feat(container): update gateway-helm ( 1.3.2 → 1.7.1 )

[klabautermann-bot]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Update	Change
gateway-helm (source)	minor	1.3.2 → 1.7.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

envoyproxy/gateway (gateway-helm)

v1.7.1

Compare Source

Release Announcement

Check out the v1.7.1 release announcement to learn more about the release.

What's Changed

• [release-1.7] bump golang to 1.25.7 by @​zirain in #​8200
• [release-1.7] bump golang to 1.25.8 by @​zirain in #​8445
• [release/v1.7] bump envoy to 1.37.1 by @​cnvergence in #​8492
• [release/v1.7] Cherry pick for v1.7.1 by @​cnvergence in #​8494
  • api: make ConnectionLimit.Value optional (#​8478)
  • fix: aggregate xRoute/xPolicy statuses across GWCs in gateway-api runner (#​8387)
  • fix: active health check respect endpoint hostname (#​8452)
  • fix: exclude unmanaged route parents from xPolicy status ancestors (#​8321)
  • fix: add ownerReferences to ratelimit ConfigMap and HPA (#​8358)
  • fix: computeHosts doesn't work when listener and route both wildcard (#​8186)
  • fix: fixed local object reference resolution from parent in merged BackendTrafficPolicies (#​8210)
  • fix: XListenerSet allows route from same namespace (#​8226)
  • fix: API key auth (#​8267)
• [release/v1.7] Cherry pick for v1.7.1 by @​jukie in #​8495
• [release/v1.7] bump envoy ratelimit to c8765e8 by @​cnvergence in #​8500

Full Changelog: envoyproxy/gateway@v1.7.0...v1.7.1

v1.7.1

Compare Source

Release Announcement

Check out the v1.7.1 release announcement to learn more about the release.

What's Changed

• [release-1.7] bump golang to 1.25.7 by @​zirain in #​8200
• [release-1.7] bump golang to 1.25.8 by @​zirain in #​8445
• [release/v1.7] bump envoy to 1.37.1 by @​cnvergence in #​8492
• [release/v1.7] Cherry pick for v1.7.1 by @​cnvergence in #​8494
  • api: make ConnectionLimit.Value optional (#​8478)
  • fix: aggregate xRoute/xPolicy statuses across GWCs in gateway-api runner (#​8387)
  • fix: active health check respect endpoint hostname (#​8452)
  • fix: exclude unmanaged route parents from xPolicy status ancestors (#​8321)
  • fix: add ownerReferences to ratelimit ConfigMap and HPA (#​8358)
  • fix: computeHosts doesn't work when listener and route both wildcard (#​8186)
  • fix: fixed local object reference resolution from parent in merged BackendTrafficPolicies (#​8210)
  • fix: XListenerSet allows route from same namespace (#​8226)
  • fix: API key auth (#​8267)
• [release/v1.7] Cherry pick for v1.7.1 by @​jukie in #​8495
• [release/v1.7] bump envoy ratelimit to c8765e8 by @​cnvergence in #​8500

Full Changelog: envoyproxy/gateway@v1.7.0...v1.7.1

v1.7.0

Compare Source

Release Announcement

Check out the v1.7.0 release announcement to learn more about the release.

What's Changed

• chore(examples): fix extensionserver build by @​maxbrunet in #​7398
• chore: add missing endpoints in the crl test by @​zhaohuabing in #​7402
• chore(make): exit on failure by @​maxbrunet in #​7387
• fix: port typo by @​woodgear in #​7397
• build(deps): bump busybox from 2f590fc to e3652a0 in /tools/docker/envoy-gateway by @​dependabot[bot] in #​7409
• fix: validate EnvoyGateway configuration before reload by @​zirain in #​7412
• build(deps): bump the actions group across 1 directory with 2 updates by @​dependabot[bot] in #​7410
• fix: missing onInvalidMessage for ClientTrafficPolicy by @​Inode1 in #​7417
• chore: add missing filters in the filter order configuration by @​zhaohuabing in #​7404
• test: tcp security policy e2e by @​davem-git in #​7226
• Docs: tcp security policy by @​davem-git in #​7247
• feat: support both local and global ratelimit simultaneously by @​kkk777-7 in #​7334
• feat: support separated path match in ratelimit path by @​kkk777-7 in #​7413
• fix: handle optional next update for CRL by @​rudrakhp in #​7422
• fix: missing jwt provider when jwt is configured on multiple listeners sharing the same port by @​zhaohuabing in #​7337
• fix: only insert proxy service once it exists by @​jukie in #​7424
• fix error when updating invalid gateway status by @​zirain in #​7415
• fix: avoid calling the issuer's well-known endpoint for every routes by @​zhaohuabing in #​7394
• fix: memory leak by @​gonzaloserrano in #​7429
• perf: move snapshot update above status update in xds layer by @​arkodg in #​7423
• chore: cleanup logging when inserting proxy service cluster by @​jukie in #​7431
• upgrade gofumpt by @​fabian4 in #​7420
• feat(translator): relax backend restrictions for localhost when running standalone with Host infrastructure by @​nacx in #​7427
• chore: improve api docs for http10.useDefaultHost by @​zhaohuabing in #​7435
• ci: disable lint.dependabot by @​zirain in #​7445
• chore: bump github.com/containerd/containerd by @​zirain in #​7448
• perf: do not set last transition time for status in watcher layer by @​rudrakhp in #​7268
• docs: fix gwapi docs by @​zirain in #​7408
• chore: renable lint.dependabot by @​zirain in #​7454
• chore: remove last transition time comparison as no longer set by @​rudrakhp in #​7451
• fix: merged policy status by @​kkk777-7 in #​7376
• fix: header modifier doesn't permit multiple values with commas by @​kkk777-7 in #​7436
• fix auto http config with proxy protocol by @​zirain in #​7439
• build(deps): bump sigs.k8s.io/controller-runtime from 0.22.3 to 0.22.4 in /examples/extension-server by @​dependabot[bot] in #​7470
• build(deps): bump softprops/action-gh-release from 2.4.1 to 2.4.2 in the actions group across 1 directory by @​dependabot[bot] in #​7461
• build(deps): bump github.com/envoyproxy/go-control-plane/envoy from 1.35.0 to 1.36.0 in /examples/grpc-ext-proc by @​dependabot[bot] in #​7471
• build(deps): bump github.com/envoyproxy/go-control-plane/envoy from 1.35.0 to 1.36.0 in /examples/envoy-ext-auth by @​dependabot[bot] in #​7467
• build(deps): bump github.com/envoyproxy/go-control-plane/envoy from 1.35.1-0.20251029084203-42a4a9261f66 to 1.36.0 in /examples/extension-server by @​dependabot[bot] in #​7468
• [release/v1.6] v1.6.0 release docs by @​rudrakhp in #​7475
• [release/v1.6] v1.6.0 docs + fix make doc in MacOS by @​rudrakhp in #​7487
• [release/v1.6] bump last version tag in upgrde e2e to v1.6.0 by @​rudrakhp in #​7491
• [release/v1.6] v1.6.0 release announcement by @​rudrakhp in #​7493
• [release/v1.6] bump helm and yaml version to v1.6.0 for docs by @​rudrakhp in #​7497
• chore: fix typo in the helm install docs by @​zhaohuabing in #​7495
• fix: do not return 500 for all requests when part of BackendRefs are invalid by @​zhaohuabing in #​7488
• Control plane support log output as json by @​zirain in #​7455
• chore: update Gateway API version to v1.4.0 for latest in compatibility matrix by @​rudrakhp in #​7507
• build(deps): bump sigs.k8s.io/controller-runtime from 0.22.3 to 0.22.4 by @​dependabot[bot] in #​7465
• release notes for v1.5.5 by @​zirain in #​7511
• docs: bump v1.5 docs to use v1.5.5 by @​arkodg in #​7518
• ci: add script to free disk space by @​shreealt in #​7534
• docs: remove useless content by @​zirain in #​7524
• fix: loose the weight offset by @​zhaohuabing in #​7516
• build(deps): bump the gomod group across 1 directory with 9 updates by @​dependabot[bot] in #​7462
• add kube api linter by @​fabian4 in #​7303
• docs: add upgrade notes in v1.6 release announcement by @​rudrakhp in #​7521
• chore: check if linter is fixed by @​rudrakhp in #​7543
• chore: update cherrypick script by @​zirain in #​7525
• docs: correct grammar and punctuation in Gateway API Extensions documentation by @​isujtauke in #​7546
• delay migrating to XDS Name Scheme V2 by default by @​arkodg in #​7170
• feat(api): add Kubernetes client-go style typed clients for Envoy Gateway resources by @​siddharth1036 in #​7356
• add alauda in adopters by @​woodgear in #​7547
• treat too many addresses as programmed by @​woodgear in #​7542
• docs: update port to 8080 to avoid sudo by @​zhaohuabing in #​7549
• feat: route stat name by @​Inode1 in #​6310
• add TEG for enterprise support by @​zirain in #​7548
• feat: set oauth2 stats prefix to securitypolicy name by @​zhaohuabing in #​7502
• feat: automatically set first compressor with choose_first by @​buroa in #​7406
• add sudiptob2 to Reviewers by @​arkodg in #​7570
• fix: prevent skeleton route status entries for unmanaged GatewayClasses by @​rajsinghtech in #​7536
• chore: make conformance test args configurable by @​zirain in #​7571
• chore: fix flaky weight test by @​zhaohuabing in #​7574
• docs: add notes for yaml installation by @​zirain in #​7576
• fix: let HPA manage envoy-gateway replicas when enabled by @​juhosyrjanen in #​7565
• feat: reclaim space in release pipeline by @​shreealt in #​7587
• bechmark: fix cpu sampling by @​zhaohuabing in #​7581
• chore: bump golang.org/x/crypto by @​zirain in #​7588
• build(deps): bump the k8s-io group across 1 directory with 6 updates by @​dependabot[bot] in #​7591
• fix: propagate the HTTPFilter translation errors to the outer layer by @​zhaohuabing in #​7556
• feat: convert IR APIKeyAuth Credentials Map into a Slice of Struct by @​lalet in #​7584
• api: Added support for weighted field in BackendRef by @​NayanPahuja in #​7452
• build(deps): bump go.uber.org/zap from 1.27.0 to 1.27.1 by @​dependabot[bot] in #​7592
• docs: improve doc for ClusterStatName by @​zirain in #​7609
• [release/v1.4] release notes for v1.4.6 by @​shawnh2 in #​7580
• fix: use default when namespace is unset by @​zirain in #​7612
• feat(ci): run benchmark test after build step success by @​shreealt in #​7599
• findOwningGateway should return controller based on linked GatewayClass by @​sudiptob2 in #​7611
• build(deps): bump the actions group across 2 directories with 6 updates by @​dependabot[bot] in #​7589
• fix: oidc authentication endpoint was overwritten by discovered value by @​zhaohuabing in #​7460
• chore: remove unused classRefsEnvoyProxy function and improve the error message by @​zirain in #​7622
• feat add query parameter to lb hash policy by @​Inode1 in #​7428
• site: fix wrong envoyextensionpolicy name by @​jinjiaKarl in #​7628
• build(deps): bump github/codeql-action from 4.31.4 to 4.31.5 in the actions group across 1 directory by @​dependabot[bot] in #​7632
• chore: setup translator test by @​kkk777-7 in #​7627
• fix: set HTTPRoute Accepted condition as true with mixed invalid and valid rules by @​zhaohuabing in #​7625
• build(deps): bump sigs.k8s.io/gateway-api-inference-extension from 1.1.0 to 1.2.0 in /examples/extension-server by @​dependabot[bot] in #​7631
• perf: introduce translator context by @​kkk777-7 in #​7535
• fix: return 500 error for invalid filters by @​zhaohuabing in #​7605
• chore: remove OSV scan config for golang stdlib by @​zirain in #​7624
• fix: use UnsupportedValue as the reason for unresolved filters by @​zhaohuabing in #​7642
• chore: ignore ntia.gov by @​zirain in #​7652
• bump golang to 1.25.5 by @​zirain in #​7648
• bump Gateway API v1.4.1 by @​zirain in #​7653
• Release notes for v1.6.1, v1.5.6, and v1.4.7 by @​jukie in #​7661
• Remove v1.4.7 notes by @​jukie in #​7671
• chore: improve validateClusterStatName by @​zirain in #​7440
• [release-1.5] Update site versions for v1.5.6 by @​jukie in #​7672
• [release/v1.5] release note for v1.5.6 by @​zhaohuabing in #​7679
• release note for v1.6.1 by @​zhaohuabing in #​7675
• ci: OSV for stdlib by @​zirain in #​7681
• feat: notify async runner errors to the main control loop by @​nacx in #​7189
• [release/v1.6] update website for v1.6.1 by @​zhaohuabing in #​7682
• implement: wildcard and Regex matching in EarlyRequestHeaders and LateResponseHeaders by @​zhaohuabing in #​7643
• bump github.com/opencontainers/selinux by @​zirain in #​7623
• chore: bump golang.org/x/crypto by @​zirain in #​7685
• deps: Bump github.com/avast/retry-go to v5.0.0 by @​mmorel-35 in #​7673
• chore: add nareddyt as a reviewer by @​arkodg in #​7689
• feat: trace watchable messages by @​shreealt in #​7403
• fix(standalone): preserve user-configured metric sinks in host mode by @​codefromthecrypt in #​7695
• feat(gateway-helm): support loadBalancerIP for LoadBalancer service type by @​patsevanton in #​7700
• feat(telemetry): add delta temporality support for OTLP metrics by @​codefromthecrypt in #​7697
• Support custom CRDs for ExtensionServer in Standalone Mode by @​daum3ns in #​7331
• fix: set OpenTelemetry Tracer/Accesslog default protocol to GRPC by @​zirain in #​7694
• docs(values): Add comment for LoadBalancer service configuration by @​patsevanton in #​7722
• chore: update meeting schedule by @​arkodg in #​7724
• docs: fix broken links by @​zirain in #​7732
• fix: set observedGeneration in envoy patch policy by @​kkk777-7 in #​7715
• chore: bump github.com/quic-go/quic-go by @​zirain in #​7733
• feat: support direct response limit greater than 4096 by @​zirain in #​7711
• fix: prevent configuring requestMirror filter and directResponse/RequestRedirect filter together by @​zhaohuabing in #​7474
• fix: configloader data race by @​zhaohuabing in #​7729
• build(deps): bump the k8s-io group across 1 directory with 6 updates by @​dependabot[bot] in #​7739
• build(deps): bump the actions group across 1 directory with 11 updates by @​dependabot[bot] in #​7738
• build(deps): bump busybox from e3652a0 to d80cd69 in /tools/docker/envoy-gateway by @​dependabot[bot] in #​7737
• docs: Update client-traffic-policy.md to remove the deprecated enableProxyProtocol property by @​fmendez89 in #​7751
• docs: Update benchmark tool with latest versions by @​missBerg in #​7756
• fix: add validation for request buffer limit by @​kkk777-7 in #​7687
• chore: increase backend endpoints max item to 256 by @​kkk777-7 in #​7747
• helm: update gateway addons chart by @​zirain in #​7742
• chore: enable dependabot for gateway addons helm chart by @​zhaohuabing in #​7758
• dependabot: group gateway-addons-helm by @​zirain in #​7772
• docs: clarify Bearer prefix handling in API key authentication by @​Aditya7880900936 in #​7767
• fix: nil pointer error when applying BackendTrafficPolicy to HTTPRoute with no backendRefs by @​kkk777-7 in #​7765
• feat: support host rewriting for dynamic resolver by @​zhaohuabing in #​7719
• build(deps): bump sigs.k8s.io/gateway-api-inference-extension from 1.2.0 to 1.2.1 in /examples/extension-server by @​dependabot[bot] in #​7693
• build(deps): bump github/codeql-action from 4.31.8 to 4.31.9 in the actions group across 1 directory by @​dependabot[bot] in #​7764
• perf: shallow copy non-status objects in status updater by @​rudrakhp in #​7736
• feat: default remove accept encoding header by @​buroa in #​7562
• feat: change the benchmark report to json format by @​zirain in #​6818
• ci: add tests for Kubernetes 1.34 by @​beckcl in #​7680
• feat: support traffic features for OIDC provider by @​zhaohuabing in #​7757
• build(deps): bump the k8s-io group across 1 directory with 8 updates by @​dependabot[bot] in #​7773
• build(deps): bump distroless/base-nossl from a1922de to 907e776 in /tools/docker/envoy-gateway by @​dependabot[bot] in #​7691
• Add Giant Swarm to adopters list by @​weatherhog in #​7787
• api: add EnvoyProxy status by @​zirain in #​7441
• feat: Add support for PriorityClassName in EnvoyProxy pods by @​rajatvig in #​7779
• Add zapier to the Envoy Gateway adopters list by @​KalenWessel in #​7789
• docs: dynamic resolver host rewriting by @​zhaohuabing in #​7784
• feat: add default stats_tags to improve the prometheus metrics by @​zirain in #​7701
• ci: use helm v3 by @​zirain in #​7725
• feat: allow TLS termination for TLSRoute by @​NomadXD in #​7676
• chore: fix race in file resource test by @​rudrakhp in #​7803
• chore: disable metrics server in kubernetes test by @​zirain in #​7802
• build(deps): bump the gomod group across 5 directories with 28 updates by @​dependabot[bot] in #​7809
• chore: use 1MB as MaxDirectResponseBodySizeBytes by @​zirain in #​7807
• Added Tasrie IT Services as adopter by @​tasrieit in #​7818
• docs: document RateLimit metrics retrieval and PromQL by @​aponysus in #​7819
• fix scheme data race by @​zhaohuabing in #​7820
• chore: ignore test env stop error by @​zirain in #​7817
• fix(crd): correct EnvoyPatchPolicy printer columns by @​Aditya7880900936 in #​7776
• support traffic features for remote JWKS by @​zhaohuabing in #​7794
• chore: fix benchmark markdown report by @​zhaohuabing in #​7827
• api: add tags for tracing by @​zirain in #​7795
• feat(telemetry): make access log format type optional by @​codefromthecrypt in #​7720
• feat(extauth): add support for context extensions by @​maxbrunet in #​7383
• feat: global ratelimit shadow mode by @​kkk777-7 in #​7630
• fix: setting externalTrafficPolicy for NodePort service type by @​rudrakhp in #​7823
• Add tasrie enterprise support by @​tasrieit in #​7832
• fix: add indexing and processing for CRL references in ClientTrafficPolicies by @​rudrakhp in #​7829
• feat: support urlrewrite filter for individual backends by @​MUzairS15 in #​7826
• bechmark: scale up RPS to test data plane CPU performance by @​zhaohuabing in #​7810
• ci: add tests for Kubernetes 1.35 by @​beckcl in #​7788
• Migrate to buf v2 by @​jukie in #​7833
• e2e: fix WeightedRoute flaky by @​zirain in #​7841
• e2e: use MakeRequestAndExpectEventuallyConsistentResponse in Fault test by @​zirain in #​7840
• chore: update benchmark markdown description by @​zhaohuabing in #​7837
• feat: set warning status for deprecated fields by @​rudrakhp in #​7797
• feat(telemetry): add custom headers for OTLP exports (metrics, tracing, access logs) by @​codefromthecrypt in #​7674
• add ingress2eg docs by @​kkk777-7 in #​7857
• fix: support QUIC listeners with multiple filter chains for different hostnames by @​zhaohuabing in #​7843
• chore: use slices and maps packages by @​rudrakhp in #​7856
• fix: make port-forward worked for OTel collector on port 19001 by @​zirain in #​7860
• docs: Add Procore as an Envoy Gateway adopter by @​sherifabdlnaby in #​7869
• build(deps): bump the helm group across 1 directory with 7 updates by @​dependabot[bot] in #​7774
• docs: add LY Corporation as an adopter by @​everpeace in #​7877
• docs: add OPA sidecar example by @​millermatt in #​7861
• e2e: enable test by @​zirain in #​7879
• build(deps): bump the helm group across 1 directory with 5 updates by @​dependabot[bot] in #​7876
• chore: fix goroutine leak by @​zhaohuabing in #​7880
• docs: enable netlify preview by @​zirain in #​7885
• release notes for v1.5.7 by @​zirain in #​7890
• [release/v1.6] v1.6.2 release notes by @​rudrakhp in #​7891
• add ingress2eg docs in v1.5, v1.6 by @​kkk777-7 in #​7899
• fix: flaky test - use gateway website instead of nghttp2.org by @​zhaohuabing in #​7907
• feat: add minContentLength support for compression by @​rajatvig in #​7799
• chore: use Patch in HPA e2e test by @​zirain in #​7905
• fix: flaky mixed valid and invalid test by @​zhaohuabing in #​7906
• ci: netlify ignore by @​zirain in #​7908
• docs: update v1.5.7 release notes by @​zirain in #​7921
• [release/v1.6] v1.6.2 release notes update by @​rudrakhp in #​7923
• docs: bump v1.5.7 by @​zirain in #​7924
• docs: bump v1.6.2 by @​rudrakhp in #​7925
• api: review notImplementedHide tag by @​zirain in #​7919
• chore: remove lint.whitenoise and enable markdown lint MD009 by @​zirain in #​7887
• chore: fix flaky test by @​zhaohuabing in #​7928
• chore: add issue template for releasing by @​zirain in #​7933
• chore: update RM for v1.6 by @​zirain in #​7935
• doc: update upgrade guide by @​zhaohuabing in #​7936
• chore: fix OSV by @​zirain in #​7934
• perf: use UnsafeDisableDeepCopy and cache for list Unstructured Resources by @​fabian4 in #​7704
• fix: validation behavior for multiple certificate refs by @​kkk777-7 in #​7909
• feat: add support for custom span name by @​zirain in #​7540
• chore: schedule monthly patch release issue creation by @​rudrakhp in #​7939
• fix: fail fast when unrecoverable discovery errors happens on checking optional CRDs by @​zhaohuabing in #​7872
• fix: enable kubernetesAttributes preset for OpenTelemetry Collector by @​Nexusrex18 in #​7791
• build(deps): bump gonum.org/v1/gonum from 0.16.0 to 0.17.0 by @​dependabot[bot] in #​7942
• build(deps): bump the helm group across 1 directory with 4 updates by @​dependabot[bot] in #​7946
• feat(telemetry): set authority and enable TLS for telemetry backends by @​codefromthecrypt in #​7904
• set response code to 503 when cluster or endpoint not found by @​zhaohuabing in #​7938
• bump go 1.25.6 by @​zirain in #​7969
• build(deps): bump the actions group across 1 directory with 6 updates by @​dependabot[bot] in #​7974
• remove tasrie it services from adopters as we are in enterprise support by @​amjadsyedpersonal in #​7963
• build(deps): bump distroless/base-nossl from 907e776 to 16b3bc2 in /tools/docker/envoy-gateway by @​dependabot[bot] in #​7940
• build(deps): bump yamllint from 1.37.1 to 1.38.0 in /tools/src/yamllint by @​dependabot[bot] in #​7941
• chore: enabled unused parameter lint by @​zirain in #​7971
• chore: fix typo by @​zirain in #​7982
• feat(api): add addIfAbsent header action in ClientTrafficPolicy by @​michalskalski in #​7978
• fix: do not set autoHTTPConfig when used mixed(HTTP + HTTPS) backends by @​zirain in #​7950
• fix: extproc is discarded with failOpen is enabled for wasm by @​zhaohuabing in #​7956
• fix: sanitize control plane config dump by @​zhaohuabing in #​7901
• fix: backend tls default namespace by @​zhaohuabing in #​7987
• feat: cookie based match by @​zhaohuabing in #​7932
• api: add experimental Gateway API flags by @​zhaohuabing in #​7970
• feat: add support for tracing tags by @​zirain in #​7828
• chore: fix lint.codespell failed to run by @​zirain in #​7995
• build(deps): bump the gomod group across 2 directories with 12 updates by @​dependabot[bot] in #​8007
• build(deps): bump the helm group across 1 directory with 4 updates by @​dependabot[bot] in #​8008
• build(deps): bump sigs.k8s.io/controller-runtime from 0.22.4 to 0.23.0 by @​dependabot[bot] in #​8004
• build(deps): bump sigs.k8s.io/controller-runtime from 0.22.4 to 0.23.0 in /examples/extension-server by @​dependabot[bot] in #​8006
• build(deps): bump sigs.k8s.io/gateway-api-inference-extension from 1.2.1 to 1.3.0 in /examples/extension-server by @​dependabot[bot] in #​8005
• chore: disabled debug log in e2e by @​zirain in #​8019
• fix: server run race by @​zirain in #​7964
• fix: wrong cluster type with mixed FQDN backend and service backend refs by @​zhaohuabing in #​7994
• fix: resolve WASM E2E test flakiness by marking WASM files as binary and ensuring static-file-server readiness. by @​Aias00 in #​8017
• Update release managers by @​cnvergence in #​8023
• feat: add request id extension settings by @​Inode1 in #​7421
• docs: fix minor grammar by @​sudiptob2 in #​8016
• fix: Ensure CoreDNS pod readiness before running UDP route tests by @​Aias00 in #​8026
• chore: Add XDS translator test cases for local rate limiting by method and path by @​Aias00 in #​7993
• build(deps): bump busybox from d80cd69 to 2383baa in /tools/docker/envoy-gateway by @​dependabot[bot] in #​7873
• fix(kubernetes): cache unstructured resources and disable deep copy by @​aponysus in #​7822
• chore: add test for disabling lua by @​rudrakhp in #​8028
• chore: use Patch instead of Update in e2e by @​zirain in #​8012
• api: add sourceCIDRs field in SecurityPolicy for L4 IP filtering by @​zhaohuabing in #​8009
• feat: allow updating initial_fetch_timeout in bootstrap by @​andreik-n2 in #​7962
• fix: merge route match rule with match all route by [@​zirain](https://redirect.github.c

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.