yugabyte · aishwarya24 · Nov 4, 2025 · Nov 6, 2025
diff --git a/docs/content/preview/releases/yba-releases/v2024.1.md b/docs/content/preview/releases/yba-releases/v2024.1.md
@@ -264,9 +264,9 @@ This is a YugabyteDB-only release, with no changes to YugabyteDB Anywhere.
  </li>
 </ul>
 
-### New features
+### New feature
 
-* [Improvement to OIDC-based Identity Provider authentication](/stable/yugabyte-platform/security/authentication/oidc-authentication-aad/). When using an OIDC-based IdP to authenticate database access, changes by the IdP to the JWK (the key used to encrypt Java Web Tokens) are now automatically detected and handled properly.
+* [Improvement to OIDC-based Identity Provider authentication](/stable/yugabyte-platform/security/authentication/oidc-authentication-aad/). When using an OIDC-based IdP to authenticate database access, changes by the IdP to the JWK (the key used to encrypt Java Web Tokens) are now automatically detected and handled properly. {{<tags/feature/ea idea="1658">}}
 
 ### Change log
 

diff --git a/docs/content/preview/releases/yba-releases/v2025.1.md b/docs/content/preview/releases/yba-releases/v2025.1.md
@@ -19,6 +19,81 @@ For an RSS feed of all release series, point your feed reader to the [RSS feed f
 
 Before upgrading, be sure to review the information in [Prepare to upgrade YugabyteDB Anywhere](/stable/yugabyte-platform/upgrade/prepare-to-upgrade/).
 
+## v2025.1.2.0 - November 7, 2025 {#v2025.1.2.0}
+
+**Build:** `2025.1.2.0-b106`
+
+**Third-party licenses:** [YugabyteDB](https://downloads.yugabyte.com/releases/2025.1.2.0/yugabytedb-2025.1.2.0-b106-third-party-licenses.html), [YugabyteDB Anywhere](https://downloads.yugabyte.com/releases/2025.1.2.0/yugabytedb-anywhere-2025.1.2.0-b106-third-party-licenses.html)
+
+### Download
+
+<ul class="nav yb-pills">
+ <li>
+   <a href="https://downloads.yugabyte.com/releases/2025.1.2.0/yba_installer_full-2025.1.2.0-b106-linux-x86_64.tar.gz">
+     <i class="fa-brands fa-linux"></i>
+     <span>Linux x86</span>
+   </a>
+ </li>
+</ul>
+
+### New feature
+
+* [Improvement to OIDC-based Identity Provider authentication](/stable/yugabyte-platform/security/authentication/oidc-authentication-aad/). When using an OIDC-based IdP to authenticate database access, changes by the IdP to the JWK (the key used to encrypt Java Web Tokens) are now automatically detected and handled properly. {{<tags/feature/ga idea="1658">}}
+
+### Improvements
+
+* Adds option to disable table-level metrics collection in YugabyteDB. PLAT-18210
+* Displays WAL status in CDC metrics for clearer stream expiry info. PLAT-18496
+
+### Bug fixes
+
+* Enhances method to decide if `use_sudo` is needed for Ansible runbooks based on tserver status. PLAT-17963
+* Updates Java dependencies to address multiple CVEs. PLAT-17981
+* Upgrades Ansible version to enhance security and prepare for its future removal. PLAT-18009
+* Upgrades `braces` to version 3.0.3 to prevent memory exhaustion. PLAT-18011
+* Ensures support bundles correctly collect flag overrides in Kubernetes environments. PLAT-18255
+* Prevents errors by checking PITR configuration existence before deletion. PLAT-18401
+* Allows users to configure cloud volume encryption at runtime. PLAT-18432
+* Adds UI option for S3 "SIGNING_REGION" configuration behind a runtime flag. PLAT-18451
+* Allows deletion and recreation of PITR schedule during all upgrades, limiting xCluster DR operations during upgrade process. PLAT-18466
+* Corrects DR configuration issue for proper snapshot and retention settings. PLAT-18473
+* Reduces logical replication lag reporting issues by using `cdcsdk_flush_lag` metric. PLAT-18479
+* Ensures YBA HA GET APIs authenticate users without enforcing authorization checks. PLAT-18503
+* Disables misleading systemd precheck alerts for cron-based universes. PLAT-18515
+* Upgrades PostgreSQL to 14.19+ in YB-A to address critical CVEs. PLAT-18517
+* Upgrades Postgres image in charts to address new customer-reported CVEs. PLAT-18517
+* Corrects text and suggestions for the xCluster command in the CLI. PLAT-18535
+* Fixes the issue of excess masters by updating preflight checks and improving health monitoring. PLAT-18573
+* Enables validation of NFS return codes in YBC for better error handling. PLAT-18671
+* Allows `yb-server-ctl` script to run successfully with system level systemd universes. PLAT-18804
+* Enables stable YBC branch for generating compatible builds, resolving incompatibility issues. PLAT-18803
+* Upgrades YBA Prometheus to 3.5.0, addressing over 10 vulnerabilities. PLAT-18201
+* Upgrades Prometheus in Helm charts to v3.5.0, addressing over 10 vulnerabilities. PLAT-18201
+* Upgrades node_exporter to version 1.9.1, enhancing security. PLAT-18315
+* Upgrades Protobuf to address {{<cve "CVE-2025-4565">}}. PLAT-18428
+* Corrects the earlyoom installation issue in on-premises environments. PLAT-18441,PLAT-18412
+* Upgrades Go version to 1.24.6 and updates dependencies to enhance security. PLAT-18446,PLAT-18447
+* Addresses {{<cve "CVE-2025-58367">}} with a Deep Diff update. PLAT-18557
+* Corrects the handling of system settings to avoid incorrect values after reboot. PLAT-18628,PLAT-18584
+* Fixes rollback upgrade failure on OpenShift clusters by using pod config for cleanup. PLAT-18664
+* Enables Azure backups to operate correctly with subdirectory specifications. PLAT-18207
+* Fixes version check for `dump_role_check` in backups to apply flags correctly. PLAT-18533
+* Blocks database restore during the monitoring phase for all upgrades. PLAT-18555
+* Ensures Prometheus correctly uses self-signed certificates in HTTPS mode. PLAT-18561
+* Allows picking any live TServer when the Master leader node is unavailable during a PG-Upgrade check. PLAT-18618
+* Allows PITR configs to stay enabled during upgrades without necessary finalization. PLAT-18619
+* Fixes an error in CLI describe output when accessing latest flags without setting the environment variable. PLAT-18672
+* Fixes issue where creating a universe with EBS encryption led to incorrect cmk id on volumes. PLAT-18718
+* Now includes pg_upgrade_dump*.log and init db logs in the support bundle for easier PG11 to PG15 upgrade troubleshooting. PLAT-17855
+* Upgrades java dependencies to fix multiple vulnerabilities, including a Denial of Service issue and Netty's MadeYouReset HTTP/2 DDoS vulnerability. PLAT-18737,PLAT-18659
+* Enables `ON_ERROR_STOP` by default during restores on master. PLAT-18264
+* Adds API to set zone priorities in database placement info. PLAT-18158,PLAT-18411
+* Prevents YBA backups from overwriting each other using timestamped temp directories. PLAT-18514
+* Allows `on_error_stop` to function correctly without needing `revert_to_pre_roles_behaviour` to be false. PLAT-18594, PLAT-15893
+* Eliminates duplicate "SSH Private Key Content" label from the GCP provider creation form. PLAT-18602
+* Allows controlled server upgrades within availability zones with user-defined sleep time and enhanced logging for visibility. PLAT-18667,PLAT-18669
+* Prevents cleaning up the PG logs directory during rollback to retain initial logs after a software upgrade failure. PLAT-18752
+
 ## v2025.1.1.2 - October 20, 2025 {#v2025.1.1.2}
 
 **Build:** `2025.1.1.2-b3`