Gateway API `monthly-2025.12` Release Notes

This is the first of the monthly releases for the Gateway API experimental channel. These releases will be published monthly and include the latest features and fixes from Gateway API's main branch.

Using this Release

To install the CRDs for this release, use install monthly-2025.12-install.yaml:

kubectl apply --server-side=true -f https://github.com/kubernetes-sigs/gateway-api/releases/download/monthly-2025.12/monthly-2025.12-install.yaml

To build using this release in Go, include this release in your go.mod:
```
require sigs.k8s.io/gateway-api monthly-2025.12
```
and run go mod tidy. You'll find that monthly-2025.12 gets replaced by a Go pseudoversion; this is expected.

Cautions

N/A

Changes

Gateway resource

Add a ResolvedRefs condition to Gateway status to indicate that the object references for the Gateway that are not part of a specific Listener configuration were able to be resolved (#4195).

HTTPRoute resource

Add support for HTTP 303 (See Other), 307 (Temporary Redirect), and 308 (Permanent Redirect) status codes in HTTPRoute redirect filters (#3823).

BackendTLSPolicy CRD

Properly make status a subresource (#4242).
Core conformance for BackendTLSPolicy allows only a single targetRef for now, while we sort out how to manage some edge cases in status (#4296)

Full Changelog: v1.4.0...monthly-2025.12

What's Changed

v1.4.0-rc.2 by @shaneutt in #4130
build(deps): bump golang.org/x/net from 0.43.0 to 0.44.0 by @dependabot[bot] in #4108
build(deps): bump github.com/stretchr/testify from 1.11.0 to 1.11.1 by @dependabot[bot] in #4050
Fix "Red Hat" spelling in implementation docs. by @coderbydesign in #3989
Upload gke-gateway conformance report for v1.3.0 by @syw14 in #4122
Adds a clean-generated target to remove stale generated files by @carmal891 in #4082
Update GEP process docs with more details by @youngnick in #4109
chore: merge in updates from release v1.4.0 by @shaneutt in #4146
docs: add rikatz to OWNERS_ALIASES by @shaneutt in #4147
docs: add provisional GEP for extending TLS Validation in BackendTLSPolicy by @snorwin in #4153
Update implementations.md fix agentgateway broken link by @linsun in #4157
Update CRD generator to handle errors encountered during generation. by @joshlreese in #4158
Fix inconsistencies on TLSRoute documentation by @rikatz in #4139
Add 307 / 308 Redirect Status Code Support by @davidwin93 in #3823
build(deps): bump sigs.k8s.io/controller-runtime from 0.22.1 to 0.22.3 by @dependabot[bot] in #4169
Improve apiref with experimental and ignored CRD description by @rikatz in #4132
cleanup: fix mismatch of GEP status between index.md and metadata.yaml by @snorwin in #4176
Docs: Adds CRD Install Workaround by @danehans in #4174
Fix doc building and unreadable mermaid by @Stevenjin8 in #4179
Fix CRD markers by @KillianGolds in #4178
Use correct make rules for building docs in devguide by @Stevenjin8 in #4180
Use go tools and reduce main go.mod by @rikatz in #4181
build(deps): bump pyyaml from 6.0.2 to 6.0.3 in /hack/mkdocs/image by @dependabot[bot] in #4135
Group mkdocs bumps by @rikatz in #4159
build(deps): bump google.golang.org/grpc from 1.75.1 to 1.76.0 by @dependabot[bot] in #4167
build(deps): bump golang.org/x/net from 0.44.0 to 0.46.0 by @dependabot[bot] in #4168
build(deps): bump google.golang.org/protobuf from 1.36.8 to 1.36.10 by @dependabot[bot] in #4142
build(deps): bump golang.org/x/tools from 0.36.0 to 0.38.0 by @dependabot[bot] in #4166
build(deps): bump the mkdocs-deps group in /hack/mkdocs/image with 5 updates by @dependabot[bot] in #4189
Docs: Update GEP-1294 to document ServiceImport as backendRef (#4185) by @kahirokunn in #4186
gep: refine ClientCertificateRef description for backend TLS by @snorwin in #4123
cleanup: Add missing BackendTLSPolicy GA reference and switch SAN validation feature to standard by @snorwin in #4191
Add NGF conformance profiles for 2.2.0 release by @ciarams87 in #4197
Rename GAMMA Leads to Mesh Leads in contributor ladder for clarity by @LiorLieberman in #4200
Add kgw 1.4 conformance report by @timflannagan in #4202
Add a docs team by @rikatz in #4203
cleanup(docs): update docs to reflect BackendTLSPolicy GA by @snorwin in #4204
Implement multi version for apiref by @rikatz in #4190
build(deps): bump mkdocs-macros-plugin from 1.4.0 to 1.4.1 in /hack/mkdocs/image in the mkdocs-deps group by @dependabot[bot] in #4201
features: Correct BackendTLSPolicyFeature godoc by @timflannagan in #4210
conformance: Add Airlock Microgateway 4.8.0-alpha1 report for v1.4.0 by @root30 in #4208
Fix that allows to --all-features and --exempt-features flags work together by @bexxmodd in #4149
Fix the API ref links by @rikatz in #4215
build(deps): bump mkdocs-material from 9.6.22 to 9.6.23 in /hack/mkdocs/image in the mkdocs-deps group by @dependabot[bot] in #4218
Increase timeout in ExpectMirroredRequest by @kl52752 in #4206
Submit conformance v1.4 API report for GKE Gateway by @kl52752 in #4214
fix: add BackendTLSPolicy features to GATEWAY-HTTP profile by @snorwin in #4199
Update v1.4 conformance report for Envoy Gateway by @zirain in #4216
Fix gke-gateway conformance report 1.3 filename by @syw14 in #4221
conformance: add Agentgateway and Istio report for v1.4.0 by @howardjohn in #4209
GEP-713 enhancements by @guicassolato in #3609
Add conformance report for Traefik Proxy by @kevinpollet in #4207
Update Avi Kubernetes Operator (AKO) versions in the list of Gateway API implementations by @pkoshtavmware in #4226
Conformance: Adds Port Response Header to Echo Server by @danehans in #4230
docs: fix broken links by @zirain in #4217
Fix link to 1.28.0 default report in README by @bexxmodd in #4232
remove redundant one by @kl52752 in #4228
Update Gateway API version badge by @nmengin in #4224
docs: update godoc for BackendRef by @snorwin in #4155
build(deps): bump golang.org/x/sync from 0.17.0 to 0.18.0 by @dependabot[bot] in #4236
Conformance: Add Cilium conformance report for v1.4 by @xtineskim in #4233
build(deps): update markdown requirement from ~=3.9 to ~=3.10 in /hack/mkdocs/image in the mkdocs-deps group by @dependabot[bot] in #4237
build(deps): bump the mkdocs-deps group in /hack/mkdocs/image with 4 updates by @dependabot[bot] in #4243
fix: use correct API version in BackendTLSPolicy conformance tests by @snorwin in #4241
fix: missing subresources for v1alpha3.BackendTLSPolicy by @zirain in #4242
update envoy gateway conformance report by @zirain in #4247
api: experimental ResolvedRefs condition for Gateway by @snorwin in #4195
chore: fix filename and broken links by @zirain in #4260
implementations: update badges by @howardjohn in #4259
implementations: update EnvoyGateway badges by @zirain in #4262
Ignore generated implementations docs by @tisonkun in #4263
Render toc always on left by @rikatz in #4276
Add API details GEP-3779 - E/W Authorization by @LiorLieberman in #3891
Pattern validation for HTTP header values according to RFC 7230 by @snorwin in #3774
Separate conformance tests dependencies by @rikatz in #4188
build(deps): bump pymdown-extensions from 10.17.1 to 10.17.2 in /hack/mkdocs/image in the mkdocs-deps group by @dependabot[bot] in #4287
Move tests out of pkg and to its own modules by @rikatz in #4293
Have an easy way to create monthly release YAML by @kflynn in #4273
Make single TargetRef Core for BackendTLSPolicy by @youngnick in #4296

New Contributors

@coderbydesign made their first contribution in #3989
@carmal891 made their first contribution in #4082
@joshlreese made their first contribution in #4158
@davidwin93 made their first contribution in #3823
@Stevenjin8 made their first contribution in #4179
@KillianGolds made their first contribution in #4178
@kahirokunn made their first contribution in #4186
@nmengin made their first contribution in #4224
@tisonkun made their first contribution in #4263