v1.4.0

Release Announcement

Check out the v1.4.0 release announcement to learn more about the release.

What's Changed

• docs: tracing sampling fraction by @zirain in #5131
• doc: response compression by @zhaohuabing in #5071
• docs: how to specify a self-signed ca for the remote jwks host in the SP JWT settings. by @zhaohuabing in #5085
• chore: fix gen by @zhaohuabing in #5166
• docs: add api key auth instructions by @nothinux in #5097
• add SECURITY.md by @arkodg in #5167
• chore: link SECURITY.md by @arkodg in #5168
• build(deps): bump actions/stale from 9.0.0 to 9.1.0 by @dependabot in #5162
• docs: rm sectionName from some of the examples by @arkodg in #5173
• ci(fix): osv-scanner PR mode by @shahar-h in #5174
• wip: docs: add standalone in container instruction by @dshatokhin in #5172
• docs: update prerequisites files with installation and connectivity t… by @DeeBi9 in #5094
• [release/v1.3] fix 1.3.0-rc.1 release note by @guydc in #5175
• fail validation if baseInterval is 0s by @arkodg in #5176
• [release/1.3] release notes by @guydc in #5177
• add link for adopters by @arkodg in #5183
• copy some docs into current docs by @arkodg in #5185
• fix shortcodes and version location by @guydc in #5184
• Make panic threshold configurable for cluster by @nezdolik in #5118
• docs: add a adopter readme by @arkodg in #5187
• build(deps): bump actions/setup-node from 4.1.0 to 4.2.0 by @dependabot in #5163
• build(deps): bump the k8s-io group across 2 directories with 1 update by @dependabot in #5157
• build(deps): bump the golang-org group across 2 directories with 2 updates by @dependabot in #5158
• build(deps): bump helm.sh/helm/v3 from 3.16.4 to 3.17.0 by @dependabot in #5160
• build(deps): bump codecov/codecov-action from 5.1.2 to 5.3.1 by @dependabot in #5164
• build(deps): bump github.com/ohler55/ojg from 1.26.0 to 1.26.1 by @dependabot in #5044
• build(deps): bump actions/setup-go from 5.2.0 to 5.3.0 in /tools/github-actions/setup-deps by @dependabot in #5165
• add title for adopters by @arkodg in #5196
• build(deps): bump github/codeql-action from 3.27.9 to 3.28.8 by @dependabot in #5189
• build(deps): bump github.com/docker/cli from 27.5.0+incompatible to 27.5.1+incompatible by @dependabot in #5159
• chore: bump go 1.23.5 by @zirain in #5190
• fix build extension-server by @zirain in #5199
• chore: bump go 1.23.6 by @zirain in #5204
• Update Code Reviewers by @arkodg in #5218
• Gateway API - support percentage-based-request-mirroring by @LiorLieberman in #5212
• chore: fix wrong example by @zirain in #5224
• chore: add test for patch ratelimit env by @zirain in #5221
• chore: run gofumpt by @zirain in #5222
• Add conformance e2e test for panic mode by @nezdolik in #5213
• docs: add docs link for envoyGateway configuration in helm chart by @arkodg in #5231
• chore: add coactiveai adopter logo svg and data by @ross-at-coactive in #5233
• build(deps): bump github.com/miekg/dns from 1.1.62 to 1.1.63 by @dependabot in #5243
• build(deps): bump the golang-org group across 2 directories with 2 updates by @dependabot in #5239
• fix: implement num-route-per-host for benchmark scale_httproutes case by @shawnh2 in #5235
• docs: fix config for api key by @arkodg in #5250
• feat: Add support for MaxUnavailable in KubernetesPodDisruptionBudgetSpec by @jukie in #5209
• docs: fixed the documentation for multiple request mirrorfilter docs by @Anu-Ra-g in #5234
• xds: use a dedicated listener port for envoy proxy readiness by @zirain in #5197
• build(deps): bump github.com/docker/docker from 27.5.0+incompatible to 27.5.1+incompatible by @dependabot in #5242
• chore: read go version from gomod by @zirain in #5262
• build(deps): bump github/codeql-action from 3.28.8 to 3.28.9 by @dependabot in #5244
• feat: add defaulter for gateway-api resources loading from file by @shawnh2 in #5232
• chore: bump deps by @zirain in #5263
• Add support for MatchExpressions by @dprotaso in #5201
• feat: implement Lua EnvoyExtensionPolicy by @rudrakhp in #5171
• docs: Lua EnvoyExtensionPolicy by @rudrakhp in #5270
• docs: added BootstrapConfig for Merge Option by @Anu-Ra-g in #5259
• chore: refactor ext auth e2e by @zirain in #5271
• chore: add canva to ignore lint list by @Xunzhuo in #5279
• docs: add Canva logo to the adopters list by @harrisonturton in #5274
• docs: add secret enum in envoyPatchPolicy by @arkodg in #5268
• fix: Fixed egctl build for windows by @Anu-Ra-g in #5284
• fix: sort the missing resources to fix the gen-check by @shawnh2 in #5286
• docs: fix broken steps in prerequisites by @Nishikoh in #5296
• docs: site design update by @missBerg in #5285
• chore: bump go to 1.24 by @zirain in #5287
• build(deps): bump sigs.k8s.io/kind from 0.26.0 to 0.27.0 in /tools/src/kind by @dependabot in #5295
• build(deps): bump helm.sh/helm/v3 from 3.17.0 to 3.17.1 by @dependabot in #5291
• build(deps): bump the golang-org group across 2 directories with 1 update by @dependabot in #5290
• build(deps): bump github.com/golangci/golangci-lint from 1.63.4 to 1.64.5 in /tools/src/golangci-lint by @dependabot in #5294
• build(deps): bump github.com/evanphx/json-patch/v5 from 5.9.0 to 5.9.11 by @dependabot in #5293
• api: BackendTrafficPolicy DNSLookupFamily by @guydc in #5249
• chore: ignore sched.co by @zirain in #5305
• build(deps): bump the k8s-io group by @zirain in #5309
• fix: latest release failed for cache overlimit by @Xunzhuo in #5316
• validate all xds resources before returning the translation result by @zhaohuabing in #5148
• chore: move ratelimit per-route config to typedPerFilterConfig by @zhaohuabing in #5072
• chore: use go tool by @zirain in #5304
• feat: support HPA in helm chart by @Dean-Coakley in #5127
• fix: Allow weights to be zero on endpoints by @tobrien-nydig in #5278
• feat: Add RequestID to ClientTrafficPolicy for controlling X-Request-ID header behavior by @jukie in #5283
• api: HTTP header and method based authz by @zhaohuabing in #5310
• site: fix styling issues wrt fonts and headings by @missBerg in #5333
• docs: adding SAP as an adopter by @guydc in #5343
• feat: support adding additional labels to dashboard configmap by @fengxsong in #5317
• build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 by @dependabot in #5341
• build(deps): bump github/codeql-action from 3.28.9 to 3.28.10 by @dependabot in #5340
• build(deps): bump actions/upload-artifact from 4.6.0 to 4.6.1 by @dependabot in #5339
• build(deps): bump busybox from a5d0ce4 to 498a000 in /tools/docker/envoy-gateway by @dependabot in #5338
• build(deps): bump the k8s-io group across 2 directories with 1 update by @dependabot in #5334
• build(deps): bump github.com/evanphx/json-patch from 5.9.0+incompatible to 5.9.11+incompatible by @dependabot in #5336
• build(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1 by @dependabot in #5337
• docs: updated docs for cert-manager installation by @Anu-Ra-g in #5328
• docs: updated the developer guide by @Anu-Ra-g in #5347
• Bypass overload manager for stats and ready listeners by @rudrakhp in #5321
• chore: bump envoy gateway version to pacify dependabot by @arkodg in #5350
• fix: Standalone mode - Secret and ConfigMap parsing by @bstasz-bonrepublic in #5329
• fix: create a cluster per destination setting for backends with filters by @arkodg in #5269
• build(deps): bump github.com/google/go-cmp from 0.6.0 to 0.7.0 by @dependabot in #5335
• docs: add robots.txt by @zirain in #5356
• docs: fix nit in EOL by @zirain in #5355
• chore: fix CVE by @zirain in #5360
• docs: fix duplicate about links by @Xunzhuo in #5362
• chore: update dependabot rule by @zirain in #5354
• feat: adding support for DNSLookupFamily api by @alexwo in #5324
• xds: remove usage of deprecated field exact_match by @zirain in #5364
• api: support customized UpgradeConfigs by @zirain in #5300
• api: Support ForwardUsernameHeader field in the BasicAuth by @surenraju in #5342
• github/ci: Update dockerhub user by @phlax in #5378
• fix: backendSettings for extAuth by @arkodg in #5372
• Add Tigera to adopters by @Thakurvaibhav in #5379
• docs: Add Kubermatic as an adopter by @cnvergence in #5395
• chore: cleanup after adding RequestID by @jukie in #5332
• feat: Support ForwardUsernameHeader field in the BasicAuth by @surenraju in #5331
• Update steering members of envoy gateway project by @zinuga in #5400
• conformance: skip, skip-test features by @arkodg in #5399
• docs: fix error in client-traffic-policy.md by @MaYuan-02 in #5401
• fix: metric compressor not working as expected by @zirain in #5363
• Expose root command of envoy-gateway by @mathetake in #5407
• chore: remove go tools from tools/src by @mmorel-35 in #5404
• feat: distinct match support for local ratelimit by @zhaohuabing in #5319
• feat: zone aware routing by @jukie in #5299
• [release/v1.3] release v1.3.1 notes and site by @guydc in #5412
• chore: make order deterministic by @zirain in #5413
• docs: update Kubermatic logo by @cnvergence in #5415
• build(deps): bump codecov/codecov-action from 5.3.1 to 5.4.0 by @dependabot in #5390
• build(deps): bump github.com/docker/cli from 27.5.1+incompatible to 28.0.1+incompatible by @dependabot in #5387
• Propagate contexts from root to subcommands by @mathetake in #5417
• chore: fix dependabot by @zirain in #5391
• [release/1.2.7] release note by @zhaohuabing in #5424
• api: add full_duplex_streamed enum to ExtProcBodyProcessingMode by @kfswain in #5349
• load BackendTLSPolicy in standalone mode by @arkodg in #5431
• chore: add announcement mailist list link by @arkodg in #5429
• chore: fix examples gen-check by @zirain in #5423
• api: credential injection HTTPRouteFilter by @zhaohuabing in #5312
• Wasm: cache Wasm OCI image permission check results by @zhaohuabing in #5358
• build(deps): bump the k8s-io group across 2 directories with 1 update by @dependabot in #5433
• build(deps): bump the github-com group across 6 directories with 9 updates by @dependabot in #5432
• build(deps): bump the golang-org group across 5 directories with 4 updates by @dependabot in #5439
• feat: implement HTTP headers and methods authz by @zhaohuabing in #5393
• docs: Add troubleshooting section for config by @arkodg in #5438
• docs: add fuzz testing design document. by @sudiptob2 in #5427
• feat: support syncing gwapi docs by @Xunzhuo in #5365
• o11y: use envoyalsreceiver by @zirain in #5440
• build(deps): bump actions/download-artifact from 4.1.8 to 4.1.9 by @dependabot in #5389
• api: sharing global ratelimit buckets by @ryanhristovski in #5227
• Add Docker as an adopter of envoy gateway by @ryanhristovski in #5458
• build(deps): bump github/codeql-action from 3.28.10 to 3.28.11 by @dependabot in #5450
• chore: unhide header and method authz by @zhaohuabing in #5453
• docs: update backend-traffic-policy.md(remove targetRef.namespace) by @sunerpy in #5454
• Specify a possible valid root CAs on darwin by @mathetake in #5459
• test: add fuzzers for egctl.translateGatewayAPIToIR by @sudiptob2 in #5430
• fix: do not log error when HTTP server is properly closed by @mathetake in #5467
• docs: clarify ExtensionTLS type by @nareddyt in #5154
• fix: Wasm cache directory on macOS host by @mathetake in #5466
• Load EnvoyExtensionPolicy in standalone mode by @mathetake in #5460
• Enables standalone library to configure log output by @mathetake in #5476
• Make file provider errors useful by @mathetake in #5470
• test: Add fuzzer for Gateway API to XDS translation. by @sudiptob2 in #5471
• fix: retrigger reconciliation when backendRef of type ServiceImport is updated by @nareddyt in #5461
• Make configloader accept configured logOut by @mathetake in #5483
• build(deps): bump the k8s-io group across 2 directories with 1 update by @dependabot in #5449
• feat: implement HTTPUpgrade in BTP by @zirain in #5374
• feat: add per_host_thresholds in CircuitBreakers by @jukie in #5211
• docs: don't run copy-current-release-docs as part of gen-check by @zirain in #5445
• Fix typo for "troubleshooting configuration" section by @Ninir in #5490
• Use ~/.eg/wasm on host provider by @mathetake in #5491
• test: Implement build script for oss-fuzz infra. by @sudiptob2 in #5493
• feat: Add support for BackendTLSPolicy to target ServiceImport by @nareddyt in #5451
• chore: optimize runner management in server by @Fleezesd in #5320
• docs: Add README for Envoy Gateway fuzzing instructions by @sudiptob2 in #5503
• fix: check for mirror backendRef in httproute index by @markwinter in #5497
• api: adds Type on Backend by @mathetake in #5487
• feat: add oss ecosystem section by @Xunzhuo in #5480
• chore: chagne linkinator verbosity error by @zirain in #5508
• Fixes race condition of watchable.Map between Close and Subscribe by @mathetake in #5522
• fix: fix CLI flags not found by @daixiang0 in #5519
• build(deps): bump docker/login-action from 3.3.0 to 3.4.0 by @dependabot in #5515
• build(deps): bump aquasecurity/trivy-action from 0.29.0 to 0.30.0 by @dependabot in #5514
• build(deps): bump actions/setup-node from 4.2.0 to 4.3.0 in the github-actions group across 1 directory by @dependabot in #5513
• build(deps): bump the github-com group across 1 directory with 4 updates by @dependabot in #5509
• build(deps): bump distroless/base-nossl from e9554da to 462657c in /tools/docker/envoy-gateway by @dependabot in #5512
• build(deps): bump the go-opentelemetry-io group across 1 directory with 8 updates by @dependabot in #5530
• build(deps): bump helm.sh/helm/v3 from 3.17.1 to 3.17.2 by @dependabot in #5511
• chore: bump to go 1.24.1 by @zirain in #5517
• fix: dont return an err when gatewayclass is not accepted by @arkodg in #5524
• fix: validate mixing of FQDNS addresses across destinations by @rudrakhp in #5348
• Fixes race condition on provider/runner by @mathetake in #5538
• docs: fix upgrade notes by @arkodg in #5541
• chore: bump github.com/containerd/containerd by @zirain in #5536
• build(deps): bump the k8s-io group across 2 directories with 7 updates by @dependabot in #5532
• feat(egctl): support WebSockets in addition to SPDY by @daixiang0 in #5534
• Add SenseTime as an adopter of envoy gateway by @ZhengXinwei-F in #5543
• Add Closer on Runner interface by @mathetake in #5527
• doc: highlight compatibility by @daixiang0 in #5545
• docs: version banner by @zirain in #5542
• Add a liveness probe for envoy proxy container by @rudrakhp in #5535
• chore: add Kuadrant to OSS Ecosystem by @guicassolato in #5552
• docs: calc EOL base on date by @zirain in #5551
• docs: Add AIBrix to OSS Adopters by @arkodg in #5562
• Wait for the runners to close by @mathetake in #5560
• docs: Add Knative to OSS Adopters by @arkodg in #5563
• fix: host header should not be allowed to modify by @zhaohuabing in #5533
• docs: Update aibrix Logo by @Xunzhuo in #5572
• api: access log disabled should be optional by @zirain in #5564
• feat: support global ratelimit buckets by @ryanhristovski in #5361
• Update CSS to address non-clickable links before td-content>h2 by @Ninir in #5554
• feature: opt in control plane zone aware load balancing by @zhaohuabing in #5573
• fix: otel sink json access logging without text field by @kraashen in #5498
• chore: make go.testdata.complete stable on mac and linux by @zirain in #5579
• docs: Add KServe to OSS Adopters by @arkodg in #5565
• docs: update GRPCRoute apiVersion to v1 in grpc-routing guide by @zimagen in #5587
• [release/v1.3] v1.3.2 release notes by @guydc in #5584
• Removes inline os.Stdout as log output by @mathetake in #5550
• build(deps): bump fortio.org/fortio from 1.68.0 to 1.68.1 by @dependabot in #5586
• build(deps): bump the github-com group across 1 directory with 2 updates by @dependabot in #5585
• build(deps): bump the github-actions group across 2 directories with 3 updates by @dependabot in #5590
• build(deps): bump busybox from 498a000 to 37f7b37 in /tools/docker/envoy-gateway by @dependabot in #5591
• update site to use v1.3.2 by @guydc in #5592
• build(deps): bump github/codeql-action from 3.28.11 to 3.28.12 by @dependabot in #5589
• [release/v1.2.8] v1.2.8 release note by @zhaohuabing in #5577
• docs: Added EOL column to Compatibility Matrix by @Ricky004 in #5583
• doc: add session persistence by @daixiang0 in #5567
• benchmark: more accurate metrics and profiles by @shawnh2 in #5580
• docs: add session persistence for v1.3 by @daixiang0 in #5599
• fix: flaky k8s provider test by @shahar-h in #5608
• docs: fix layout by @zirain in #5604
• docs: enhance Proxy Metrics documentation. by @sudiptob2 in #5568
• docs: update GRPCRoute version in 1.2 and 1.3 example by @melsal13 in #5623
• docs: copy latest observability documentation enhancements to v1.2 and v1.3 by @sudiptob2 in #5624
• fix tracing SamplingFraction not working by @zirain in #5578
• api: Add BufferRequests field to BackendTrafficPolicy by @markwinter in #5537
• Secret validation error in TLS termination mode with Envoy Gateway Standalone by @arminabf in #5575
• infra: delete resource if exists when using customized name by @zirain in #5569
• build(deps): bump github/codeql-action from 3.28.12 to 3.28.13 by @dependabot in #5641
• build(deps): bump distroless/base-nossl from 462657c to d1fc914 in /tools/docker/envoy-gateway by @dependabot in #5640
• build(deps): bump the go-opentelemetry-io group across 4 directories with 2 updates by @dependabot in #5639
• build(deps): bump the k8s-io group across 2 directories with 1 update by @dependabot in #5638
• build(deps): bump github.com/docker/cli from 28.0.2+incompatible to 28.0.4+incompatible in the github-com group across 1 directory by @dependabot in #5637
• build(deps): bump google/osv-scanner-action from 1.9.2 to 2.0.0 by @dependabot in #5588
• chore: update ext auth API docs by @zhaohuabing in #5651
• feat: support backend in EnvoyProxy by @zirain in #5652
• chore: ignore fixed CVE of EG by @zirain in #5665
• fix(helm): broken certgen args by @shahar-h in #5682
• build(deps): bump google/osv-scanner-action from 2.0.0 to 2.0.1 by @dependabot in #5673
• add k0rdent by @lxie123 in #5593
• docs: Podname used as command in Docs HTTPRoute by @sandert-k8s in #5680
• charts: fix wrong permission by @daixiang0 in #5678
• chore: update dependencies in golangci-lint by @mmorel-35 in #5635
• Support ServiceImport AppProtocol parsing by @nareddyt in #5687
• docs: Fix Podname used as command in HTTPRoute Docs (Latest) by @melsal13 in #5702
• chore: remove useless val by @daixiang0 in #5644
• api: Wasm code source TLS configuration by @zhaohuabing in #4492
• docs: Added "ask a question" to side panel of each doc by @melsal13 in #5681
• chore: bump golang to 1.24.2 by @zirain in #5703
• build(deps): bump the go-opentelemetry-io group across 4 directories with 2 updates by @dependabot in #5700
• provider: add missing predicates by @zirain in #5698
• docs: add tips for /latest by @zirain in #5688
• build(deps): bump fortio.org/log from 1.17.1 to 1.17.2 by @dependabot in #5674
• build: fix permission issue by @daixiang0 in #5649
• fix: flaky wasm permission check tests by @zhaohuabing in #5603
• [docs] Add Rackspace as an Adopter by @cloudnull in #5712
• docs: Document that Direct Response bodies can't exceed 4k by @mt-inside in #5714
• chore: bump helm for CVE by @zirain in #5711
• chore: support trace log level by @zhaohuabing in #5704
• build(deps): bump fortio.org/fortio from 1.68.1 to 1.69.0 by @dependabot in #5677
• fix: return err if direct response size exceeds limit by @arkodg in #5710
• build(deps): bump the github-com group across 2 directories with 5 updates by @dependabot in #5701
• docs: Enhance documentation for K8s Gateway API metrics. by @sudiptob2 in #5628
• test: add a fuzzer without using /go-fuzz-headers by @sudiptob2 in #5713
• feat: impl credential injection by @zhaohuabing in #5496
• Fix typo in envoypatchpolicy documentation by @Ninir in #5721
• build(deps): bump github/codeql-action from 3.28.13 to 3.28.15 by @dependabot in #5724
• build(deps): bump actions/setup-node from 4.3.0 to 4.4.0 in the github-actions group across 1 directory by @dependabot in #5722
• build(deps): bump github.com/prometheus/client_model from 0.6.1 to 0.6.2 in the github-com group across 1 directory by @dependabot in #5726
• build(deps): bump jpmcb/prow-github-actions from 1.1.3 to 2.0.0 by @dependabot in #5723
• build(deps): bump the k8s-io group across 2 directories with 2 updates by @dependabot in #5727
• Add nemlig as adopter of envoygateway in production by @Havnevej in #5732
• chore: go fumpt the code by @cnvergence in #5742
• feat(extension manager): dynamically reload CA certificates by @sapirpol in #5613
• feat(jwt): add local JWKS support for token validation by @zhaohuabing in #5670
• test: add an error simulator fuzzer. by @sudiptob2 in #5748
• Revert "bugfix: ignore some unnecessary requests to apiserver. (#4362)" by @zirain in #5737
• api: MergeType in BackendTrafficPolicy by @arkodg in #5582
• chore: revert ratelimit per-rout config by @zhaohuabing in #5749
• feat: log resource status for standalone mode by @shawnh2 in #5760
• feat(helm): Add global imageRegistry and imagePullSecrets overrides by @pasha-gurkov in #5719
• docs: Add force http redirect section by @levsha in #5761
• docs: troubleshooting by accessing envoy proxy admin interface by @arkodg in #5758
• fix: do not treat namespace as the missing resources by @shawnh2 in #5557
• feat(helm): Add management of extensionApis by @sorrison in #5741
• api: support per-route tracing by @zirain in #5672
• docs: dont reset replica if hpa is set by @arkodg in #5755
• chore: fix merge gen by @zirain in #5765
• fix: Downstream Network Traffic dashboard by @MaYuan-02 in #5759
• feature(helm): create gateway-crds-helm helm chart, to store CRDs trough template by @NissesSenap in #5616
• Upgrade Gateway API to 1.3.0 by @zhaohuabing in #5606
• fix: gateway api test by @zhaohuabing in #5778
• run conformance test on ipv6/dual by @zirain in #5770
• fix: testifylint issues by @mmorel-35 in #5780
• fix: benchmark sample metrics errors by @mmorel-35 in #5781
• Impl BackendTrafficPolicy telemetry by @zirain in #5769
• feat: support CredentialInjector as a Backend Filter by @zhaohuabing in #5607
• fix: allow users to set empty retriable status codes by @guydc in #5788
• API: TLS API for dynamic resolver Backend by @zhaohuabing in #5794
• chore: add release notes for per-route tracing by @zirain in #5791
• Skip snapshot updates on XDS translator error by @guydc in #5540
• docs: adds Cortex as an adopter by @daniel-white in #5798
• docs: Added Templates for new task and conceptual docs by @melsal13 in #5709
• chore: improve HTTPRoute status errors by @zhaohuabing in #5747
• fix: ext auth example used a deprecated interface by @pkit in #5771
• Added metrics for restclient and workqueue by @Inode1 in #5731
• chore: bump gateway api to 1.3.0 by @zhaohuabing in #5804
• chore: move envoy gateway config out of redis example by @zirain in #5802
• docs: Made testing sections more consistent & replaced quickstart links with boilerplate in Secure Gateways by @melsal13 in #5793
• feat: extension server retry policy by @guydc in #5631
• chore: support kubernetes v1.33.0 by @zhaohuabing in #5809
• enhancement: add api-version for load by @shawnh2 in #5816
• build(deps): bump the go-opentelemetry-io group across 4 directories with 2 updates by @dependabot in #5775
• build(deps): bump softprops/action-gh-release from 2.2.1 to 2.2.2 by @dependabot in #5772
• chore: remove github.com/hashicorp/go-multierror dependency by @mmorel-35 in #5782
• build(deps): bump codecov/codecov-action from 5.4.0 to 5.4.2 by @dependabot in #5773
• Zone Aware Routing support by @jukie in #5352
• fix: adapt permissions for certgen by @miltalex in #5819
• docs: credential injection by @zhaohuabing in #5808
• chore: fix gen check and test by @zirain in #5836
• docs: cors filter by @zhaohuabing in #5812
• fix flaky wasm permission check by @zhaohuabing in #5837
• chore: bump github.com/go-jose/go-jose/v4 by @zirain in #5844
• build(deps): bump actions/download-artifact from 4.2.1 to 4.3.0 in the github-actions group across 1 directory by @dependabot in #5842
• feat: Implement requestBuffer by @markwinter in #5661
• Revert the temporary bug simulator fuzzer. by @sudiptob2 in #5763
• feat(controller): make Kubernetes client QPS and Burst configurable by @alexwo in #5815
• Ensure rbac is created before the certgen job when using ArgoCD by @zhaohuabing in #5848
• test: Improve fuzzers to potentially generate more coverage. by @sudiptob2 in #5854
• doc: update standalone deployment mode doc by @shawnh2 in #5381
• fix(translator): Early status push for headless Service by @ShinyaIshitobi in #5827
• Add metrics for topologyInjector webhook by @jukie in #5835
• Feat: support mixed address types across BackendRefs in xRoute by @rudrakhp in #5716
• build(deps): bump the github-com group across 1 directory with 4 updates by @dependabot in #5838
• feat: impl mergeType in BackendTrafficPolicy by @zirain in #5795
• chore: improve xRoute status errors by @zhaohuabing in #5803
• feat: impl dynamic resolver backend type by @zhaohuabing in #5725
• feat: set OverlappingTLSConfig condition for HTTPS listeners with conflicting hostnames or certs by @zhaohuabing in #5777
• build(deps): bump the k8s-io group across 2 directories with 5 updates by @dependabot in #5839
• build(deps): bump github/codeql-action from 3.28.15 to 3.28.16 by @dependabot in #5843
• feat: support infra deployment in the gateway namespace by @cnvergence in #5137
• build(deps): bump fortio.org/fortio from 1.69.1 to 1.69.4 by @dependabot in #5841
• build(deps): bump google.golang.org/grpc from 1.71.1 to 1.72.0 in /examples/simple-extension-server in the go-opentelemetry-io group across 1 directory by @dependabot in #5866
• [release/v1.4]: v1.4.0-rc.1 release note by @shawnh2 in #5869
• [release/v1.4] pin envoy and ratelimit image version by @shawnh2 in #5872
• [release/v1.4] skip building egctl for windows_arm64 (#5878) by @arkodg in #5880
• [releae/v1.4] ci: remove windows_arm64 uploads (#5884) by @arkodg in #5885
• [release/v1.4] fix: make topology injector best effort (#5891) by @arkodg in #5895
• [release/v1.4] release notes for v1.4.0-rc.2 (#5899) by @arkodg in #5900
• [release/v1.4] Cherrypick fixes from main into v1.4 branch by @arkodg in #6044
• [release/v1.4] Bump envoy to v1.34.1 by @arkodg in #6047
• [release/v1.4] version and release notes for v1.4.0 (#6048) by @arkodg in #6049
• [release/v1.4] chore: publish shouldnt wait for resilience-test (#6053) by @arkodg in #6054

New Contributors

• @dshatokhin made their first contribution in #5172
• @nezdolik made their first contribution in #5118
• @ross-at-coactive made their first contribution in #5233
• @Anu-Ra-g made their first contribution in #5234
• @dprotaso made their first contribution in #5201
• @Nishikoh made their first contribution in #5296
• @tobrien-nydig made their first contribution in #5278
• @fengxsong made their first contribution in #5317
• @bstasz-bonrepublic made their first contribution in #5329
• @surenraju made their first contribution in #5342
• @phlax made their first contribution in #5378
• @Thakurvaibhav made their first contribution in #5379
• @zinuga made their first contribution in #5400
• @MaYuan-02 made their first contribution in #5401
• @kfswain made their first contribution in #5349
• @sunerpy made their first contribution in #5454
• @nareddyt made their first contribution in #5154
• @Ninir made their first contribution in #5490
• @Fleezesd made their first contribution in #5320
• @ZhengXinwei-F made their first contribution in #5543
• @guicassolato made their first contribution in #5552
• @kraashen made their first contribution in #5498
• @zimagen made their first contribution in #5587
• @Ricky004 made their first contribution in #5583
• @arminabf made their first contribution in #5575
• @lxie123 made their first contribution in #5593
• @sandert-k8s made their first contribution in #5680
• @cloudnull made their first contribution in #5712
• @Havnevej made their first contribution in #5732
• @sapirpol made their first contribution in #5613
• @pasha-gurkov made their first contribution in #5719
• @levsha made their first contribution in #5761
• @sorrison made their first contribution in #5741
• @NissesSenap made their first contribution in #5616
• @daniel-white made their first contribution in #5798
• @pkit made their first contribution in #5771
• @Inode1 made their first contribution in #5731
• @miltalex made their first contribution in #5819
• @ShinyaIshitobi made their first contribution in #5827

Full Changelog: v1.3.0...v1.4.0