diff --git a/.changes/v1.12/BUG FIXES-20250330-122431.yaml b/.changes/v1.12/BUG FIXES-20250330-122431.yaml
new file mode 100644
index 0000000000..da3f121c79
--- /dev/null
+++ b/.changes/v1.12/BUG FIXES-20250330-122431.yaml	
@@ -0,0 +1,5 @@
+kind: BUG FIXES
+body: Bump golang.org/x/net from 0.37.0 to 0.38.0 (fixes CVE-2025-22872)
+time: 2025-03-30T12:24:31.008814+02:00
+custom:
+    Issue: "36800"