diff --git a/build/kong_bindings.bzl b/build/kong_bindings.bzl
index fc85f5a91dde..006df8d98829 100644
--- a/build/kong_bindings.bzl
+++ b/build/kong_bindings.bzl
@@ -54,10 +54,10 @@ def _load_vars(ctx):
 
     # convert them into a list of labels relative to the workspace root
     # TODO: this may not change after a bazel clean if cache exists
-    patches = [
+    patches = sorted([
         '"@kong//:%s"' % str(p).replace(workspace_path, "").lstrip("/")
         for p in ctx.path(workspace_path + "/build/openresty/patches").readdir()
-    ]
+    ])
 
     content += '"OPENRESTY_PATCHES": [%s],' % (", ".join(patches))
 
diff --git a/changelog/unreleased/kong/fix_patch_order.yml b/changelog/unreleased/kong/fix_patch_order.yml
new file mode 100644
index 000000000000..00089c0d848d
--- /dev/null
+++ b/changelog/unreleased/kong/fix_patch_order.yml
@@ -0,0 +1,7 @@
+message: fix the building failure when applying patches
+type: bugfix
+scope: Core
+prs:
+  - 11696
+jiras:
+  - KAG-2712