diff --git a/omni/machine-classes/control-plane.yaml b/omni/machine-classes/control-plane.yaml
index be89d52..98a5ad1 100644
--- a/omni/machine-classes/control-plane.yaml
+++ b/omni/machine-classes/control-plane.yaml
@@ -4,7 +4,7 @@ metadata:
   id: oci-cp
 
 spec:
-  installImage: ghcr.io/syscode-labs/talos-images/installer:v1.12.6
+  installImage: ghcr.io/syscode-labs/talos-images/installer:v1.12.7
   matchLabels:
     # Applied manually in Omni UI after OCI nodes connect via SideroLink.
     # omnictl machine set-labels <machine-id> role=oci-cp
diff --git a/omni/machine-classes/worker.yaml b/omni/machine-classes/worker.yaml
index 036b144..3e9395c 100644
--- a/omni/machine-classes/worker.yaml
+++ b/omni/machine-classes/worker.yaml
@@ -4,7 +4,7 @@ metadata:
   id: oci-worker
 
 spec:
-  installImage: ghcr.io/syscode-labs/talos-images/installer:v1.12.6
+  installImage: ghcr.io/syscode-labs/talos-images/installer:v1.12.7
   matchLabels:
     # Applied manually in Omni UI after OCI nodes connect via SideroLink.
     # omnictl machine set-labels <machine-id> role=oci-worker
diff --git a/omni/talos-image.yaml b/omni/talos-image.yaml
index fe9efb7..301e844 100644
--- a/omni/talos-image.yaml
+++ b/omni/talos-image.yaml
@@ -1,6 +1,6 @@
 # Auto-updated by talos-images workflow — do not edit manually
-talos_version: v1.12.6
-kubernetes_version: v1.35.2
+talos_version: v1.12.7
+kubernetes_version: v1.35.4
 schematic_id: 4a0d65c669d46663f377e7161e50cfd570c401f26fd9e7bda34a0216b6f1922b
-oci_image_ocid: ocid1.image.oc1.uk-london-1.aaaaaaaapwpetlngenkj4j5hu6g4ddkppcgobk4t4pwj5hgdzmwwardgik7a
-updated_at: 2026-03-19T23:42:51Z
+oci_image_ocid: ocid1.image.oc1.uk-london-1.aaaaaaaayv53eqanqk7dovyqur5hkjhwosnel4itvah26bofeesgzwpapvyq
+updated_at: 2026-04-26T05:01:23Z