New Features

• xds: add support for RBAC metadata invert matchers (#5345)

Bug Fixes

• client: fix a context leaked if a connection to an address is lost before it is fully established (#5337)
  • Special Thanks: @carzil
• client: fix potential panic during RPC retries (#5323)
• xds/client: fix a potential concurrent map read/write in load reporting (#5331)
• client/SubConn: do not recreate addrConn if UpdateAddresses is called with the same addresses (#5373)
• xds/eds: resources containing duplicate localities with the same priority will be rejected (#5303)
• server: return Canceled or DeadlineExceeded status code when writing headers to a stream that is already closed (#5292)
  • Special Thanks: @idiamond-stripe

Behavior Changes

• xds/priority: start the init timer when a child switches to Connecting from non-failure states (#5334)
• server: respond with HTTP Status 405 and gRPC status INTERNAL if the method sent to server is not POST (#5364)

Documentation

• server: clarify documentation around setting and sending headers and ServerStream errors (#5302)