Changelog
- chore(deps): bump coredns to v1.15.0 #19298 @lukidzi
- chore(deps): bump envoy from 1.36.10 to 1.37.11 #19073 #19141 #19266 #19280 @lukidzi
- chore(deps): bump github.com/moby/sys/user from 0.3.0 to 0.4.1 #19030 @renovate
- chore(deps): bump golang.org/x/net from 0.58.0 to 0.62.0 #19031 #19286 @renovate
- chore(deps): move distroless base images to debian13 (backport of #19224) #19237 @kumahq
- chore(deps): move kuma-init to registry.k8s.io distroless-iptables v0.11.2 (backport of #19264) #19272 @kumahq
- chore(deps): security update #18777 @kumahq
- chore(deps): use latest kumahq/kuma-gui #19297 @kumahq
- fix(api-server): check origin label on delete (backport of #16826) #18995 @bartsmykla
- fix(api-server): make kuma.io/origin immutable (backport of #18412) #18993 @bartsmykla
- fix(k8s): drop reserved pod labels from Dataplanes (backport of #18648) #18998 @bartsmykla
- fix(k8s): read system-namespace-only resources from the system namespace only (backport of #19051) #19131 @kumahq
- fix(kds): only accept subscribed resource types (backport of #19062) #19244 @kumahq
- fix(kuma-cp): don't follow HTTP redirects (backport of #19248) #19271 @kumahq
- fix(store): keep labels on the resource after a postgres update (backport of #18929) #18935 @kumahq
- fix(xds): do not mutate the cached Dataplane (backport of #18008) #18770 @kumahq
- fix(xds): speed up Envoy stats tag extraction (backport of #18910) #18917 @kumahq