Skip to content

Commit 271a9eb

Browse files
kkk777-7kkk777-7
committed
Merge branch 'main' into beck/ci-test-k8s-134
Signed-off-by: kkk777-7 <[email protected]>
2 parents 46ac53c + abdea30 commit 271a9eb

File tree

4 files changed

+109
-2
lines changed

4 files changed

+109
-2
lines changed

‎release-notes/v1.6.1.yaml‎

Lines changed: 29 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,32 @@
1-
date: December 4, 2025
1+
date: December 5, 2025
2+
3+
# Changes that are expected to cause an incompatibility with previous versions, such as deletions or modifications to existing APIs.
4+
breaking changes: |
25
36
# Updates addressing vulnerabilities, security flaws, or compliance requirements.
47
security updates: |
5-
Patches for EnvoyProxy CVE-2025-64527, CVE-2025-66220, and CVE-2025-64763. Ref https://github.com/envoyproxy/envoy/releases/tag/v1.36.3
8+
Bumped Envoy to 1.36.3 to incorporate security patches, CVE-2025-64527, CVE-2025-66220, and CVE-2025-64763. Ref https://github.com/envoyproxy/envoy/releases/tag/v1.36.3
9+
10+
# New features or capabilities added in this release.
11+
new features: |
12+
13+
bug fixes: |
14+
Fixed xDS snapshot cache to clear snapshots when streams close, preventing proxies from receiving stale configuration after reconnection.
15+
Fixed configured OIDC authorization endpoint being overridden by discovered endpoints from issuer's well-known URL.
16+
Fixed an issue with gateway ownership tracking when running multiple controllers.
17+
Fixed default namespace handling when namespace is unset.
18+
Fixed a bug where HTTPRoutes referencing gateways with multiple different GatewayClasses would have incomplete status conditions.
19+
Fixed gateway status to treat too many addresses as programmed.
20+
Fix 500 errors caused by partially invalid BackendRefs; traffic is now correctly routed between valid backends and 500 responses according to their configured weights.
21+
22+
# Enhancements that improve performance.
23+
performance improvements: |
24+
25+
# Deprecated features or APIs.
26+
deprecations: |
27+
28+
# Other notable changes not covered by the above sections.
29+
Other changes: |
30+
Bumped Gateway API to v1.4.1.
31+
Bumped golang.org/x/crypto dependency.
32+
Added disk space reclamation script for CI runners to prevent out-of-disk errors.

‎site/content/en/news/releases/notes/v1.5.6.md‎

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
---
2+
title: "v1.5.6"
3+
publishdate: 2025-12-05
4+
---
5+
6+
Date: December 05, 2025
7+
8+
## Breaking changes
9+
-
10+
11+
## Security updates
12+
- Patches for EnvoyProxy CVE-2025-64527, CVE-2025-66220, and CVE-2025-64763. Ref https://github.com/envoyproxy/envoy/releases/tag/v1.35.7
13+
14+
15+
## New features
16+
-
17+
18+
## Bug fixes
19+
- Fixed xDS snapshot cache to clear snapshots when streams close, preventing proxies from receiving stale configuration after reconnection.
20+
- Fixed configured OIDC authorization endpoint being overridden by discovered endpoints from issuer's well-known URL.
21+
- Fixed an issue with gateway ownership tracking when running multiple controllers.
22+
- Fixed default namespace handling when namespace is unset.
23+
- Fixed a bug where HTTPRoutes referencing gateways with multiple different GatewayClasses would have incomplete status conditions.
24+
- Fixed gateway status to treat too many addresses as programmed.
25+
26+
## Performance improvements
27+
-
28+
29+
## Deprecations
30+
-
31+
32+
## Other changes
33+
- Added disk space reclamation script for CI runners to prevent out-of-disk errors.
34+
- Bumped golang.org/x/crypto dependency.

‎site/content/en/news/releases/notes/v1.6.1.md‎

Lines changed: 39 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,39 @@
1+
---
2+
title: "v1.6.1"
3+
publishdate: 2025-12-05
4+
---
5+
6+
Date: December 05, 2025
7+
8+
## Breaking changes
9+
-
10+
11+
## Security updates
12+
- Bumped Envoy to 1.36.3 to incorporate security patches, CVE-2025-64527, CVE-2025-66220, and CVE-2025-64763. Ref https://github.com/envoyproxy/envoy/releases/tag/v1.36.3
13+
14+
15+
16+
## New features
17+
-
18+
19+
## Bug fixes
20+
- Fixed xDS snapshot cache to clear snapshots when streams close, preventing proxies from receiving stale configuration after reconnection.
21+
- Fixed configured OIDC authorization endpoint being overridden by discovered endpoints from issuer's well-known URL.
22+
- Fixed an issue with gateway ownership tracking when running multiple controllers.
23+
- Fixed default namespace handling when namespace is unset.
24+
- Fixed a bug where HTTPRoutes referencing gateways with multiple different GatewayClasses would have incomplete status conditions.
25+
- Fixed gateway status to treat too many addresses as programmed.
26+
- Fix 500 errors caused by partially invalid BackendRefs; traffic is now correctly routed between valid backends and 500 responses according to their configured weights.
27+
28+
29+
30+
## Performance improvements
31+
-
32+
33+
## Deprecations
34+
-
35+
36+
## Other changes
37+
- Bumped Gateway API to v1.4.1.
38+
- Bumped golang.org/x/crypto dependency.
39+
- Added disk space reclamation script for CI runners to prevent out-of-disk errors.

‎tools/osv-scanner/license-scan-config.toml‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -38,3 +38,10 @@ version = "1.0.0"
3838
ecosystem = "Go"
3939
license.override = ["Apache-2.0"]
4040
reason = "This package is dual-licensed: the code under the Apache 2.0 license and the documentation under the CC-BY-SA-4.0 license"
41+
42+
# Remove this once OSV image updated
43+
[[PackageOverrides]]
44+
name = "stdlib"
45+
ecosystem = "Go"
46+
license.override = ["BSD-3-Clause"]
47+
reason = "Go stdlib is licensed under BSD-3-Clause, see https://go.dev/LICENSE"

0 commit comments

Comments
 (0)