What's Changed chore(deps): bump golang.org/x/net to 0.62.0 by @arichardet in #15755 chore: bump dev image to v53. by @toidiu in #15756 chore: upgrade to network-validator 0.1.10 by @anthoturc in #15757 Full Changelog: edge-26.10.2...edge-26.11.1
What's Changed chore(deps): bump golang.org/x/net to 0.62.0 by @arichardet in #15755 chore: bump dev image to v53. by @toidiu in #15756 chore: upgrade to network-validator 0.1.10 by @anthoturc in #15757 Full Changelog: edge-26.10.2...edge-26.10.3
What's Changed policy-controller: raise gRPC h2 connection window to avoid GOAWAYs by @pujitha24 in #15668 proxy: v2.371.0 by @l5d-bot in #15703 docs: update contribution guideilnes to include LLM code policy by @mattbailey in #15709 fix(tls): ensure client provides tls for tap api server by @raykroeker in #15697 chore: fix rate limit policy test by @raykroeker in #15724 chore(build): update golan…
Overall status: RECOMMENDED Cautions N/A Changes This release corrects a potential panic in the destination controller when deleting ExternalWorkloads (fixing issue #15551 – thanks, Yao Sun!) and correctly works out which API version to use for TLSRoute by examining the cluster. What's Changed fix: guard nil ExternalWorkload in opaque protocol (#15551) by @qoire in #15575 fix(policy-controller): n…
Overall status: RECOMMENDED Cautions N/A Changes This release includes the requested path when structured access logs are enabled (fixing issue #14193). What's Changed build(deps): bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 by @dependabot[bot] in #15569 proxy: v2.366.0 by @l5d-bot in #15585 build(deps): bump github.com/sirupsen/logrus from 1.9.4 to 1.10.0 by @dependabot[bot] in #15582 build(dep…
Overall status: RECOMMENDED Cautions N/A Changes This release removes a duplicate Job informer to avoid a pointless Prometheus error (fixing issue #12710 – thanks, Jojin!) and exits the policy-controller if its lease watch dies, so that Kubernetes can correctly restart it (fixing issue #15506 – thanks, Pujitha Paladugu!). What's Changed build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.…
Overall status: RECOMMENDED Cautions N/A Changes This release reenables the gosec G402 rule that checks the minimum TLS version now that golangci-lint handles it correctly (fixing issue #9700 – thanks, Sudhir Jaiswal!) What's Changed build(deps): bump docker/login-action from 4.5.0 to 4.5.1 by @dependabot[bot] in #15533 build(deps): bump cc from 1.3.0 to 1.4.0 by @dependabot[bot] in #15531 build(d…
What's Changed chore(deps): bump rustls to 0.23.45 by @anthoturc in #15667 docs: fix stale chart and workflow paths by @ZainnQureshii in #15682 build(deps-dev): bump jest from 30.4.2 to 30.5.2 in /web/app by @dependabot[bot] in #15651 build(deps-dev): bump css-loader from 7.1.4 to 7.1.5 in /web/app by @dependabot[bot] in #15653 build(deps): bump helm.sh/helm/v3 from 3.21.4 to 3.22.0 by @dependabot…
What's Changed proxy: v2.369.0 by @l5d-bot in #15666 Full Changelog: edge-26.9.2...edge-26.9.3
What's Changed build(deps): bump query-string from 9.5.0 to 9.5.1 in /web/app by @dependabot[bot] in #15632 build(deps-dev): bump webpack-cli from 7.2.2 to 7.2.3 in /web/app by @dependabot[bot] in #15633 build(deps-dev): bump webpack from 5.110.0 to 5.110.3 in /web/app by @dependabot[bot] in #15634 build(deps-dev): bump jest-environment-jsdom from 30.4.1 to 30.5.1 in /web/app by @dependabot[bot] i…
What's Changed proxy: v2.367.0 by @l5d-bot in #15612 fix(multicluster): disallow exec auth provider in remote credentials by @adleong in #15625 fix(destination): return retry-able error on ip conflict by @raykroeker in #15627 proxy: v2.368.0 by @l5d-bot in #15629 build(deps): bump github.com/nsf/termbox-go from 1.1.1 to 1.1.2 by @dependabot[bot] in #15601 build(deps): bump google.golang.org/grpc f…
Overall status: RECOMMENDED Cautions N/A Changes This release bumps dependencies but has no functional changes from edge-26.7.1. What's Changed build(deps): bump linkerd-extension-init to v0.1.12 by @alpeb in #15497 proxy: v2.363.0 by @l5d-bot in #15502 build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #15500 build(deps): bump github.com/go-openapi/spec from 0.22.6 to 0…
Overall status: NOT RECOMMENDED, use edge-26.6.3 instead Cautions This release limits ExternalWorkloads to only endpoints within their namespace only. Changes This release limits ExternalWorkloads to only use endpoints within their namespace only. It also adds support for annotations for the new load balancing features arriving in edge-26.6.3. What's Changed fix(policy): Remove Appropriate AuthN P…
Overall status: RECOMMENDED Cautions N/A Changes This release uses the trust domain rather than the cluster domain for the expected tracing collector identity, updates the CNI plugin to be smarter about finding IPtables binaries, and correctly checks for Gateway API when installing with Helm, and prevents routing to undefined ports on a Service even when a ServiceProfile is present. It also update…
Overall status: RECOMMENDED Cautions N/A Changes This edge release closes out functionality for Linkerd 2.20 by fully-enabling rate limit aware load balancing! What's Changed proxy: v2.358.0 by @l5d-bot in #15389 build(deps): bump zeroize from 1.8.2 to 1.9.0 by @dependabot[bot] in #15384 build(deps): bump cc from 1.2.63 to 1.2.64 by @dependabot[bot] in #15385 build(deps): bump openssl-sys from 0.9…
Overall status: RECOMMENDED Cautions N/A Changes This release fixes an off-by-one error that would incorrectly reject an HTTP body that was exactly the size of the configured limit (e.g., setting the cap to 1MiB would actually allow one byte less than 1MiB – thanks, Immanuel Tikhonov!). What's Changed build(deps): bump github.com/prometheus/common from 0.67.5 to 0.68.0 by @dependabot[bot] in #1533…
Overall status: RECOMMENDED Cautions N/A Changes This release bumps dependencies but has no functional changes from edge-26.5.4. What's Changed build(deps): bump mio from 1.2.0 to 1.2.1 by @dependabot[bot] in #15330 build(deps): bump socket2 from 0.6.3 to 0.6.4 by @dependabot[bot] in #15331 chore(deps): upgrade proxy-init to v2.4.9 & cni-plugin to v1.6.8 by @arichardet in #15332 Full Changelog: ed…
Overall status: RECOMMENDED Cautions N/A Changes This release fixes labeling for warning messages regarding EgressNetworks, correctly using the egress_network label rather than service. It also makes sure that debug messages use named labels rather than bare values. What's Changed build(deps-dev): bump webpack-dev-server from 5.2.3 to 5.2.4 in /web/app by @dependabot[bot] in #15282 build(deps): bu…
Overall status: RECOMMENDED Cautions N/A Changes This release bumps dependencies but has no functional changes from edge-26.5.2. What's Changed build(deps): bump openssl from 0.10.79 to 0.10.80 by @dependabot[bot] in #15285 build(deps): bump tower-http from 0.6.10 to 0.6.11 by @dependabot[bot] in #15290 proxy: v2.353.0 by @l5d-bot in #15296 Full Changelog: edge-26.5.2...edge-26.5.3
Overall status: RECOMMENDED Cautions N/A Changes This release promotes native sidecars to GA and makes them the default. To disable native sidecars, set the config.linkerd.io/proxy-enable-native-sidecar annotation to false. It also fixes a potential race in updating the status of remote cluster gateways (fixing #15096 - thanks, Asish Kumar!), prevents Servers from affecting workloads in other name…
Signed-off-by: Alex Leong alex@buoyant.io
Overall status: RECOMMENDED Cautions The minimum supported Kubernetes version for this and future releases is 1.31. Changes This release significantly reduces the amount of memory used by the destination controller on busy systems. It also allows setting the node port for the health check of a Linkerd multicluster gateway (fixing issue #15172 – thanks, Aldo Fuster Turpin!), cleans up some CI permi…
Overall status: RECOMMENDED Cautions N/A Changes This release improves support for newer Gateway API versions by allowing the policy validator to correctly function when new Gateway API resources are created with stanzas it doesn't understand, fixing issue #14986. It also improves the logic around using annotations to name metrics (fixing issue #15175 – thanks, Simon Dickhoven!), and correctly sup…