v1.6.4

Release Announcement

Check out the v1.6.4 release announcement to learn more about the release.

v1.5.9

Release Announcement

Check out the v1.5.9 release notes to learn more about the release.

v1.7.0

Release Announcement

Check out the v1.7.0 release announcement to learn more about the release.

What's Changed

• chore(examples): fix extensionserver build by @maxbrunet in #7398
• chore: add missing endpoints in the crl test by @zhaohuabing in #7402
• chore(make): exit on failure by @maxbrunet in #7387
• fix: port typo by @woodgear in #7397
• build(deps): bump busybox from 2f590fc to e3652a0 in /tools/docker/envoy-gateway by @dependabot[bot] in #7409
• fix: validate EnvoyGateway configuration before reload by @zirain in #7412
• build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #7410
• fix: missing onInvalidMessage for ClientTrafficPolicy by @Inode1 in #7417
• chore: add missing filters in the filter order configuration by @zhaohuabing in #7404
• test: tcp security policy e2e by @davem-git in #7226
• Docs: tcp security policy by @davem-git in #7247
• feat: support both local and global ratelimit simultaneously by @kkk777-7 in #7334
• feat: support separated path match in ratelimit path by @kkk777-7 in #7413
• fix: handle optional next update for CRL by @rudrakhp in #7422
• fix: missing jwt provider when jwt is configured on multiple listeners sharing the same port by @zhaohuabing in #7337
• fix: only insert proxy service once it exists by @jukie in #7424
• fix error when updating invalid gateway status by @zirain in #7415
• fix: avoid calling the issuer's well-known endpoint for every routes by @zhaohuabing in #7394
• fix: memory leak by @gonzaloserrano in #7429
• perf: move snapshot update above status update in xds layer by @arkodg in #7423
• chore: cleanup logging when inserting proxy service cluster by @jukie in #7431
• upgrade gofumpt by @fabian4 in #7420
• feat(translator): relax backend restrictions for localhost when running standalone with Host infrastructure by @nacx in #7427
• chore: improve api docs for http10.useDefaultHost by @zhaohuabing in #7435
• ci: disable lint.dependabot by @zirain in #7445
• chore: bump github.com/containerd/containerd by @zirain in #7448
• perf: do not set last transition time for status in watcher layer by @rudrakhp in #7268
• docs: fix gwapi docs by @zirain in #7408
• chore: renable lint.dependabot by @zirain in #7454
• chore: remove last transition time comparison as no longer set by @rudrakhp in #7451
• fix: merged policy status by @kkk777-7 in #7376
• fix: header modifier doesn't permit multiple values with commas by @kkk777-7 in #7436
• fix auto http config with proxy protocol by @zirain in #7439
• build(deps): bump sigs.k8s.io/controller-runtime from 0.22.3 to 0.22.4 in /examples/extension-server by @dependabot[bot] in #7470
• build(deps): bump softprops/action-gh-release from 2.4.1 to 2.4.2 in the actions group across 1 directory by @dependabot[bot] in #7461
• build(deps): bump github.com/envoyproxy/go-control-plane/envoy from 1.35.0 to 1.36.0 in /examples/grpc-ext-proc by @dependabot[bot] in #7471
• build(deps): bump github.com/envoyproxy/go-control-plane/envoy from 1.35.0 to 1.36.0 in /examples/envoy-ext-auth by @dependabot[bot] in #7467
• build(deps): bump github.com/envoyproxy/go-control-plane/envoy from 1.35.1-0.20251029084203-42a4a9261f66 to 1.36.0 in /examples/extension-server by @dependabot[bot] in #7468
• [release/v1.6] v1.6.0 release docs by @rudrakhp in #7475
• [release/v1.6] v1.6.0 docs + fix make doc in MacOS by @rudrakhp in #7487
• [release/v1.6] bump last version tag in upgrde e2e to v1.6.0 by @rudrakhp in #7491
• [release/v1.6] v1.6.0 release announcement by @rudrakhp in #7493
• [release/v1.6] bump helm and yaml version to v1.6.0 for docs by @rudrakhp in #7497
• chore: fix typo in the helm install docs by @zhaohuabing in #7495
• fix: do not return 500 for all requests when part of BackendRefs are invalid by @zhaohuabing in #7488
• Control plane support log output as json by @zirain in #7455
• chore: update Gateway API version to v1.4.0 for latest in compatibility matrix by @rudrakhp in #7507
• build(deps): bump sigs.k8s.io/controller-runtime from 0.22.3 to 0.22.4 by @dependabot[bot] in #7465
• release notes for v1.5.5 by @zirain in #7511
• docs: bump v1.5 docs to use v1.5.5 by @arkodg in #7518
• ci: add script to free disk space by @shreealt in #7534
• docs: remove useless content by @zirain in #7524
• fix: loose the weight offset by @zhaohuabing in #7516
• build(deps): bump the gomod group across 1 directory with 9 updates by @dependabot[bot] in #7462
• add kube api linter by @fabian4 in #7303
• docs: add upgrade notes in v1.6 release announcement by @rudrakhp in #7521
• chore: check if linter is fixed by @rudrakhp in #7543
• chore: update cherrypick script by @zirain in #7525
• docs: correct grammar and punctuation in Gateway API Extensions documentation by @isujtauke in #7546
• delay migrating to XDS Name Scheme V2 by default by @arkodg in #7170
• feat(api): add Kubernetes client-go style typed clients for Envoy Gateway resources by @siddharth1036 in #7356
• add alauda in adopters by @woodgear in #7547
• treat too many addresses as programmed by @woodgear in #7542
• docs: update port to 8080 to avoid sudo by @zhaohuabing in #7549
• feat: route stat name by @Inode1 in #6310
• add TEG for enterprise support by @zirain in #7548
• feat: set oauth2 stats prefix to securitypolicy name by @zhaohuabing in #7502
• feat: automatically set first compressor with choose_first by @buroa in #7406
• add sudiptob2 to Reviewers by @arkodg in #7570
• fix: prevent skeleton route status entries for unmanaged GatewayClasses by @rajsinghtech in #7536
• chore: make conformance test args configurable by @zirain in #7571
• chore: fix flaky weight test by @zhaohuabing in #7574
• docs: add notes for yaml installation by @zirain in #7576
• fix: let HPA manage envoy-gateway replicas when enabled by @juhosyrjanen in #7565
• feat: reclaim space in release pipeline by @shreealt in #7587
• bechmark: fix cpu sampling by @zhaohuabing in #7581
• chore: bump golang.org/x/crypto by @zirain in #7588
• build(deps): bump the k8s-io group across 1 directory with 6 updates by @dependabot[bot] in #7591
• fix: propagate the HTTPFilter translation errors to the outer layer by @zhaohuabing in #7556
• feat: convert IR APIKeyAuth Credentials Map into a Slice of Struct by @lalet in #7584
• api: Added support for weighted field in BackendRef by @NayanPahuja in #7452
• build(deps): bump go.uber.org/zap from 1.27.0 to 1.27.1 by @dependabot[bot] in https://github.com/en...

v1.7.0-rc.2

What's Changed

• [release/v1.7] cherry-pick for v1.7.0-rc.2 by @cnvergence in #8165

Full Changelog: v1.7.0-rc.1...v1.7.0-rc.2

What's Changed

• build(deps): bump busybox from d80cd69 to 2383baa in /tools/docker/envoy-gateway by @dependabot[bot] in #7873
• fix(kubernetes): cache unstructured resources and disable deep copy by @aponysus in #7822
• chore: add test for disabling lua by @rudrakhp in #8028
• chore: use Patch instead of Update in e2e by @zirain in #8012
• api: add sourceCIDRs field in SecurityPolicy for L4 IP filtering by @zhaohuabing in #8009
• feat: allow updating initial_fetch_timeout in bootstrap by @andreik-n2 in #7962
• fix: merge route match rule with match all route by @zirain in #8011
• fix: validation for certificates by @kkk777-7 in #7734
• e2e: disabled GRPCExtAuthTimeout test by @zirain in #8047
• e2e: disable HTTPExtAuthTimeout by @zirain in #8051
• [release-v1.5] release notes for v1.5.8 by @zirain in #8050
• docs: cookie-based matching by @zhaohuabing in #8056
• [release/v1.6] v1.6.3 release notes by @rudrakhp in #8054
• fix: race in gatewaapi runner by @zirain in #8037
• bump go-control-plane for v1.7(envoy 1.37) by @zirain in #8055
• feat: xds policy metadata by @zirain in #7824
• [release/v1.6] bump latest version to v1.6.3 by @rudrakhp in #8064
• docs: bump v1.5 to 1.5.8 by @zirain in #8067
• e2e: update the test for shared rate limits without client selectors by @Aias00 in #8025
• chore: fix doc lint by @zhaohuabing in #8071
• Support automatic fallback to endpoint routing for headless services when routingType=Service by @sudiptob2 in #8021
• docs: fix missing backtick in route list formatting by @s20055232 in #8073
• [docs] fix docs for XDSNameSchemeV2 defaults by @arkodg in #8043
• fix: rbac for namespaceSelector in Gateway Namespace Mode by @cnvergence in #8014
• fix: custom response should be put at the first of the filter chain by @zhaohuabing in #8061
• feat: Add EnvoyProxyTemplate for global Envoy Proxy defaults by @mgs255 in #7698
• api: Add RoutingType to BackendTrafficPolicy by @jukie in #7927
• chore: update tools affecting osv scanner by @rudrakhp in #8079
• fix: proxies going from HTTP => HTTPS: matching upstream http(s) scheme by @andreaswachs in #7842
• perf: cache required keys in secrets and configmaps by @rudrakhp in #8045
• fix(status): align BackendTLSPolicy ResolvedRefs reason with Gateway API by @Aditya7880900936 in #7793
• authorization: support the legacy scp claim as scopes by @zhaohuabing in #8062
• e2e: speed accesslog tests by @zirain in #8096
• feat: Ignore ready and stats listener metrics in shutdown manager calculation by @zirain in #7985
• build(deps): bump sigs.k8s.io/controller-runtime from 0.23.0 to 0.23.1 by @dependabot[bot] in #8083
• build(deps): bump the gomod group across 2 directories with 4 updates by @dependabot[bot] in #8082
• build(deps): bump github/codeql-action from 4.31.10 to 4.32.0 in the actions group across 1 directory by @dependabot[bot] in #8085
• build(deps): bump sigs.k8s.io/controller-runtime from 0.23.0 to 0.23.1 in /examples/extension-server by @dependabot[bot] in #8084
• build(deps): bump busybox from 2383baa to e226d63 in /tools/docker/envoy-gateway by @dependabot[bot] in #8081
• feature: implement the ListenerSets experimental API by @zhaohuabing in #7998
• build(deps): bump the helm group across 1 directory with 4 updates by @dependabot[bot] in #8086
• fix EnvoyProxyTemplate test by @zirain in #8118
• sort e2e tests by time by @zhaohuabing in #8112
• feat: add query parameter match support in ratelimit by @slayer321 in #7330
• feat(telemetry): add resourceAttributes to OTLP backends by @codefromthecrypt in #7972
• v1.7.0-rc1 release notes by @cnvergence in #8125
• [release/v1.7] pin envoy and ratelimit image version by @cnvergence in #8128
• [release/v1.7] ci: release json report by @zirain in #8129
• [release/v1.7] fix the release notes path by @cnvergence in #8133
• [release/v1.7] cherry-pick for v1.7.0-rc.2 by @cnvergence in #8165

New Contributors

• @andreik-n2 made their first contribution in #7962
• @s20055232 made their first contribution in #8073
• @mgs255 made their first contribution in #7698
• @andreaswachs made their first contribution in #7842

Full Changelog: v1.7.0-rc.0...v1.7.0-rc.2

v1.7.0-rc.1

What's Changed

• chore(examples): fix extensionserver build by @maxbrunet in #7398
• chore: add missing endpoints in the crl test by @zhaohuabing in #7402
• chore(make): exit on failure by @maxbrunet in #7387
• fix: port typo by @woodgear in #7397
• build(deps): bump busybox from 2f590fc to e3652a0 in /tools/docker/envoy-gateway by @dependabot[bot] in #7409
• fix: validate EnvoyGateway configuration before reload by @zirain in #7412
• build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #7410
• fix: missing onInvalidMessage for ClientTrafficPolicy by @Inode1 in #7417
• chore: add missing filters in the filter order configuration by @zhaohuabing in #7404
• test: tcp security policy e2e by @davem-git in #7226
• Docs: tcp security policy by @davem-git in #7247
• feat: support both local and global ratelimit simultaneously by @kkk777-7 in #7334
• feat: support separated path match in ratelimit path by @kkk777-7 in #7413
• fix: handle optional next update for CRL by @rudrakhp in #7422
• fix: missing jwt provider when jwt is configured on multiple listeners sharing the same port by @zhaohuabing in #7337
• fix: only insert proxy service once it exists by @jukie in #7424
• fix error when updating invalid gateway status by @zirain in #7415
• fix: avoid calling the issuer's well-known endpoint for every routes by @zhaohuabing in #7394
• fix: memory leak by @gonzaloserrano in #7429
• perf: move snapshot update above status update in xds layer by @arkodg in #7423
• chore: cleanup logging when inserting proxy service cluster by @jukie in #7431
• upgrade gofumpt by @fabian4 in #7420
• feat(translator): relax backend restrictions for localhost when running standalone with Host infrastructure by @nacx in #7427
• chore: improve api docs for http10.useDefaultHost by @zhaohuabing in #7435
• ci: disable lint.dependabot by @zirain in #7445
• chore: bump github.com/containerd/containerd by @zirain in #7448
• perf: do not set last transition time for status in watcher layer by @rudrakhp in #7268
• docs: fix gwapi docs by @zirain in #7408
• chore: renable lint.dependabot by @zirain in #7454
• chore: remove last transition time comparison as no longer set by @rudrakhp in #7451
• fix: merged policy status by @kkk777-7 in #7376
• fix: header modifier doesn't permit multiple values with commas by @kkk777-7 in #7436
• fix auto http config with proxy protocol by @zirain in #7439
• build(deps): bump sigs.k8s.io/controller-runtime from 0.22.3 to 0.22.4 in /examples/extension-server by @dependabot[bot] in #7470
• build(deps): bump softprops/action-gh-release from 2.4.1 to 2.4.2 in the actions group across 1 directory by @dependabot[bot] in #7461
• build(deps): bump github.com/envoyproxy/go-control-plane/envoy from 1.35.0 to 1.36.0 in /examples/grpc-ext-proc by @dependabot[bot] in #7471
• build(deps): bump github.com/envoyproxy/go-control-plane/envoy from 1.35.0 to 1.36.0 in /examples/envoy-ext-auth by @dependabot[bot] in #7467
• build(deps): bump github.com/envoyproxy/go-control-plane/envoy from 1.35.1-0.20251029084203-42a4a9261f66 to 1.36.0 in /examples/extension-server by @dependabot[bot] in #7468
• [release/v1.6] v1.6.0 release docs by @rudrakhp in #7475
• [release/v1.6] v1.6.0 docs + fix make doc in MacOS by @rudrakhp in #7487
• [release/v1.6] bump last version tag in upgrde e2e to v1.6.0 by @rudrakhp in #7491
• [release/v1.6] v1.6.0 release announcement by @rudrakhp in #7493
• [release/v1.6] bump helm and yaml version to v1.6.0 for docs by @rudrakhp in #7497
• chore: fix typo in the helm install docs by @zhaohuabing in #7495
• fix: do not return 500 for all requests when part of BackendRefs are invalid by @zhaohuabing in #7488
• Control plane support log output as json by @zirain in #7455
• chore: update Gateway API version to v1.4.0 for latest in compatibility matrix by @rudrakhp in #7507
• build(deps): bump sigs.k8s.io/controller-runtime from 0.22.3 to 0.22.4 by @dependabot[bot] in #7465
• release notes for v1.5.5 by @zirain in #7511
• docs: bump v1.5 docs to use v1.5.5 by @arkodg in #7518
• ci: add script to free disk space by @shreealt in #7534
• docs: remove useless content by @zirain in #7524
• fix: loose the weight offset by @zhaohuabing in #7516
• build(deps): bump the gomod group across 1 directory with 9 updates by @dependabot[bot] in #7462
• add kube api linter by @fabian4 in #7303
• docs: add upgrade notes in v1.6 release announcement by @rudrakhp in #7521
• chore: check if linter is fixed by @rudrakhp in #7543
• chore: update cherrypick script by @zirain in #7525
• docs: correct grammar and punctuation in Gateway API Extensions documentation by @isujtauke in #7546
• delay migrating to XDS Name Scheme V2 by default by @arkodg in #7170
• feat(api): add Kubernetes client-go style typed clients for Envoy Gateway resources by @siddharth1036 in #7356
• add alauda in adopters by @woodgear in #7547
• treat too many addresses as programmed by @woodgear in #7542
• docs: update port to 8080 to avoid sudo by @zhaohuabing in #7549
• feat: route stat name by @Inode1 in #6310
• add TEG for enterprise support by @zirain in #7548
• feat: set oauth2 stats prefix to securitypolicy name by @zhaohuabing in #7502
• feat: automatically set first compressor with choose_first by @buroa in #7406
• add sudiptob2 to Reviewers by @arkodg in #7570
• fix: prevent skeleton route status entries for unmanaged GatewayClasses by @rajsinghtech in #7536
• chore: make conformance test args configurable by @zirain in #7571
• chore: fix flaky weight test by @zhaohuabing in #7574
• docs: add notes for yaml installation by @zirain in #7576
• fix: let HPA manage envoy-gateway replicas when enabled by @juhosyrjanen in #7565
• feat: reclaim space in release pipeline by @shreealt in #7587
• bechmark: fix cpu sampling by @zhaohuabing in #7581
• chore: bump golang.org/x/crypto by @zirain in #7588
• build(deps): bump the k8s-io group across 1 directory with 6 updates by @dependabot[bot] in #7591
• fix: propagate the HTTPFilter translation errors to the outer layer by @zhaohuabing in #7556
• feat: convert IR APIKeyAuth Credentials Map into a Slice of Struct by @lalet in #7584
• api: Added support for weighted field in BackendRef by @NayanPahuja in #7452
• build(deps): bump go.uber.org/zap from 1.27.0 to 1.27.1 by @dependabot[bot] in #7592
• docs: improve doc for ClusterStatName by @zirain in #7609
• [release/v1.4] release n...

v1.6.3

Release Announcement

Check out the v1.6.3 release announcement to learn more about the release.

What's Changed

• [release/v1.6] v1.6 upgrade go 1.25.6 by @rudrakhp in #7975
• [release/v1.6] bump proxy and ratelimit versions by @rudrakhp in #7976
• [release/v1.6] bump ratelimit version by @rudrakhp in #8052
• [release/v1.6] cherry pick v1.6.3 by @rudrakhp in #8059

Full Changelog: v1.6.2...v1.6.3

v1.5.8

Release Announcement

Check out the v1.5.8 release notes to learn more about the release.

v1.6.2

Check out the v1.6.2 release notes to learn more about the release.

What's Changed

• [release/v1.6] Cherrypick/v1.6.2 by @rudrakhp in #7893
• [release/v1.6] release notes v1.6.2 patch by @rudrakhp in #7903
• [release/v1.6] cherry-pick security patch for v1.6.2 by @rudrakhp in #7920

Full Changelog: v1.6.1...v1.6.2

v1.5.7

Release Announcement

Check out the v1.5.7 release notes to learn more about the release.

v1.6.1

Release Announcement

Check out the v1.6.1 release notes to learn more about the release.