This is a patch release that every user should upgrade to.
Changelog
- chore(deps): bump envoy to 1.26.3 which fix CVE-2023-35945 #7266 @lukidzi
- chore(deps): use latest kumahq/kuma-gui #7096 @kumahq
- fix(MeshTrafficPermission): use serviceName instead of resource name for egress MTP (backport of #7225) #7233 @kumahq
- fix(kuma-cp): cancel OnTick when watchdog stopped (backport of #7221) #7241 @kumahq
- fix(kuma-cp): do not require certs on https api port (backport of #7102) #7111 @kumahq
- fix(kuma-cp): don't fail when 2 headless services pointing to the same service (backport of #7282) #7295 @kumahq
- fix(kuma-cp): handle external services with permissive mtls (backport of #7179) #7187 @kumahq
- fix(kuma-cp): pass context via snapshot reconciler to generateCerts (backport of #7231) #7250 @kumahq
- fix(kuma-cp): put metadata xds callbacks before sync (backport of #7230) #7244 @kumahq
- fix(kumactl): treat 404 as resource not found error (backport of #7297) #7303 @kumahq