Below is the auto-generated changelog, which includes all PRs that went into the release. For a shorter version that highlights only important changes, see CHANGELOG.md.
What's Changed
🚀 Features
- Generate NGF Policy Methods using Makefile by @Morgan-P-04 in #5729
- Add optional ServiceMonitor to control plane and data plane by @john-david3 in #5776
- Add access log destination configuration to NginxProxy by @NutsaB in #5765
- Add Helm Chart Unit Tests by @Morgan-P-04 in #5920
- Add support for Active and Passive Health Checks by @john-david3 in #6000
- Expose NGINX data plane PodDisruptionBudget in the Helm chart by @owaisaamir in #5964
- Support BackendTLSPolicy for InferencePool EndpointPicker by @NutsaB in #5980
- Add OSS support for cookie-based session persistence by @karensantana in #6028
- Adds Access Policy feature by @salonichf5 in #6063
🐛 Bug Fixes
- fix: sort resolved endpoints for deterministic upstream configuration (#5799) by @devaniketh in #5805
- Increment default zone size settings to 2m by @salonichf5 in #5859
- Fixes an issues where mounted secrets were read only leading to agent failures when trying to manage them by @salonichf5 in #5877
- fix: load telemetry and WAF modules in bootstrap config (#5818) by @devaniketh in #5858
- Fix WAF security log bundle not shared across policies on different Gateways by @sjberman in #5895
- Restore support for ExternalIPs by @salonichf5 in #5896
- Create CertBundles for Opaque secrets with ca.crt key by @shaun-nx in #5913
- Fix Kubernetes watch reconnects caused by client-wide REST timeout by @akshar27 in #5814
- Verifies pod image version before pushing NGINX configuration updates to ensure smooth upgrades by @salonichf5 in #5927
- Fix control plane panic on a BackendTLSPolicy with an empty caCertificateRefs list by @somaz94 in #5953
- Add flag to watch secrets based on specific labels by @salonichf5 in #5946
- Refactor duplicated SectionName expansion logic by @karensantana in #5914
- Improve upgrade tests latencies by @salonichf5 in #5965
- Fix EndpointSlice deletion not triggering graph rebuild by @dhurley in #5968
- Ensure
loadBalancerClassis not set unconditionally by @shaun-nx in #5971 - Add URI path explicitly to the request being sent to EPP by @salonichf5 in #5995
- Set correct Connection headers when using default KeepAlive by @shaun-nx in #6010
- Correctly report reachable addresses to Gateway's status by @shaun-nx in #6019
- Clear status of resources not longer handled by NGF by @karensantana in #5978
- Fix flaky health check functional tests by @john-david3 in #6035
- Revert helm/chart-testing to v3.14.0 by @john-david3 in #6052
- Fix data plane upgrade failing when Service has a loadBalancerClass by @ciarams87 in #6053
- Revert chart lint update again by @ciarams87 in #6057
- Fix CVEs in NGINX and operator images by @ciarams87 in #6064
- Scrape data plane metrics through a separate internal Service by @ciarams87 in #6054
- Forward EPP response headers to upstreams by @sjberman in #6065
- Fix oss and UBI packages builds from internal repo by @ciarams87 in #6067
📦 Helm Chart
- Update docs for release 2.6.8 by @shaun-nx in #5827
- Update docs for release 2.7.0 by @sjberman in #5837
- fix: render NGINX service patches in helm chart by @devaniketh in #5857
- Update docs for release 2.7.2 by @sjberman in #5925
🧪 Tests
- Update Helm release opentelemetry-collector to v0.172.0 by @renovate[bot] in #5802
- Longevity Test Results for NGF version 2.7.0 by @github-actions[bot] in #5806
- NFR Test Results for NGF version 2.7.0 by @github-actions[bot] in #5797
- Fix WAF policy timing in test by @sjberman in #5815
- Update docker/dockerfile Docker tag to v1.27 by @renovate[bot] in #5842
- refactor: remove support for secret type nginx.org/htpasswd (#4870) by @devaniketh in #5808
- Update curlimages/curl Docker tag to v8.22.0 by @renovate[bot] in #5841
- Update Helm release opentelemetry-collector to v0.172.1 by @renovate[bot] in #5870
- Adding logs for test runs by @craigell in #5831
- Update Helm release opentelemetry-collector to v0.173.1 by @renovate[bot] in #5911
- Update quay.io/keycloak/keycloak Docker tag to v26.8 by @renovate[bot] in #6007
- NFR Test Results for NGF version edge by @github-actions[bot] in #6011
- Update Helm release opentelemetry-collector to v0.175.0 by @renovate[bot] in #6025
- Move release builds to internal pipeline by @ciarams87 in #5972
📝 Documentation
- Add provisional proposal for body-based routing by @sjberman in #5779
- Update NGINX package versions by @sjberman in #5829
- Update NGINX OSS to 1.31.5 by @sjberman in #5840
- Add provisional access control proposal by @sjberman in #5849
- Update NGINX Agent to v3.12.0 by @renovate[bot] in #5892
- Update Gateway API version to 1.6.2 by @sjberman in #5861
- Update Openshift compatibility table by @sjberman in #5901
- Add details for access control proposal by @sjberman in #5897
- Add details for body based routing proposal by @sjberman in #5847
- Replace counterfeiter mock generator with moq by @john-david3 in #6027
- Update NGINX Agent to v3.12.1 by @renovate[bot] in #6055
- Add example files for Access Policy feature by @salonichf5 in #6066
🧹 Tech debt
- Remove the BackendTLSPolicy mutual exclusivity check the Gateway API CRD already enforces by @somaz94 in #5951
🔨 Maintenance
- Remove Dataplane Secret for NIM by @shaun-nx in #5813
- Add additional validation to OIDC auth fields by @shaun-nx in #5819
- Refactor logger injection according to the guidelines by @karensantana in #5777
- Make logging consistent by @john-david3 in #5826
- Flush logs on panics by @karensantana in #5810
- Refactor change processor by @karensantana in #5846
- Support building release artifacts before the release is tagged by @ciarams87 in #5945
- Enforce logging guidelines using logcheck linting tool by @Morgan-P-04 in #5993
- Increase renovates minimumReleaseAge to 3 days by @john-david3 in #6001
⬆️ Dependencies
- Update module github.com/prometheus/common to v0.71.0 by @renovate[bot] in #5804
- Update ghcr.io/llm-d/llm-d-inference-sim Docker tag to v0.11.2 by @renovate[bot] in #5800
- Update GitHub Actions by @renovate[bot] in #5798
- Lock file maintenance by @renovate[bot] in #5803
- Update aws-sdk-go-v2 monorepo by @renovate[bot] in #5809
- Update GitHub Actions by @renovate[bot] in #5822
- Update github/codeql-action action to v4.37.9 by @renovate[bot] in #5801
- Update module github.com/nginx/nginx-gateway-fabric/v2 to v2.7.0 by @renovate[bot] in #5843
- Update vitest monorepo to v5 by @renovate[bot] in #5854
- Update aws-sdk-go-v2 monorepo by @renovate[bot] in #5865
- Update module github.com/dlclark/regexp2/v2 to v2.8.0 by @renovate[bot] in #5868
- Lock file maintenance by @renovate[bot] in #5871
- Update module sigs.k8s.io/controller-tools to v0.22.0 by @renovate[bot] in #5844
- Update dependency goreleaser/goreleaser to v2.18.1 by @renovate[bot] in #5867
- Update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.112.0 by @renovate[bot] in #5881
- Update module github.com/onsi/ginkgo/v2 to v2.32.2 by @renovate[bot] in #5880
- Update ghcr.io/nginx/dependencies/nginx-ubi:ubi10 Docker digest to 2fa679d by @renovate[bot] in #5879
- Update module sigs.k8s.io/controller-runtime to v0.25.0 by @renovate[bot] in #5853
- Update module golang.org/x/text to v0.42.0 by @renovate[bot] in #5882
- Update module sigs.k8s.io/controller-runtime to v0.25.1 by @renovate[bot] in #5908
- Update github/codeql-action action to v4.38.0 by @renovate[bot] in #5910
- Lock file maintenance by @renovate[bot] in #5912
- Update ghcr.io/nginx/dependencies/nginx-ubi:ubi10 Docker digest to efd88ba by @renovate[bot] in #5902
- Update aws-sdk-go-v2 monorepo by @renovate[bot] in #5905
- Update GitHub Actions by @renovate[bot] in #5909
- Update module github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring to v0.94.0 by @renovate[bot] in #5907
- Update module github.com/maxbrunsfeld/counterfeiter/v6 to v6.13.0 by @renovate[bot] in #5906
- Update aws-sdk-go-v2 monorepo by @renovate[bot] in #5918
- Update GitHub Actions by @renovate[bot] in #5919
- Update NGINX OSS version to 1.31.6 by @salonichf5 in #5921
- Update ghcr.io/nginx/dependencies/nginx-ubi:ubi10 Docker digest to ac24324 by @renovate[bot] in #5928
- Update module github.com/nginx/nginx-gateway-fabric/v2 to v2.7.1 by @renovate[bot] in #5929
- Update pre-commit hook rbubley/mirrors-prettier to v3.9.7 by @renovate[bot] in #5931
- Update GitHub Actions by @renovate[bot] in #5930
- Update GitHub Actions by @renovate[bot] in #5942
- Update module github.com/nginx/nginx-gateway-fabric/v2 to v2.7.2 by @renovate[bot] in #5943
- Update Gateway API Inference Extension to v1.6.2 by @renovate[bot] in #5947
- Update reviewdog/action-actionlint action to v1.75.3 by @renovate[bot] in #5948
- Update Testing dependencies by @renovate[bot] in #5950
- Update GitHub Actions by @renovate[bot] in #5955
- Update pre-commit hook DavidAnson/markdownlint-cli2 to v0.23.3 by @renovate[bot] in #5957
- Update dependency ubuntu to v26 by @renovate[bot] in #5956
- Update github/codeql-action action to v4.38.1 by @renovate[bot] in #5958
- Update pre-commit hook rbubley/mirrors-prettier to v3.9.8 by @renovate[bot] in #5954
- Update npm dependencies by @renovate[bot] in #5959
- Lock file maintenance by @renovate[bot] in #5960
- Update dependency ubuntu to v26 by @renovate[bot] in #5961
- Update reviewdog/action-actionlint action to v1.76.1 by @renovate[bot] in #5967
- Update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.113.2 by @renovate[bot] in #5966
- Update pre-commit hook rbubley/mirrors-prettier to v3.9.9 by @renovate[bot] in #5969
- Update reviewdog/action-actionlint action to v1.77.0 by @renovate[bot] in #5970
- Update kubernetes monorepo to v0.37.1 by @renovate[bot] in #5974
- Update GitHub Actions by @renovate[bot] in #5973
- Update module github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring to v0.94.1 by @renovate[bot] in #5976
- Update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.113.3 by @renovate[bot] in #5975
- Update module github.com/onsi/gomega to v1.44.0 by @renovate[bot] in #5985
- Update aws-sdk-go-v2 monorepo by @renovate[bot] in #5982
- Update dependency golangci/golangci-lint to v2.14.0 by @renovate[bot] in #5983
- Update dependency golangci/golangci-lint to v2.14.0 by @renovate[bot] in #5984
- Update module github.com/llm-d/llm-d-router to v0.11.0 by @renovate[bot] in #5988
- Update module google.golang.org/grpc to v1.84.0 by @renovate[bot] in #5949
- Update github/codeql-action action to v4.38.2 by @renovate[bot] in #5990
- Lock file maintenance by @renovate[bot] in #5992
- Update npm dependencies by @renovate[bot] in #5991
- Update dependency redhat-openshift-ecosystem/openshift-preflight to v1.21.1 by @renovate[bot] in #5996
- Update module github.com/prometheus/common to v0.72.0 by @renovate[bot] in #5997
- Update ghcr.io/nginx/dependencies/nginx-ubi:ubi10 Docker digest to c79e96f by @renovate[bot] in #5999
- Update dependency gardener/gardener to v1.152.0 by @renovate[bot] in #6005
- Update reviewdog/action-actionlint action to v1.78.0 by @renovate[bot] in #6008
- Update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.114.0 by @renovate[bot] in #6006
- Update module github.com/dlclark/regexp2/v2 to v2.8.1 by @renovate[bot] in #6004
- Update GitHub Actions by @renovate[bot] in #6014
- Update ghcr.io/nginx/dependencies/nginx-ubi:ubi10 Docker digest to 8f11503 by @renovate[bot] in #6017
- Update npm dependencies to ^5.0.3 by @renovate[bot] in #6024
- Update module sigs.k8s.io/controller-runtime to v0.25.2 by @renovate[bot] in #6015
- Update ghcr.io/llm-d/llm-d-inference-sim Docker tag to v0.11.4 by @renovate[bot] in #6022
- Lock file maintenance by @renovate[bot] in #6026
- Update anchore/sbom-action action to v0.24.3 by @renovate[bot] in #6031
- Update module github.com/dlclark/regexp2/v2 to v2.8.2 by @renovate[bot] in #6032
- Update dependency kubernetes-sigs/cloud-provider-kind to v0.12.0 by @renovate[bot] in #6033
- Update quay.io/helmpack/chart-testing Docker tag to v3.15.0 by @renovate[bot] in #6034
- Update rust Docker tag to v1.99 by @renovate[bot] in #6016
- Update reviewdog/action-actionlint action to v1.79.1 by @renovate[bot] in #6038
- Update dependency helm/chart-testing to v3.15.0 by @renovate[bot] in #6043
- Update module github.com/matryer/moq to v0.8.0 by @renovate[bot] in #6044
- Update Gateway API to v1.6.3 by @renovate[bot] in #6042
- Update module github.com/dlclark/regexp2/v2 to v2.8.3 by @renovate[bot] in #6049
- Update ghcr.io/nginx/dependencies/nginx-ubi:ubi10 Docker digest to 7811cf7 by @renovate[bot] in #6048
- Update ghcr.io/llm-d/llm-d-inference-sim Docker tag to v0.12.0 by @renovate[bot] in #6050
- Update GitHub Actions by @renovate[bot] in #6046
- Update aws-sdk-go-v2 monorepo by @renovate[bot] in #6045
Other Changes
- Operator Bundle v1.4.8 by @nginx-bot in #5832
- Operator Bundle v1.5.0 by @nginx-bot in #5838
- Bootstrap config_set.json to prevent waf-config-mgr error logs on startup by @divyanshu1810 in #5863
- Operator Bundle v1.5.1 by @nginx-bot in #5924
- Operator Bundle v1.5.2 by @nginx-bot in #5939
New Contributors
- @karensantana made their first contribution in #5777
- @devaniketh made their first contribution in #5808
- @NutsaB made their first contribution in #5765
- @divyanshu1810 made their first contribution in #5863
- @akshar27 made their first contribution in #5814
- @owaisaamir made their first contribution in #5964
Full Changelog: v2.7.2...v2.8.0