Changelog
- chore(deps): bump coredns to v1.15.0 #19299 @lukidzi
- chore(deps): bump envoy from 1.36.10 to 1.37.11 #19074 #19142 #19267 #19281 @lukidzi
- chore(deps): bump golang.org/x/net from 0.58.0 to 0.62.0 #19033 #19287 @renovate
- chore(deps): move distroless base images to debian13 (backport of #19224) #19239 @kumahq
- chore(deps): move kuma-init to registry.k8s.io distroless-iptables v0.11.2 (backport of #19264) #19273 @kumahq
- chore(deps): security update #18778 @kumahq
- chore(deps): use latest kumahq/kuma-gui #19295 @kumahq
- feat(kds): name the resource type and size of the largest response when a KDS stream fails with ResourceExhausted #18838 @kumahq
- fix(api-server): check origin label on delete (backport of #16826) #18994 @bartsmykla
- fix(api-server): make kuma.io/origin immutable (backport of #18412) #18992 @bartsmykla
- fix(insights): don't mark data plane proxies as degraded because of ignored inbounds #18736 @Automaat
- fix(k8s): drop reserved pod labels from Dataplanes (backport of #18648) #18997 @bartsmykla
- fix(k8s): read system-namespace-only resources from the system namespace only (backport of #19051) #19130 @kumahq
- fix(kds): only accept subscribed resource types (backport of #19062) #19243 @kumahq
- fix(kuma-cp): don't follow HTTP redirects (backport of #19248) #19269 @kumahq
- fix(meshpassthrough): correct typo on 2.13 #18881 @lukidzi
- fix(meshtrafficpermission): keep allow in shadow (backport of #19173) #19233 @kumahq
- fix(store): keep labels on the resource after a postgres update (backport of #18929) #18938 @kumahq
- fix(xds): do not mutate the cached Dataplane (backport of #18008) #18771 @kumahq
- fix(xds): pick up recreated same-name policies (backport of #18731) #18744 @kumahq
- fix(xds): speed up Envoy stats tag extraction (backport of #18910) #18912 @kumahq