Changelog
- chore(deps): bump golang.org/x/crypto from 0.55.0 to 0.56.0 #18360 @renovate
- chore(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2 #18592 @renovate
- chore(deps): security update #18779 @kumahq
- fix(api-server): always render
zonein a zone overview #18664 @Automaat - fix(charts): drain zone egress before shutdown #18569 @lukidzi
- fix(gateway): handle MeshService ref without port #18681 @Automaat
- fix(insights): don't mark data plane proxies as degraded because of ignored inbounds #18735 @Automaat
- fix(k8s): default sidecar concurrency to 2 (backport of #18696) #18699 @kumahq
- fix(k8s): drop Mesh owner from MeshZoneAddress #18750 @lukidzi
- fix(k8s): reconcile pods that match a Service only once ignoredServiceSelectorLabels are stripped #18522 @kumahq
- fix(kds): nack resources the store rejects (backport of #18077) #18126 @kumahq
- fix(kds): survive oversized Envoy admin responses (backport of #18127) #18374 @kumahq
- fix(labels): make Compute authoritative for zone, env, namespace and service-account (backport of #18410) #18556 @kumahq
- fix(meshidentity): reconcile the MeshTrust trust domain when it changes #18616 @kumahq
- fix(meshmetric): honor includeUnused sidecar flag #18479 @kumahq
- fix(meshtls): apply tls params without inbounds (backport of #18444) #18447 @kumahq
- fix(xds): pick up recreated same-name policies (backport of #18731) #18745 @kumahq
- fix(xds): skip zone egress without identity #18521 @lukidzi
- fix(xds): stop status-only writes forcing mesh-wide xDS recomputation #18523 @kumahq
- fix(xds): use resolved dataplane addr in mesh ctx #18147 @lukidzi