md b/changelog/controller-1.12.5.md
@@ -0,0 +1,56 @@
+# Changelog
+
+### controller-v1.12.5
+
+Images:
+
+* registry.k8s.io/ingress-nginx/controller:v1.12.5@sha256:f4a204a39ce99e7d297c54b02e64e421d872675c5ee29ab1b6edb62d4d69be5c
+* registry.k8s.io/ingress-nginx/controller-chroot:v1.12.5@sha256:5bee417e81f5478b166e35b66b62824275fba150cb737adf665ba05c61ff4632
+
+### All changes:
+
+* Images: Trigger controller build. (#13768)
+* Chart: Bump Kube Webhook CertGen. (#13764)
+* Tests & Docs: Bump images. (#13763)
+* Go: Update dependencies. (#13751)
+* Images: Remove redundant ModSecurity-nginx patch. (#13748)
+* Tests: Add `ssl-session-*` config values tests. (#13746)
+* Docs: Bump mkdocs to v9.6.16, fix links. (#13744)
+* Docs: Fix default config values and links. (#13739)
+* Images: Trigger other builds (2/2). (#13734)
+* Images: Trigger other builds (1/2). (#13733)
+* Tests: Bump Test Runner to v1.4.1. (#13728)
+* Images: Trigger Test Runner build. (#13723)
+* Go: Bump to v1.24.6. (#13720)
+* Images: Bump NGINX to v1.3.1. (#13717)
+* Images: Trigger NGINX build. (#13712)
+* Annotations: Quote auth proxy headers. (#13709)
+* Go: Update dependencies. (#13702)
+* CI: Fix typo. (#13699)
+* Chart: Push to OCI registry. (#13696)
+* Docs: Remove `X-XSS-Protection` header from hardening guide. (#13687)
+* Controller: Fix nil pointer in path validation. (#13682)
+* Go: Update dependencies. (#13677)
+* NGINX: Disable mimalloc's architecture specific optimizations. (#13670)
+* Controller: Fix SSL session ticket path. (#13668)
+* Docs: Use HTTPS for NGINX links. (#13664)
+* Docs: Fix links and formatting in user guide. (#13662)
+* Make: Add `helm-test` target. (#13660)
+* Docs: Update prerequisites in `getting-started.md`. (#13658)
+* Hack: Bump `golangci-lint` to v2.3.0. (#13656)
+* CI: Update KIND to v1.33.2. (#13648)
+* Docs: Improve `opentelemetry-trust-incoming-span`. (#13637)
+* Go: Update dependencies. (#13626)
+* CI: Update Kubernetes to v1.33.3. (#13632)
+* Go: Bump to v1.24.5. (#13631)
+* Bye bye, v1.11. (#13616)
+
+### Dependency updates:
+
+* Bump the actions group with 3 updates (#13757)
+* Bump actions/download-artifact from 4.3.0 to 5.0.0 (#13756)
+* Bump github/codeql-action from 3.29.3 to 3.29.5 in the actions group (#13707)
+* Bump github/codeql-action from 3.29.2 to 3.29.3 in the actions group across 1 directory (#13644)
+* Bump the actions group with 3 updates (#13641)
+
+**Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/controller-v1.12.4...controller-v1.12.5
diff --git a/changelog/controller-1.13.1.md b/changelog/controller-1.13.1.md
@@ -0,0 +1,58 @@
+# Changelog
+
+### controller-v1.13.1
+
+Images:
+
+* registry.k8s.io/ingress-nginx/controller:v1.13.1@sha256:37e489b22ac77576576e52e474941cd7754238438847c1ee795ad6d59c02b12a
+* registry.k8s.io/ingress-nginx/controller-chroot:v1.13.1@sha256:cace9bc8ad1914e817e5b461d691a00caab652347002ba811077189b85009d7f
+
+### All changes:
+
+* Images: Trigger controller build. (#13767)
+* Chart: Bump Kube Webhook CertGen. (#13762)
+* Tests & Docs: Bump images. (#13761)
+* Go: Update dependencies. (#13750)
+* Images: Remove redundant ModSecurity-nginx patch. (#13747)
+* Tests: Add `ssl-session-*` config values tests. (#13745)
+* Docs: Bump mkdocs to v9.6.16, fix links. (#13743)
+* Docs: Fix default config values and links. (#13738)
+* Images: Trigger other builds (2/2). (#13735)
+* Images: Trigger other builds (1/2). (#13731)
+* Tests: Bump Test Runner to v2.2.1. (#13727)
+* Images: Trigger Test Runner build. (#13722)
+* Go: Bump to v1.24.6. (#13719)
+* Images: Bump NGINX to v2.2.1. (#13716)
+* Images: Trigger NGINX build. (#13713)
+* Annotations: Quote auth proxy headers. (#13708)
+* Go: Update dependencies. (#13701)
+* CI: Fix typo. (#13698)
+* Chart: Push to OCI registry. (#13695)
+* Docs: Remove `X-XSS-Protection` header from hardening guide. (#13686)
+* Controller: Fix nil pointer in path validation. (#13681)
+* Go: Update dependencies. (#13676)
+* NGINX: Disable mimalloc's architecture specific optimizations. (#13671)
+* Controller: Fix SSL session ticket path. (#13667)
+* Docs: Use HTTPS for NGINX links. (#13663)
+* Docs: Fix links and formatting in user guide. (#13661)
+* Make: Add `helm-test` target. (#13659)
+* Docs: Update prerequisites in `getting-started.md`. (#13657)
+* Hack: Bump `golangci-lint` to v2.3.0. (#13655)
+* CI: Update KIND to v1.33.2. (#13647)
+* Config/Annotations: Fix `proxy-busy-buffers-size`. (#13638)
+* Docs: Improve `opentelemetry-trust-incoming-span`. (#13636)
+* Chart: Remove trailing whitespace. (#13634)
+* Go: Update dependencies. (#13625)
+* CI: Update Kubernetes to v1.33.3. (#13630)
+* Go: Bump to v1.24.5. (#13629)
+* Bye bye, v1.11. (#13615)
+
+### Dependency updates:
+
+* Bump the actions group with 3 updates (#13758)
+* Bump actions/download-artifact from 4.3.0 to 5.0.0 (#13755)
+* Bump github/codeql-action from 3.29.3 to 3.29.5 in the actions group (#13706)
+* Bump github/codeql-action from 3.29.2 to 3.29.3 in the actions group across 1 directory (#13643)
+* Bump the actions group with 3 updates (#13640)
+
+**Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/controller-v1.13.0...controller-v1.13.1
diff --git a/charts/ingress-nginx/Chart.yaml b/charts/ingress-nginx/Chart.yaml
@@ -1,9 +1,10 @@
 annotations:
   artifacthub.io/changes: |
-    - Update Ingress-Nginx version controller-v1.13.0
+    - 'Make: Add `helm-test` target. (#13659)'
+    - Update Ingress-Nginx version controller-v1.13.1
   artifacthub.io/prerelease: "false"
 apiVersion: v2
-appVersion: 1.13.0
+appVersion: 1.13.1
 description: Ingress controller for Kubernetes using NGINX as a reverse proxy and
   load balancer
 home: https://github.com/kubernetes/ingress-nginx
@@ -20,4 +21,4 @@ maintainers:
 name: ingress-nginx
 sources:
 - https://github.com/kubernetes/ingress-nginx
-version: 4.13.0
+version: 4.13.1
diff --git a/charts/ingress-nginx/README.md b/charts/ingress-nginx/README.md
@@ -2,7 +2,7 @@
 
 [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer
 
-![Version: 4.13.0](https://img.shields.io/badge/Version-4.13.0-informational?style=flat-square) ![AppVersion: 1.13.0](https://img.shields.io/badge/AppVersion-1.13.0-informational?style=flat-square)
+![Version: 4.13.1](https://img.shields.io/badge/Version-4.13.1-informational?style=flat-square) ![AppVersion: 1.13.1](https://img.shields.io/badge/AppVersion-1.13.1-informational?style=flat-square)
 
 To use, add `ingressClassName: nginx` spec field or the `kubernetes.io/ingress.class: nginx` annotation to your Ingress resources.
 
@@ -345,16 +345,16 @@ metadata:
 | controller.hostname | object | `{}` | Optionally customize the pod hostname. |
 | controller.image.allowPrivilegeEscalation | bool | `false` |  |
 | controller.image.chroot | bool | `false` |  |
-| controller.image.digest | string | `"sha256:dc75a7baec7a3b827a5d7ab0acd10ab507904c7dad692365b3e3b596eca1afd2"` |  |
-| controller.image.digestChroot | string | `"sha256:af6264394cfa61d21f644d87372823064804e64de737b0747e86c86348b29c9f"` |  |
+| controller.image.digest | string | `"sha256:37e489b22ac77576576e52e474941cd7754238438847c1ee795ad6d59c02b12a"` |  |
+| controller.image.digestChroot | string | `"sha256:cace9bc8ad1914e817e5b461d691a00caab652347002ba811077189b85009d7f"` |  |
 | controller.image.image | string | `"ingress-nginx/controller"` |  |
 | controller.image.pullPolicy | string | `"IfNotPresent"` |  |
 | controller.image.readOnlyRootFilesystem | bool | `false` |  |
 | controller.image.runAsGroup | int | `82` | This value must not be changed using the official image. uid=101(www-data) gid=82(www-data) groups=82(www-data) |
 | controller.image.runAsNonRoot | bool | `true` |  |
 | controller.image.runAsUser | int | `101` | This value must not be changed using the official image. uid=101(www-data) gid=82(www-data) groups=82(www-data) |
 | controller.image.seccompProfile.type | string | `"RuntimeDefault"` |  |
-| controller.image.tag | string | `"v1.13.0"` |  |
+| controller.image.tag | string | `"v1.13.1"` |  |
 | controller.ingressClass | string | `"nginx"` | For backwards compatibility with ingress.class annotation, use ingressClass. Algorithm is as follows, first ingressClassName is considered, if not present, controller looks for ingress.class annotation |
 | controller.ingressClassByName | bool | `false` | Process IngressClass per name (additionally as per spec.controller). |
 | controller.ingressClassResource | object | `{"aliases":[],"annotations":{},"controllerValue":"k8s.io/ingress-nginx","default":false,"enabled":true,"name":"nginx","parameters":{}}` | This section refers to the creation of the IngressClass resource. IngressClasses are immutable and cannot be changed after creation. We do not support namespaced IngressClasses, yet, so a ClusterRole and a ClusterRoleBinding is required. |

diff --git a/charts/ingress-nginx/changelog/helm-chart-4.12.5.md b/charts/ingress-nginx/changelog/helm-chart-4.12.5.md
@@ -0,0 +1,10 @@
+# Changelog
+
+This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org).
+
+### 4.12.5
+
+* Make: Add `helm-test` target. (#13660)
+* Update Ingress-Nginx version controller-v1.12.5
+
+**Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.12.4...helm-chart-4.12.5
diff --git a/charts/ingress-nginx/changelog/helm-chart-4.13.1.md b/charts/ingress-nginx/changelog/helm-chart-4.13.1.md
@@ -0,0 +1,10 @@
+# Changelog
+
+This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org).
+
+### 4.13.1
+
+* Make: Add `helm-test` target. (#13659)
+* Update Ingress-Nginx version controller-v1.13.1
+
+**Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.13.0...helm-chart-4.13.1
diff --git a/charts/ingress-nginx/values.yaml b/charts/ingress-nginx/values.yaml
@@ -30,9 +30,9 @@ controller:
     ## for backwards compatibility consider setting the full image url via the repository value below
     ## use *either* current default registry/image or repository format or installing chart by providing the values.yaml will fail
     ## repository:
-    tag: "v1.13.0"
-    digest: sha256:dc75a7baec7a3b827a5d7ab0acd10ab507904c7dad692365b3e3b596eca1afd2
-    digestChroot: sha256:af6264394cfa61d21f644d87372823064804e64de737b0747e86c86348b29c9f
+    tag: "v1.13.1"
+    digest: sha256:37e489b22ac77576576e52e474941cd7754238438847c1ee795ad6d59c02b12a
+    digestChroot: sha256:cace9bc8ad1914e817e5b461d691a00caab652347002ba811077189b85009d7f
     pullPolicy: IfNotPresent
     runAsNonRoot: true
     # -- This value must not be changed using the official image.