[release/v1.4] cherry-pick for v1.4.5#7242

Merged

arkodg merged 6 commits intoenvoyproxy:release/v1.4from

shawnh2:rel-1.4.5

Oct 15, 2025

Commits on Oct 15, 2025

fix(xds-server): clear snapshot on stream close (#6618)

Hackzzila
authored and
shawnh2
committed
bug: disable x-envoy-ratelimited by default (#7110)

arkodg
authored and
shawnh2
committed
fix(translator): Fix panic with request mirror + grpcroute (#6875)

AndyMoreland
authored and
shawnh2
committed
fix: bug in overlap detection of cert SANs (#7234)

rudrakhp
authored and
shawnh2
committed
bump golang for crypto/x509 reggression (#7236)

zirain
authored and
shawnh2
committed
fix gen-check
shawnh2
committed