Add Flux installation guide by @matheuscscp in #8864
fix(api): increase RateLimitSelectCondition.headers MaxItems from 16 to 64 by @wucm667 in #8906
skip invalid listener first in IR by @zirain in #8577
feat: policy field owner by @kkk777-7 in #8538
docs(tasks): add documentation for Dynamic Modules configuration example by @sjoukedv in #8908
fix: remove cross ns policy attachment status by @zhaohuabing in #8901
build(deps): bump npm-check-updates from 22.0.1 to 22.1.0 in /site by @dependabot[bot] in #8918
build(deps): bump sigs.k8s.io/controller-runtime from 0.23.3 to 0.24.0 in /examples/extension-server by @dependabot[bot] in #8924
build(deps): bump the helm group across 1 directory with 2 updates by @dependabot[bot] in #8925
build(deps): bump github/codeql-action from 4.35.2 to 4.35.3 in the actions group across 1 directory by @dependabot[bot] in #8920
feat: add runner event metrics by @zirain in #8802
build(deps): bump sigs.k8s.io/mcs-api from 0.4.1 to 0.5.0 by @dependabot[bot] in #8923
fix: respect backend endpoint hostname for health checks by @arkodg in #8929
fix(helm): propagate commonLabels to RBAC resources by @mvanhorn in #8818
fix(translator): set ListenerSet and listener Accepted:True for InvalidCertificateRef by @apkatsikas in #8871
fix: do not downgrade ALPN for only hostnames-overlapping listeners by @zhaohuabing in #8934
build(deps): bump the gomod group across 6 directories with 9 updates by @dependabot[bot] in #8931
feat: enableDeferredCreationStats by default by @zirain in #8937
bump golang to 1.26.3 by @zirain in #8943
chore: mute OSV scanner by @zirain in #8945
chore: use os.Stdout instead of t.Output() by @zirain in #8860
[release/v1.7] update docs and add release notes by @cnvergence in #8947
[release/v1.7] add benchmark report for v1.7.3 by @cnvergence in #8954
fix: restore last transition time in merge status conditions by @rudrakhp in #8962
docs: fix the version in release announcement link by @cnvergence in #8966
[release/v1.8] v1.8.0 release docs and announcement by @jukie in #8942
build(deps): bump the actions group across 1 directory with 4 updates by @dependabot[bot] in #8976
build(deps): bump npm-check-updates from 22.1.0 to 22.2.0 in /site by @dependabot[bot] in #8972
chore: remove unnecessary overlapping hostnames in the http3 test yaml by @zhaohuabing in #8963
build(deps): bump the gomod group across 2 directories with 2 updates by @dependabot[bot] in #8973
build(deps): bump the k8s-io group across 1 directory with 6 updates by @dependabot[bot] in #8974
fix: add unary interceptor and fix fail-open auth in GatewayNamespaceMode by @cnvergence in #8986
build(deps): bump the helm group across 1 directory with 2 updates by @dependabot[bot] in #8978
build(deps): bump sigs.k8s.io/controller-runtime from 0.24.0 to 0.24.1 by @dependabot[bot] in #8975
bump lastVersionTag to v1.8.0 by @jukie in #8992
feat: add envoyproxy status by @zirain in #8475
build(deps): bump sigs.k8s.io/controller-runtime from 0.24.0 to 0.24.1 in /examples/extension-server by @dependabot[bot] in #8977
Add gateway-api v1.5.1 mention to v1.8.0 release notes by @jukie in #8999
Update benchmarks dashboard for v1.8.0 by @jukie in #9002
Update non--crash-security--bug.md by @guydc in #9000
update docs links to 1.8.0 by @zhaohuabing in #9005
chore: fix gateway API docs links by @zhaohuabing in #9006
[release/v1.8] fix benchmark report for v1.8.0 by @jukie in #9007
fix(charts): add Gateway API v1.5 ListenerSet metrics to kube-state-metrics by @samuelmasuy in #9001
fix(charts): split combined autoscaling/policy RBAC rule in infra-manager by @samuelmasuy in #9013
fix: applyBackendTLSSetting panic by @zirain in #8998
fix(xds): hot-reload xDS server cert in GatewayNamespaceMode by @nguyenptk in #8959
docs: move v1.8 CRD upgrade note by @arkodg in #9017
docs: add bandwidth docs by @kkk777-7 in #8939
fix(helm): correct typo in HPA maxReplicas required message by @benjaminch in #9032
docs: highlight Gateway API compatibility by @zhaohuabing in #9010
build(deps): bump distroless/base-nossl from f71dcb6 to 20f009e in /tools/docker/envoy-gateway by @dependabot[bot] in #9038
chore: replace Deprecated CEL ParsedExpr Oneof With CelExprParsed by @zhaohuabing in #8982
chore: update release note for v1.9 by @kkk777-7 in #9045
build(deps): bump the gomod group across 5 directories with 6 updates by @dependabot[bot] in #9040
build(deps): bump the helm group across 1 directory with 2 updates by @dependabot[bot] in #9041
feat: disabled automountServiceAccountToken by default by @zirain in #9051
feat: allow to custom pod securityContext in gateway-helm by @zirain in #9036
fix: bump osv scanner by @jukie in #9070
chore: add deprecated field check by @kkk777-7 in #9072
docs: fix ClientTrafficPolicy verification steps by @apkatsikas in #9076
fix backend.tls.clientCertificateRef override test by @guydc in #9077
add depkeep to enterprise support by @pkuzco in #9046
lua: deprecate disableLua in favor of enableLua by @rudrakhp in #9081
chore: fix osv scan by @zhaohuabing in #9080
fix: allow IANA cipher names by @zhaohuabing in #9073
chore: address comment by @zirain in #9055
build(deps): bump the actions group across 1 directory with 4 updates by @dependabot[bot] in #9090
build(deps): bump cel.dev/expr from 0.25.1 to 0.25.2 by @dependabot[bot] in #9089
build(deps): bump busybox from 1487d0a to fd8d9aa in /tools/docker/envoy-gateway by @dependabot[bot] in #9087
build(deps): bump github.com/docker/cli from 29.5.1+incompatible to 29.5.2+incompatible in the gomod group across 1 directory by @dependabot[bot] in #9088
build(deps): bump the helm group across 1 directory with 4 updates by @dependabot[bot] in #9092
fix(gatewayapi): prefer sectioned BackendTLSPolicy over wildcard for same target by @AlecDiraimondo in #9068
chore: hide ForwardIDToken by @zhaohuabing in #9085
chore: fix docs link by @zirain in #9101
build(deps): bump npm-check-updates from 22.2.0 to 22.2.1 in /site by @dependabot[bot] in #9091
fix: encode TLS secrets with canonical PEM formatting by @cnvergence in #8744
chore: update deprecated docker libraries by @cnvergence in #9106
build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #9109
docs: copy Lua extensions security warning to v1.8 and v1.7 by @rudrakhp in #9113
fix: MaxStreamDuration should worked for non-route cluster by @zirain in #9028
feat: authorization path match by @kkk777-7 in #9008
build(deps): bump the helm group across 1 directory with 2 updates by @dependabot[bot] in #9108
chore: update testdata on main by @jukie in #9123
fix(egctl): skip missing CRDs in x status bulk modes by @jeremiahsnapp in #9099
fix(gatewayapi): reject unsupported BackendRef URLRewrite path rewrites by @Aditya7880900936 in #9131
fix: force HTTP1 for Service/ServiceImport with websocket appProtocol by @zhaohuabing in #9138
feat: add requestBody payload to HTTP active health checker by @michalskalski in #9111
chore: bump golang to 1.26.4 by @zirain in #9147
fix: move validation admission policy outside of crds directory by @zhaohuabing in #9024
fix: alway include the controller namespace in the watched namespaces by @zhaohuabing in #9100
build(deps): bump github.com/quic-go/quic-go from 0.59.0 to 0.59.1 in /test by @dependabot[bot] in #9160
build(deps): bump npm-check-updates from 22.2.1 to 22.2.2 in /site by @dependabot[bot] in #9157
build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #9158
build(deps): bump the gomod group across 1 directory with 16 updates by @dependabot[bot] in #9159
build(deps): bump github.com/quic-go/quic-go from 0.59.0 to 0.59.1 in /tools by @dependabot[bot] in #9164
fix rate limit validation on K8s 1.36 by @beckcl in #9166
Add release notes for v1.8.1 by @jukie in #9170
Add release notes for v1.7.4 by @cnvergence in #9124
fix github SA for June release by @zirain in #9173
chore: fix date and nit by @zirain in #9177
build(deps): bump opentelemetry-collector from 0.157.2 to 0.158.0 in /charts/gateway-addons-helm in the helm group across 1 directory by @dependabot[bot] in #9156
Bump VERSION to v1.8.1 by @jukie in #9175
docs: update benckmark for 1.8.1 and 1.7.4 by @zirain in #9179
docs: TLSRoute with TLS termination by @zhaohuabing in #9107
docs: explain how to scrape proxy metrics with an existing Prometheus by @SAY-5 in #9052
fix(validation): allow IPv6 to be specific in loadBalancerSourceRanges by @rissson in #9050
fix(egctl): return config errors when port forwarding fails by @immanuwell in #9056
chore: fix codecov by @zhaohuabing in #9188
fix: allow Backend TLS to disable ALPN with an empty list by @zhaohuabing in #9162
fix(gatewayapi): sort api key auth credentials by @nobbs in #9042
fix(status): separate listener programmed state from HTTPRoute Accepted condition by @apkatsikas in #9129
build(deps): bump npm-check-updates from 22.2.2 to 22.2.3 in /site by @dependabot[bot] in #9201
build(deps): bump github/codeql-action from 4.36.1 to 4.36.2 in the actions group across 1 directory by @dependabot[bot] in #9203
feat(auto_host_sni): allow configuring the sni automatically from the upstream endpoint by @nacx in #9137
fix(egctl): correct user-facing grammar in help text by @immanuwell in #9217
fix: reject ExternalName Service as a route backend by @zhaohuabing in #9190
fix(status): fall back to service externalIPs for Gateway addresses by @jvlxz in #9209
fix: don't duplicate ValidatingAdmissionPolicy in install.yaml by @jukie in #9182
feat(xds): add xdsNACKTotal metric by @QuantumEnigmaa in #9205
feat: source rate limit value from dynamic metadata by @kanurag94 in #9216
fix(listenerset): implement hostname conflict listener precedence by @zirain in #9192
fix: correct the config hot reload validation order by @MengjiaLiang in #9214
build(deps): bump the helm group across 1 directory with 4 updates by @dependabot[bot] in #9202
build(deps): bump the k8s-io group across 1 directory with 6 updates by @dependabot[bot] in #9241
build(deps): bump the gomod group across 2 directories with 6 updates by @dependabot[bot] in #9240
fix: deduplicate CA certificates in ClientTrafficPolicy mTLS by @yuehaii in #8909
feat(policy): support ListenerSet as targetRef for ClientTrafficPolicy by @apkatsikas in #9026
fix(docs): links still pointing to /contributions by @M4tteoP in #9255
fix: renew expired TLS certificates in e2e test fixtures by @rudrakhp with @Copilot in #9256
feat(api): Add filterContext field to Lua type in EnvoyExtensionPolicy by @norman-zon in #8730
build(deps): bump js-yaml and markdownlint-cli in /tools by @dependabot[bot] in #9258
docs: update release schedule information by @apkatsikas in #9257
docs: update Client Traffic Policy docs with new ListenerSet information by @apkatsikas in #9262
build(deps): bump undici from 7.24.7 to 7.28.0 in /tools by @dependabot[bot] in #9261
build(deps-dev): bump tar from 7.5.13 to 7.5.16 in /site by @dependabot[bot] in #9260
feat: option to disable automatic X-Forwarded-For append/add by @lextiz in #8576
build(deps): bump markdown-it and markdownlint-cli in /tools by @dependabot[bot] in #9259
feat: add FailedRefetchDuration to RemoteJWKS by @jukie in #9265
build(deps): bump github.com/containerd/containerd from 1.7.32 to 1.7.33 in /tools by @dependabot[bot] in #9266
build(deps): bump github.com/containerd/containerd from 1.7.32 to 1.7.33 by @dependabot[bot] in #9267
feat(helm): add CRDs dependency toggle by @cilindrox in #8850
fix: proxy protocol with httpProtocolOptions by @zhaohuabing in #9234
fix: validate API Key auth ExtractFrom by @zhaohuabing in #9250
fix: XRateLimitHeadersOptionDisabled constant value must match CRD enum by @gianniskt in #9224
fix(ratelimit): shared global ratelimit with cost not working by @zirain in #9245
chore: run dependabot on release branch by @zirain in #9230
fix(gatewayapi): http retry without backoff by @zirain in #9238
chore: update dependabot by @zirain in #9299
chore: use pinned docker image by @zirain in #9300
build(deps): bump npm-check-updates from 22.2.3 to 22.2.7 in /site by @dependabot[bot] in #9277
perf: resolve ClientTrafficPolicy targets once by @jukie in #9272
build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #9282
build(deps): bump the gomod group across 1 directory with 2 updates by @dependabot[bot] in #9283
build(deps): bump the helm group across 1 directory with 2 updates by @dependabot[bot] in #9279
chore: split release notes by @zhaohuabing in #9312
build(deps-dev): bump autoprefixer from 10.5.0 to 10.5.1 in /site by @dependabot[bot] in #9321
build(deps): bump actions/setup-go from 6.4.0 to 6.5.0 in /tools/github-actions/setup-deps in the actions group across 1 directory by @dependabot[bot] in #9325
chore: ignore k8s.io and go-control-plane on release branches by @zirain in #9331
feat: support for deployment.envoyGateway.strategy by @zirain in #9318
build(deps): bump otel/opentelemetry-collector-contrib from 0.154.0 to 0.155.0 in /charts/gateway-addons-helm in the helm group across 1 directory by @dependabot[bot] in #9344
build(deps-dev): bump autoprefixer from 10.5.1 to 10.5.2 in /site by @dependabot[bot] in #9343
ci: add tests for Kubernetes 1.36 by @beckcl in #8990
chore: update pr template to help reduce review effort by @zhaohuabing in #9350
helm: follow-up docs and template wording by @jukie in #9317
Add release notes for v1.8.2 by @jukie in #9361
fix: consolidate destination AppProtocol handling by @zhaohuabing in #9337
fix: panic with empty deploy by @zirain in #9365
fix: use target resource namespace in BTP RoutingType index by @Aias00 in #9359
chore: bump envoy go-control-plane by @zirain in #9375
fix: DaemonSet pod not using the configured custom ServiceAccount name by @zirain in #9347
ratelimit: refactor shared and non-shared ratelimit rules by @zirain in #9332
fix: use int64 format for ratelimit Requests field by @jukie in #9377
docs: describe uint32 vs int32 range issue by @jukie in #9379
feat: CEL-based Authorization policy by @zhaohuabing in #8981
feat: Bump gatewayapi v1.6.0 by @zirain in #9232
build(deps): bump npm-check-updates from 22.2.7 to 22.2.9 in /site by @dependabot[bot] in #9387
deps: ignore gateway-api on release branch by @zirain in #9393
chore: update skipped tests by @zirain in #9394
build(deps): bump opentelemetry-collector from 0.159.0 to 0.159.2 in /charts/gateway-addons-helm in the helm group across 1 directory by @dependabot[bot] in #9388
build(deps): bump the gomod group across 6 directories with 6 updates by @dependabot[bot] in #9398
Update sync-dashboard for v1.8.2 by @jukie in #9403
feat: support listenerset policy attach in security policy by @kkk777-7 in #9270
docs(gateway-helm): clarify envoyProxy image values by @immanuwell in #9222
fix: prevent GatewayNamespace mode from hijacking pre-existing ServiceAccounts and ConfigMaps by @yuehaii in #9215
fix: allow trailing dot in Backend FQDN hostnames by @NeddM in #9098
feat: support statusOnError field in EnvoyExtensionPolicy ExtProc by @dragon3 in #9044
detect ipv6 literal hosts in url2cluster and token endpoint check by @dxbjavid in #9165
feat(api): add ClientTrafficPolicy.clientIPDetection.downstreamRemoteAddress for L4-transparent geoip by @sboulkour in #8956
fix: register ListenerSet and route indexes in offline controller by @Aias00 in #9320
build(deps): bump the gomod group across 1 directory with 2 updates by @dependabot[bot] in #9436
build(deps): bump the helm group across 1 directory with 2 updates by @dependabot[bot] in #9434
build(deps): bump the actions group across 1 directory with 6 updates by @dependabot[bot] in #9439
chore: bump golang to 1.26.5 by @zhaohuabing in #9437
Add release notes for 1.7.5 by @cnvergence in #9433
docs: update 1.8 install docs by @zhaohuabing in #9451
[release/v1.7] add benchmark report for v1.7.5 by @cnvergence in #9453
feat(helm): harden control-plane and certgen securityContext by @jukie in #9069
perf: deduplicate JWT authn providers by @Aias00 in #9430
e2e: add stats for WASM by @zirain in #9424
fix: UDP/TCP RouteMultipleRoutesAttachment conformance test by @zirain in #9247
docs: document vulnerability disclosure process by @arkodg in #9227
perf: introduce endpoint slice indexer by @kkk777-7 in #9221
Revert LuaPerRoute source materialization for Lua by @arkodg in #9426
feat: support HTTPFilter for GRPCRoute by @zhaohuabing in #9404
fix: default backend TLS max version to 1.3 by @vishwas-bm in #9412
feat(ctp): add allowExpiredCertificate to tls.clientValidation by @daanvinken in #9199
docs: fix invalid proxy protocol example by @hegerdes in #9479
refactor: use stdlib maps and slices instead of golang.org/x/exp by @mmmommm in #9482
fix(listenerset): implement listener conflict precedence for protocol conflicts by @zirain in #9196
feat: wrap watch.namespaces helm template check in a with block by @cnvergence in #9067
Support off and critical log level by @wweiwei-li in #9271
build(deps): bump the actions group across 1 directory with 9 updates by @dependabot[bot] in #9506
build(deps-dev): bump autoprefixer from 10.5.2 to 10.5.3 in /site by @dependabot[bot] in #9495
build(deps): bump the helm group across 1 directory with 2 updates by @dependabot[bot] in #9501
build(deps): bump markdownlint-cli from 0.49.0 to 0.49.1 in /tools by @dependabot[bot] in #9496
build(deps): bump sigs.k8s.io/mcs-api from 0.5.0 to 0.5.2 by @dependabot[bot] in #9500
build(deps): bump the gomod group across 1 directory with 4 updates by @dependabot[bot] in #9499
build(deps): bump distroless/base-nossl from 20f009e to 86554c4 in /tools/docker/envoy-gateway by @dependabot[bot] in #9494
fix: redirect port leaking across multiple listeners by @Aias00 in #9349
fix: add default retry policy for Envoy wasm module fetch by @jukie in #9462
fix/refactor: deep copy status in translator for all resources by @rudrakhp in #9458
conformance: fix GatewayListenerUnsupportedProtocol test by @zirain in #9490
fix(logs): restore ISO 8601 timestamp format by @wiegandf in #9493
fix: unreferenced Secret events trigger reconciliation when HTTPRouteFilter CRD exists by @Greyeye in #9488
bump Gateway API to v1.6.1 by @zirain in #9515
Add release notes for v1.8.3 by @jukie in #9518
feat: support client and overall tracing sampling by @Ri7ay in #9402
refactor: use field owner pattern to merge BTPs by @rudrakhp in #9514
api: add host normalization to ClientTrafficPolicy by @sboulkour in #9115
Fix(ext-proc-examples): Add RequestBody and ResponseBody handling in request processing by @abe-servescale in #9183
feat(translator): Support ignoreFailure to tolerate invalid JWT by @sinitax in #9313
feat(ext_proc): add support for observability mode by @skos-ninja in #8536
fix(xds): use DnsCluster extension for DNS clusters by @andreademurtas in #9155
feat: allow RateLimitRedisSettings.url to be sourced from a Secret by @guanchzhou in #9143
chore: fix gen by @zirain in #9533
Remove 1.8.3 release page by @jukie in #9526
docs: recommend ListenerSet over mergeGateways by @zhaohuabing in #9524
feat(helm): add startupProbe to envoy-gateway deployment by @cleman95 in #8820
fix: reject TLS secret when certificate and private key do not match by @zhaohuabing in #9480
feat: support consistent hash for non-route backends by @zhaohuabing in #9231
build(deps-dev): bump autoprefixer from 10.5.3 to 10.5.4 in /site by @dependabot[bot] in #9542
build(deps): bump codespell from 2.4.2 to 2.4.3 in /tools/src/codespell by @dependabot[bot] in #9544
build(deps): bump loki from 7.0.0 to 7.1.0 in /charts/gateway-addons-helm in the helm group across 1 directory by @dependabot[bot] in #9545
build(deps): bump the actions group across 2 directories with 6 updates by @dependabot[bot] in #9549
feat: use grpc status errors in jwtinterceptor by @cnvergence in #9020
Add release note for fix to ratelimit fallback tag by @jukie in #9553
build(deps): bump linkinator from 7.6.1 to 8.0.0 in /tools by @dependabot[bot] in #9543
Update benchmark dashboard for v1.8.3 by @jukie in #9560
fix: dedupe SAN entries before checking algorithm uniqueness by @dmavrodiev in #9472
build(deps): bump the gomod group across 5 directories with 7 updates by @dependabot[bot] in #9546
Bump metallb and kind by @jukie in #9562
Create 1.8.3 release page and final release steps by @jukie in #9561
docs: point community meeting calendar to LFX platform by @zhaohuabing in #9569
fix: bound policy ancestors on the fly to avoid O(N^2) translation latency by @zhaohuabing in #9558
docs: explain invert field in global rate limit example by @Aditya7880900936 in #9572
ci: wire standalone test suite into GitHub Actions by @takumi12311123 in #9127
deps: bump dependencies flagged by OSV scan by @zhaohuabing in #9575
fix(cors validation) allow all RFC-3986 compliant schemes by @christopherbii in #9049
feat(xds): support SNI based dynamic forward proxy for TLSRoute by @andreademurtas in #9184
fix: handle EC parameters before TLS private keys by @jvlxz in #9338
test: fix mismatched tls.key in tlsroute dynamic resolver testdata by @zhaohuabing in #9582
fix: eliminate port race in setupFakeEnvoyStats test helper by @muwaqar-cflt in #9580
feat: support listenerset reference grant by @kkk777-7 in #9481
fix: allow TLSv1.3 for remote JWKS fetching by @michaelbeaumont in #9531
fix: allow requests:0 for global rate limit block rules by @mvanhorn in #9333
fix: validate SDS URL by @zirain in #9030
fix: confirm NotFound against the API server before dropping status writes by @zhaohuabing in #9566
feat(oidc): forward id token by @zhaohuabing in #9367
api: make RateLimitRedisSettings.url a pointer by @guanchzhou in #9538
fix(docs): replace dead Envoy Slack invite link by @zhaohuabing in #9586
feat(xds): raise xDS gRPC server default receive limit and make it configurable by @linmosko in #9564
fix: eliminate cfg.Logger data race in server()'s reload/shutdown path by @muwaqar-cflt in #9581
fix: make ListenerSet and GRPCRoute watches optional by @zhaohuabing in #9583
build(deps): bump npm-check-updates from 22.2.9 to 23.0.0 in /site by @dependabot[bot] in #9595
build(deps): bump linkinator from 8.0.0 to 8.0.2 in /tools by @dependabot[bot] in #9596
build(deps): bump the actions group across 1 directory with 10 updates by @dependabot[bot] in #9602
feat: envoy extension policy listenerset attach by @kkk777-7 in #9425
build(deps): bump the helm group across 1 directory with 2 updates by @dependabot[bot] in #9599
api: add OOB BackendUtilization by @jukie in #9400
build(deps): bump the gomod group across 3 directories with 5 updates by @dependabot[bot] in #9598
fix: don't set Deployment replicas when an HPA is configured by @zhaohuabing in #9594
feat: support listenerset policy attach in backend traffic policy by @kkk777-7 in #9419
feat(infra): Add remote infrastructure provider by @zac-nixon in #9027
fix: use shared system trust store sds secret by @guydc in #9357
tweak: test indent by @kkk777-7 in #9612
feat: add MergeBackends option for backend cluster deduplication by @muwaqar-cflt in #9477
build(deps): bump the k8s-io group across 1 directory with 6 updates by @dependabot[bot] in #9601
follow up listenerset policy attachment by @kkk777-7 in #9621
chore: fix testdata for CTP status truncated by @zirain in #9640
fix(bootstrap): drop removed envoy.restart_features.use_eds_cache_for_ads guard by @Aias00 in #9610
fix: initial fetch timed out for type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.Secret by @yuehaii in #9532
feat: add CSRF origin validation to SecurityPolicy by @albsga4 in #8836
docs: add Release Notes link to top navigation menu by @amarkdotdev in #9620
chore: regen xds translator testdata for initialFetchTimeout by @zhaohuabing in #9643
feat: Implement BackendUtilization LB OutOfBand reporting by @jukie in #9593
feat/HTTPRouteFilter: host rewrite from path by @zhaohuabing in #8964
chore: fix gen by @zirain in #9648
feat: add support for tls.crt in BackendTlsPolicy by @gcleroux in #8329
chore: fix OSV-scanner reported vulnerabilities by @zhaohuabing in #9655
feat(extensionserver): Support policy resources targetting HTTPRoute and GRPCRoute by @HusseinKabbout in #9249
fix(translator): allow UDS + IP mixed endpoints by @guydc in #9654
fix(gatewayapi): don't skip MergeBackends precedence-index claims for policies that set nothing by @muwaqar-cflt in #9590
build(deps): bump the actions group across 1 directory with 5 updates by @dependabot[bot] in #9667
build(deps): bump busybox from fd8d9aa to dc2d74b in /tools/docker/envoy-gateway by @dependabot[bot] in #9658
build(deps): bump linkinator from 8.0.2 to 8.0.3 in /tools by @dependabot[bot] in #9659
build(deps): bump k8s.io/api from 0.36.0 to 0.36.3 in /examples/remote-infra in the k8s-io group across 1 directory by @dependabot[bot] in #9666
build(deps): bump the helm group across 1 directory with 3 updates by @dependabot[bot] in #9664
build(deps): bump the gomod group across 7 directories with 3 updates by @dependabot[bot] in #9663
build(deps): bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 in /test by @dependabot[bot] in #9677
api: add more timeout fields to ClientTimeout by @HusseinKabbout in #9315
add communityinviter.com to LINKINATOR_IGNORE to pass docs lint ci by @mmmommm in #9684
build(deps): bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 by @dependabot[bot] in #9678
chore: bump kube-api-linter by @sivchari in #9682
refactor: only include cluster-scoped traffic features in BackendCluster by @zhaohuabing in #9642
feat(gatewayapi): support SDS listener certificate references by @Sharvash in #9525
api: increase RateLimitSelectCondition headers MaxItems from 64 to 128 by @sivchari in #9681
api: add Week unit to BackendTrafficPolicy RateLimitUnit by @Danyal-Khalid in #9693
feat(api): add Selector to MergeBackendsConfig to restrict cluster deduplication by @muwaqar-cflt in #9624
feat: merge support for eep by @kkk777-7 in #9638
fix: filter NodePort status.addresses to nodes running Envoy when externalTrafficPolicy is Local by @yuehaii in #9605
feat(BackendTrafficPolicy): Support matching on response header for response override by @HusseinKabbout in #9354
feat(translator): active healthcheck logs by @guydc in #9651
replace ptr.To with new by @mmmommm in #9703
v1.9.0-rc.1 release by @kkk777-7 in #9708
fix: osv by @kkk777-7 in #9709
bump ratelimit, dynamic modules, and proxy versions for v1.9.0-rc.1 by @kkk777-7 in #9710
[release/v1.9] cherry pick v1.9 by @kkk777-7 in #9756
bump ratelimit version by @kkk777-7 in #9757

New Contributors

@matheuscscp made their first contribution in #8864
@wucm667 made their first contribution in #8906
@sjoukedv made their first contribution in #8908
@mvanhorn made their first contribution in #8818
@apkatsikas made their first contribution in #8871
@samuelmasuy made their first contribution in #9001
@nguyenptk made their first contribution in #8959
@benjaminch made their first contribution in #9032
@pkuzco made their first contribution in #9046
@AlecDiraimondo made their first contribution in #9068
@jeremiahsnapp made their first contribution in #9099
@SAY-5 made their first contribution in #9052
@rissson made their first contribution in #9050
@immanuwell made their first contribution in #9056
@nobbs made their first contribution in #9042
@jvlxz made their first contribution in #9209
@kanurag94 made their first contribution in #9216
@MengjiaLiang made their first contribution in #9214
@yuehaii made their first contribution in #8909
@M4tteoP made their first contribution in #9255
@rudrakhp with @Copilot made their first contribution in #9256
@norman-zon made their first contribution in #8730
@cilindrox made their first contribution in #8850
@gianniskt made their first contribution in #9224
@NeddM made their first contribution in #9098
@dragon3 made their first contribution in #9044
@dxbjavid made their first contribution in #9165
@sboulkour made their first contribution in #8956
@vishwas-bm made their first contribution in #9412
@daanvinken made their first contribution in #9199
@hegerdes made their first contribution in #9479
@wweiwei-li made their first contribution in #9271
@wiegandf made their first contribution in #9493
@Greyeye made their first contribution in #9488
@abe-servescale made their first contribution in #9183
@sinitax made their first contribution in #9313
@skos-ninja made their first contribution in #8536
@andreademurtas made their first contribution in #9155
@cleman95 made their first contribution in #8820
@dmavrodiev made their first contribution in #9472
@takumi12311123 made their first contribution in #9127
@christopherbii made their first contribution in #9049
@zac-nixon made their first contribution in #9027
@albsga4 made their first contribution in #8836
@amarkdotdev made their first contribution in #9620
@gcleroux made their first contribution in #8329
@HusseinKabbout made their first contribution in #9249
@sivchari made their first contribution in #9682
@Sharvash made their first contribution in #9525
@Danyal-Khalid made their first contribution in #9693

Full Changelog: https://github.com/envoyproxy/gateway/compare/v1.8.3...v1.9.0

`v1.9.0`

Compare Source

Release Announcement

Check out the v1.9.0 release announcement to learn more about the release.

What's Changed

Add Flux installation guide by @matheuscscp in #8864
fix(api): increase RateLimitSelectCondition.headers MaxItems from 16 to 64 by @wucm667 in #8906
skip invalid listener first in IR by @zirain in #8577
feat: policy field owner by @kkk777-7 in #8538
docs(tasks): add documentation for Dynamic Modules configuration example by @sjoukedv in #8908
fix: remove cross ns policy attachment status by @zhaohuabing in #8901
build(deps): bump npm-check-updates from 22.0.1 to 22.1.0 in /site by @dependabot[bot] in #8918
build(deps): bump sigs.k8s.io/controller-runtime from 0.23.3 to 0.24.0 in /examples/extension-server by @dependabot[bot] in #8924
build(deps): bump the helm group across 1 directory with 2 updates by @dependabot[bot] in #8925
build(deps): bump github/codeql-action from 4.35.2 to 4.35.3 in the actions group across 1 directory by @dependabot[bot] in #8920
feat: add runner event metrics by @zirain in #8802
build(deps): bump sigs.k8s.io/mcs-api from 0.4.1 to 0.5.0 by @dependabot[bot] in #8923
fix: respect backend endpoint hostname for health checks by @arkodg in #8929
fix(helm): propagate commonLabels to RBAC resources by @mvanhorn in #8818
fix(translator): set ListenerSet and listener Accepted:True for InvalidCertificateRef by @apkatsikas in #8871
fix: do not downgrade ALPN for only hostnames-overlapping listeners by @zhaohuabing in #8934
build(deps): bump the gomod group across 6 directories with 9 updates by @dependabot[bot] in #8931
feat: enableDeferredCreationStats by default by @zirain in #8937
bump golang to 1.26.3 by @zirain in #8943
chore: mute OSV scanner by @zirain in #8945
chore: use os.Stdout instead of t.Output() by @zirain in #8860
[release/v1.7] update docs and add release notes by @cnvergence in #8947
[release/v1.7] add benchmark report for v1.7.3 by @cnvergence in #8954
fix: restore last transition time in merge status conditions by @rudrakhp in #8962
docs: fix the version in release announcement link by @cnvergence in #8966
[release/v1.8] v1.8.0 release docs and announcement by @jukie in #8942
build(deps): bump the actions group across 1 directory with 4 updates by @dependabot[bot] in #8976
build(deps): bump npm-check-updates from 22.1.0 to 22.2.0 in /site by @dependabot[bot] in #8972
chore: remove unnecessary overlapping hostnames in the http3 test yaml by @zhaohuabing in #8963
build(deps): bump the gomod group across 2 directories with 2 updates by @dependabot[bot] in #8973
build(deps): bump the k8s-io group across 1 directory with 6 updates by @dependabot[bot] in #8974
fix: add unary interceptor and fix fail-open auth in GatewayNamespaceMode by @cnvergence in #8986
build(deps): bump the helm group across 1 directory with 2 updates by @dependabot[bot] in #8978
build(deps): bump sigs.k8s.io/controller-runtime from 0.24.0 to 0.24.1 by @dependabot[bot] in #8975
bump lastVersionTag to v1.8.0 by @jukie in #8992
feat: add envoyproxy status by @zirain in #8475
build(deps): bump sigs.k8s.io/controller-runtime from 0.24.0 to 0.24.1 in /examples/extension-server by @dependabot[bot] in #8977
Add gateway-api v1.5.1 mention to v1.8.0 release notes by @jukie in #8999
Update benchmarks dashboard for v1.8.0 by @jukie in #9002
Update non--crash-security--bug.md by @guydc in #9000
update docs links to 1.8.0 by @zhaohuabing in #9005
chore: fix gateway API docs links by @zhaohuabing in #9006
[release/v1.8] fix benchmark report for v1.8.0 by @jukie in #9007
fix(charts): add Gateway API v1.5 ListenerSet metrics to kube-state-metrics by @samuelmasuy in #9001
fix(charts): split combined autoscaling/policy RBAC rule in infra-manager by @samuelmasuy in #9013
fix: applyBackendTLSSetting panic by @zirain in #8998
fix(xds): hot-reload xDS server cert in GatewayNamespaceMode by @nguyenptk in #8959
docs: move v1.8 CRD upgrade note by @arkodg in #9017
docs: add bandwidth docs by @kkk777-7 in #8939
fix(helm): correct typo in HPA maxReplicas required message by @benjaminch in #9032
docs: highlight Gateway API compatibility by @zhaohuabing in #9010
build(deps): bump distroless/base-nossl from f71dcb6 to 20f009e in /tools/docker/envoy-gateway by @dependabot[bot] in #9038
chore: replace Deprecated CEL ParsedExpr Oneof With CelExprParsed by @zhaohuabing in #8982
chore: update release note for v1.9 by @kkk777-7 in #9045
build(deps): bump the gomod group across 5 directories with 6 updates by @dependabot[bot] in #9040
build(deps): bump the helm group across 1 directory with 2 updates by @dependabot[bot] in #9041
feat: disabled automountServiceAccountToken by default by @zirain in #9051
feat: allow to custom pod securityContext in gateway-helm by @zirain in #9036
fix: bump osv scanner by @jukie in #9070
chore: add deprecated field check by @kkk777-7 in #9072
docs: fix ClientTrafficPolicy verification steps by @apkatsikas in #9076
fix backend.tls.clientCertificateRef override test by @guydc in #9077
add depkeep to enterprise support by @pkuzco in #9046
lua: deprecate disableLua in favor of enableLua by @rudrakhp in #9081
chore: fix osv scan by @zhaohuabing in #9080
fix: allow IANA cipher names by @zhaohuabing in #9073
chore: address comment by @zirain in #9055
build(deps): bump the actions group across 1 directory with 4 updates by @dependabot[bot] in #9090
build(deps): bump cel.dev/expr from 0.25.1 to 0.25.2 by @dependabot[bot] in #9089
build(deps): bump busybox from 1487d0a to fd8d9aa in /tools/docker/envoy-gateway by @dependabot[bot] in #9087
build(deps): bump github.com/docker/cli from 29.5.1+incompatible to 29.5.2+incompatible in the gomod group across 1 directory by @dependabot[bot] in #9088
build(deps): bump the helm group across 1 directory with 4 updates by @dependabot[bot] in #9092
fix(gatewayapi): prefer sectioned BackendTLSPolicy over wildcard for same target by @AlecDiraimondo in #9068
chore: hide ForwardIDToken by @zhaohuabing in #9085
chore: fix docs link by @zirain in #9101
build(deps): bump npm-check-updates from 22.2.0 to 22.2.1 in /site by @dependabot[bot] in #9091
fix: encode TLS secrets with canonical PEM formatting by @cnvergence in #8744
chore: update deprecated docker libraries by @cnvergence in #9106
build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #9109
docs: copy Lua extensions security warning to v1.8 and v1.7 by @rudrakhp in #9113
fix: MaxStreamDuration should worked for non-route cluster by @zirain in #9028
feat: authorization path match by @kkk777-7 in #9008
build(deps): bump the helm group across 1 directory with 2 updates by @dependabot[bot] in #9108
chore: update testdata on main by @jukie in #9123
fix(egctl): skip missing CRDs in x status bulk modes by @jeremiahsnapp in #9099
fix(gatewayapi): reject unsupported BackendRef URLRewrite path rewrites by @Aditya7880900936 in #9131
fix: force HTTP1 for Service/ServiceImport with websocket appProtocol by @zhaohuabing in #9138
feat: add requestBody payload to HTTP active health checker by @michalskalski in #9111
chore: bump golang to 1.26.4 by @zirain in #9147
fix: move validation admission policy outside of crds directory by @zhaohuabing in #9024
fix: alway include the controller namespace in the watched namespaces by @zhaohuabing in #9100
build(deps): bump github.com/quic-go/quic-go from 0.59.0 to 0.59.1 in /test by @dependabot[bot] in #9160
build(deps): bump npm-check-updates from 22.2.1 to 22.2.2 in /site by @dependabot[bot] in #9157
build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #9158
build(deps): bump the gomod group across 1 directory with 16 updates by @dependabot[bot] in #9159
build(deps): bump github.com/quic-go/quic-go from 0.59.0 to 0.59.1 in /tools by @dependabot[bot] in #9164
fix rate limit validation on K8s 1.36 by @beckcl in #9166
Add release notes for v1.8.1 by @jukie in #9170
Add release notes for v1.7.4 by @cnvergence in #9124
fix github SA for June release by @zirain in #9173
chore: fix date and nit by @zirain in #9177
build(deps): bump opentelemetry-collector from 0.157.2 to 0.158.0 in /charts/gateway-addons-helm in the helm group across 1 directory by @dependabot[bot] in #9156
Bump VERSION to v1.8.1 by @jukie in #9175
docs: update benckmark for 1.8.1 and 1.7.4 by @zirain in #9179
docs: TLSRoute with TLS termination by @zhaohuabing in #9107
docs: explain how to scrape proxy metrics with an existing Prometheus by @SAY-5 in #9052
fix(validation): allow IPv6 to be specific in loadBalancerSourceRanges by @rissson in #9050
fix(egctl): return config errors when port forwarding fails by @immanuwell in #9056
chore: fix codecov by @zhaohuabing in #9188
fix: allow Backend TLS to disable ALPN with an empty list by @zhaohuabing in #9162
fix(gatewayapi): sort api key auth credentials by @nobbs in #9042
fix(status): separate listener programmed state from HTTPRoute Accepted condition by @apkatsikas in #9129
build(deps): bump npm-check-updates from 22.2.2 to 22.2.3 in /site by @dependabot[bot] in #9201
build(deps): bump github/codeql-action from 4.36.1 to 4.36.2 in the actions group across 1 directory by @dependabot[bot] in #9203
feat(auto_host_sni): allow configuring the sni automatically from the upstream endpoint by @nacx in #9137
fix(egctl): correct user-facing grammar in help text by @immanuwell in #9217
fix: reject ExternalName Service as a route backend by @zhaohuabing in #9190
fix(status): fall back to service externalIPs for Gateway addresses by @jvlxz in #9209
fix: don't duplicate ValidatingAdmissionPolicy in install.yaml by @jukie in #9182
feat(xds): add xdsNACKTotal metric by @QuantumEnigmaa in #9205
feat: source rate limit value from dynamic metadata by @kanurag94 in #9216
fix(listenerset): implement hostname conflict listener precedence by @zirain in #9192
fix: correct the config hot reload validation order by @MengjiaLiang in #9214
build(deps): bump the helm group across 1 directory with 4 updates by @dependabot[bot] in #9202
build(deps): bump the k8s-io group across 1 directory with 6 updates by @dependabot[bot] in #9241
build(deps): bump the gomod group across 2 directories with 6 updates by @dependabot[bot] in #9240
fix: deduplicate CA certificates in ClientTrafficPolicy mTLS by @yuehaii in #8909
feat(policy): support ListenerSet as targetRef for ClientTrafficPolicy by @apkatsikas in #9026
fix(docs): links still pointing to /contributions by @M4tteoP in #9255
fix: renew expired TLS certificates in e2e test fixtures by @rudrakhp with @Copilot in #9256
feat(api): Add filterContext field to Lua type in EnvoyExtensionPolicy by @norman-zon in #8730
build(deps): bump js-yaml and markdownlint-cli in /tools by @dependabot[bot] in #9258
docs: update release schedule information by @apkatsikas in #9257
docs: update Client Traffic Policy docs with new ListenerSet information by @apkatsikas in #9262
build(deps): bump undici from 7.24.7 to 7.28.0 in /tools by @dependabot[bot] in #9261
build(deps-dev): bump tar from 7.5.13 to 7.5.16 in /site by @dependabot[bot] in #9260
feat: option to disable automatic X-Forwarded-For append/add by @lextiz in #8576
build(deps): bump markdown-it and markdownlint-cli in /tools by @dependabot[bot] in #9259
feat: add FailedRefetchDuration to RemoteJWKS by @jukie in #9265
build(deps): bump github.com/containerd/containerd from 1.7.32 to 1.7.33 in /tools by @dependabot[bot] in #9266
build(deps): bump github.com/containerd/containerd from 1.7.32 to 1.7.33 by @dependabot[bot] in #9267
feat(helm): add CRDs dependency toggle by @cilindrox in #8850
fix: proxy protocol with httpProtocolOptions by @zhaohuabing in #9234
fix: validate API Key auth ExtractFrom by @zhaohuabing in #9250
fix: XRateLimitHeadersOptionDisabled constant value must match CRD enum by @gianniskt in #9224
fix(ratelimit): shared global ratelimit with cost not working by @zirain in #9245
chore: run dependabot on release branch by @zirain in #9230
fix(gatewayapi): http retry without backoff by @zirain in #9238
chore: update dependabot by @zirain in #9299
chore: use pinned docker image by @zirain in #9300
build(deps): bump npm-check-updates from 22.2.3 to 22.2.7 in /site by @dependabot[bot] in #9277
perf: resolve ClientTrafficPolicy targets once by @jukie in #9272
build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #9282
build(deps): bump the gomod group across 1 directory with 2 updates by @dependabot[bot] in #9283
build(deps): bump the helm group across 1 directory with 2 updates by @dependabot[bot] in #9279
chore: split release notes by @zhaohuabing in #9312
build(deps-dev): bump autoprefixer from 10.5.0 to 10.5.1 in /site by @dependabot[bot] in #9321
build(deps): bump actions/setup-go from 6.4.0 to 6.5.0 in /tools/github-actions/setup-deps in the actions group across 1 directory by @dependabot[bot] in #9325
chore: ignore k8s.io and go-control-plane on release branches by @zirain in #9331
feat: support for deployment.envoyGateway.strategy by @zirain in #9318
build(deps): bump otel/opentelemetry-collector-contrib from 0.154.0 to 0.155.0 in /charts/gateway-addons-helm in the helm group across 1 directory by @dependabot[bot] in #9344
build(deps-dev): bump autoprefixer from 10.5.1 to 10.5.2 in /site by @dependabot[bot] in #9343
ci: add tests for Kubernetes 1.36 by @beckcl in #8990
chore: update pr template to help reduce review effort by @zhaohuabing in #9350
helm: follow-up docs and template wording by @jukie in #9317
Add release notes for v1.8.2 by @jukie in #9361
fix: consolidate destination AppProtocol handling by @zhaohuabing in #9337
fix: panic with empty deploy by @zirain in #9365
fix: use target resource namespace in BTP RoutingType index by @Aias00 in #9359
chore: bump envoy go-control-plane by @zirain in #9375
fix: DaemonSet pod not using the configured custom ServiceAccount name by @zirain in #9347
ratelimit: refactor shared and non-shared ratelimit rules by @zirain in #9332
fix: use int64 format for ratelimit Requests field by @jukie in #9377
docs: describe uint32 vs int32 range issue by @jukie in #9379
feat: CEL-based Authorization policy by @zhaohuabing in #8981
feat: Bump gatewayapi v1.6.0 by @zirain in #9232
build(deps): bump npm-check-updates from 22.2.7 to 22.2.9 in /site by @dependabot[bot] in #9387
deps: ignore gateway-api on release branch by @zirain in #9393
chore: update skipped tests by @zirain in #9394
build(deps): bump opentelemetry-collector from 0.159.0 to 0.159.2 in /charts/gateway-addons-helm in the helm group across 1 directory by @dependabot[bot] in #9388
build(deps): bump the gomod group across 6 directories with 6 updates by @dependabot[bot] in #9398
Update sync-dashboard for v1.8.2 by @jukie in #9403
feat: support listenerset policy attach in security policy by @kkk777-7 in #9270
docs(gateway-helm): clarify envoyProxy image values by @immanuwell in #9222
fix: prevent GatewayNamespace mode from hijacking pre-existing ServiceAccounts and ConfigMaps by @yuehaii in #9215
fix: allow trailing dot in Backend FQDN hostnames by @NeddM in #9098
feat: support statusOnError field in EnvoyExtensionPolicy ExtProc by @dragon3 in #9044
detect ipv6 literal hosts in url2cluster and token endpoint check by @dxbjavid in #9165
feat(api): add ClientTrafficPolicy.clientIPDetection.downstreamRemoteAddress for L4-transparent geoip by @sboulkour in #8956
fix: register ListenerSet and route indexes in offline controller by @Aias00 in #9320
build(deps): bump the gomod group across 1 directory with 2 updates by @dependabot[bot] in #9436
build(deps): bump the helm group across 1 directory with 2 updates by @dependabot[bot] in #9434
build(deps): bump the actions group across 1 directory with 6 updates by @dependabot[bot] in #9439
chore: bump golang to 1.26.5 by @zhaohuabing in #9437
Add release notes for 1.7.5 by @cnvergence in #9433
docs: update 1.8 install docs by @zhaohuabing in #9451
[release/v1.7] add benchmark report for v1.7.5 by @cnvergence in #9453
feat(helm): harden control-plane and certgen securityContext by @jukie in #9069
perf: deduplicate JWT authn providers by @Aias00 in #9430
e2e: add stats for WASM by @zirain in #9424
fix: UDP/TCP RouteMultipleRoutesAttachment conformance test by @zirain in #9247
docs: document vulnerability disclosure process by @arkodg in #9227
perf: introduce endpoint slice indexer by @kkk777-7 in #9221
Revert LuaPerRoute source materialization for Lua by @arkodg in #9426
feat: support HTTPFilter for GRPCRoute by @zhaohuabing in #9404
fix: default backend TLS max version to 1.3 by @vishwas-bm in #9412
feat(ctp): add allowExpiredCertificate to tls.clientValidation by @daanvinken in #9199
docs: fix invalid proxy protocol example by @hegerdes in #9479
refactor: use stdlib maps and slices instead of golang.org/x/exp by @mmmommm in #9482
fix(listenerset): implement listener conflict precedence for protocol conflicts by @zirain in #9196
feat: wrap watch.namespaces helm template check in a with block by @cnvergence in #9067
Support off and critical log level by @wweiwei-li in #9271
build(deps): bump the actions group across 1 directory with 9 updates by @dependabot[bot] in #9506
build(deps-dev): bump autoprefixer from 10.5.2 to 10.5.3 in /site by @dependabot[bot] in #9495
build(deps): bump the helm group across 1 directory with 2 updates by @dependabot[bot] in #9501
build(deps): bump markdownlint-cli from 0.49.0 to 0.49.1 in /tools by @dependabot[bot] in #9496
build(deps): bump sigs.k8s.io/mcs-api from 0.5.0 to 0.5.2 by @dependabot[bot] in #9500
build(deps): bump the gomod group across 1 directory with 4 updates by @dependabot[bot] in #9499
build(deps): bump distroless/base-nossl from 20f009e to 86554c4 in /tools/docker/envoy-gateway by @dependabot[bot] in #9494
fix: redirect port leaking across multiple listeners by @Aias00 in #9349
fix: add default retry policy for Envoy wasm module fetch by @jukie in #9462
fix/refactor: deep copy status in translator for all resources by @rudrakhp in #9458
conformance: fix GatewayListenerUnsupportedProtocol test by @zirain in #9490
fix(logs): restore ISO 8601 timestamp format by @wiegandf in #9493
fix: unreferenced Secret events trigger reconciliation when HTTPRouteFilter CRD exists by @Greyeye in #9488
bump Gateway API to v1.6.1 by @zirain in #9515
Add release notes for v1.8.3 by @jukie in #9518
feat: support client and overall tracing sampling by @Ri7ay in #9402
refactor: use field owner pattern to merge BTPs by @rudrakhp in #9514
api: add host normalization to ClientTrafficPolicy by @sboulkour in #9115
Fix(ext-proc-examples): Add RequestBody and ResponseBody handling in request processing by @abe-servescale in #9183
feat(translator): Support ignoreFailure to tolerate invalid JWT by @sinitax in #9313
feat(ext_proc): add support for observability mode by @skos-ninja in #8536
fix(xds): use DnsCluster extension for DNS clusters by @andreademurtas in #9155
feat: allow RateLimitRedisSettings.url to be sourced from a Secret by @guanchzhou in #9143
chore: fix gen by @zirain in #9533
Remove 1.8.3 release page by @jukie in #9526
docs: recommend ListenerSet over mergeGateways by @zhaohuabing in #9524
feat(helm): add startupProbe to envoy-gateway deployment by @cleman95 in #8820
fix: reject TLS secret when certificate and private key do not match by @zhaohuabing in #9480
feat: support consistent hash for non-route backends by @zhaohuabing in #9231
build(deps-dev): bump autoprefixer from 10.5.3 to 10.5.4 in /site by @dependabot[bot] in #9542
build(deps): bump codespell from 2.4.2 to 2.4.3 in /tools/src/codespell by @dependabot[bot] in #9544
build(deps): bump loki from 7.0.0 to 7.1.0 in /charts/gateway-addons-helm in the helm group across 1 directory by @dependabot[bot] in #9545
build(deps): bump the actions group across 2 directories with 6 updates by @dependabot[bot] in #9549
feat: use grpc status errors in jwtinterceptor by @cnvergence in #9020
Add release note for fix to ratelimit fallback tag by @jukie in #9553
build(deps): bump linkinator from 7.6.1 to 8.0.0 in /tools by @dependabot[bot] in #9543
Update benchmark dashboard for v1.8.3 by @jukie in #9560
fix: dedupe SAN entries before checking algorithm uniqueness by @dmavrodiev in #9472
build(deps): bump the gomod group across 5 directories with 7 updates by @dependabot[bot] in #9546
Bump metallb and kind by @jukie in #9562
Create 1.8.3 release page and final release steps by @jukie in #9561
docs: point community meeting calendar to LFX platform by @zhaohuabing in #9569
fix: bound policy ancestors on the fly to avoid O(N^2) translation latency by @zhaohuabing in #9558
docs: explain invert field in global rate limit example by @Aditya7880900936 in #9572
ci: wire standalone test suite into GitHub Actions by @takumi12311123 in #9127
deps: bump dependencies flagged by OSV scan by @zhaohuabing in #9575
fix(cors validation) allow all RFC-3986 compliant schemes by @christopherbii in #9049
feat(xds): support SNI based dynamic forward proxy for TLSRoute by @andreademurtas in #9184
fix: handle EC parameters before TLS private keys by @jvlxz in #9338
test: fix mismatched tls.key in tlsroute dynamic resolver testdata by @zhaohuabing in #9582
fix: eliminate port race in setupFakeEnvoyStats test helper by @muwaqar-cflt in #9580
feat: support listenerset reference grant by @kkk777-7 in #9481
fix: allow TLSv1.3 for remote JWKS fetching by @michaelbeaumont in #9531
fix: allow requests:0 for global rate limit block rules by @mvanhorn in #9333
fix: validate SDS URL by @zirain in #9030
fix: confirm NotFound against the API server before dropping status writes by @zhaohuabing in #9566
feat(oidc): forward id token by @zhaohuabing in #9367
api: make RateLimitRedisSettings.url a pointer by @guanchzhou in #9538
fix(docs): replace dead Envoy Slack invite link by @zhaohuabing in #9586
feat(xds): raise xDS gRPC server default receive limit and make it configurable by @linmosko in #9564
fix: eliminate cfg.Logger data race in server()'s reload/shutdown path by @muwaqar-cflt in #9581
fix: make ListenerSet and GRPCRoute watches optional by @zhaohuabing in #9583
build(deps): bump npm-check-updates from 22.2.9 to 23.0.0 in /site by @dependabot[bot] in #9595
build(deps): bump linkinator from 8.0.0 to 8.0.2 in /tools by @dependabot[bot] in #9596
build(deps): bump the actions group across 1 directory with 10 updates by @dependabot[bot] in #9602
feat: envoy extension policy listenerset attach by @kkk777-7 in #9425
build(deps): bump the helm group across 1 directory with 2 updates by @dependabot[bot] in #9599
api: add OOB BackendUtilization by @jukie in #9400
build(deps): bump the gomod group across 3 directories with 5 updates by @dependabot[bot] in #9598
fix: don't set Deployment replicas when an HPA is configured by @zhaohuabing in #9594
feat: support listenerset policy attach in backend traffic policy by @kkk777-7 in #9419
feat(infra): Add remote infrastructure provider by @zac-nixon in #9027
fix: use shared system trust store sds secret by @guydc in #9357
tweak: test indent by @kkk777-7 in #9612
feat: add MergeBackends option for backend cluster deduplication by @muwaqar-cflt in #9477
build(deps): bump the k8s-io group across 1 directory with 6 updates by @dependabot[bot] in #9601
follow up listenerset policy attachment by @kkk777-7 in #9621
chore: fix testdata for CTP status truncated by @zirain in #9640
fix(bootstrap): drop removed envoy.restart_features.use_eds_cache_for_ads guard by @Aias00 in #9610
fix: initial fetch timed out for type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.Secret by @yuehaii in #9532
feat: add CSRF origin validation to SecurityPolicy by @albsga4 in #8836
docs: add Release Notes link to top navigation menu by @amarkdotdev in #9620
chore: regen xds translator testdata for initialFetchTimeout by @zhaohuabing in #9643
feat: Implement BackendUtilization LB OutOfBand reporting by @jukie in #9593
feat/HTTPRouteFilter: host rewrite from path by @zhaohuabing in #8964
chore: fix gen by @zirain in #9648
feat: add support for tls.crt in BackendTlsPolicy by @gcleroux in #8329
chore: fix OSV-scanner reported vulnerabilities by @zhaohuabing in #9655
feat(extensionserver): Support policy resources targetting HTTPRoute and GRPCRoute by @HusseinKabbout in #9249
fix(translator): allow UDS + IP mixed endpoints by @guydc in #9654
fix(gatewayapi): don't skip MergeBackends precedence-index claims for policies that set nothing by @muwaqar-cflt in #9590
build(deps): bump the actions group across 1 directory with 5 updates by @dependabot[bot] in #9667
build(deps): bump busybox from fd8d9aa to dc2d74b in /tools/docker/envoy-gateway by @dependabot[bot] in #9658
build(deps): bump linkinator from 8.0.2 to 8.0.3 in /tools by @dependabot[bot] in #9659
build(deps): bump k8s.io/api from 0.36.0 to 0.36.3 in /examples/remote-infra in the k8s-io group across 1 directory by @dependabot[bot] in #9666
build(deps): bump the helm group across 1 directory with 3 updates by @dependabot[bot] in #9664
build(deps): bump the gomod group across 7 directories with 3 updates by @dependabot[bot] in #9663
build(deps): bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 in /test by @dependabot[bot] in #9677
api: add more timeout fields to ClientTimeout by @HusseinKabbout in #9315
add communityinviter.com to LINKINATOR_IGNORE to pass docs lint ci by @mmmommm in #9684
build(deps): bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 by @dependabot[bot] in #9678
chore: bump kube-api-linter by @sivchari in #9682
refactor: only include cluster-scoped traffic features in BackendCluster by @zhaohuabing in #9642
feat(gatewayapi): support SDS listener certificate references by @Sharvash in #9525
api: increase RateLimitSelectCondition headers MaxItems from 64 to 128 by @sivchari in #9681
api: add Week unit to BackendTrafficPolicy RateLimitUnit by @Danyal-Khalid in #9693
feat(api): add Selector to MergeBackendsConfig to restrict cluster deduplication by @muwaqar-cflt in #9624
feat: merge support for eep by @kkk777-7 in #9638
fix: filter NodePort status.addresses to nodes running Envoy when externalTrafficPolicy is Local by @yuehaii in #9605
feat(BackendTrafficPolicy): Support matching on response header for response override by @HusseinKabbout in #9354
feat(translator): active healthcheck logs by @guydc in #9651
replace ptr.To with new by @mmmommm in #9703
v1.9.0-rc.1 release by @kkk777-7 in #9708
fix: osv by @kkk777-7 in #9709
bump ratelimit, dynamic modules, and proxy versions for v1.9.0-rc.1 by @kkk777-7 in #9710
[release/v1.9] cherry pick v1.9 by @kkk777-7 in #9756
bump ratelimit version by @kkk777-7 in #9757

New Contributors

@matheuscscp made their first contribution in #8864
@wucm667 made their first contribution in #8906
@sjoukedv made their first contribution in #8908
@mvanhorn made their first contribution in #8818
@apkatsikas made their first contribution in #8871
@samuelmasuy made their first contribution in #9001
@nguyenptk made their first contribution in #8959
@benjaminch made their first contribution in #9032
@pkuzco made their first contribution in #9046
@AlecDiraimondo made their first contribution in #9068
@jeremiahsnapp made their first contribution in #9099
@SAY-5 made their first contribution in #9052
@rissson made their first contribution in #9050
@immanuwell made their first contribution in #9056
@nobbs made their first contribution in #9042
@jvlxz made their first contribution in #9209
@kanurag94 made their first contribution in #9216
@MengjiaLiang made their first contribution in #9214
@yuehaii made their first contribution in #8909
@M4tteoP made their first contribution in #9255
@rudrakhp with @Copilot made their first contribution in #9256
@norman-zon made their first contribution in #8730
@cilindrox made their first contribution in #8850
@gianniskt made their first contribution in #9224
@NeddM made their first contribution in #9098
@dragon3 made their first contribution in #9044
@dxbjavid made their first contribution in #9165
@sboulkour made their first contribution in #8956
@vishwas-bm made their first contribution in #9412
@daanvinken made their first contribution in #9199
@hegerdes made their first contribution in #9479
@wweiwei-li made their first contribution in #9271
@wiegandf made their first contribution in #9493
@Greyeye made their first contribution in #9488
@abe-servescale made their first contribution in #9183
@sinitax made their first contribution in #9313
@skos-ninja made their first contribution in #8536
@andreademurtas made their first contribution in #9155
@cleman95 made their first contribution in #8820
@dmavrodiev made their first contribution in #9472
@takumi12311123 made their first contribution in #9127
@christopherbii made their first contribution in #9049
@zac-nixon made their first contribution in #9027
@albsga4 made their first contribution in #8836
@amarkdotdev made their first contribution in #9620
@gcleroux made their first contribution in #8329
@HusseinKabbout made their first contribution in #9249
@sivchari made their first contribution in #9682
@Sharvash made their first contribution in #9525
@Danyal-Khalid made their first contribution in #9693

Full Changelog: https://github.com/envoyproxy/gateway/compare/v1.8.3...v1.9.0

`v1.8.5`

Compare Source

Release Announcement

Check out the v1.8.5 release announcement to learn more about the release.

`v1.8.5`

Compare Source

Release Announcement

Check out the v1.8.5 release announcement to learn more about the release.

Release Announcement

Check out the v1.8.4 release announcement to learn more about the release.

`v1.8.3`

Compare Source

Release Announcement

Check out the v1.8.3 release announcement to learn more about the release.

What's Changed

[release-1.8]: bump the gomod group across 1 directory with 3 updates by @dependabot[bot] in #9389
[release-1.8]: bump the gomod group across 1 directory with 2 updates by @dependabot[bot] in #9435
[release-1.8]: bump the actions group across 1 directory with 6 updates by @dependabot[bot] in #9440
[release-1.8]: bump the actions group across 1 directory with 7 updates by @dependabot[bot] in #9507
[release-1.8]: bump the gomod group across 1 directory with 4 updates by @dependabot[bot] in #9502
[release-1.8]: bump sigs.k8s.io/mcs-api from 0.4.1 to 0.5.2 by @dependabot[bot] in #9503
[release-1.8]: bump distroless/base-nossl from 20f009e to 86554c4 in /tools/docker/envoy-gateway by @dependabot[bot] in #9497
fix: reject TLS secret when certificate and private key do not match by @zhaohuabing in #9487
[release-1.8] release notes and version bump for v1.8.3 by @jukie in #9520
[release-1.8] V1.8.3 cherry picks by @jukie in #9540
[release-1.8]: bump the gomod group across 1 directory with 7 updates by @dependabot[bot] in #9547
[release-1.8]: bump the actions group across 2 directories with 6 updates by @dependabot[bot] in #9551
[release-1.8] fix: update ratelimit image fallback tag in helm helpers by @jukie in #9552

Full Changelog: https://github.com/envoyproxy/gateway/compare/v1.8.2...v1.8.3

`v1.8.3`

Compare Source

Release Announcement

Check out the v1.8.3 release announcement to learn more about the release.

What's Changed

[release-1.8]: bump the gomod group across 1 directory with 3 updates by @dependabot[bot] in #9389
[release-1.8]: bump the gomod group across 1 directory with 2 updates by @dependabot[bot] in #9435
[release-1.8]: bump the actions group across 1 directory with 6 updates by @dependabot[bot] in #9440
[release-1.8]: bump the actions group across 1 directory with 7 updates by @dependabot[bot] in #9507
[release-1.8]: bump the gomod group across 1 directory with 4 updates by @dependabot[bot] in #9502
[release-1.8]: bump sigs.k8s.io/mcs-api from 0.4.1 to 0.5.2 by @dependabot[bot] in #9503
[release-1.8]: bump distroless/base-nossl from 20f009e to 86554c4 in /tools/docker/envoy-gateway by @dependabot[bot] in #9497
fix: reject TLS secret when certificate and private key do not match by @zhaohuabing in #9487
[release-1.8] release notes and version bump for v1.8.3 by @jukie in #9520
[release-1.8] V1.8.3 cherry picks by @jukie in #9540
[release-1.8]: bump the gomod group across 1 directory with 7 updates by @dependabot[bot] in #9547
[release-1.8]: bump the actions group across 2 directories with 6 updates by @dependabot[bot] in #9551
[release-1.8] fix: update ratelimit image fallback tag in helm helpers by @jukie in #9552

Full Changelog: https://github.com/envoyproxy/gateway/compare/v1.8.2...v1.8.3

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [mirror.gcr.io/envoyproxy/gateway-helm](https://gateway.envoyproxy.io/) ([source](https://github.com/envoyproxy/gateway)) | minor | `1.8.2` → `v1.9.2` | --- ### Release Notes <details> <summary>envoyproxy/gateway (mirror.gcr.io/envoyproxy/gateway-helm)</summary> ### [`v1.9.2`](https://github.com/envoyproxy/gateway/releases/tag/v1.9.2) [Compare Source](https://github.com/envoyproxy/gateway/compare/v1.9.2...v1.9.2) ##### Release Announcement Check out the [v1.9.2 release announcement](https://gateway.envoyproxy.io/news/releases/notes/v1.9.2) to learn more about the release. ### [`v1.9.2`](https://github.com/envoyproxy/gateway/releases/tag/v1.9.2) [Compare Source](https://github.com/envoyproxy/gateway/compare/v1.9.1...v1.9.2) ##### Release Announcement Check out the [v1.9.2 release announcement](https://gateway.envoyproxy.io/news/releases/notes/v1.9.2) to learn more about the release. ### [`v1.9.1`](https://github.com/envoyproxy/gateway/releases/tag/v1.9.1) [Compare Source](https://github.com/envoyproxy/gateway/compare/v1.9.1...v1.9.1) ##### Release Announcement Check out the [v1.9.1 release announcement](https://gateway.envoyproxy.io/news/releases/notes/v1.9.1) to learn more about the release. ### [`v1.9.1`](https://github.com/envoyproxy/gateway/releases/tag/v1.9.1) [Compare Source](https://github.com/envoyproxy/gateway/compare/v1.9.0...v1.9.1) ##### Release Announcement Check out the [v1.9.1 release announcement](https://gateway.envoyproxy.io/news/releases/notes/v1.9.1) to learn more about the release. ### [`v1.9.0`](https://github.com/envoyproxy/gateway/releases/tag/v1.9.0) [Compare Source](https://github.com/envoyproxy/gateway/compare/v1.9.0...v1.9.0) ##### Release Announcement Check out the [v1.9.0 release announcement](https://gateway.envoyproxy.io/news/releases/notes/v1.9.0/) to learn more about the release. ##### What's Changed - Add Flux installation guide by [@matheuscscp](https://github.com/matheuscscp) in [#8864](https://github.com/envoyproxy/gateway/pull/8864) - fix(api): increase RateLimitSelectCondition.headers MaxItems from 16 to 64 by [@wucm667](https://github.com/wucm667) in [#8906](https://github.com/envoyproxy/gateway/pull/8906) - skip invalid listener first in IR by [@zirain](https://github.com/zirain) in [#8577](https://github.com/envoyproxy/gateway/pull/8577) - feat: policy field owner by [@kkk777-7](https://github.com/kkk777-7) in [#8538](https://github.com/envoyproxy/gateway/pull/8538) - docs(tasks): add documentation for Dynamic Modules configuration example by [@sjoukedv](https://github.com/sjoukedv) in [#8908](https://github.com/envoyproxy/gateway/pull/8908) - fix: remove cross ns policy attachment status by [@zhaohuabing](https://github.com/zhaohuabing) in [#8901](https://github.com/envoyproxy/gateway/pull/8901) - build(deps): bump npm-check-updates from 22.0.1 to 22.1.0 in /site by [@dependabot](https://github.com/dependabot)\[bot] in [#8918](https://github.com/envoyproxy/gateway/pull/8918) - build(deps): bump sigs.k8s.io/controller-runtime from 0.23.3 to 0.24.0 in /examples/extension-server by [@dependabot](https://github.com/dependabot)\[bot] in [#8924](https://github.com/envoyproxy/gateway/pull/8924) - build(deps): bump the helm group across 1 directory with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#8925](https://github.com/envoyproxy/gateway/pull/8925) - build(deps): bump github/codeql-action from 4.35.2 to 4.35.3 in the actions group across 1 directory by [@dependabot](https://github.com/dependabot)\[bot] in [#8920](https://github.com/envoyproxy/gateway/pull/8920) - feat: add runner event metrics by [@zirain](https://github.com/zirain) in [#8802](https://github.com/envoyproxy/gateway/pull/8802) - build(deps): bump sigs.k8s.io/mcs-api from 0.4.1 to 0.5.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#8923](https://github.com/envoyproxy/gateway/pull/8923) - fix: respect backend endpoint hostname for health checks by [@arkodg](https://github.com/arkodg) in [#8929](https://github.com/envoyproxy/gateway/pull/8929) - fix(helm): propagate commonLabels to RBAC resources by [@mvanhorn](https://github.com/mvanhorn) in [#8818](https://github.com/envoyproxy/gateway/pull/8818) - fix(translator): set ListenerSet and listener Accepted:True for InvalidCertificateRef by [@apkatsikas](https://github.com/apkatsikas) in [#8871](https://github.com/envoyproxy/gateway/pull/8871) - fix: do not downgrade ALPN for only hostnames-overlapping listeners by [@zhaohuabing](https://github.com/zhaohuabing) in [#8934](https://github.com/envoyproxy/gateway/pull/8934) - build(deps): bump the gomod group across 6 directories with 9 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#8931](https://github.com/envoyproxy/gateway/pull/8931) - feat: enableDeferredCreationStats by default by [@zirain](https://github.com/zirain) in [#8937](https://github.com/envoyproxy/gateway/pull/8937) - bump golang to 1.26.3 by [@zirain](https://github.com/zirain) in [#8943](https://github.com/envoyproxy/gateway/pull/8943) - chore: mute OSV scanner by [@zirain](https://github.com/zirain) in [#8945](https://github.com/envoyproxy/gateway/pull/8945) - chore: use os.Stdout instead of t.Output() by [@zirain](https://github.com/zirain) in [#8860](https://github.com/envoyproxy/gateway/pull/8860) - \[release/v1.7] update docs and add release notes by [@cnvergence](https://github.com/cnvergence) in [#8947](https://github.com/envoyproxy/gateway/pull/8947) - \[release/v1.7] add benchmark report for v1.7.3 by [@cnvergence](https://github.com/cnvergence) in [#8954](https://github.com/envoyproxy/gateway/pull/8954) - fix: restore last transition time in merge status conditions by [@rudrakhp](https://github.com/rudrakhp) in [#8962](https://github.com/envoyproxy/gateway/pull/8962) - docs: fix the version in release announcement link by [@cnvergence](https://github.com/cnvergence) in [#8966](https://github.com/envoyproxy/gateway/pull/8966) - \[release/v1.8] v1.8.0 release docs and announcement by [@jukie](https://github.com/jukie) in [#8942](https://github.com/envoyproxy/gateway/pull/8942) - build(deps): bump the actions group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#8976](https://github.com/envoyproxy/gateway/pull/8976) - build(deps): bump npm-check-updates from 22.1.0 to 22.2.0 in /site by [@dependabot](https://github.com/dependabot)\[bot] in [#8972](https://github.com/envoyproxy/gateway/pull/8972) - chore: remove unnecessary overlapping hostnames in the http3 test yaml by [@zhaohuabing](https://github.com/zhaohuabing) in [#8963](https://github.com/envoyproxy/gateway/pull/8963) - build(deps): bump the gomod group across 2 directories with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#8973](https://github.com/envoyproxy/gateway/pull/8973) - build(deps): bump the k8s-io group across 1 directory with 6 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#8974](https://github.com/envoyproxy/gateway/pull/8974) - fix: add unary interceptor and fix fail-open auth in GatewayNamespaceMode by [@cnvergence](https://github.com/cnvergence) in [#8986](https://github.com/envoyproxy/gateway/pull/8986) - build(deps): bump the helm group across 1 directory with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#8978](https://github.com/envoyproxy/gateway/pull/8978) - build(deps): bump sigs.k8s.io/controller-runtime from 0.24.0 to 0.24.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#8975](https://github.com/envoyproxy/gateway/pull/8975) - bump lastVersionTag to v1.8.0 by [@jukie](https://github.com/jukie) in [#8992](https://github.com/envoyproxy/gateway/pull/8992) - feat: add envoyproxy status by [@zirain](https://github.com/zirain) in [#8475](https://github.com/envoyproxy/gateway/pull/8475) - build(deps): bump sigs.k8s.io/controller-runtime from 0.24.0 to 0.24.1 in /examples/extension-server by [@dependabot](https://github.com/dependabot)\[bot] in [#8977](https://github.com/envoyproxy/gateway/pull/8977) - Add gateway-api v1.5.1 mention to v1.8.0 release notes by [@jukie](https://github.com/jukie) in [#8999](https://github.com/envoyproxy/gateway/pull/8999) - Update benchmarks dashboard for v1.8.0 by [@jukie](https://github.com/jukie) in [#9002](https://github.com/envoyproxy/gateway/pull/9002) - Update non--crash-security--bug.md by [@guydc](https://github.com/guydc) in [#9000](https://github.com/envoyproxy/gateway/pull/9000) - update docs links to 1.8.0 by [@zhaohuabing](https://github.com/zhaohuabing) in [#9005](https://github.com/envoyproxy/gateway/pull/9005) - chore: fix gateway API docs links by [@zhaohuabing](https://github.com/zhaohuabing) in [#9006](https://github.com/envoyproxy/gateway/pull/9006) - \[release/v1.8] fix benchmark report for v1.8.0 by [@jukie](https://github.com/jukie) in [#9007](https://github.com/envoyproxy/gateway/pull/9007) - fix(charts): add Gateway API v1.5 ListenerSet metrics to kube-state-metrics by [@samuelmasuy](https://github.com/samuelmasuy) in [#9001](https://github.com/envoyproxy/gateway/pull/9001) - fix(charts): split combined autoscaling/policy RBAC rule in infra-manager by [@samuelmasuy](https://github.com/samuelmasuy) in [#9013](https://github.com/envoyproxy/gateway/pull/9013) - fix: applyBackendTLSSetting panic by [@zirain](https://github.com/zirain) in [#8998](https://github.com/envoyproxy/gateway/pull/8998) - fix(xds): hot-reload xDS server cert in GatewayNamespaceMode by [@nguyenptk](https://github.com/nguyenptk) in [#8959](https://github.com/envoyproxy/gateway/pull/8959) - docs: move v1.8 CRD upgrade note by [@arkodg](https://github.com/arkodg) in [#9017](https://github.com/envoyproxy/gateway/pull/9017) - docs: add bandwidth docs by [@kkk777-7](https://github.com/kkk777-7) in [#8939](https://github.com/envoyproxy/gateway/pull/8939) - fix(helm): correct typo in HPA maxReplicas required message by [@benjaminch](https://github.com/benjaminch) in [#9032](https://github.com/envoyproxy/gateway/pull/9032) - docs: highlight Gateway API compatibility by [@zhaohuabing](https://github.com/zhaohuabing) in [#9010](https://github.com/envoyproxy/gateway/pull/9010) - build(deps): bump distroless/base-nossl from `f71dcb6` to `20f009e` in /tools/docker/envoy-gateway by [@dependabot](https://github.com/dependabot)\[bot] in [#9038](https://github.com/envoyproxy/gateway/pull/9038) - chore: replace Deprecated CEL ParsedExpr Oneof With CelExprParsed by [@zhaohuabing](https://github.com/zhaohuabing) in [#8982](https://github.com/envoyproxy/gateway/pull/8982) - chore: update release note for v1.9 by [@kkk777-7](https://github.com/kkk777-7) in [#9045](https://github.com/envoyproxy/gateway/pull/9045) - build(deps): bump the gomod group across 5 directories with 6 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9040](https://github.com/envoyproxy/gateway/pull/9040) - build(deps): bump the helm group across 1 directory with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9041](https://github.com/envoyproxy/gateway/pull/9041) - feat: disabled automountServiceAccountToken by default by [@zirain](https://github.com/zirain) in [#9051](https://github.com/envoyproxy/gateway/pull/9051) - feat: allow to custom pod securityContext in gateway-helm by [@zirain](https://github.com/zirain) in [#9036](https://github.com/envoyproxy/gateway/pull/9036) - fix: bump osv scanner by [@jukie](https://github.com/jukie) in [#9070](https://github.com/envoyproxy/gateway/pull/9070) - chore: add deprecated field check by [@kkk777-7](https://github.com/kkk777-7) in [#9072](https://github.com/envoyproxy/gateway/pull/9072) - docs: fix ClientTrafficPolicy verification steps by [@apkatsikas](https://github.com/apkatsikas) in [#9076](https://github.com/envoyproxy/gateway/pull/9076) - fix backend.tls.clientCertificateRef override test by [@guydc](https://github.com/guydc) in [#9077](https://github.com/envoyproxy/gateway/pull/9077) - add depkeep to enterprise support by [@pkuzco](https://github.com/pkuzco) in [#9046](https://github.com/envoyproxy/gateway/pull/9046) - lua: deprecate disableLua in favor of enableLua by [@rudrakhp](https://github.com/rudrakhp) in [#9081](https://github.com/envoyproxy/gateway/pull/9081) - chore: fix osv scan by [@zhaohuabing](https://github.com/zhaohuabing) in [#9080](https://github.com/envoyproxy/gateway/pull/9080) - fix: allow IANA cipher names by [@zhaohuabing](https://github.com/zhaohuabing) in [#9073](https://github.com/envoyproxy/gateway/pull/9073) - chore: address comment by [@zirain](https://github.com/zirain) in [#9055](https://github.com/envoyproxy/gateway/pull/9055) - build(deps): bump the actions group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9090](https://github.com/envoyproxy/gateway/pull/9090) - build(deps): bump cel.dev/expr from 0.25.1 to 0.25.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#9089](https://github.com/envoyproxy/gateway/pull/9089) - build(deps): bump busybox from `1487d0a` to `fd8d9aa` in /tools/docker/envoy-gateway by [@dependabot](https://github.com/dependabot)\[bot] in [#9087](https://github.com/envoyproxy/gateway/pull/9087) - build(deps): bump github.com/docker/cli from 29.5.1+incompatible to 29.5.2+incompatible in the gomod group across 1 directory by [@dependabot](https://github.com/dependabot)\[bot] in [#9088](https://github.com/envoyproxy/gateway/pull/9088) - build(deps): bump the helm group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9092](https://github.com/envoyproxy/gateway/pull/9092) - fix(gatewayapi): prefer sectioned BackendTLSPolicy over wildcard for same target by [@AlecDiraimondo](https://github.com/AlecDiraimondo) in [#9068](https://github.com/envoyproxy/gateway/pull/9068) - chore: hide ForwardIDToken by [@zhaohuabing](https://github.com/zhaohuabing) in [#9085](https://github.com/envoyproxy/gateway/pull/9085) - chore: fix docs link by [@zirain](https://github.com/zirain) in [#9101](https://github.com/envoyproxy/gateway/pull/9101) - build(deps): bump npm-check-updates from 22.2.0 to 22.2.1 in /site by [@dependabot](https://github.com/dependabot)\[bot] in [#9091](https://github.com/envoyproxy/gateway/pull/9091) - fix: encode TLS secrets with canonical PEM formatting by [@cnvergence](https://github.com/cnvergence) in [#8744](https://github.com/envoyproxy/gateway/pull/8744) - chore: update deprecated docker libraries by [@cnvergence](https://github.com/cnvergence) in [#9106](https://github.com/envoyproxy/gateway/pull/9106) - build(deps): bump the actions group across 1 directory with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9109](https://github.com/envoyproxy/gateway/pull/9109) - docs: copy Lua extensions security warning to v1.8 and v1.7 by [@rudrakhp](https://github.com/rudrakhp) in [#9113](https://github.com/envoyproxy/gateway/pull/9113) - fix: MaxStreamDuration should worked for non-route cluster by [@zirain](https://github.com/zirain) in [#9028](https://github.com/envoyproxy/gateway/pull/9028) - feat: authorization path match by [@kkk777-7](https://github.com/kkk777-7) in [#9008](https://github.com/envoyproxy/gateway/pull/9008) - build(deps): bump the helm group across 1 directory with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9108](https://github.com/envoyproxy/gateway/pull/9108) - chore: update testdata on main by [@jukie](https://github.com/jukie) in [#9123](https://github.com/envoyproxy/gateway/pull/9123) - fix(egctl): skip missing CRDs in `x status` bulk modes by [@jeremiahsnapp](https://github.com/jeremiahsnapp) in [#9099](https://github.com/envoyproxy/gateway/pull/9099) - fix(gatewayapi): reject unsupported BackendRef URLRewrite path rewrites by [@Aditya7880900936](https://github.com/Aditya7880900936) in [#9131](https://github.com/envoyproxy/gateway/pull/9131) - fix: force HTTP1 for Service/ServiceImport with websocket appProtocol by [@zhaohuabing](https://github.com/zhaohuabing) in [#9138](https://github.com/envoyproxy/gateway/pull/9138) - feat: add requestBody payload to HTTP active health checker by [@michalskalski](https://github.com/michalskalski) in [#9111](https://github.com/envoyproxy/gateway/pull/9111) - chore: bump golang to 1.26.4 by [@zirain](https://github.com/zirain) in [#9147](https://github.com/envoyproxy/gateway/pull/9147) - fix: move validation admission policy outside of crds directory by [@zhaohuabing](https://github.com/zhaohuabing) in [#9024](https://github.com/envoyproxy/gateway/pull/9024) - fix: alway include the controller namespace in the watched namespaces by [@zhaohuabing](https://github.com/zhaohuabing) in [#9100](https://github.com/envoyproxy/gateway/pull/9100) - build(deps): bump github.com/quic-go/quic-go from 0.59.0 to 0.59.1 in /test by [@dependabot](https://github.com/dependabot)\[bot] in [#9160](https://github.com/envoyproxy/gateway/pull/9160) - build(deps): bump npm-check-updates from 22.2.1 to 22.2.2 in /site by [@dependabot](https://github.com/dependabot)\[bot] in [#9157](https://github.com/envoyproxy/gateway/pull/9157) - build(deps): bump the actions group across 1 directory with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9158](https://github.com/envoyproxy/gateway/pull/9158) - build(deps): bump the gomod group across 1 directory with 16 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9159](https://github.com/envoyproxy/gateway/pull/9159) - build(deps): bump github.com/quic-go/quic-go from 0.59.0 to 0.59.1 in /tools by [@dependabot](https://github.com/dependabot)\[bot] in [#9164](https://github.com/envoyproxy/gateway/pull/9164) - fix rate limit validation on K8s 1.36 by [@beckcl](https://github.com/beckcl) in [#9166](https://github.com/envoyproxy/gateway/pull/9166) - Add release notes for v1.8.1 by [@jukie](https://github.com/jukie) in [#9170](https://github.com/envoyproxy/gateway/pull/9170) - Add release notes for v1.7.4 by [@cnvergence](https://github.com/cnvergence) in [#9124](https://github.com/envoyproxy/gateway/pull/9124) - fix github SA for June release by [@zirain](https://github.com/zirain) in [#9173](https://github.com/envoyproxy/gateway/pull/9173) - chore: fix date and nit by [@zirain](https://github.com/zirain) in [#9177](https://github.com/envoyproxy/gateway/pull/9177) - build(deps): bump opentelemetry-collector from 0.157.2 to 0.158.0 in /charts/gateway-addons-helm in the helm group across 1 directory by [@dependabot](https://github.com/dependabot)\[bot] in [#9156](https://github.com/envoyproxy/gateway/pull/9156) - Bump VERSION to v1.8.1 by [@jukie](https://github.com/jukie) in [#9175](https://github.com/envoyproxy/gateway/pull/9175) - docs: update benckmark for 1.8.1 and 1.7.4 by [@zirain](https://github.com/zirain) in [#9179](https://github.com/envoyproxy/gateway/pull/9179) - docs: TLSRoute with TLS termination by [@zhaohuabing](https://github.com/zhaohuabing) in [#9107](https://github.com/envoyproxy/gateway/pull/9107) - docs: explain how to scrape proxy metrics with an existing Prometheus by [@SAY-5](https://github.com/SAY-5) in [#9052](https://github.com/envoyproxy/gateway/pull/9052) - fix(validation): allow IPv6 to be specific in loadBalancerSourceRanges by [@rissson](https://github.com/rissson) in [#9050](https://github.com/envoyproxy/gateway/pull/9050) - fix(egctl): return config errors when port forwarding fails by [@immanuwell](https://github.com/immanuwell) in [#9056](https://github.com/envoyproxy/gateway/pull/9056) - chore: fix codecov by [@zhaohuabing](https://github.com/zhaohuabing) in [#9188](https://github.com/envoyproxy/gateway/pull/9188) - fix: allow Backend TLS to disable ALPN with an empty list by [@zhaohuabing](https://github.com/zhaohuabing) in [#9162](https://github.com/envoyproxy/gateway/pull/9162) - fix(gatewayapi): sort api key auth credentials by [@nobbs](https://github.com/nobbs) in [#9042](https://github.com/envoyproxy/gateway/pull/9042) - fix(status): separate listener programmed state from HTTPRoute Accepted condition by [@apkatsikas](https://github.com/apkatsikas) in [#9129](https://github.com/envoyproxy/gateway/pull/9129) - build(deps): bump npm-check-updates from 22.2.2 to 22.2.3 in /site by [@dependabot](https://github.com/dependabot)\[bot] in [#9201](https://github.com/envoyproxy/gateway/pull/9201) - build(deps): bump github/codeql-action from 4.36.1 to 4.36.2 in the actions group across 1 directory by [@dependabot](https://github.com/dependabot)\[bot] in [#9203](https://github.com/envoyproxy/gateway/pull/9203) - feat(auto\_host\_sni): allow configuring the sni automatically from the upstream endpoint by [@nacx](https://github.com/nacx) in [#9137](https://github.com/envoyproxy/gateway/pull/9137) - fix(egctl): correct user-facing grammar in help text by [@immanuwell](https://github.com/immanuwell) in [#9217](https://github.com/envoyproxy/gateway/pull/9217) - fix: reject ExternalName Service as a route backend by [@zhaohuabing](https://github.com/zhaohuabing) in [#9190](https://github.com/envoyproxy/gateway/pull/9190) - fix(status): fall back to service externalIPs for Gateway addresses by [@jvlxz](https://github.com/jvlxz) in [#9209](https://github.com/envoyproxy/gateway/pull/9209) - fix: don't duplicate ValidatingAdmissionPolicy in install.yaml by [@jukie](https://github.com/jukie) in [#9182](https://github.com/envoyproxy/gateway/pull/9182) - feat(xds): add xdsNACKTotal metric by [@QuantumEnigmaa](https://github.com/QuantumEnigmaa) in [#9205](https://github.com/envoyproxy/gateway/pull/9205) - feat: source rate limit value from dynamic metadata by [@kanurag94](https://github.com/kanurag94) in [#9216](https://github.com/envoyproxy/gateway/pull/9216) - fix(listenerset): implement hostname conflict listener precedence by [@zirain](https://github.com/zirain) in [#9192](https://github.com/envoyproxy/gateway/pull/9192) - fix: correct the config hot reload validation order by [@MengjiaLiang](https://github.com/MengjiaLiang) in [#9214](https://github.com/envoyproxy/gateway/pull/9214) - build(deps): bump the helm group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9202](https://github.com/envoyproxy/gateway/pull/9202) - build(deps): bump the k8s-io group across 1 directory with 6 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9241](https://github.com/envoyproxy/gateway/pull/9241) - build(deps): bump the gomod group across 2 directories with 6 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9240](https://github.com/envoyproxy/gateway/pull/9240) - fix: deduplicate CA certificates in ClientTrafficPolicy mTLS by [@yuehaii](https://github.com/yuehaii) in [#8909](https://github.com/envoyproxy/gateway/pull/8909) - feat(policy): support ListenerSet as targetRef for ClientTrafficPolicy by [@apkatsikas](https://github.com/apkatsikas) in [#9026](https://github.com/envoyproxy/gateway/pull/9026) - fix(docs): links still pointing to /contributions by [@M4tteoP](https://github.com/M4tteoP) in [#9255](https://github.com/envoyproxy/gateway/pull/9255) - fix: renew expired TLS certificates in e2e test fixtures by [@rudrakhp](https://github.com/rudrakhp) with [@Copilot](https://github.com/Copilot) in [#9256](https://github.com/envoyproxy/gateway/pull/9256) - feat(api): Add filterContext field to Lua type in EnvoyExtensionPolicy by [@norman-zon](https://github.com/norman-zon) in [#8730](https://github.com/envoyproxy/gateway/pull/8730) - build(deps): bump js-yaml and markdownlint-cli in /tools by [@dependabot](https://github.com/dependabot)\[bot] in [#9258](https://github.com/envoyproxy/gateway/pull/9258) - docs: update release schedule information by [@apkatsikas](https://github.com/apkatsikas) in [#9257](https://github.com/envoyproxy/gateway/pull/9257) - docs: update Client Traffic Policy docs with new ListenerSet information by [@apkatsikas](https://github.com/apkatsikas) in [#9262](https://github.com/envoyproxy/gateway/pull/9262) - build(deps): bump undici from 7.24.7 to 7.28.0 in /tools by [@dependabot](https://github.com/dependabot)\[bot] in [#9261](https://github.com/envoyproxy/gateway/pull/9261) - build(deps-dev): bump tar from 7.5.13 to 7.5.16 in /site by [@dependabot](https://github.com/dependabot)\[bot] in [#9260](https://github.com/envoyproxy/gateway/pull/9260) - feat: option to disable automatic X-Forwarded-For append/add by [@lextiz](https://github.com/lextiz) in [#8576](https://github.com/envoyproxy/gateway/pull/8576) - build(deps): bump markdown-it and markdownlint-cli in /tools by [@dependabot](https://github.com/dependabot)\[bot] in [#9259](https://github.com/envoyproxy/gateway/pull/9259) - feat: add FailedRefetchDuration to RemoteJWKS by [@jukie](https://github.com/jukie) in [#9265](https://github.com/envoyproxy/gateway/pull/9265) - build(deps): bump github.com/containerd/containerd from 1.7.32 to 1.7.33 in /tools by [@dependabot](https://github.com/dependabot)\[bot] in [#9266](https://github.com/envoyproxy/gateway/pull/9266) - build(deps): bump github.com/containerd/containerd from 1.7.32 to 1.7.33 by [@dependabot](https://github.com/dependabot)\[bot] in [#9267](https://github.com/envoyproxy/gateway/pull/9267) - feat(helm): add CRDs dependency toggle by [@cilindrox](https://github.com/cilindrox) in [#8850](https://github.com/envoyproxy/gateway/pull/8850) - fix: proxy protocol with httpProtocolOptions by [@zhaohuabing](https://github.com/zhaohuabing) in [#9234](https://github.com/envoyproxy/gateway/pull/9234) - fix: validate API Key auth ExtractFrom by [@zhaohuabing](https://github.com/zhaohuabing) in [#9250](https://github.com/envoyproxy/gateway/pull/9250) - fix: XRateLimitHeadersOptionDisabled constant value must match CRD enum by [@gianniskt](https://github.com/gianniskt) in [#9224](https://github.com/envoyproxy/gateway/pull/9224) - fix(ratelimit): shared global ratelimit with cost not working by [@zirain](https://github.com/zirain) in [#9245](https://github.com/envoyproxy/gateway/pull/9245) - chore: run dependabot on release branch by [@zirain](https://github.com/zirain) in [#9230](https://github.com/envoyproxy/gateway/pull/9230) - fix(gatewayapi): http retry without backoff by [@zirain](https://github.com/zirain) in [#9238](https://github.com/envoyproxy/gateway/pull/9238) - chore: update dependabot by [@zirain](https://github.com/zirain) in [#9299](https://github.com/envoyproxy/gateway/pull/9299) - chore: use pinned docker image by [@zirain](https://github.com/zirain) in [#9300](https://github.com/envoyproxy/gateway/pull/9300) - build(deps): bump npm-check-updates from 22.2.3 to 22.2.7 in /site by [@dependabot](https://github.com/dependabot)\[bot] in [#9277](https://github.com/envoyproxy/gateway/pull/9277) - perf: resolve ClientTrafficPolicy targets once by [@jukie](https://github.com/jukie) in [#9272](https://github.com/envoyproxy/gateway/pull/9272) - build(deps): bump the actions group across 1 directory with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9282](https://github.com/envoyproxy/gateway/pull/9282) - build(deps): bump the gomod group across 1 directory with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9283](https://github.com/envoyproxy/gateway/pull/9283) - build(deps): bump the helm group across 1 directory with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9279](https://github.com/envoyproxy/gateway/pull/9279) - chore: split release notes by [@zhaohuabing](https://github.com/zhaohuabing) in [#9312](https://github.com/envoyproxy/gateway/pull/9312) - build(deps-dev): bump autoprefixer from 10.5.0 to 10.5.1 in /site by [@dependabot](https://github.com/dependabot)\[bot] in [#9321](https://github.com/envoyproxy/gateway/pull/9321) - build(deps): bump actions/setup-go from 6.4.0 to 6.5.0 in /tools/github-actions/setup-deps in the actions group across 1 directory by [@dependabot](https://github.com/dependabot)\[bot] in [#9325](https://github.com/envoyproxy/gateway/pull/9325) - chore: ignore k8s.io and go-control-plane on release branches by [@zirain](https://github.com/zirain) in [#9331](https://github.com/envoyproxy/gateway/pull/9331) - feat: support for deployment.envoyGateway.strategy by [@zirain](https://github.com/zirain) in [#9318](https://github.com/envoyproxy/gateway/pull/9318) - build(deps): bump otel/opentelemetry-collector-contrib from 0.154.0 to 0.155.0 in /charts/gateway-addons-helm in the helm group across 1 directory by [@dependabot](https://github.com/dependabot)\[bot] in [#9344](https://github.com/envoyproxy/gateway/pull/9344) - build(deps-dev): bump autoprefixer from 10.5.1 to 10.5.2 in /site by [@dependabot](https://github.com/dependabot)\[bot] in [#9343](https://github.com/envoyproxy/gateway/pull/9343) - ci: add tests for Kubernetes 1.36 by [@beckcl](https://github.com/beckcl) in [#8990](https://github.com/envoyproxy/gateway/pull/8990) - chore: update pr template to help reduce review effort by [@zhaohuabing](https://github.com/zhaohuabing) in [#9350](https://github.com/envoyproxy/gateway/pull/9350) - helm: follow-up docs and template wording by [@jukie](https://github.com/jukie) in [#9317](https://github.com/envoyproxy/gateway/pull/9317) - Add release notes for v1.8.2 by [@jukie](https://github.com/jukie) in [#9361](https://github.com/envoyproxy/gateway/pull/9361) - fix: consolidate destination AppProtocol handling by [@zhaohuabing](https://github.com/zhaohuabing) in [#9337](https://github.com/envoyproxy/gateway/pull/9337) - fix: panic with empty deploy by [@zirain](https://github.com/zirain) in [#9365](https://github.com/envoyproxy/gateway/pull/9365) - fix: use target resource namespace in BTP RoutingType index by [@Aias00](https://github.com/Aias00) in [#9359](https://github.com/envoyproxy/gateway/pull/9359) - chore: bump envoy go-control-plane by [@zirain](https://github.com/zirain) in [#9375](https://github.com/envoyproxy/gateway/pull/9375) - fix: DaemonSet pod not using the configured custom ServiceAccount name by [@zirain](https://github.com/zirain) in [#9347](https://github.com/envoyproxy/gateway/pull/9347) - ratelimit: refactor shared and non-shared ratelimit rules by [@zirain](https://github.com/zirain) in [#9332](https://github.com/envoyproxy/gateway/pull/9332) - fix: use int64 format for ratelimit Requests field by [@jukie](https://github.com/jukie) in [#9377](https://github.com/envoyproxy/gateway/pull/9377) - docs: describe uint32 vs int32 range issue by [@jukie](https://github.com/jukie) in [#9379](https://github.com/envoyproxy/gateway/pull/9379) - feat: CEL-based Authorization policy by [@zhaohuabing](https://github.com/zhaohuabing) in [#8981](https://github.com/envoyproxy/gateway/pull/8981) - feat: Bump gatewayapi v1.6.0 by [@zirain](https://github.com/zirain) in [#9232](https://github.com/envoyproxy/gateway/pull/9232) - build(deps): bump npm-check-updates from 22.2.7 to 22.2.9 in /site by [@dependabot](https://github.com/dependabot)\[bot] in [#9387](https://github.com/envoyproxy/gateway/pull/9387) - deps: ignore gateway-api on release branch by [@zirain](https://github.com/zirain) in [#9393](https://github.com/envoyproxy/gateway/pull/9393) - chore: update skipped tests by [@zirain](https://github.com/zirain) in [#9394](https://github.com/envoyproxy/gateway/pull/9394) - build(deps): bump opentelemetry-collector from 0.159.0 to 0.159.2 in /charts/gateway-addons-helm in the helm group across 1 directory by [@dependabot](https://github.com/dependabot)\[bot] in [#9388](https://github.com/envoyproxy/gateway/pull/9388) - build(deps): bump the gomod group across 6 directories with 6 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9398](https://github.com/envoyproxy/gateway/pull/9398) - Update sync-dashboard for v1.8.2 by [@jukie](https://github.com/jukie) in [#9403](https://github.com/envoyproxy/gateway/pull/9403) - feat: support listenerset policy attach in security policy by [@kkk777-7](https://github.com/kkk777-7) in [#9270](https://github.com/envoyproxy/gateway/pull/9270) - docs(gateway-helm): clarify envoyProxy image values by [@immanuwell](https://github.com/immanuwell) in [#9222](https://github.com/envoyproxy/gateway/pull/9222) - fix: prevent GatewayNamespace mode from hijacking pre-existing ServiceAccounts and ConfigMaps by [@yuehaii](https://github.com/yuehaii) in [#9215](https://github.com/envoyproxy/gateway/pull/9215) - fix: allow trailing dot in Backend FQDN hostnames by [@NeddM](https://github.com/NeddM) in [#9098](https://github.com/envoyproxy/gateway/pull/9098) - feat: support statusOnError field in EnvoyExtensionPolicy ExtProc by [@dragon3](https://github.com/dragon3) in [#9044](https://github.com/envoyproxy/gateway/pull/9044) - detect ipv6 literal hosts in url2cluster and token endpoint check by [@dxbjavid](https://github.com/dxbjavid) in [#9165](https://github.com/envoyproxy/gateway/pull/9165) - feat(api): add ClientTrafficPolicy.clientIPDetection.downstreamRemoteAddress for L4-transparent geoip by [@sboulkour](https://github.com/sboulkour) in [#8956](https://github.com/envoyproxy/gateway/pull/8956) - fix: register ListenerSet and route indexes in offline controller by [@Aias00](https://github.com/Aias00) in [#9320](https://github.com/envoyproxy/gateway/pull/9320) - build(deps): bump the gomod group across 1 directory with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9436](https://github.com/envoyproxy/gateway/pull/9436) - build(deps): bump the helm group across 1 directory with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9434](https://github.com/envoyproxy/gateway/pull/9434) - build(deps): bump the actions group across 1 directory with 6 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9439](https://github.com/envoyproxy/gateway/pull/9439) - chore: bump golang to 1.26.5 by [@zhaohuabing](https://github.com/zhaohuabing) in [#9437](https://github.com/envoyproxy/gateway/pull/9437) - Add release notes for 1.7.5 by [@cnvergence](https://github.com/cnvergence) in [#9433](https://github.com/envoyproxy/gateway/pull/9433) - docs: update 1.8 install docs by [@zhaohuabing](https://github.com/zhaohuabing) in [#9451](https://github.com/envoyproxy/gateway/pull/9451) - \[release/v1.7] add benchmark report for v1.7.5 by [@cnvergence](https://github.com/cnvergence) in [#9453](https://github.com/envoyproxy/gateway/pull/9453) - feat(helm): harden control-plane and certgen securityContext by [@jukie](https://github.com/jukie) in [#9069](https://github.com/envoyproxy/gateway/pull/9069) - perf: deduplicate JWT authn providers by [@Aias00](https://github.com/Aias00) in [#9430](https://github.com/envoyproxy/gateway/pull/9430) - e2e: add stats for WASM by [@zirain](https://github.com/zirain) in [#9424](https://github.com/envoyproxy/gateway/pull/9424) - fix: UDP/TCP RouteMultipleRoutesAttachment conformance test by [@zirain](https://github.com/zirain) in [#9247](https://github.com/envoyproxy/gateway/pull/9247) - docs: document vulnerability disclosure process by [@arkodg](https://github.com/arkodg) in [#9227](https://github.com/envoyproxy/gateway/pull/9227) - perf: introduce endpoint slice indexer by [@kkk777-7](https://github.com/kkk777-7) in [#9221](https://github.com/envoyproxy/gateway/pull/9221) - Revert LuaPerRoute source materialization for Lua by [@arkodg](https://github.com/arkodg) in [#9426](https://github.com/envoyproxy/gateway/pull/9426) - feat: support HTTPFilter for GRPCRoute by [@zhaohuabing](https://github.com/zhaohuabing) in [#9404](https://github.com/envoyproxy/gateway/pull/9404) - fix: default backend TLS max version to 1.3 by [@vishwas-bm](https://github.com/vishwas-bm) in [#9412](https://github.com/envoyproxy/gateway/pull/9412) - feat(ctp): add allowExpiredCertificate to tls.clientValidation by [@daanvinken](https://github.com/daanvinken) in [#9199](https://github.com/envoyproxy/gateway/pull/9199) - docs: fix invalid proxy protocol example by [@hegerdes](https://github.com/hegerdes) in [#9479](https://github.com/envoyproxy/gateway/pull/9479) - refactor: use stdlib maps and slices instead of golang.org/x/exp by [@mmmommm](https://github.com/mmmommm) in [#9482](https://github.com/envoyproxy/gateway/pull/9482) - fix(listenerset): implement listener conflict precedence for protocol conflicts by [@zirain](https://github.com/zirain) in [#9196](https://github.com/envoyproxy/gateway/pull/9196) - feat: wrap watch.namespaces helm template check in a with block by [@cnvergence](https://github.com/cnvergence) in [#9067](https://github.com/envoyproxy/gateway/pull/9067) - Support off and critical log level by [@wweiwei-li](https://github.com/wweiwei-li) in [#9271](https://github.com/envoyproxy/gateway/pull/9271) - build(deps): bump the actions group across 1 directory with 9 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9506](https://github.com/envoyproxy/gateway/pull/9506) - build(deps-dev): bump autoprefixer from 10.5.2 to 10.5.3 in /site by [@dependabot](https://github.com/dependabot)\[bot] in [#9495](https://github.com/envoyproxy/gateway/pull/9495) - build(deps): bump the helm group across 1 directory with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9501](https://github.com/envoyproxy/gateway/pull/9501) - build(deps): bump markdownlint-cli from 0.49.0 to 0.49.1 in /tools by [@dependabot](https://github.com/dependabot)\[bot] in [#9496](https://github.com/envoyproxy/gateway/pull/9496) - build(deps): bump sigs.k8s.io/mcs-api from 0.5.0 to 0.5.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#9500](https://github.com/envoyproxy/gateway/pull/9500) - build(deps): bump the gomod group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9499](https://github.com/envoyproxy/gateway/pull/9499) - build(deps): bump distroless/base-nossl from `20f009e` to `86554c4` in /tools/docker/envoy-gateway by [@dependabot](https://github.com/dependabot)\[bot] in [#9494](https://github.com/envoyproxy/gateway/pull/9494) - fix: redirect port leaking across multiple listeners by [@Aias00](https://github.com/Aias00) in [#9349](https://github.com/envoyproxy/gateway/pull/9349) - fix: add default retry policy for Envoy wasm module fetch by [@jukie](https://github.com/jukie) in [#9462](https://github.com/envoyproxy/gateway/pull/9462) - fix/refactor: deep copy status in translator for all resources by [@rudrakhp](https://github.com/rudrakhp) in [#9458](https://github.com/envoyproxy/gateway/pull/9458) - conformance: fix GatewayListenerUnsupportedProtocol test by [@zirain](https://github.com/zirain) in [#9490](https://github.com/envoyproxy/gateway/pull/9490) - fix(logs): restore ISO 8601 timestamp format by [@wiegandf](https://github.com/wiegandf) in [#9493](https://github.com/envoyproxy/gateway/pull/9493) - fix: unreferenced Secret events trigger reconciliation when HTTPRouteFilter CRD exists by [@Greyeye](https://github.com/Greyeye) in [#9488](https://github.com/envoyproxy/gateway/pull/9488) - bump Gateway API to v1.6.1 by [@zirain](https://github.com/zirain) in [#9515](https://github.com/envoyproxy/gateway/pull/9515) - Add release notes for v1.8.3 by [@jukie](https://github.com/jukie) in [#9518](https://github.com/envoyproxy/gateway/pull/9518) - feat: support client and overall tracing sampling by [@Ri7ay](https://github.com/Ri7ay) in [#9402](https://github.com/envoyproxy/gateway/pull/9402) - refactor: use field owner pattern to merge BTPs by [@rudrakhp](https://github.com/rudrakhp) in [#9514](https://github.com/envoyproxy/gateway/pull/9514) - api: add host normalization to ClientTrafficPolicy by [@sboulkour](https://github.com/sboulkour) in [#9115](https://github.com/envoyproxy/gateway/pull/9115) - Fix(ext-proc-examples): Add RequestBody and ResponseBody handling in request processing by [@abe-servescale](https://github.com/abe-servescale) in [#9183](https://github.com/envoyproxy/gateway/pull/9183) - feat(translator): Support ignoreFailure to tolerate invalid JWT by [@sinitax](https://github.com/sinitax) in [#9313](https://github.com/envoyproxy/gateway/pull/9313) - feat(ext\_proc): add support for observability mode by [@skos-ninja](https://github.com/skos-ninja) in [#8536](https://github.com/envoyproxy/gateway/pull/8536) - fix(xds): use DnsCluster extension for DNS clusters by [@andreademurtas](https://github.com/andreademurtas) in [#9155](https://github.com/envoyproxy/gateway/pull/9155) - feat: allow RateLimitRedisSettings.url to be sourced from a Secret by [@guanchzhou](https://github.com/guanchzhou) in [#9143](https://github.com/envoyproxy/gateway/pull/9143) - chore: fix gen by [@zirain](https://github.com/zirain) in [#9533](https://github.com/envoyproxy/gateway/pull/9533) - Remove 1.8.3 release page by [@jukie](https://github.com/jukie) in [#9526](https://github.com/envoyproxy/gateway/pull/9526) - docs: recommend ListenerSet over mergeGateways by [@zhaohuabing](https://github.com/zhaohuabing) in [#9524](https://github.com/envoyproxy/gateway/pull/9524) - feat(helm): add startupProbe to envoy-gateway deployment by [@cleman95](https://github.com/cleman95) in [#8820](https://github.com/envoyproxy/gateway/pull/8820) - fix: reject TLS secret when certificate and private key do not match by [@zhaohuabing](https://github.com/zhaohuabing) in [#9480](https://github.com/envoyproxy/gateway/pull/9480) - feat: support consistent hash for non-route backends by [@zhaohuabing](https://github.com/zhaohuabing) in [#9231](https://github.com/envoyproxy/gateway/pull/9231) - build(deps-dev): bump autoprefixer from 10.5.3 to 10.5.4 in /site by [@dependabot](https://github.com/dependabot)\[bot] in [#9542](https://github.com/envoyproxy/gateway/pull/9542) - build(deps): bump codespell from 2.4.2 to 2.4.3 in /tools/src/codespell by [@dependabot](https://github.com/dependabot)\[bot] in [#9544](https://github.com/envoyproxy/gateway/pull/9544) - build(deps): bump loki from 7.0.0 to 7.1.0 in /charts/gateway-addons-helm in the helm group across 1 directory by [@dependabot](https://github.com/dependabot)\[bot] in [#9545](https://github.com/envoyproxy/gateway/pull/9545) - build(deps): bump the actions group across 2 directories with 6 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9549](https://github.com/envoyproxy/gateway/pull/9549) - feat: use grpc status errors in jwtinterceptor by [@cnvergence](https://github.com/cnvergence) in [#9020](https://github.com/envoyproxy/gateway/pull/9020) - Add release note for fix to ratelimit fallback tag by [@jukie](https://github.com/jukie) in [#9553](https://github.com/envoyproxy/gateway/pull/9553) - build(deps): bump linkinator from 7.6.1 to 8.0.0 in /tools by [@dependabot](https://github.com/dependabot)\[bot] in [#9543](https://github.com/envoyproxy/gateway/pull/9543) - Update benchmark dashboard for v1.8.3 by [@jukie](https://github.com/jukie) in [#9560](https://github.com/envoyproxy/gateway/pull/9560) - fix: dedupe SAN entries before checking algorithm uniqueness by [@dmavrodiev](https://github.com/dmavrodiev) in [#9472](https://github.com/envoyproxy/gateway/pull/9472) - build(deps): bump the gomod group across 5 directories with 7 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9546](https://github.com/envoyproxy/gateway/pull/9546) - Bump metallb and kind by [@jukie](https://github.com/jukie) in [#9562](https://github.com/envoyproxy/gateway/pull/9562) - Create 1.8.3 release page and final release steps by [@jukie](https://github.com/jukie) in [#9561](https://github.com/envoyproxy/gateway/pull/9561) - docs: point community meeting calendar to LFX platform by [@zhaohuabing](https://github.com/zhaohuabing) in [#9569](https://github.com/envoyproxy/gateway/pull/9569) - fix: bound policy ancestors on the fly to avoid O(N^2) translation latency by [@zhaohuabing](https://github.com/zhaohuabing) in [#9558](https://github.com/envoyproxy/gateway/pull/9558) - docs: explain invert field in global rate limit example by [@Aditya7880900936](https://github.com/Aditya7880900936) in [#9572](https://github.com/envoyproxy/gateway/pull/9572) - ci: wire standalone test suite into GitHub Actions by [@takumi12311123](https://github.com/takumi12311123) in [#9127](https://github.com/envoyproxy/gateway/pull/9127) - deps: bump dependencies flagged by OSV scan by [@zhaohuabing](https://github.com/zhaohuabing) in [#9575](https://github.com/envoyproxy/gateway/pull/9575) - fix(cors validation) allow all RFC-3986 compliant schemes by [@christopherbii](https://github.com/christopherbii) in [#9049](https://github.com/envoyproxy/gateway/pull/9049) - feat(xds): support SNI based dynamic forward proxy for TLSRoute by [@andreademurtas](https://github.com/andreademurtas) in [#9184](https://github.com/envoyproxy/gateway/pull/9184) - fix: handle EC parameters before TLS private keys by [@jvlxz](https://github.com/jvlxz) in [#9338](https://github.com/envoyproxy/gateway/pull/9338) - test: fix mismatched tls.key in tlsroute dynamic resolver testdata by [@zhaohuabing](https://github.com/zhaohuabing) in [#9582](https://github.com/envoyproxy/gateway/pull/9582) - fix: eliminate port race in setupFakeEnvoyStats test helper by [@muwaqar-cflt](https://github.com/muwaqar-cflt) in [#9580](https://github.com/envoyproxy/gateway/pull/9580) - feat: support listenerset reference grant by [@kkk777-7](https://github.com/kkk777-7) in [#9481](https://github.com/envoyproxy/gateway/pull/9481) - fix: allow TLSv1.3 for remote JWKS fetching by [@michaelbeaumont](https://github.com/michaelbeaumont) in [#9531](https://github.com/envoyproxy/gateway/pull/9531) - fix: allow requests:0 for global rate limit block rules by [@mvanhorn](https://github.com/mvanhorn) in [#9333](https://github.com/envoyproxy/gateway/pull/9333) - fix: validate SDS URL by [@zirain](https://github.com/zirain) in [#9030](https://github.com/envoyproxy/gateway/pull/9030) - fix: confirm NotFound against the API server before dropping status writes by [@zhaohuabing](https://github.com/zhaohuabing) in [#9566](https://github.com/envoyproxy/gateway/pull/9566) - feat(oidc): forward id token by [@zhaohuabing](https://github.com/zhaohuabing) in [#9367](https://github.com/envoyproxy/gateway/pull/9367) - api: make RateLimitRedisSettings.url a pointer by [@guanchzhou](https://github.com/guanchzhou) in [#9538](https://github.com/envoyproxy/gateway/pull/9538) - fix(docs): replace dead Envoy Slack invite link by [@zhaohuabing](https://github.com/zhaohuabing) in [#9586](https://github.com/envoyproxy/gateway/pull/9586) - feat(xds): raise xDS gRPC server default receive limit and make it configurable by [@linmosko](https://github.com/linmosko) in [#9564](https://github.com/envoyproxy/gateway/pull/9564) - fix: eliminate cfg.Logger data race in server()'s reload/shutdown path by [@muwaqar-cflt](https://github.com/muwaqar-cflt) in [#9581](https://github.com/envoyproxy/gateway/pull/9581) - fix: make ListenerSet and GRPCRoute watches optional by [@zhaohuabing](https://github.com/zhaohuabing) in [#9583](https://github.com/envoyproxy/gateway/pull/9583) - build(deps): bump npm-check-updates from 22.2.9 to 23.0.0 in /site by [@dependabot](https://github.com/dependabot)\[bot] in [#9595](https://github.com/envoyproxy/gateway/pull/9595) - build(deps): bump linkinator from 8.0.0 to 8.0.2 in /tools by [@dependabot](https://github.com/dependabot)\[bot] in [#9596](https://github.com/envoyproxy/gateway/pull/9596) - build(deps): bump the actions group across 1 directory with 10 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9602](https://github.com/envoyproxy/gateway/pull/9602) - feat: envoy extension policy listenerset attach by [@kkk777-7](https://github.com/kkk777-7) in [#9425](https://github.com/envoyproxy/gateway/pull/9425) - build(deps): bump the helm group across 1 directory with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9599](https://github.com/envoyproxy/gateway/pull/9599) - api: add OOB BackendUtilization by [@jukie](https://github.com/jukie) in [#9400](https://github.com/envoyproxy/gateway/pull/9400) - build(deps): bump the gomod group across 3 directories with 5 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9598](https://github.com/envoyproxy/gateway/pull/9598) - fix: don't set Deployment replicas when an HPA is configured by [@zhaohuabing](https://github.com/zhaohuabing) in [#9594](https://github.com/envoyproxy/gateway/pull/9594) - feat: support listenerset policy attach in backend traffic policy by [@kkk777-7](https://github.com/kkk777-7) in [#9419](https://github.com/envoyproxy/gateway/pull/9419) - feat(infra): Add remote infrastructure provider by [@zac-nixon](https://github.com/zac-nixon) in [#9027](https://github.com/envoyproxy/gateway/pull/9027) - fix: use shared system trust store sds secret by [@guydc](https://github.com/guydc) in [#9357](https://github.com/envoyproxy/gateway/pull/9357) - tweak: test indent by [@kkk777-7](https://github.com/kkk777-7) in [#9612](https://github.com/envoyproxy/gateway/pull/9612) - feat: add MergeBackends option for backend cluster deduplication by [@muwaqar-cflt](https://github.com/muwaqar-cflt) in [#9477](https://github.com/envoyproxy/gateway/pull/9477) - build(deps): bump the k8s-io group across 1 directory with 6 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9601](https://github.com/envoyproxy/gateway/pull/9601) - follow up listenerset policy attachment by [@kkk777-7](https://github.com/kkk777-7) in [#9621](https://github.com/envoyproxy/gateway/pull/9621) - chore: fix testdata for CTP status truncated by [@zirain](https://github.com/zirain) in [#9640](https://github.com/envoyproxy/gateway/pull/9640) - fix(bootstrap): drop removed envoy.restart\_features.use\_eds\_cache\_for\_ads guard by [@Aias00](https://github.com/Aias00) in [#9610](https://github.com/envoyproxy/gateway/pull/9610) - fix: initial fetch timed out for type.googleapis.com/envoy.extensions.transport\_sockets.tls.v3.Secret by [@yuehaii](https://github.com/yuehaii) in [#9532](https://github.com/envoyproxy/gateway/pull/9532) - feat: add CSRF origin validation to SecurityPolicy by [@albsga4](https://github.com/albsga4) in [#8836](https://github.com/envoyproxy/gateway/pull/8836) - docs: add Release Notes link to top navigation menu by [@amarkdotdev](https://github.com/amarkdotdev) in [#9620](https://github.com/envoyproxy/gateway/pull/9620) - chore: regen xds translator testdata for initialFetchTimeout by [@zhaohuabing](https://github.com/zhaohuabing) in [#9643](https://github.com/envoyproxy/gateway/pull/9643) - feat: Implement BackendUtilization LB OutOfBand reporting by [@jukie](https://github.com/jukie) in [#9593](https://github.com/envoyproxy/gateway/pull/9593) - feat/HTTPRouteFilter: host rewrite from path by [@zhaohuabing](https://github.com/zhaohuabing) in [#8964](https://github.com/envoyproxy/gateway/pull/8964) - chore: fix gen by [@zirain](https://github.com/zirain) in [#9648](https://github.com/envoyproxy/gateway/pull/9648) - feat: add support for tls.crt in BackendTlsPolicy by [@gcleroux](https://github.com/gcleroux) in [#8329](https://github.com/envoyproxy/gateway/pull/8329) - chore: fix OSV-scanner reported vulnerabilities by [@zhaohuabing](https://github.com/zhaohuabing) in [#9655](https://github.com/envoyproxy/gateway/pull/9655) - feat(extensionserver): Support policy resources targetting HTTPRoute and GRPCRoute by [@HusseinKabbout](https://github.com/HusseinKabbout) in [#9249](https://github.com/envoyproxy/gateway/pull/9249) - fix(translator): allow UDS + IP mixed endpoints by [@guydc](https://github.com/guydc) in [#9654](https://github.com/envoyproxy/gateway/pull/9654) - fix(gatewayapi): don't skip MergeBackends precedence-index claims for policies that set nothing by [@muwaqar-cflt](https://github.com/muwaqar-cflt) in [#9590](https://github.com/envoyproxy/gateway/pull/9590) - build(deps): bump the actions group across 1 directory with 5 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9667](https://github.com/envoyproxy/gateway/pull/9667) - build(deps): bump busybox from `fd8d9aa` to `dc2d74b` in /tools/docker/envoy-gateway by [@dependabot](https://github.com/dependabot)\[bot] in [#9658](https://github.com/envoyproxy/gateway/pull/9658) - build(deps): bump linkinator from 8.0.2 to 8.0.3 in /tools by [@dependabot](https://github.com/dependabot)\[bot] in [#9659](https://github.com/envoyproxy/gateway/pull/9659) - build(deps): bump k8s.io/api from 0.36.0 to 0.36.3 in /examples/remote-infra in the k8s-io group across 1 directory by [@dependabot](https://github.com/dependabot)\[bot] in [#9666](https://github.com/envoyproxy/gateway/pull/9666) - build(deps): bump the helm group across 1 directory with 3 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9664](https://github.com/envoyproxy/gateway/pull/9664) - build(deps): bump the gomod group across 7 directories with 3 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9663](https://github.com/envoyproxy/gateway/pull/9663) - build(deps): bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 in /test by [@dependabot](https://github.com/dependabot)\[bot] in [#9677](https://github.com/envoyproxy/gateway/pull/9677) - api: add more timeout fields to ClientTimeout by [@HusseinKabbout](https://github.com/HusseinKabbout) in [#9315](https://github.com/envoyproxy/gateway/pull/9315) - add communityinviter.com to LINKINATOR\_IGNORE to pass docs lint ci by [@mmmommm](https://github.com/mmmommm) in [#9684](https://github.com/envoyproxy/gateway/pull/9684) - build(deps): bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#9678](https://github.com/envoyproxy/gateway/pull/9678) - chore: bump kube-api-linter by [@sivchari](https://github.com/sivchari) in [#9682](https://github.com/envoyproxy/gateway/pull/9682) - refactor: only include cluster-scoped traffic features in BackendCluster by [@zhaohuabing](https://github.com/zhaohuabing) in [#9642](https://github.com/envoyproxy/gateway/pull/9642) - feat(gatewayapi): support SDS listener certificate references by [@Sharvash](https://github.com/Sharvash) in [#9525](https://github.com/envoyproxy/gateway/pull/9525) - api: increase RateLimitSelectCondition headers MaxItems from 64 to 128 by [@sivchari](https://github.com/sivchari) in [#9681](https://github.com/envoyproxy/gateway/pull/9681) - api: add Week unit to BackendTrafficPolicy RateLimitUnit by [@Danyal-Khalid](https://github.com/Danyal-Khalid) in [#9693](https://github.com/envoyproxy/gateway/pull/9693) - feat(api): add Selector to MergeBackendsConfig to restrict cluster deduplication by [@muwaqar-cflt](https://github.com/muwaqar-cflt) in [#9624](https://github.com/envoyproxy/gateway/pull/9624) - feat: merge support for eep by [@kkk777-7](https://github.com/kkk777-7) in [#9638](https://github.com/envoyproxy/gateway/pull/9638) - fix: filter NodePort status.addresses to nodes running Envoy when externalTrafficPolicy is Local by [@yuehaii](https://github.com/yuehaii) in [#9605](https://github.com/envoyproxy/gateway/pull/9605) - feat(BackendTrafficPolicy): Support matching on response header for response override by [@HusseinKabbout](https://github.com/HusseinKabbout) in [#9354](https://github.com/envoyproxy/gateway/pull/9354) - feat(translator): active healthcheck logs by [@guydc](https://github.com/guydc) in [#9651](https://github.com/envoyproxy/gateway/pull/9651) - replace ptr.To with new by [@mmmommm](https://github.com/mmmommm) in [#9703](https://github.com/envoyproxy/gateway/pull/9703) - v1.9.0-rc.1 release by [@kkk777-7](https://github.com/kkk777-7) in [#9708](https://github.com/envoyproxy/gateway/pull/9708) - fix: osv by [@kkk777-7](https://github.com/kkk777-7) in [#9709](https://github.com/envoyproxy/gateway/pull/9709) - bump ratelimit, dynamic modules, and proxy versions for v1.9.0-rc.1 by [@kkk777-7](https://github.com/kkk777-7) in [#9710](https://github.com/envoyproxy/gateway/pull/9710) - \[release/v1.9] cherry pick v1.9 by [@kkk777-7](https://github.com/kkk777-7) in [#9756](https://github.com/envoyproxy/gateway/pull/9756) - bump ratelimit version by [@kkk777-7](https://github.com/kkk777-7) in [#9757](https://github.com/envoyproxy/gateway/pull/9757) ##### New Contributors - [@matheuscscp](https://github.com/matheuscscp) made their first contribution in [#8864](https://github.com/envoyproxy/gateway/pull/8864) - [@wucm667](https://github.com/wucm667) made their first contribution in [#8906](https://github.com/envoyproxy/gateway/pull/8906) - [@sjoukedv](https://github.com/sjoukedv) made their first contribution in [#8908](https://github.com/envoyproxy/gateway/pull/8908) - [@mvanhorn](https://github.com/mvanhorn) made their first contribution in [#8818](https://github.com/envoyproxy/gateway/pull/8818) - [@apkatsikas](https://github.com/apkatsikas) made their first contribution in [#8871](https://github.com/envoyproxy/gateway/pull/8871) - [@samuelmasuy](https://github.com/samuelmasuy) made their first contribution in [#9001](https://github.com/envoyproxy/gateway/pull/9001) - [@nguyenptk](https://github.com/nguyenptk) made their first contribution in [#8959](https://github.com/envoyproxy/gateway/pull/8959) - [@benjaminch](https://github.com/benjaminch) made their first contribution in [#9032](https://github.com/envoyproxy/gateway/pull/9032) - [@pkuzco](https://github.com/pkuzco) made their first contribution in [#9046](https://github.com/envoyproxy/gateway/pull/9046) - [@AlecDiraimondo](https://github.com/AlecDiraimondo) made their first contribution in [#9068](https://github.com/envoyproxy/gateway/pull/9068) - [@jeremiahsnapp](https://github.com/jeremiahsnapp) made their first contribution in [#9099](https://github.com/envoyproxy/gateway/pull/9099) - [@SAY-5](https://github.com/SAY-5) made their first contribution in [#9052](https://github.com/envoyproxy/gateway/pull/9052) - [@rissson](https://github.com/rissson) made their first contribution in [#9050](https://github.com/envoyproxy/gateway/pull/9050) - [@immanuwell](https://github.com/immanuwell) made their first contribution in [#9056](https://github.com/envoyproxy/gateway/pull/9056) - [@nobbs](https://github.com/nobbs) made their first contribution in [#9042](https://github.com/envoyproxy/gateway/pull/9042) - [@jvlxz](https://github.com/jvlxz) made their first contribution in [#9209](https://github.com/envoyproxy/gateway/pull/9209) - [@kanurag94](https://github.com/kanurag94) made their first contribution in [#9216](https://github.com/envoyproxy/gateway/pull/9216) - [@MengjiaLiang](https://github.com/MengjiaLiang) made their first contribution in [#9214](https://github.com/envoyproxy/gateway/pull/9214) - [@yuehaii](https://github.com/yuehaii) made their first contribution in [#8909](https://github.com/envoyproxy/gateway/pull/8909) - [@M4tteoP](https://github.com/M4tteoP) made their first contribution in [#9255](https://github.com/envoyproxy/gateway/pull/9255) - [@rudrakhp](https://github.com/rudrakhp) with [@Copilot](https://github.com/Copilot) made their first contribution in [#9256](https://github.com/envoyproxy/gateway/pull/9256) - [@norman-zon](https://github.com/norman-zon) made their first contribution in [#8730](https://github.com/envoyproxy/gateway/pull/8730) - [@cilindrox](https://github.com/cilindrox) made their first contribution in [#8850](https://github.com/envoyproxy/gateway/pull/8850) - [@gianniskt](https://github.com/gianniskt) made their first contribution in [#9224](https://github.com/envoyproxy/gateway/pull/9224) - [@NeddM](https://github.com/NeddM) made their first contribution in [#9098](https://github.com/envoyproxy/gateway/pull/9098) - [@dragon3](https://github.com/dragon3) made their first contribution in [#9044](https://github.com/envoyproxy/gateway/pull/9044) - [@dxbjavid](https://github.com/dxbjavid) made their first contribution in [#9165](https://github.com/envoyproxy/gateway/pull/9165) - [@sboulkour](https://github.com/sboulkour) made their first contribution in [#8956](https://github.com/envoyproxy/gateway/pull/8956) - [@vishwas-bm](https://github.com/vishwas-bm) made their first contribution in [#9412](https://github.com/envoyproxy/gateway/pull/9412) - [@daanvinken](https://github.com/daanvinken) made their first contribution in [#9199](https://github.com/envoyproxy/gateway/pull/9199) - [@hegerdes](https://github.com/hegerdes) made their first contribution in [#9479](https://github.com/envoyproxy/gateway/pull/9479) - [@wweiwei-li](https://github.com/wweiwei-li) made their first contribution in [#9271](https://github.com/envoyproxy/gateway/pull/9271) - [@wiegandf](https://github.com/wiegandf) made their first contribution in [#9493](https://github.com/envoyproxy/gateway/pull/9493) - [@Greyeye](https://github.com/Greyeye) made their first contribution in [#9488](https://github.com/envoyproxy/gateway/pull/9488) - [@abe-servescale](https://github.com/abe-servescale) made their first contribution in [#9183](https://github.com/envoyproxy/gateway/pull/9183) - [@sinitax](https://github.com/sinitax) made their first contribution in [#9313](https://github.com/envoyproxy/gateway/pull/9313) - [@skos-ninja](https://github.com/skos-ninja) made their first contribution in [#8536](https://github.com/envoyproxy/gateway/pull/8536) - [@andreademurtas](https://github.com/andreademurtas) made their first contribution in [#9155](https://github.com/envoyproxy/gateway/pull/9155) - [@cleman95](https://github.com/cleman95) made their first contribution in [#8820](https://github.com/envoyproxy/gateway/pull/8820) - [@dmavrodiev](https://github.com/dmavrodiev) made their first contribution in [#9472](https://github.com/envoyproxy/gateway/pull/9472) - [@takumi12311123](https://github.com/takumi12311123) made their first contribution in [#9127](https://github.com/envoyproxy/gateway/pull/9127) - [@christopherbii](https://github.com/christopherbii) made their first contribution in [#9049](https://github.com/envoyproxy/gateway/pull/9049) - [@zac-nixon](https://github.com/zac-nixon) made their first contribution in [#9027](https://github.com/envoyproxy/gateway/pull/9027) - [@albsga4](https://github.com/albsga4) made their first contribution in [#8836](https://github.com/envoyproxy/gateway/pull/8836) - [@amarkdotdev](https://github.com/amarkdotdev) made their first contribution in [#9620](https://github.com/envoyproxy/gateway/pull/9620) - [@gcleroux](https://github.com/gcleroux) made their first contribution in [#8329](https://github.com/envoyproxy/gateway/pull/8329) - [@HusseinKabbout](https://github.com/HusseinKabbout) made their first contribution in [#9249](https://github.com/envoyproxy/gateway/pull/9249) - [@sivchari](https://github.com/sivchari) made their first contribution in [#9682](https://github.com/envoyproxy/gateway/pull/9682) - [@Sharvash](https://github.com/Sharvash) made their first contribution in [#9525](https://github.com/envoyproxy/gateway/pull/9525) - [@Danyal-Khalid](https://github.com/Danyal-Khalid) made their first contribution in [#9693](https://github.com/envoyproxy/gateway/pull/9693) **Full Changelog**: <https://github.com/envoyproxy/gateway/compare/v1.8.3...v1.9.0> ### [`v1.9.0`](https://github.com/envoyproxy/gateway/releases/tag/v1.9.0) [Compare Source](https://github.com/envoyproxy/gateway/compare/v1.8.5...v1.9.0) ##### Release Announcement Check out the [v1.9.0 release announcement](https://gateway.envoyproxy.io/news/releases/notes/v1.9.0/) to learn more about the release. ##### What's Changed - Add Flux installation guide by [@matheuscscp](https://github.com/matheuscscp) in [#8864](https://github.com/envoyproxy/gateway/pull/8864) - fix(api): increase RateLimitSelectCondition.headers MaxItems from 16 to 64 by [@wucm667](https://github.com/wucm667) in [#8906](https://github.com/envoyproxy/gateway/pull/8906) - skip invalid listener first in IR by [@zirain](https://github.com/zirain) in [#8577](https://github.com/envoyproxy/gateway/pull/8577) - feat: policy field owner by [@kkk777-7](https://github.com/kkk777-7) in [#8538](https://github.com/envoyproxy/gateway/pull/8538) - docs(tasks): add documentation for Dynamic Modules configuration example by [@sjoukedv](https://github.com/sjoukedv) in [#8908](https://github.com/envoyproxy/gateway/pull/8908) - fix: remove cross ns policy attachment status by [@zhaohuabing](https://github.com/zhaohuabing) in [#8901](https://github.com/envoyproxy/gateway/pull/8901) - build(deps): bump npm-check-updates from 22.0.1 to 22.1.0 in /site by [@dependabot](https://github.com/dependabot)\[bot] in [#8918](https://github.com/envoyproxy/gateway/pull/8918) - build(deps): bump sigs.k8s.io/controller-runtime from 0.23.3 to 0.24.0 in /examples/extension-server by [@dependabot](https://github.com/dependabot)\[bot] in [#8924](https://github.com/envoyproxy/gateway/pull/8924) - build(deps): bump the helm group across 1 directory with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#8925](https://github.com/envoyproxy/gateway/pull/8925) - build(deps): bump github/codeql-action from 4.35.2 to 4.35.3 in the actions group across 1 directory by [@dependabot](https://github.com/dependabot)\[bot] in [#8920](https://github.com/envoyproxy/gateway/pull/8920) - feat: add runner event metrics by [@zirain](https://github.com/zirain) in [#8802](https://github.com/envoyproxy/gateway/pull/8802) - build(deps): bump sigs.k8s.io/mcs-api from 0.4.1 to 0.5.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#8923](https://github.com/envoyproxy/gateway/pull/8923) - fix: respect backend endpoint hostname for health checks by [@arkodg](https://github.com/arkodg) in [#8929](https://github.com/envoyproxy/gateway/pull/8929) - fix(helm): propagate commonLabels to RBAC resources by [@mvanhorn](https://github.com/mvanhorn) in [#8818](https://github.com/envoyproxy/gateway/pull/8818) - fix(translator): set ListenerSet and listener Accepted:True for InvalidCertificateRef by [@apkatsikas](https://github.com/apkatsikas) in [#8871](https://github.com/envoyproxy/gateway/pull/8871) - fix: do not downgrade ALPN for only hostnames-overlapping listeners by [@zhaohuabing](https://github.com/zhaohuabing) in [#8934](https://github.com/envoyproxy/gateway/pull/8934) - build(deps): bump the gomod group across 6 directories with 9 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#8931](https://github.com/envoyproxy/gateway/pull/8931) - feat: enableDeferredCreationStats by default by [@zirain](https://github.com/zirain) in [#8937](https://github.com/envoyproxy/gateway/pull/8937) - bump golang to 1.26.3 by [@zirain](https://github.com/zirain) in [#8943](https://github.com/envoyproxy/gateway/pull/8943) - chore: mute OSV scanner by [@zirain](https://github.com/zirain) in [#8945](https://github.com/envoyproxy/gateway/pull/8945) - chore: use os.Stdout instead of t.Output() by [@zirain](https://github.com/zirain) in [#8860](https://github.com/envoyproxy/gateway/pull/8860) - \[release/v1.7] update docs and add release notes by [@cnvergence](https://github.com/cnvergence) in [#8947](https://github.com/envoyproxy/gateway/pull/8947) - \[release/v1.7] add benchmark report for v1.7.3 by [@cnvergence](https://github.com/cnvergence) in [#8954](https://github.com/envoyproxy/gateway/pull/8954) - fix: restore last transition time in merge status conditions by [@rudrakhp](https://github.com/rudrakhp) in [#8962](https://github.com/envoyproxy/gateway/pull/8962) - docs: fix the version in release announcement link by [@cnvergence](https://github.com/cnvergence) in [#8966](https://github.com/envoyproxy/gateway/pull/8966) - \[release/v1.8] v1.8.0 release docs and announcement by [@jukie](https://github.com/jukie) in [#8942](https://github.com/envoyproxy/gateway/pull/8942) - build(deps): bump the actions group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#8976](https://github.com/envoyproxy/gateway/pull/8976) - build(deps): bump npm-check-updates from 22.1.0 to 22.2.0 in /site by [@dependabot](https://github.com/dependabot)\[bot] in [#8972](https://github.com/envoyproxy/gateway/pull/8972) - chore: remove unnecessary overlapping hostnames in the http3 test yaml by [@zhaohuabing](https://github.com/zhaohuabing) in [#8963](https://github.com/envoyproxy/gateway/pull/8963) - build(deps): bump the gomod group across 2 directories with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#8973](https://github.com/envoyproxy/gateway/pull/8973) - build(deps): bump the k8s-io group across 1 directory with 6 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#8974](https://github.com/envoyproxy/gateway/pull/8974) - fix: add unary interceptor and fix fail-open auth in GatewayNamespaceMode by [@cnvergence](https://github.com/cnvergence) in [#8986](https://github.com/envoyproxy/gateway/pull/8986) - build(deps): bump the helm group across 1 directory with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#8978](https://github.com/envoyproxy/gateway/pull/8978) - build(deps): bump sigs.k8s.io/controller-runtime from 0.24.0 to 0.24.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#8975](https://github.com/envoyproxy/gateway/pull/8975) - bump lastVersionTag to v1.8.0 by [@jukie](https://github.com/jukie) in [#8992](https://github.com/envoyproxy/gateway/pull/8992) - feat: add envoyproxy status by [@zirain](https://github.com/zirain) in [#8475](https://github.com/envoyproxy/gateway/pull/8475) - build(deps): bump sigs.k8s.io/controller-runtime from 0.24.0 to 0.24.1 in /examples/extension-server by [@dependabot](https://github.com/dependabot)\[bot] in [#8977](https://github.com/envoyproxy/gateway/pull/8977) - Add gateway-api v1.5.1 mention to v1.8.0 release notes by [@jukie](https://github.com/jukie) in [#8999](https://github.com/envoyproxy/gateway/pull/8999) - Update benchmarks dashboard for v1.8.0 by [@jukie](https://github.com/jukie) in [#9002](https://github.com/envoyproxy/gateway/pull/9002) - Update non--crash-security--bug.md by [@guydc](https://github.com/guydc) in [#9000](https://github.com/envoyproxy/gateway/pull/9000) - update docs links to 1.8.0 by [@zhaohuabing](https://github.com/zhaohuabing) in [#9005](https://github.com/envoyproxy/gateway/pull/9005) - chore: fix gateway API docs links by [@zhaohuabing](https://github.com/zhaohuabing) in [#9006](https://github.com/envoyproxy/gateway/pull/9006) - \[release/v1.8] fix benchmark report for v1.8.0 by [@jukie](https://github.com/jukie) in [#9007](https://github.com/envoyproxy/gateway/pull/9007) - fix(charts): add Gateway API v1.5 ListenerSet metrics to kube-state-metrics by [@samuelmasuy](https://github.com/samuelmasuy) in [#9001](https://github.com/envoyproxy/gateway/pull/9001) - fix(charts): split combined autoscaling/policy RBAC rule in infra-manager by [@samuelmasuy](https://github.com/samuelmasuy) in [#9013](https://github.com/envoyproxy/gateway/pull/9013) - fix: applyBackendTLSSetting panic by [@zirain](https://github.com/zirain) in [#8998](https://github.com/envoyproxy/gateway/pull/8998) - fix(xds): hot-reload xDS server cert in GatewayNamespaceMode by [@nguyenptk](https://github.com/nguyenptk) in [#8959](https://github.com/envoyproxy/gateway/pull/8959) - docs: move v1.8 CRD upgrade note by [@arkodg](https://github.com/arkodg) in [#9017](https://github.com/envoyproxy/gateway/pull/9017) - docs: add bandwidth docs by [@kkk777-7](https://github.com/kkk777-7) in [#8939](https://github.com/envoyproxy/gateway/pull/8939) - fix(helm): correct typo in HPA maxReplicas required message by [@benjaminch](https://github.com/benjaminch) in [#9032](https://github.com/envoyproxy/gateway/pull/9032) - docs: highlight Gateway API compatibility by [@zhaohuabing](https://github.com/zhaohuabing) in [#9010](https://github.com/envoyproxy/gateway/pull/9010) - build(deps): bump distroless/base-nossl from `f71dcb6` to `20f009e` in /tools/docker/envoy-gateway by [@dependabot](https://github.com/dependabot)\[bot] in [#9038](https://github.com/envoyproxy/gateway/pull/9038) - chore: replace Deprecated CEL ParsedExpr Oneof With CelExprParsed by [@zhaohuabing](https://github.com/zhaohuabing) in [#8982](https://github.com/envoyproxy/gateway/pull/8982) - chore: update release note for v1.9 by [@kkk777-7](https://github.com/kkk777-7) in [#9045](https://github.com/envoyproxy/gateway/pull/9045) - build(deps): bump the gomod group across 5 directories with 6 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9040](https://github.com/envoyproxy/gateway/pull/9040) - build(deps): bump the helm group across 1 directory with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9041](https://github.com/envoyproxy/gateway/pull/9041) - feat: disabled automountServiceAccountToken by default by [@zirain](https://github.com/zirain) in [#9051](https://github.com/envoyproxy/gateway/pull/9051) - feat: allow to custom pod securityContext in gateway-helm by [@zirain](https://github.com/zirain) in [#9036](https://github.com/envoyproxy/gateway/pull/9036) - fix: bump osv scanner by [@jukie](https://github.com/jukie) in [#9070](https://github.com/envoyproxy/gateway/pull/9070) - chore: add deprecated field check by [@kkk777-7](https://github.com/kkk777-7) in [#9072](https://github.com/envoyproxy/gateway/pull/9072) - docs: fix ClientTrafficPolicy verification steps by [@apkatsikas](https://github.com/apkatsikas) in [#9076](https://github.com/envoyproxy/gateway/pull/9076) - fix backend.tls.clientCertificateRef override test by [@guydc](https://github.com/guydc) in [#9077](https://github.com/envoyproxy/gateway/pull/9077) - add depkeep to enterprise support by [@pkuzco](https://github.com/pkuzco) in [#9046](https://github.com/envoyproxy/gateway/pull/9046) - lua: deprecate disableLua in favor of enableLua by [@rudrakhp](https://github.com/rudrakhp) in [#9081](https://github.com/envoyproxy/gateway/pull/9081) - chore: fix osv scan by [@zhaohuabing](https://github.com/zhaohuabing) in [#9080](https://github.com/envoyproxy/gateway/pull/9080) - fix: allow IANA cipher names by [@zhaohuabing](https://github.com/zhaohuabing) in [#9073](https://github.com/envoyproxy/gateway/pull/9073) - chore: address comment by [@zirain](https://github.com/zirain) in [#9055](https://github.com/envoyproxy/gateway/pull/9055) - build(deps): bump the actions group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9090](https://github.com/envoyproxy/gateway/pull/9090) - build(deps): bump cel.dev/expr from 0.25.1 to 0.25.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#9089](https://github.com/envoyproxy/gateway/pull/9089) - build(deps): bump busybox from `1487d0a` to `fd8d9aa` in /tools/docker/envoy-gateway by [@dependabot](https://github.com/dependabot)\[bot] in [#9087](https://github.com/envoyproxy/gateway/pull/9087) - build(deps): bump github.com/docker/cli from 29.5.1+incompatible to 29.5.2+incompatible in the gomod group across 1 directory by [@dependabot](https://github.com/dependabot)\[bot] in [#9088](https://github.com/envoyproxy/gateway/pull/9088) - build(deps): bump the helm group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9092](https://github.com/envoyproxy/gateway/pull/9092) - fix(gatewayapi): prefer sectioned BackendTLSPolicy over wildcard for same target by [@AlecDiraimondo](https://github.com/AlecDiraimondo) in [#9068](https://github.com/envoyproxy/gateway/pull/9068) - chore: hide ForwardIDToken by [@zhaohuabing](https://github.com/zhaohuabing) in [#9085](https://github.com/envoyproxy/gateway/pull/9085) - chore: fix docs link by [@zirain](https://github.com/zirain) in [#9101](https://github.com/envoyproxy/gateway/pull/9101) - build(deps): bump npm-check-updates from 22.2.0 to 22.2.1 in /site by [@dependabot](https://github.com/dependabot)\[bot] in [#9091](https://github.com/envoyproxy/gateway/pull/9091) - fix: encode TLS secrets with canonical PEM formatting by [@cnvergence](https://github.com/cnvergence) in [#8744](https://github.com/envoyproxy/gateway/pull/8744) - chore: update deprecated docker libraries by [@cnvergence](https://github.com/cnvergence) in [#9106](https://github.com/envoyproxy/gateway/pull/9106) - build(deps): bump the actions group across 1 directory with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9109](https://github.com/envoyproxy/gateway/pull/9109) - docs: copy Lua extensions security warning to v1.8 and v1.7 by [@rudrakhp](https://github.com/rudrakhp) in [#9113](https://github.com/envoyproxy/gateway/pull/9113) - fix: MaxStreamDuration should worked for non-route cluster by [@zirain](https://github.com/zirain) in [#9028](https://github.com/envoyproxy/gateway/pull/9028) - feat: authorization path match by [@kkk777-7](https://github.com/kkk777-7) in [#9008](https://github.com/envoyproxy/gateway/pull/9008) - build(deps): bump the helm group across 1 directory with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9108](https://github.com/envoyproxy/gateway/pull/9108) - chore: update testdata on main by [@jukie](https://github.com/jukie) in [#9123](https://github.com/envoyproxy/gateway/pull/9123) - fix(egctl): skip missing CRDs in `x status` bulk modes by [@jeremiahsnapp](https://github.com/jeremiahsnapp) in [#9099](https://github.com/envoyproxy/gateway/pull/9099) - fix(gatewayapi): reject unsupported BackendRef URLRewrite path rewrites by [@Aditya7880900936](https://github.com/Aditya7880900936) in [#9131](https://github.com/envoyproxy/gateway/pull/9131) - fix: force HTTP1 for Service/ServiceImport with websocket appProtocol by [@zhaohuabing](https://github.com/zhaohuabing) in [#9138](https://github.com/envoyproxy/gateway/pull/9138) - feat: add requestBody payload to HTTP active health checker by [@michalskalski](https://github.com/michalskalski) in [#9111](https://github.com/envoyproxy/gateway/pull/9111) - chore: bump golang to 1.26.4 by [@zirain](https://github.com/zirain) in [#9147](https://github.com/envoyproxy/gateway/pull/9147) - fix: move validation admission policy outside of crds directory by [@zhaohuabing](https://github.com/zhaohuabing) in [#9024](https://github.com/envoyproxy/gateway/pull/9024) - fix: alway include the controller namespace in the watched namespaces by [@zhaohuabing](https://github.com/zhaohuabing) in [#9100](https://github.com/envoyproxy/gateway/pull/9100) - build(deps): bump github.com/quic-go/quic-go from 0.59.0 to 0.59.1 in /test by [@dependabot](https://github.com/dependabot)\[bot] in [#9160](https://github.com/envoyproxy/gateway/pull/9160) - build(deps): bump npm-check-updates from 22.2.1 to 22.2.2 in /site by [@dependabot](https://github.com/dependabot)\[bot] in [#9157](https://github.com/envoyproxy/gateway/pull/9157) - build(deps): bump the actions group across 1 directory with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9158](https://github.com/envoyproxy/gateway/pull/9158) - build(deps): bump the gomod group across 1 directory with 16 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9159](https://github.com/envoyproxy/gateway/pull/9159) - build(deps): bump github.com/quic-go/quic-go from 0.59.0 to 0.59.1 in /tools by [@dependabot](https://github.com/dependabot)\[bot] in [#9164](https://github.com/envoyproxy/gateway/pull/9164) - fix rate limit validation on K8s 1.36 by [@beckcl](https://github.com/beckcl) in [#9166](https://github.com/envoyproxy/gateway/pull/9166) - Add release notes for v1.8.1 by [@jukie](https://github.com/jukie) in [#9170](https://github.com/envoyproxy/gateway/pull/9170) - Add release notes for v1.7.4 by [@cnvergence](https://github.com/cnvergence) in [#9124](https://github.com/envoyproxy/gateway/pull/9124) - fix github SA for June release by [@zirain](https://github.com/zirain) in [#9173](https://github.com/envoyproxy/gateway/pull/9173) - chore: fix date and nit by [@zirain](https://github.com/zirain) in [#9177](https://github.com/envoyproxy/gateway/pull/9177) - build(deps): bump opentelemetry-collector from 0.157.2 to 0.158.0 in /charts/gateway-addons-helm in the helm group across 1 directory by [@dependabot](https://github.com/dependabot)\[bot] in [#9156](https://github.com/envoyproxy/gateway/pull/9156) - Bump VERSION to v1.8.1 by [@jukie](https://github.com/jukie) in [#9175](https://github.com/envoyproxy/gateway/pull/9175) - docs: update benckmark for 1.8.1 and 1.7.4 by [@zirain](https://github.com/zirain) in [#9179](https://github.com/envoyproxy/gateway/pull/9179) - docs: TLSRoute with TLS termination by [@zhaohuabing](https://github.com/zhaohuabing) in [#9107](https://github.com/envoyproxy/gateway/pull/9107) - docs: explain how to scrape proxy metrics with an existing Prometheus by [@SAY-5](https://github.com/SAY-5) in [#9052](https://github.com/envoyproxy/gateway/pull/9052) - fix(validation): allow IPv6 to be specific in loadBalancerSourceRanges by [@rissson](https://github.com/rissson) in [#9050](https://github.com/envoyproxy/gateway/pull/9050) - fix(egctl): return config errors when port forwarding fails by [@immanuwell](https://github.com/immanuwell) in [#9056](https://github.com/envoyproxy/gateway/pull/9056) - chore: fix codecov by [@zhaohuabing](https://github.com/zhaohuabing) in [#9188](https://github.com/envoyproxy/gateway/pull/9188) - fix: allow Backend TLS to disable ALPN with an empty list by [@zhaohuabing](https://github.com/zhaohuabing) in [#9162](https://github.com/envoyproxy/gateway/pull/9162) - fix(gatewayapi): sort api key auth credentials by [@nobbs](https://github.com/nobbs) in [#9042](https://github.com/envoyproxy/gateway/pull/9042) - fix(status): separate listener programmed state from HTTPRoute Accepted condition by [@apkatsikas](https://github.com/apkatsikas) in [#9129](https://github.com/envoyproxy/gateway/pull/9129) - build(deps): bump npm-check-updates from 22.2.2 to 22.2.3 in /site by [@dependabot](https://github.com/dependabot)\[bot] in [#9201](https://github.com/envoyproxy/gateway/pull/9201) - build(deps): bump github/codeql-action from 4.36.1 to 4.36.2 in the actions group across 1 directory by [@dependabot](https://github.com/dependabot)\[bot] in [#9203](https://github.com/envoyproxy/gateway/pull/9203) - feat(auto\_host\_sni): allow configuring the sni automatically from the upstream endpoint by [@nacx](https://github.com/nacx) in [#9137](https://github.com/envoyproxy/gateway/pull/9137) - fix(egctl): correct user-facing grammar in help text by [@immanuwell](https://github.com/immanuwell) in [#9217](https://github.com/envoyproxy/gateway/pull/9217) - fix: reject ExternalName Service as a route backend by [@zhaohuabing](https://github.com/zhaohuabing) in [#9190](https://github.com/envoyproxy/gateway/pull/9190) - fix(status): fall back to service externalIPs for Gateway addresses by [@jvlxz](https://github.com/jvlxz) in [#9209](https://github.com/envoyproxy/gateway/pull/9209) - fix: don't duplicate ValidatingAdmissionPolicy in install.yaml by [@jukie](https://github.com/jukie) in [#9182](https://github.com/envoyproxy/gateway/pull/9182) - feat(xds): add xdsNACKTotal metric by [@QuantumEnigmaa](https://github.com/QuantumEnigmaa) in [#9205](https://github.com/envoyproxy/gateway/pull/9205) - feat: source rate limit value from dynamic metadata by [@kanurag94](https://github.com/kanurag94) in [#9216](https://github.com/envoyproxy/gateway/pull/9216) - fix(listenerset): implement hostname conflict listener precedence by [@zirain](https://github.com/zirain) in [#9192](https://github.com/envoyproxy/gateway/pull/9192) - fix: correct the config hot reload validation order by [@MengjiaLiang](https://github.com/MengjiaLiang) in [#9214](https://github.com/envoyproxy/gateway/pull/9214) - build(deps): bump the helm group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9202](https://github.com/envoyproxy/gateway/pull/9202) - build(deps): bump the k8s-io group across 1 directory with 6 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9241](https://github.com/envoyproxy/gateway/pull/9241) - build(deps): bump the gomod group across 2 directories with 6 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9240](https://github.com/envoyproxy/gateway/pull/9240) - fix: deduplicate CA certificates in ClientTrafficPolicy mTLS by [@yuehaii](https://github.com/yuehaii) in [#8909](https://github.com/envoyproxy/gateway/pull/8909) - feat(policy): support ListenerSet as targetRef for ClientTrafficPolicy by [@apkatsikas](https://github.com/apkatsikas) in [#9026](https://github.com/envoyproxy/gateway/pull/9026) - fix(docs): links still pointing to /contributions by [@M4tteoP](https://github.com/M4tteoP) in [#9255](https://github.com/envoyproxy/gateway/pull/9255) - fix: renew expired TLS certificates in e2e test fixtures by [@rudrakhp](https://github.com/rudrakhp) with [@Copilot](https://github.com/Copilot) in [#9256](https://github.com/envoyproxy/gateway/pull/9256) - feat(api): Add filterContext field to Lua type in EnvoyExtensionPolicy by [@norman-zon](https://github.com/norman-zon) in [#8730](https://github.com/envoyproxy/gateway/pull/8730) - build(deps): bump js-yaml and markdownlint-cli in /tools by [@dependabot](https://github.com/dependabot)\[bot] in [#9258](https://github.com/envoyproxy/gateway/pull/9258) - docs: update release schedule information by [@apkatsikas](https://github.com/apkatsikas) in [#9257](https://github.com/envoyproxy/gateway/pull/9257) - docs: update Client Traffic Policy docs with new ListenerSet information by [@apkatsikas](https://github.com/apkatsikas) in [#9262](https://github.com/envoyproxy/gateway/pull/9262) - build(deps): bump undici from 7.24.7 to 7.28.0 in /tools by [@dependabot](https://github.com/dependabot)\[bot] in [#9261](https://github.com/envoyproxy/gateway/pull/9261) - build(deps-dev): bump tar from 7.5.13 to 7.5.16 in /site by [@dependabot](https://github.com/dependabot)\[bot] in [#9260](https://github.com/envoyproxy/gateway/pull/9260) - feat: option to disable automatic X-Forwarded-For append/add by [@lextiz](https://github.com/lextiz) in [#8576](https://github.com/envoyproxy/gateway/pull/8576) - build(deps): bump markdown-it and markdownlint-cli in /tools by [@dependabot](https://github.com/dependabot)\[bot] in [#9259](https://github.com/envoyproxy/gateway/pull/9259) - feat: add FailedRefetchDuration to RemoteJWKS by [@jukie](https://github.com/jukie) in [#9265](https://github.com/envoyproxy/gateway/pull/9265) - build(deps): bump github.com/containerd/containerd from 1.7.32 to 1.7.33 in /tools by [@dependabot](https://github.com/dependabot)\[bot] in [#9266](https://github.com/envoyproxy/gateway/pull/9266) - build(deps): bump github.com/containerd/containerd from 1.7.32 to 1.7.33 by [@dependabot](https://github.com/dependabot)\[bot] in [#9267](https://github.com/envoyproxy/gateway/pull/9267) - feat(helm): add CRDs dependency toggle by [@cilindrox](https://github.com/cilindrox) in [#8850](https://github.com/envoyproxy/gateway/pull/8850) - fix: proxy protocol with httpProtocolOptions by [@zhaohuabing](https://github.com/zhaohuabing) in [#9234](https://github.com/envoyproxy/gateway/pull/9234) - fix: validate API Key auth ExtractFrom by [@zhaohuabing](https://github.com/zhaohuabing) in [#9250](https://github.com/envoyproxy/gateway/pull/9250) - fix: XRateLimitHeadersOptionDisabled constant value must match CRD enum by [@gianniskt](https://github.com/gianniskt) in [#9224](https://github.com/envoyproxy/gateway/pull/9224) - fix(ratelimit): shared global ratelimit with cost not working by [@zirain](https://github.com/zirain) in [#9245](https://github.com/envoyproxy/gateway/pull/9245) - chore: run dependabot on release branch by [@zirain](https://github.com/zirain) in [#9230](https://github.com/envoyproxy/gateway/pull/9230) - fix(gatewayapi): http retry without backoff by [@zirain](https://github.com/zirain) in [#9238](https://github.com/envoyproxy/gateway/pull/9238) - chore: update dependabot by [@zirain](https://github.com/zirain) in [#9299](https://github.com/envoyproxy/gateway/pull/9299) - chore: use pinned docker image by [@zirain](https://github.com/zirain) in [#9300](https://github.com/envoyproxy/gateway/pull/9300) - build(deps): bump npm-check-updates from 22.2.3 to 22.2.7 in /site by [@dependabot](https://github.com/dependabot)\[bot] in [#9277](https://github.com/envoyproxy/gateway/pull/9277) - perf: resolve ClientTrafficPolicy targets once by [@jukie](https://github.com/jukie) in [#9272](https://github.com/envoyproxy/gateway/pull/9272) - build(deps): bump the actions group across 1 directory with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9282](https://github.com/envoyproxy/gateway/pull/9282) - build(deps): bump the gomod group across 1 directory with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9283](https://github.com/envoyproxy/gateway/pull/9283) - build(deps): bump the helm group across 1 directory with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9279](https://github.com/envoyproxy/gateway/pull/9279) - chore: split release notes by [@zhaohuabing](https://github.com/zhaohuabing) in [#9312](https://github.com/envoyproxy/gateway/pull/9312) - build(deps-dev): bump autoprefixer from 10.5.0 to 10.5.1 in /site by [@dependabot](https://github.com/dependabot)\[bot] in [#9321](https://github.com/envoyproxy/gateway/pull/9321) - build(deps): bump actions/setup-go from 6.4.0 to 6.5.0 in /tools/github-actions/setup-deps in the actions group across 1 directory by [@dependabot](https://github.com/dependabot)\[bot] in [#9325](https://github.com/envoyproxy/gateway/pull/9325) - chore: ignore k8s.io and go-control-plane on release branches by [@zirain](https://github.com/zirain) in [#9331](https://github.com/envoyproxy/gateway/pull/9331) - feat: support for deployment.envoyGateway.strategy by [@zirain](https://github.com/zirain) in [#9318](https://github.com/envoyproxy/gateway/pull/9318) - build(deps): bump otel/opentelemetry-collector-contrib from 0.154.0 to 0.155.0 in /charts/gateway-addons-helm in the helm group across 1 directory by [@dependabot](https://github.com/dependabot)\[bot] in [#9344](https://github.com/envoyproxy/gateway/pull/9344) - build(deps-dev): bump autoprefixer from 10.5.1 to 10.5.2 in /site by [@dependabot](https://github.com/dependabot)\[bot] in [#9343](https://github.com/envoyproxy/gateway/pull/9343) - ci: add tests for Kubernetes 1.36 by [@beckcl](https://github.com/beckcl) in [#8990](https://github.com/envoyproxy/gateway/pull/8990) - chore: update pr template to help reduce review effort by [@zhaohuabing](https://github.com/zhaohuabing) in [#9350](https://github.com/envoyproxy/gateway/pull/9350) - helm: follow-up docs and template wording by [@jukie](https://github.com/jukie) in [#9317](https://github.com/envoyproxy/gateway/pull/9317) - Add release notes for v1.8.2 by [@jukie](https://github.com/jukie) in [#9361](https://github.com/envoyproxy/gateway/pull/9361) - fix: consolidate destination AppProtocol handling by [@zhaohuabing](https://github.com/zhaohuabing) in [#9337](https://github.com/envoyproxy/gateway/pull/9337) - fix: panic with empty deploy by [@zirain](https://github.com/zirain) in [#9365](https://github.com/envoyproxy/gateway/pull/9365) - fix: use target resource namespace in BTP RoutingType index by [@Aias00](https://github.com/Aias00) in [#9359](https://github.com/envoyproxy/gateway/pull/9359) - chore: bump envoy go-control-plane by [@zirain](https://github.com/zirain) in [#9375](https://github.com/envoyproxy/gateway/pull/9375) - fix: DaemonSet pod not using the configured custom ServiceAccount name by [@zirain](https://github.com/zirain) in [#9347](https://github.com/envoyproxy/gateway/pull/9347) - ratelimit: refactor shared and non-shared ratelimit rules by [@zirain](https://github.com/zirain) in [#9332](https://github.com/envoyproxy/gateway/pull/9332) - fix: use int64 format for ratelimit Requests field by [@jukie](https://github.com/jukie) in [#9377](https://github.com/envoyproxy/gateway/pull/9377) - docs: describe uint32 vs int32 range issue by [@jukie](https://github.com/jukie) in [#9379](https://github.com/envoyproxy/gateway/pull/9379) - feat: CEL-based Authorization policy by [@zhaohuabing](https://github.com/zhaohuabing) in [#8981](https://github.com/envoyproxy/gateway/pull/8981) - feat: Bump gatewayapi v1.6.0 by [@zirain](https://github.com/zirain) in [#9232](https://github.com/envoyproxy/gateway/pull/9232) - build(deps): bump npm-check-updates from 22.2.7 to 22.2.9 in /site by [@dependabot](https://github.com/dependabot)\[bot] in [#9387](https://github.com/envoyproxy/gateway/pull/9387) - deps: ignore gateway-api on release branch by [@zirain](https://github.com/zirain) in [#9393](https://github.com/envoyproxy/gateway/pull/9393) - chore: update skipped tests by [@zirain](https://github.com/zirain) in [#9394](https://github.com/envoyproxy/gateway/pull/9394) - build(deps): bump opentelemetry-collector from 0.159.0 to 0.159.2 in /charts/gateway-addons-helm in the helm group across 1 directory by [@dependabot](https://github.com/dependabot)\[bot] in [#9388](https://github.com/envoyproxy/gateway/pull/9388) - build(deps): bump the gomod group across 6 directories with 6 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9398](https://github.com/envoyproxy/gateway/pull/9398) - Update sync-dashboard for v1.8.2 by [@jukie](https://github.com/jukie) in [#9403](https://github.com/envoyproxy/gateway/pull/9403) - feat: support listenerset policy attach in security policy by [@kkk777-7](https://github.com/kkk777-7) in [#9270](https://github.com/envoyproxy/gateway/pull/9270) - docs(gateway-helm): clarify envoyProxy image values by [@immanuwell](https://github.com/immanuwell) in [#9222](https://github.com/envoyproxy/gateway/pull/9222) - fix: prevent GatewayNamespace mode from hijacking pre-existing ServiceAccounts and ConfigMaps by [@yuehaii](https://github.com/yuehaii) in [#9215](https://github.com/envoyproxy/gateway/pull/9215) - fix: allow trailing dot in Backend FQDN hostnames by [@NeddM](https://github.com/NeddM) in [#9098](https://github.com/envoyproxy/gateway/pull/9098) - feat: support statusOnError field in EnvoyExtensionPolicy ExtProc by [@dragon3](https://github.com/dragon3) in [#9044](https://github.com/envoyproxy/gateway/pull/9044) - detect ipv6 literal hosts in url2cluster and token endpoint check by [@dxbjavid](https://github.com/dxbjavid) in [#9165](https://github.com/envoyproxy/gateway/pull/9165) - feat(api): add ClientTrafficPolicy.clientIPDetection.downstreamRemoteAddress for L4-transparent geoip by [@sboulkour](https://github.com/sboulkour) in [#8956](https://github.com/envoyproxy/gateway/pull/8956) - fix: register ListenerSet and route indexes in offline controller by [@Aias00](https://github.com/Aias00) in [#9320](https://github.com/envoyproxy/gateway/pull/9320) - build(deps): bump the gomod group across 1 directory with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9436](https://github.com/envoyproxy/gateway/pull/9436) - build(deps): bump the helm group across 1 directory with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9434](https://github.com/envoyproxy/gateway/pull/9434) - build(deps): bump the actions group across 1 directory with 6 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9439](https://github.com/envoyproxy/gateway/pull/9439) - chore: bump golang to 1.26.5 by [@zhaohuabing](https://github.com/zhaohuabing) in [#9437](https://github.com/envoyproxy/gateway/pull/9437) - Add release notes for 1.7.5 by [@cnvergence](https://github.com/cnvergence) in [#9433](https://github.com/envoyproxy/gateway/pull/9433) - docs: update 1.8 install docs by [@zhaohuabing](https://github.com/zhaohuabing) in [#9451](https://github.com/envoyproxy/gateway/pull/9451) - \[release/v1.7] add benchmark report for v1.7.5 by [@cnvergence](https://github.com/cnvergence) in [#9453](https://github.com/envoyproxy/gateway/pull/9453) - feat(helm): harden control-plane and certgen securityContext by [@jukie](https://github.com/jukie) in [#9069](https://github.com/envoyproxy/gateway/pull/9069) - perf: deduplicate JWT authn providers by [@Aias00](https://github.com/Aias00) in [#9430](https://github.com/envoyproxy/gateway/pull/9430) - e2e: add stats for WASM by [@zirain](https://github.com/zirain) in [#9424](https://github.com/envoyproxy/gateway/pull/9424) - fix: UDP/TCP RouteMultipleRoutesAttachment conformance test by [@zirain](https://github.com/zirain) in [#9247](https://github.com/envoyproxy/gateway/pull/9247) - docs: document vulnerability disclosure process by [@arkodg](https://github.com/arkodg) in [#9227](https://github.com/envoyproxy/gateway/pull/9227) - perf: introduce endpoint slice indexer by [@kkk777-7](https://github.com/kkk777-7) in [#9221](https://github.com/envoyproxy/gateway/pull/9221) - Revert LuaPerRoute source materialization for Lua by [@arkodg](https://github.com/arkodg) in [#9426](https://github.com/envoyproxy/gateway/pull/9426) - feat: support HTTPFilter for GRPCRoute by [@zhaohuabing](https://github.com/zhaohuabing) in [#9404](https://github.com/envoyproxy/gateway/pull/9404) - fix: default backend TLS max version to 1.3 by [@vishwas-bm](https://github.com/vishwas-bm) in [#9412](https://github.com/envoyproxy/gateway/pull/9412) - feat(ctp): add allowExpiredCertificate to tls.clientValidation by [@daanvinken](https://github.com/daanvinken) in [#9199](https://github.com/envoyproxy/gateway/pull/9199) - docs: fix invalid proxy protocol example by [@hegerdes](https://github.com/hegerdes) in [#9479](https://github.com/envoyproxy/gateway/pull/9479) - refactor: use stdlib maps and slices instead of golang.org/x/exp by [@mmmommm](https://github.com/mmmommm) in [#9482](https://github.com/envoyproxy/gateway/pull/9482) - fix(listenerset): implement listener conflict precedence for protocol conflicts by [@zirain](https://github.com/zirain) in [#9196](https://github.com/envoyproxy/gateway/pull/9196) - feat: wrap watch.namespaces helm template check in a with block by [@cnvergence](https://github.com/cnvergence) in [#9067](https://github.com/envoyproxy/gateway/pull/9067) - Support off and critical log level by [@wweiwei-li](https://github.com/wweiwei-li) in [#9271](https://github.com/envoyproxy/gateway/pull/9271) - build(deps): bump the actions group across 1 directory with 9 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9506](https://github.com/envoyproxy/gateway/pull/9506) - build(deps-dev): bump autoprefixer from 10.5.2 to 10.5.3 in /site by [@dependabot](https://github.com/dependabot)\[bot] in [#9495](https://github.com/envoyproxy/gateway/pull/9495) - build(deps): bump the helm group across 1 directory with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9501](https://github.com/envoyproxy/gateway/pull/9501) - build(deps): bump markdownlint-cli from 0.49.0 to 0.49.1 in /tools by [@dependabot](https://github.com/dependabot)\[bot] in [#9496](https://github.com/envoyproxy/gateway/pull/9496) - build(deps): bump sigs.k8s.io/mcs-api from 0.5.0 to 0.5.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#9500](https://github.com/envoyproxy/gateway/pull/9500) - build(deps): bump the gomod group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9499](https://github.com/envoyproxy/gateway/pull/9499) - build(deps): bump distroless/base-nossl from `20f009e` to `86554c4` in /tools/docker/envoy-gateway by [@dependabot](https://github.com/dependabot)\[bot] in [#9494](https://github.com/envoyproxy/gateway/pull/9494) - fix: redirect port leaking across multiple listeners by [@Aias00](https://github.com/Aias00) in [#9349](https://github.com/envoyproxy/gateway/pull/9349) - fix: add default retry policy for Envoy wasm module fetch by [@jukie](https://github.com/jukie) in [#9462](https://github.com/envoyproxy/gateway/pull/9462) - fix/refactor: deep copy status in translator for all resources by [@rudrakhp](https://github.com/rudrakhp) in [#9458](https://github.com/envoyproxy/gateway/pull/9458) - conformance: fix GatewayListenerUnsupportedProtocol test by [@zirain](https://github.com/zirain) in [#9490](https://github.com/envoyproxy/gateway/pull/9490) - fix(logs): restore ISO 8601 timestamp format by [@wiegandf](https://github.com/wiegandf) in [#9493](https://github.com/envoyproxy/gateway/pull/9493) - fix: unreferenced Secret events trigger reconciliation when HTTPRouteFilter CRD exists by [@Greyeye](https://github.com/Greyeye) in [#9488](https://github.com/envoyproxy/gateway/pull/9488) - bump Gateway API to v1.6.1 by [@zirain](https://github.com/zirain) in [#9515](https://github.com/envoyproxy/gateway/pull/9515) - Add release notes for v1.8.3 by [@jukie](https://github.com/jukie) in [#9518](https://github.com/envoyproxy/gateway/pull/9518) - feat: support client and overall tracing sampling by [@Ri7ay](https://github.com/Ri7ay) in [#9402](https://github.com/envoyproxy/gateway/pull/9402) - refactor: use field owner pattern to merge BTPs by [@rudrakhp](https://github.com/rudrakhp) in [#9514](https://github.com/envoyproxy/gateway/pull/9514) - api: add host normalization to ClientTrafficPolicy by [@sboulkour](https://github.com/sboulkour) in [#9115](https://github.com/envoyproxy/gateway/pull/9115) - Fix(ext-proc-examples): Add RequestBody and ResponseBody handling in request processing by [@abe-servescale](https://github.com/abe-servescale) in [#9183](https://github.com/envoyproxy/gateway/pull/9183) - feat(translator): Support ignoreFailure to tolerate invalid JWT by [@sinitax](https://github.com/sinitax) in [#9313](https://github.com/envoyproxy/gateway/pull/9313) - feat(ext\_proc): add support for observability mode by [@skos-ninja](https://github.com/skos-ninja) in [#8536](https://github.com/envoyproxy/gateway/pull/8536) - fix(xds): use DnsCluster extension for DNS clusters by [@andreademurtas](https://github.com/andreademurtas) in [#9155](https://github.com/envoyproxy/gateway/pull/9155) - feat: allow RateLimitRedisSettings.url to be sourced from a Secret by [@guanchzhou](https://github.com/guanchzhou) in [#9143](https://github.com/envoyproxy/gateway/pull/9143) - chore: fix gen by [@zirain](https://github.com/zirain) in [#9533](https://github.com/envoyproxy/gateway/pull/9533) - Remove 1.8.3 release page by [@jukie](https://github.com/jukie) in [#9526](https://github.com/envoyproxy/gateway/pull/9526) - docs: recommend ListenerSet over mergeGateways by [@zhaohuabing](https://github.com/zhaohuabing) in [#9524](https://github.com/envoyproxy/gateway/pull/9524) - feat(helm): add startupProbe to envoy-gateway deployment by [@cleman95](https://github.com/cleman95) in [#8820](https://github.com/envoyproxy/gateway/pull/8820) - fix: reject TLS secret when certificate and private key do not match by [@zhaohuabing](https://github.com/zhaohuabing) in [#9480](https://github.com/envoyproxy/gateway/pull/9480) - feat: support consistent hash for non-route backends by [@zhaohuabing](https://github.com/zhaohuabing) in [#9231](https://github.com/envoyproxy/gateway/pull/9231) - build(deps-dev): bump autoprefixer from 10.5.3 to 10.5.4 in /site by [@dependabot](https://github.com/dependabot)\[bot] in [#9542](https://github.com/envoyproxy/gateway/pull/9542) - build(deps): bump codespell from 2.4.2 to 2.4.3 in /tools/src/codespell by [@dependabot](https://github.com/dependabot)\[bot] in [#9544](https://github.com/envoyproxy/gateway/pull/9544) - build(deps): bump loki from 7.0.0 to 7.1.0 in /charts/gateway-addons-helm in the helm group across 1 directory by [@dependabot](https://github.com/dependabot)\[bot] in [#9545](https://github.com/envoyproxy/gateway/pull/9545) - build(deps): bump the actions group across 2 directories with 6 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9549](https://github.com/envoyproxy/gateway/pull/9549) - feat: use grpc status errors in jwtinterceptor by [@cnvergence](https://github.com/cnvergence) in [#9020](https://github.com/envoyproxy/gateway/pull/9020) - Add release note for fix to ratelimit fallback tag by [@jukie](https://github.com/jukie) in [#9553](https://github.com/envoyproxy/gateway/pull/9553) - build(deps): bump linkinator from 7.6.1 to 8.0.0 in /tools by [@dependabot](https://github.com/dependabot)\[bot] in [#9543](https://github.com/envoyproxy/gateway/pull/9543) - Update benchmark dashboard for v1.8.3 by [@jukie](https://github.com/jukie) in [#9560](https://github.com/envoyproxy/gateway/pull/9560) - fix: dedupe SAN entries before checking algorithm uniqueness by [@dmavrodiev](https://github.com/dmavrodiev) in [#9472](https://github.com/envoyproxy/gateway/pull/9472) - build(deps): bump the gomod group across 5 directories with 7 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9546](https://github.com/envoyproxy/gateway/pull/9546) - Bump metallb and kind by [@jukie](https://github.com/jukie) in [#9562](https://github.com/envoyproxy/gateway/pull/9562) - Create 1.8.3 release page and final release steps by [@jukie](https://github.com/jukie) in [#9561](https://github.com/envoyproxy/gateway/pull/9561) - docs: point community meeting calendar to LFX platform by [@zhaohuabing](https://github.com/zhaohuabing) in [#9569](https://github.com/envoyproxy/gateway/pull/9569) - fix: bound policy ancestors on the fly to avoid O(N^2) translation latency by [@zhaohuabing](https://github.com/zhaohuabing) in [#9558](https://github.com/envoyproxy/gateway/pull/9558) - docs: explain invert field in global rate limit example by [@Aditya7880900936](https://github.com/Aditya7880900936) in [#9572](https://github.com/envoyproxy/gateway/pull/9572) - ci: wire standalone test suite into GitHub Actions by [@takumi12311123](https://github.com/takumi12311123) in [#9127](https://github.com/envoyproxy/gateway/pull/9127) - deps: bump dependencies flagged by OSV scan by [@zhaohuabing](https://github.com/zhaohuabing) in [#9575](https://github.com/envoyproxy/gateway/pull/9575) - fix(cors validation) allow all RFC-3986 compliant schemes by [@christopherbii](https://github.com/christopherbii) in [#9049](https://github.com/envoyproxy/gateway/pull/9049) - feat(xds): support SNI based dynamic forward proxy for TLSRoute by [@andreademurtas](https://github.com/andreademurtas) in [#9184](https://github.com/envoyproxy/gateway/pull/9184) - fix: handle EC parameters before TLS private keys by [@jvlxz](https://github.com/jvlxz) in [#9338](https://github.com/envoyproxy/gateway/pull/9338) - test: fix mismatched tls.key in tlsroute dynamic resolver testdata by [@zhaohuabing](https://github.com/zhaohuabing) in [#9582](https://github.com/envoyproxy/gateway/pull/9582) - fix: eliminate port race in setupFakeEnvoyStats test helper by [@muwaqar-cflt](https://github.com/muwaqar-cflt) in [#9580](https://github.com/envoyproxy/gateway/pull/9580) - feat: support listenerset reference grant by [@kkk777-7](https://github.com/kkk777-7) in [#9481](https://github.com/envoyproxy/gateway/pull/9481) - fix: allow TLSv1.3 for remote JWKS fetching by [@michaelbeaumont](https://github.com/michaelbeaumont) in [#9531](https://github.com/envoyproxy/gateway/pull/9531) - fix: allow requests:0 for global rate limit block rules by [@mvanhorn](https://github.com/mvanhorn) in [#9333](https://github.com/envoyproxy/gateway/pull/9333) - fix: validate SDS URL by [@zirain](https://github.com/zirain) in [#9030](https://github.com/envoyproxy/gateway/pull/9030) - fix: confirm NotFound against the API server before dropping status writes by [@zhaohuabing](https://github.com/zhaohuabing) in [#9566](https://github.com/envoyproxy/gateway/pull/9566) - feat(oidc): forward id token by [@zhaohuabing](https://github.com/zhaohuabing) in [#9367](https://github.com/envoyproxy/gateway/pull/9367) - api: make RateLimitRedisSettings.url a pointer by [@guanchzhou](https://github.com/guanchzhou) in [#9538](https://github.com/envoyproxy/gateway/pull/9538) - fix(docs): replace dead Envoy Slack invite link by [@zhaohuabing](https://github.com/zhaohuabing) in [#9586](https://github.com/envoyproxy/gateway/pull/9586) - feat(xds): raise xDS gRPC server default receive limit and make it configurable by [@linmosko](https://github.com/linmosko) in [#9564](https://github.com/envoyproxy/gateway/pull/9564) - fix: eliminate cfg.Logger data race in server()'s reload/shutdown path by [@muwaqar-cflt](https://github.com/muwaqar-cflt) in [#9581](https://github.com/envoyproxy/gateway/pull/9581) - fix: make ListenerSet and GRPCRoute watches optional by [@zhaohuabing](https://github.com/zhaohuabing) in [#9583](https://github.com/envoyproxy/gateway/pull/9583) - build(deps): bump npm-check-updates from 22.2.9 to 23.0.0 in /site by [@dependabot](https://github.com/dependabot)\[bot] in [#9595](https://github.com/envoyproxy/gateway/pull/9595) - build(deps): bump linkinator from 8.0.0 to 8.0.2 in /tools by [@dependabot](https://github.com/dependabot)\[bot] in [#9596](https://github.com/envoyproxy/gateway/pull/9596) - build(deps): bump the actions group across 1 directory with 10 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9602](https://github.com/envoyproxy/gateway/pull/9602) - feat: envoy extension policy listenerset attach by [@kkk777-7](https://github.com/kkk777-7) in [#9425](https://github.com/envoyproxy/gateway/pull/9425) - build(deps): bump the helm group across 1 directory with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9599](https://github.com/envoyproxy/gateway/pull/9599) - api: add OOB BackendUtilization by [@jukie](https://github.com/jukie) in [#9400](https://github.com/envoyproxy/gateway/pull/9400) - build(deps): bump the gomod group across 3 directories with 5 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9598](https://github.com/envoyproxy/gateway/pull/9598) - fix: don't set Deployment replicas when an HPA is configured by [@zhaohuabing](https://github.com/zhaohuabing) in [#9594](https://github.com/envoyproxy/gateway/pull/9594) - feat: support listenerset policy attach in backend traffic policy by [@kkk777-7](https://github.com/kkk777-7) in [#9419](https://github.com/envoyproxy/gateway/pull/9419) - feat(infra): Add remote infrastructure provider by [@zac-nixon](https://github.com/zac-nixon) in [#9027](https://github.com/envoyproxy/gateway/pull/9027) - fix: use shared system trust store sds secret by [@guydc](https://github.com/guydc) in [#9357](https://github.com/envoyproxy/gateway/pull/9357) - tweak: test indent by [@kkk777-7](https://github.com/kkk777-7) in [#9612](https://github.com/envoyproxy/gateway/pull/9612) - feat: add MergeBackends option for backend cluster deduplication by [@muwaqar-cflt](https://github.com/muwaqar-cflt) in [#9477](https://github.com/envoyproxy/gateway/pull/9477) - build(deps): bump the k8s-io group across 1 directory with 6 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9601](https://github.com/envoyproxy/gateway/pull/9601) - follow up listenerset policy attachment by [@kkk777-7](https://github.com/kkk777-7) in [#9621](https://github.com/envoyproxy/gateway/pull/9621) - chore: fix testdata for CTP status truncated by [@zirain](https://github.com/zirain) in [#9640](https://github.com/envoyproxy/gateway/pull/9640) - fix(bootstrap): drop removed envoy.restart\_features.use\_eds\_cache\_for\_ads guard by [@Aias00](https://github.com/Aias00) in [#9610](https://github.com/envoyproxy/gateway/pull/9610) - fix: initial fetch timed out for type.googleapis.com/envoy.extensions.transport\_sockets.tls.v3.Secret by [@yuehaii](https://github.com/yuehaii) in [#9532](https://github.com/envoyproxy/gateway/pull/9532) - feat: add CSRF origin validation to SecurityPolicy by [@albsga4](https://github.com/albsga4) in [#8836](https://github.com/envoyproxy/gateway/pull/8836) - docs: add Release Notes link to top navigation menu by [@amarkdotdev](https://github.com/amarkdotdev) in [#9620](https://github.com/envoyproxy/gateway/pull/9620) - chore: regen xds translator testdata for initialFetchTimeout by [@zhaohuabing](https://github.com/zhaohuabing) in [#9643](https://github.com/envoyproxy/gateway/pull/9643) - feat: Implement BackendUtilization LB OutOfBand reporting by [@jukie](https://github.com/jukie) in [#9593](https://github.com/envoyproxy/gateway/pull/9593) - feat/HTTPRouteFilter: host rewrite from path by [@zhaohuabing](https://github.com/zhaohuabing) in [#8964](https://github.com/envoyproxy/gateway/pull/8964) - chore: fix gen by [@zirain](https://github.com/zirain) in [#9648](https://github.com/envoyproxy/gateway/pull/9648) - feat: add support for tls.crt in BackendTlsPolicy by [@gcleroux](https://github.com/gcleroux) in [#8329](https://github.com/envoyproxy/gateway/pull/8329) - chore: fix OSV-scanner reported vulnerabilities by [@zhaohuabing](https://github.com/zhaohuabing) in [#9655](https://github.com/envoyproxy/gateway/pull/9655) - feat(extensionserver): Support policy resources targetting HTTPRoute and GRPCRoute by [@HusseinKabbout](https://github.com/HusseinKabbout) in [#9249](https://github.com/envoyproxy/gateway/pull/9249) - fix(translator): allow UDS + IP mixed endpoints by [@guydc](https://github.com/guydc) in [#9654](https://github.com/envoyproxy/gateway/pull/9654) - fix(gatewayapi): don't skip MergeBackends precedence-index claims for policies that set nothing by [@muwaqar-cflt](https://github.com/muwaqar-cflt) in [#9590](https://github.com/envoyproxy/gateway/pull/9590) - build(deps): bump the actions group across 1 directory with 5 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9667](https://github.com/envoyproxy/gateway/pull/9667) - build(deps): bump busybox from `fd8d9aa` to `dc2d74b` in /tools/docker/envoy-gateway by [@dependabot](https://github.com/dependabot)\[bot] in [#9658](https://github.com/envoyproxy/gateway/pull/9658) - build(deps): bump linkinator from 8.0.2 to 8.0.3 in /tools by [@dependabot](https://github.com/dependabot)\[bot] in [#9659](https://github.com/envoyproxy/gateway/pull/9659) - build(deps): bump k8s.io/api from 0.36.0 to 0.36.3 in /examples/remote-infra in the k8s-io group across 1 directory by [@dependabot](https://github.com/dependabot)\[bot] in [#9666](https://github.com/envoyproxy/gateway/pull/9666) - build(deps): bump the helm group across 1 directory with 3 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9664](https://github.com/envoyproxy/gateway/pull/9664) - build(deps): bump the gomod group across 7 directories with 3 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9663](https://github.com/envoyproxy/gateway/pull/9663) - build(deps): bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 in /test by [@dependabot](https://github.com/dependabot)\[bot] in [#9677](https://github.com/envoyproxy/gateway/pull/9677) - api: add more timeout fields to ClientTimeout by [@HusseinKabbout](https://github.com/HusseinKabbout) in [#9315](https://github.com/envoyproxy/gateway/pull/9315) - add communityinviter.com to LINKINATOR\_IGNORE to pass docs lint ci by [@mmmommm](https://github.com/mmmommm) in [#9684](https://github.com/envoyproxy/gateway/pull/9684) - build(deps): bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#9678](https://github.com/envoyproxy/gateway/pull/9678) - chore: bump kube-api-linter by [@sivchari](https://github.com/sivchari) in [#9682](https://github.com/envoyproxy/gateway/pull/9682) - refactor: only include cluster-scoped traffic features in BackendCluster by [@zhaohuabing](https://github.com/zhaohuabing) in [#9642](https://github.com/envoyproxy/gateway/pull/9642) - feat(gatewayapi): support SDS listener certificate references by [@Sharvash](https://github.com/Sharvash) in [#9525](https://github.com/envoyproxy/gateway/pull/9525) - api: increase RateLimitSelectCondition headers MaxItems from 64 to 128 by [@sivchari](https://github.com/sivchari) in [#9681](https://github.com/envoyproxy/gateway/pull/9681) - api: add Week unit to BackendTrafficPolicy RateLimitUnit by [@Danyal-Khalid](https://github.com/Danyal-Khalid) in [#9693](https://github.com/envoyproxy/gateway/pull/9693) - feat(api): add Selector to MergeBackendsConfig to restrict cluster deduplication by [@muwaqar-cflt](https://github.com/muwaqar-cflt) in [#9624](https://github.com/envoyproxy/gateway/pull/9624) - feat: merge support for eep by [@kkk777-7](https://github.com/kkk777-7) in [#9638](https://github.com/envoyproxy/gateway/pull/9638) - fix: filter NodePort status.addresses to nodes running Envoy when externalTrafficPolicy is Local by [@yuehaii](https://github.com/yuehaii) in [#9605](https://github.com/envoyproxy/gateway/pull/9605) - feat(BackendTrafficPolicy): Support matching on response header for response override by [@HusseinKabbout](https://github.com/HusseinKabbout) in [#9354](https://github.com/envoyproxy/gateway/pull/9354) - feat(translator): active healthcheck logs by [@guydc](https://github.com/guydc) in [#9651](https://github.com/envoyproxy/gateway/pull/9651) - replace ptr.To with new by [@mmmommm](https://github.com/mmmommm) in [#9703](https://github.com/envoyproxy/gateway/pull/9703) - v1.9.0-rc.1 release by [@kkk777-7](https://github.com/kkk777-7) in [#9708](https://github.com/envoyproxy/gateway/pull/9708) - fix: osv by [@kkk777-7](https://github.com/kkk777-7) in [#9709](https://github.com/envoyproxy/gateway/pull/9709) - bump ratelimit, dynamic modules, and proxy versions for v1.9.0-rc.1 by [@kkk777-7](https://github.com/kkk777-7) in [#9710](https://github.com/envoyproxy/gateway/pull/9710) - \[release/v1.9] cherry pick v1.9 by [@kkk777-7](https://github.com/kkk777-7) in [#9756](https://github.com/envoyproxy/gateway/pull/9756) - bump ratelimit version by [@kkk777-7](https://github.com/kkk777-7) in [#9757](https://github.com/envoyproxy/gateway/pull/9757) ##### New Contributors - [@matheuscscp](https://github.com/matheuscscp) made their first contribution in [#8864](https://github.com/envoyproxy/gateway/pull/8864) - [@wucm667](https://github.com/wucm667) made their first contribution in [#8906](https://github.com/envoyproxy/gateway/pull/8906) - [@sjoukedv](https://github.com/sjoukedv) made their first contribution in [#8908](https://github.com/envoyproxy/gateway/pull/8908) - [@mvanhorn](https://github.com/mvanhorn) made their first contribution in [#8818](https://github.com/envoyproxy/gateway/pull/8818) - [@apkatsikas](https://github.com/apkatsikas) made their first contribution in [#8871](https://github.com/envoyproxy/gateway/pull/8871) - [@samuelmasuy](https://github.com/samuelmasuy) made their first contribution in [#9001](https://github.com/envoyproxy/gateway/pull/9001) - [@nguyenptk](https://github.com/nguyenptk) made their first contribution in [#8959](https://github.com/envoyproxy/gateway/pull/8959) - [@benjaminch](https://github.com/benjaminch) made their first contribution in [#9032](https://github.com/envoyproxy/gateway/pull/9032) - [@pkuzco](https://github.com/pkuzco) made their first contribution in [#9046](https://github.com/envoyproxy/gateway/pull/9046) - [@AlecDiraimondo](https://github.com/AlecDiraimondo) made their first contribution in [#9068](https://github.com/envoyproxy/gateway/pull/9068) - [@jeremiahsnapp](https://github.com/jeremiahsnapp) made their first contribution in [#9099](https://github.com/envoyproxy/gateway/pull/9099) - [@SAY-5](https://github.com/SAY-5) made their first contribution in [#9052](https://github.com/envoyproxy/gateway/pull/9052) - [@rissson](https://github.com/rissson) made their first contribution in [#9050](https://github.com/envoyproxy/gateway/pull/9050) - [@immanuwell](https://github.com/immanuwell) made their first contribution in [#9056](https://github.com/envoyproxy/gateway/pull/9056) - [@nobbs](https://github.com/nobbs) made their first contribution in [#9042](https://github.com/envoyproxy/gateway/pull/9042) - [@jvlxz](https://github.com/jvlxz) made their first contribution in [#9209](https://github.com/envoyproxy/gateway/pull/9209) - [@kanurag94](https://github.com/kanurag94) made their first contribution in [#9216](https://github.com/envoyproxy/gateway/pull/9216) - [@MengjiaLiang](https://github.com/MengjiaLiang) made their first contribution in [#9214](https://github.com/envoyproxy/gateway/pull/9214) - [@yuehaii](https://github.com/yuehaii) made their first contribution in [#8909](https://github.com/envoyproxy/gateway/pull/8909) - [@M4tteoP](https://github.com/M4tteoP) made their first contribution in [#9255](https://github.com/envoyproxy/gateway/pull/9255) - [@rudrakhp](https://github.com/rudrakhp) with [@Copilot](https://github.com/Copilot) made their first contribution in [#9256](https://github.com/envoyproxy/gateway/pull/9256) - [@norman-zon](https://github.com/norman-zon) made their first contribution in [#8730](https://github.com/envoyproxy/gateway/pull/8730) - [@cilindrox](https://github.com/cilindrox) made their first contribution in [#8850](https://github.com/envoyproxy/gateway/pull/8850) - [@gianniskt](https://github.com/gianniskt) made their first contribution in [#9224](https://github.com/envoyproxy/gateway/pull/9224) - [@NeddM](https://github.com/NeddM) made their first contribution in [#9098](https://github.com/envoyproxy/gateway/pull/9098) - [@dragon3](https://github.com/dragon3) made their first contribution in [#9044](https://github.com/envoyproxy/gateway/pull/9044) - [@dxbjavid](https://github.com/dxbjavid) made their first contribution in [#9165](https://github.com/envoyproxy/gateway/pull/9165) - [@sboulkour](https://github.com/sboulkour) made their first contribution in [#8956](https://github.com/envoyproxy/gateway/pull/8956) - [@vishwas-bm](https://github.com/vishwas-bm) made their first contribution in [#9412](https://github.com/envoyproxy/gateway/pull/9412) - [@daanvinken](https://github.com/daanvinken) made their first contribution in [#9199](https://github.com/envoyproxy/gateway/pull/9199) - [@hegerdes](https://github.com/hegerdes) made their first contribution in [#9479](https://github.com/envoyproxy/gateway/pull/9479) - [@wweiwei-li](https://github.com/wweiwei-li) made their first contribution in [#9271](https://github.com/envoyproxy/gateway/pull/9271) - [@wiegandf](https://github.com/wiegandf) made their first contribution in [#9493](https://github.com/envoyproxy/gateway/pull/9493) - [@Greyeye](https://github.com/Greyeye) made their first contribution in [#9488](https://github.com/envoyproxy/gateway/pull/9488) - [@abe-servescale](https://github.com/abe-servescale) made their first contribution in [#9183](https://github.com/envoyproxy/gateway/pull/9183) - [@sinitax](https://github.com/sinitax) made their first contribution in [#9313](https://github.com/envoyproxy/gateway/pull/9313) - [@skos-ninja](https://github.com/skos-ninja) made their first contribution in [#8536](https://github.com/envoyproxy/gateway/pull/8536) - [@andreademurtas](https://github.com/andreademurtas) made their first contribution in [#9155](https://github.com/envoyproxy/gateway/pull/9155) - [@cleman95](https://github.com/cleman95) made their first contribution in [#8820](https://github.com/envoyproxy/gateway/pull/8820) - [@dmavrodiev](https://github.com/dmavrodiev) made their first contribution in [#9472](https://github.com/envoyproxy/gateway/pull/9472) - [@takumi12311123](https://github.com/takumi12311123) made their first contribution in [#9127](https://github.com/envoyproxy/gateway/pull/9127) - [@christopherbii](https://github.com/christopherbii) made their first contribution in [#9049](https://github.com/envoyproxy/gateway/pull/9049) - [@zac-nixon](https://github.com/zac-nixon) made their first contribution in [#9027](https://github.com/envoyproxy/gateway/pull/9027) - [@albsga4](https://github.com/albsga4) made their first contribution in [#8836](https://github.com/envoyproxy/gateway/pull/8836) - [@amarkdotdev](https://github.com/amarkdotdev) made their first contribution in [#9620](https://github.com/envoyproxy/gateway/pull/9620) - [@gcleroux](https://github.com/gcleroux) made their first contribution in [#8329](https://github.com/envoyproxy/gateway/pull/8329) - [@HusseinKabbout](https://github.com/HusseinKabbout) made their first contribution in [#9249](https://github.com/envoyproxy/gateway/pull/9249) - [@sivchari](https://github.com/sivchari) made their first contribution in [#9682](https://github.com/envoyproxy/gateway/pull/9682) - [@Sharvash](https://github.com/Sharvash) made their first contribution in [#9525](https://github.com/envoyproxy/gateway/pull/9525) - [@Danyal-Khalid](https://github.com/Danyal-Khalid) made their first contribution in [#9693](https://github.com/envoyproxy/gateway/pull/9693) **Full Changelog**: <https://github.com/envoyproxy/gateway/compare/v1.8.3...v1.9.0> ### [`v1.8.5`](https://github.com/envoyproxy/gateway/releases/tag/v1.8.5) [Compare Source](https://github.com/envoyproxy/gateway/compare/v1.8.5...v1.8.5) ##### Release Announcement Check out the [v1.8.5 release announcement](https://gateway.envoyproxy.io/news/releases/notes/v1.8.5) to learn more about the release. ### [`v1.8.5`](https://github.com/envoyproxy/gateway/releases/tag/v1.8.5) [Compare Source](https://github.com/envoyproxy/gateway/compare/v1.8.4...v1.8.5) ##### Release Announcement Check out the [v1.8.5 release announcement](https://gateway.envoyproxy.io/news/releases/notes/v1.8.5) to learn more about the release. ### [`v1.8.4`](https://github.com/envoyproxy/gateway/releases/tag/v1.8.4) [Compare Source](https://github.com/envoyproxy/gateway/compare/v1.8.3...v1.8.4) ### Release Announcement Check out the [v1.8.4 release announcement](https://gateway.envoyproxy.io/news/releases/notes/v1.8.4) to learn more about the release. ### [`v1.8.3`](https://github.com/envoyproxy/gateway/releases/tag/v1.8.3) [Compare Source](https://github.com/envoyproxy/gateway/compare/v1.8.3...v1.8.3) ##### Release Announcement Check out the [v1.8.3 release announcement](https://gateway.envoyproxy.io/news/releases/notes/v1.8.3) to learn more about the release. ##### What's Changed - \[release-1.8]: bump the gomod group across 1 directory with 3 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9389](https://github.com/envoyproxy/gateway/pull/9389) - \[release-1.8]: bump the gomod group across 1 directory with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9435](https://github.com/envoyproxy/gateway/pull/9435) - \[release-1.8]: bump the actions group across 1 directory with 6 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9440](https://github.com/envoyproxy/gateway/pull/9440) - \[release-1.8]: bump the actions group across 1 directory with 7 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9507](https://github.com/envoyproxy/gateway/pull/9507) - \[release-1.8]: bump the gomod group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9502](https://github.com/envoyproxy/gateway/pull/9502) - \[release-1.8]: bump sigs.k8s.io/mcs-api from 0.4.1 to 0.5.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#9503](https://github.com/envoyproxy/gateway/pull/9503) - \[release-1.8]: bump distroless/base-nossl from `20f009e` to `86554c4` in /tools/docker/envoy-gateway by [@dependabot](https://github.com/dependabot)\[bot] in [#9497](https://github.com/envoyproxy/gateway/pull/9497) - fix: reject TLS secret when certificate and private key do not match by [@zhaohuabing](https://github.com/zhaohuabing) in [#9487](https://github.com/envoyproxy/gateway/pull/9487) - \[release-1.8] release notes and version bump for v1.8.3 by [@jukie](https://github.com/jukie) in [#9520](https://github.com/envoyproxy/gateway/pull/9520) - \[release-1.8] V1.8.3 cherry picks by [@jukie](https://github.com/jukie) in [#9540](https://github.com/envoyproxy/gateway/pull/9540) - \[release-1.8]: bump the gomod group across 1 directory with 7 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9547](https://github.com/envoyproxy/gateway/pull/9547) - \[release-1.8]: bump the actions group across 2 directories with 6 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9551](https://github.com/envoyproxy/gateway/pull/9551) - \[release-1.8] fix: update ratelimit image fallback tag in helm helpers by [@jukie](https://github.com/jukie) in [#9552](https://github.com/envoyproxy/gateway/pull/9552) **Full Changelog**: <https://github.com/envoyproxy/gateway/compare/v1.8.2...v1.8.3> ### [`v1.8.3`](https://github.com/envoyproxy/gateway/releases/tag/v1.8.3) [Compare Source](https://github.com/envoyproxy/gateway/compare/v1.8.2...v1.8.3) ##### Release Announcement Check out the [v1.8.3 release announcement](https://gateway.envoyproxy.io/news/releases/notes/v1.8.3) to learn more about the release. ##### What's Changed - \[release-1.8]: bump the gomod group across 1 directory with 3 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9389](https://github.com/envoyproxy/gateway/pull/9389) - \[release-1.8]: bump the gomod group across 1 directory with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9435](https://github.com/envoyproxy/gateway/pull/9435) - \[release-1.8]: bump the actions group across 1 directory with 6 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9440](https://github.com/envoyproxy/gateway/pull/9440) - \[release-1.8]: bump the actions group across 1 directory with 7 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9507](https://github.com/envoyproxy/gateway/pull/9507) - \[release-1.8]: bump the gomod group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9502](https://github.com/envoyproxy/gateway/pull/9502) - \[release-1.8]: bump sigs.k8s.io/mcs-api from 0.4.1 to 0.5.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#9503](https://github.com/envoyproxy/gateway/pull/9503) - \[release-1.8]: bump distroless/base-nossl from `20f009e` to `86554c4` in /tools/docker/envoy-gateway by [@dependabot](https://github.com/dependabot)\[bot] in [#9497](https://github.com/envoyproxy/gateway/pull/9497) - fix: reject TLS secret when certificate and private key do not match by [@zhaohuabing](https://github.com/zhaohuabing) in [#9487](https://github.com/envoyproxy/gateway/pull/9487) - \[release-1.8] release notes and version bump for v1.8.3 by [@jukie](https://github.com/jukie) in [#9520](https://github.com/envoyproxy/gateway/pull/9520) - \[release-1.8] V1.8.3 cherry picks by [@jukie](https://github.com/jukie) in [#9540](https://github.com/envoyproxy/gateway/pull/9540) - \[release-1.8]: bump the gomod group across 1 directory with 7 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9547](https://github.com/envoyproxy/gateway/pull/9547) - \[release-1.8]: bump the actions group across 2 directories with 6 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#9551](https://github.com/envoyproxy/gateway/pull/9551) - \[release-1.8] fix: update ratelimit image fallback tag in helm helpers by [@jukie](https://github.com/jukie) in [#9552](https://github.com/envoyproxy/gateway/pull/9552) **Full Changelog**: <https://github.com/envoyproxy/gateway/compare/v1.8.2...v1.8.3> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit

2026-07-22 19:05:08 +00:00

chore(deps): update mirror.gcr.io/envoyproxy/gateway-helm docker tag to v1.8.3

ci/crow/push/tanka-test Pipeline failed

Details

ci/crow/push/dns-test Pipeline failed

Details

ci/crow/pr/tanka-diff Pipeline failed

Details

ci/crow/pr/dns-test Pipeline failed

Details

ci/crow/pr/tanka-test Pipeline failed

Details

228c68638f

renovate-bot force-pushed renovate/mirror.gcr.io-envoyproxy-gateway-helm-1.x from 228c68638f

ci/crow/push/tanka-test Pipeline failed

Details

ci/crow/push/dns-test Pipeline failed

Details

ci/crow/pr/tanka-diff Pipeline failed

Details

ci/crow/pr/dns-test Pipeline failed

Details

ci/crow/pr/tanka-test Pipeline failed

Details

to d318e480ce

ci/crow/pr/tanka-test Pipeline was successful

Details

ci/crow/push/tanka-test Pipeline was successful

Details

ci/crow/pr/tanka-diff Pipeline was successful

Details

ci/crow/push/dns-test Pipeline failed

Details

ci/crow/pr/dns-test Pipeline failed

Details

2026-07-23 00:06:22 +00:00

Compare

ci-bot commented

2026-07-23 00:09:00 +00:00

Member

flate diff

data.envoy-gateway.yaml  (v1/ConfigMap/envoy-gateway/envoy-gateway-config)
  ± value change in multiline text (one insert, one deletion)
      apiVersion: gateway.envoyproxy.io/v1alpha1
      kind: EnvoyGateway
      extensionApis: {}
      gateway:

      [15 lines unchanged)]

                      containers:
                      - imagePullPolicy: IfNotPresent
                        name: envoy-ratelimit
          shutdownManager:
    -       image: mirror.gcr.io/envoyproxy/gateway:v1.8.2
    +       image: mirror.gcr.io/envoyproxy/gateway:v1.8.3
        type: Kubernetes


spec.template.spec.containers.envoy-gateway.image  (apps/v1/Deployment/envoy-gateway/envoy-gateway)
  ± value change
    - mirror.gcr.io/envoyproxy/gateway:v1.8.2
    + mirror.gcr.io/envoyproxy/gateway:v1.8.3

spec.template.spec.containers.envoy-gateway-certgen.image  (batch/v1/Job/envoy-gateway/envoy-gateway-gateway-helm-certgen)
  ± value change
    - mirror.gcr.io/envoyproxy/gateway:v1.8.2
    + mirror.gcr.io/envoyproxy/gateway:v1.8.3

Pipeline

## flate diff ``` data.envoy-gateway.yaml (v1/ConfigMap/envoy-gateway/envoy-gateway-config) ± value change in multiline text (one insert, one deletion) apiVersion: gateway.envoyproxy.io/v1alpha1 kind: EnvoyGateway extensionApis: {} gateway: [15 lines unchanged)] containers: - imagePullPolicy: IfNotPresent name: envoy-ratelimit shutdownManager: - image: mirror.gcr.io/envoyproxy/gateway:v1.8.2 + image: mirror.gcr.io/envoyproxy/gateway:v1.8.3 type: Kubernetes spec.template.spec.containers.envoy-gateway.image (apps/v1/Deployment/envoy-gateway/envoy-gateway) ± value change - mirror.gcr.io/envoyproxy/gateway:v1.8.2 + mirror.gcr.io/envoyproxy/gateway:v1.8.3 spec.template.spec.containers.envoy-gateway-certgen.image (batch/v1/Job/envoy-gateway/envoy-gateway-gateway-helm-certgen) ± value change - mirror.gcr.io/envoyproxy/gateway:v1.8.2 + mirror.gcr.io/envoyproxy/gateway:v1.8.3 ``` [Pipeline](https://ci.aether.earth/repos/4/pipeline/265)

renovate-bot force-pushed renovate/mirror.gcr.io-envoyproxy-gateway-helm-1.x from d318e480ce

ci/crow/pr/tanka-test Pipeline was successful

Details

ci/crow/push/tanka-test Pipeline was successful

Details

ci/crow/pr/tanka-diff Pipeline was successful

Details

ci/crow/push/dns-test Pipeline failed

Details

ci/crow/pr/dns-test Pipeline failed

Details

to 0269b14b2a

2026-09-21 19:20:50 +00:00

Compare

renovate-bot changed title from ~~chore(deps): update mirror.gcr.io/envoyproxy/gateway-helm docker tag to v1.8.3~~ to chore(deps): update mirror.gcr.io/envoyproxy/gateway-helm docker tag to v1.9.1

2026-09-21 19:21:00 +00:00

renovate-bot changed title from ~~chore(deps): update mirror.gcr.io/envoyproxy/gateway-helm docker tag to v1.9.1~~ to chore(deps): update mirror.gcr.io/envoyproxy/gateway-helm docker tag to v1.9.2

2026-09-29 00:12:09 +00:00

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin renovate/mirror.gcr.io-envoyproxy-gateway-helm-1.x:renovate/mirror.gcr.io-envoyproxy-gateway-helm-1.x

git switch renovate/mirror.gcr.io-envoyproxy-gateway-helm-1.x

Merge

Merge the changes and update on Forgejo.

git switch main

git merge --no-ff renovate/mirror.gcr.io-envoyproxy-gateway-helm-1.x

git switch renovate/mirror.gcr.io-envoyproxy-gateway-helm-1.x

git rebase main

git switch main

git merge --ff-only renovate/mirror.gcr.io-envoyproxy-gateway-helm-1.x

git switch renovate/mirror.gcr.io-envoyproxy-gateway-helm-1.x

git rebase main

git switch main

git merge --no-ff renovate/mirror.gcr.io-envoyproxy-gateway-helm-1.x

git switch main

git merge --squash renovate/mirror.gcr.io-envoyproxy-gateway-helm-1.x

git switch main

git merge --ff-only renovate/mirror.gcr.io-envoyproxy-gateway-helm-1.x

git switch main

git merge renovate/mirror.gcr.io-envoyproxy-gateway-helm-1.x

git push origin main

No reviewers

No labels

No milestone

No project

No assignees

2 participants

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

ops/homelab!110

No description provided.

Rows
Columns