1.8.7 (December 23, 2025)
SECURITY:
- go: upgrade go version to 1.25.5 [GH-5051]
IMPROVEMENTS:
- api-gateway: Add support for file-based Envoy access log sinks via proxy-defaults. Previously, only stdout logging was supported.
connect-inject: When proxy-defaults enables file-based access logs, automatically inject an emptyDir volume and volumeMount into the consul-dataplane container. [GH-5008] - api-gateway: Added backward compatibility support for file-based Envoy access log sinks via proxy-defaults. [GH-5026]
- client: Add optional startup staggering for client ACL init to spread /v1/acl/login calls and reduce login storms on large clusters. Controlled via client.aclInit.startupStagger.* values (disabled by default). [GH-5021]