v3.1.0

Important: Please read the migration guide.

Enhancements:

• [k8s,k8s/gatewayapi] Support invalid HTTPRoute status (#10714 by kevinpollet)
• [k8s,k8s/gatewayapi] KubernetesGateway provider is no longer experimental (#10840 by rtribotte)
• [k8s,k8s/gatewayapi] Bump Gateway API to v1.1.0 (#10835 by kevinpollet)
• [k8s,k8s/gatewayapi] Fix route attachments to gateways (#10761 by kevinpollet)
• [k8s,k8s/gatewayapi] Support HTTPRoute method and query param matching (#10815 by kevinpollet)
• [k8s,k8s/gatewayapi] Support HTTPURLRewrite filter (#10571 by SantoDE)
• [k8s,k8s/gatewayapi] Set Gateway HTTPRoute status (#10667 by kevinpollet)
• [k8s,k8s/gatewayapi] Support ReferenceGrant for HTTPRoute backends (#10771 by rtribotte)
• [k8s,k8s/gatewayapi] Compute HTTPRoute priorities (#10766 by kevinpollet)
• [k8s,k8s/gatewayapi] Support RegularExpression for path matching (#10717 by dmavrommatis)
• [k8s/crd,k8s] Support HealthCheck for ExternalName services (#10467 by marcmognol)
• [k8s/ingress,k8s/crd,k8s,k8s/gatewayapi] Migrate to EndpointSlices API (#10664 by jnoordsij)
• [k8s/ingress,k8s/crd,k8s] Change log level from Warning to Info when ExternalName services is enabled (#10682 by marcmognol)
• [k8s/ingress,k8s/crd,k8s] Allow to use internal Node IPs for NodePort services (#10278 by jorisvergeer)
• [middleware,k8s,k8s/gatewayapi] Improve HTTPRoute Redirect Filter with port and scheme (#10784 by rtribotte)
• [middleware,k8s,k8s/gatewayapi] Support HTTPRoute redirect port and scheme (#10802 by rtribotte)
• [middleware] Support Content-Security-Policy-Report-Only in the headers middleware (#10709 by SpecLad)
• [middleware] Add support for Zstandard to the compression middleware (#10660 by Belphemur)
• [plugins] Enhance wasm plugins (#10829 by juliens)
• [plugins] Add logs for plugins load (#10848 by mmatur)
• [server] Support systemd socket-activation (#10399 by juliens)

Bug fixes:

• [k8s,k8s/gatewayapi] Retry on Gateway API resource status update (#10881 by rtribotte)
• [k8s,k8s/gatewayapi] Do not disable Gateway API provider if not enabled in experimental (#10862 by kevinpollet)
• [otel] Bump opentelemetry-go to v1.28 (#10876 by arukiidou)
• [plugins] Fix build only linux and darwin support wazergo (#10857 by juliens)
• [healthcheck,k8s/crd,k8s] Fix Healthcheck default value for ExternalName services (#10778 by kevinpollet)
• [middleware,metrics,tracing] Upgrade to OpenTelemetry Semantic Conventions v1.26.0 (#10850 by mmatur)

Documentation:

• [k8s,k8s/gatewayapi] Fix the Kubernetes Gateway API documentation (#10844 by nmengin)
• [k8s,k8s/gatewayapi] Rework Kubernetes Gateway API documentation (#10897 by kevinpollet)
• Prepare release v3.1.0-rc3 (#10872 by rtribotte)
• Prepare release v3.1.0-rc2 (#10860 by kevinpollet)
• Prepare release v3.1.0-rc1 (#10856 by rtribotte)

Misc:

• Merge current v3.0 into v3.1 (#10902 by rtribotte)
• Merge current v3.0 into v3.1 (#10871 by rtribotte)
• Merge current v3.0 into master (#10853 by mmatur)
• Merge current v3.0 into master (#10811 by mmatur)
• Merge current v3.0 into master (#10789 by ldez)
• Merge current v3.0 into master (#10750 by kevinpollet)
• Merge current v3.0 into master (#10655 by ldez)
• Merge current v3.0 into master (#10567 by ldez)
• Merge current v3.0 into master (#10418 by mmatur)
• Merge current v3.0 into master (#10040 by mmatur)
• Merge current v3.0 into master (#9933 by ldez)
• Merge current v3.0 into master (#9897 by ldez)
• Merge current v3.0 into master (#9871 by ldez)
• Merge current v3.0 into master (#9807 by ldez)

v3.1.0-rc3

CVE: CVE-2024-39321 (Advisory GHSA-gxrv-wf35-62w9)

Important: Please read the migration guide.

Bug fixes:

• [k8s,k8s/gatewayapi] Do not disable Gateway API provider if not enabled in experimental (#10862 by kevinpollet)

Misc:

• Merge current v3.0 into v3.1 (#10871 by rtribotte)

v3.0.4

CVE: CVE-2024-39321 (Advisory GHSA-gxrv-wf35-62w9)

Documentation:

• [k8s] Fix some documentation links (#10841 by rtribotte)
• Update maintainers (#10827 by emilevauge)

Misc:

• Merge current v2.11 into v3.0 (#10869 by kevinpollet)
• Merge current v2.11 into v3.0 (#10851 by mmatur)
• Merge current v2.11 into v3.0 (#10831 by mmatur)

v2.11.6

CVE: CVE-2024-39321 (Advisory GHSA-gxrv-wf35-62w9)

Bug fixes:

• [ecs] Fix ECS config for OIDC + IRSA (#10814 by mmatur)
• [http3] Disable QUIC 0-RTT (#10867 by mmatur)
• [middleware,server] Remove interface names from IPv6 (#10813 by JeroenED)

Documentation:

• [docker,acme] Fix a typo in the ACME docker-compose docs (#10866 by ciacon)
• Update Advanced Capabilities Callout (#10846 by tomatokoolaid)
• Update maintainers (#10834 by emilevauge)
• Fix readme badge for Semaphore CI (#10830 by mmatur)
• Fix typo in keepAliveMaxTime docs (#10825 by shochdoerfer)

v3.1.0-rc2

Important: Please read the migration guide.

Enhancements:

• [k8s,k8s/gatewayapi] Support invalid HTTPRoute status (#10714 by kevinpollet)
• [k8s,k8s/gatewayapi] KubernetesGateway provider is no longer experimental (#10840 by rtribotte)
• [k8s,k8s/gatewayapi] Bump Gateway API to v1.1.0 (#10835 by kevinpollet)
• [k8s,k8s/gatewayapi] Fix route attachments to gateways (#10761 by kevinpollet)
• [k8s,k8s/gatewayapi] Support HTTPRoute method and query param matching (#10815 by kevinpollet)
• [k8s,k8s/gatewayapi] Support HTTPURLRewrite filter (#10571 by SantoDE)
• [k8s,k8s/gatewayapi] Set Gateway HTTPRoute status (#10667 by kevinpollet)
• [k8s,k8s/gatewayapi] Support ReferenceGrant for HTTPRoute backends (#10771 by rtribotte)
• [k8s,k8s/gatewayapi] Compute HTTPRoute priorities (#10766 by kevinpollet)
• [k8s,k8s/gatewayapi] Support RegularExpression for path matching (#10717 by dmavrommatis)
• [k8s/crd,k8s] Support HealthCheck for ExternalName services (#10467 by marcmognol)
• [k8s/ingress,k8s/crd,k8s,k8s/gatewayapi] Migrate to EndpointSlices API (#10664 by jnoordsij)
• [k8s/ingress,k8s/crd,k8s] Change log level from Warning to Info when ExternalName services is enabled (#10682 by marcmognol)
• [k8s/ingress,k8s/crd,k8s] Allow to use internal Node IPs for NodePort services (#10278 by jorisvergeer)
• [middleware,k8s,k8s/gatewayapi] Improve HTTPRoute Redirect Filter with port and scheme (#10784 by rtribotte)
• [middleware,k8s,k8s/gatewayapi] Support HTTPRoute redirect port and scheme (#10802 by rtribotte)
• [middleware] Support Content-Security-Policy-Report-Only in the headers middleware (#10709 by SpecLad)
• [middleware] Add support for Zstandard to the compression middleware (#10660 by Belphemur)
• [plugins] Enhance wasm plugins (#10829 by juliens)
• [plugins] Add logs for plugins load (#10848 by mmatur)
• [server] Support systemd socket-activation (#10399 by juliens)

Bug fixes:

• [healthcheck,k8s/crd,k8s] Fix Healthcheck default value for ExternalName services (#10778 by kevinpollet)
• [middleware,metrics,tracing] Upgrade to OpenTelemetry Semantic Conventions v1.26.0 (#10850 by mmatur)
• [plugins] Fix build only linux and darwin support wazergo (#10857 by juliens)

Documentation:

• [k8s,k8s/gatewayapi] Fix the Kubernetes GatewayAPI documentation (#10844 by nmengin)

Misc:

• Merge current v3.0 into master (#10853 by mmatur)
• Merge current v3.0 into master (#10811 by mmatur)
• Merge current v3.0 into master (#10789 by ldez)
• Merge current v3.0 into master (#10750 by kevinpollet)
• Merge current v3.0 into master (#10655 by ldez)
• Merge current v3.0 into master (#10567 by ldez)
• Merge current v3.0 into master (#10418 by mmatur)
• Merge current v3.0 into master (#10040 by mmatur)

v3.0.3

CVE:

• GHSA-rvj4-q8q5-8grf (Related to CVE-2024-35255)

Misc:

• Merge v2.11 into v3.0 (#10823 by kevinpollet)
• Merge v2.11 into v3.0 (#10810 by mmatur)

v2.11.5

CVE:

• GHSA-rvj4-q8q5-8grf (Related to CVE-2024-35255)

Bug fixes:

• [acme] Update go-acme/lego to v4.17.4 (#10803 by ldez)

Documentation:

• Update the supported versions table (#10798 by nmengin)

v3.0.2

CVE:

• GHSA-7jmw-8259-q9jx (Related to CVE-2024-24790)

Bug fixes:

• [logs] Bump OTel dependencies (#10763 by DrFaust92)
• [logs] Append to log file if it exists (#10756 by lbenguigui)
• [metrics] Fix service name label_replace in Grafana (#10758 by xdavidwu)
• [middleware] Forward the correct status code when compression is disabled within the Brotli handler (#10780 by rtribotte)
• [middleware] Support Accept-Encoding header weights with Compress middleware (#10777 by ldez)

Documentation:

• Update v2 > v3 migration guide (#10728 by 0anas01)

Misc:

• Merge current v2.11 into v3.0 (#10796 by kevinpollet)
• Merge current v2.11 into v3.0 (#10781 by ldez)

v2.11.4

CVE:

• GHSA-7jmw-8259-q9jx (Related to CVE-2024-24790)

Bug fixes:

• [acme] Update go-acme/lego to v4.17.3 (#10768 by ldez)

Documentation:

• [acme] Fix .com and .org domain examples (#10635 by rptaylor)
• [middleware] Add a note about the Ratelimit middleware's behavior when the sourceCriterion header is missing (#10752 by dgutzmann)
• Add user guides link to getting started (#10785 by norlinhenrik)
• Remove helm default repo warning as repo has been long deprecated (#10772 by corneliusroemer)

v3.0.1

CVE's:

• GHSA-f7cq-5v43-8pwp (Related to CVE-2024-24788)

Bug fixes:

• [k8s/ingress] Fix rule syntax version for all internal routers (#10689 by HalloTschuess)
• [metrics,tracing] Allow empty configuration for OpenTelemetry metrics and tracing (#10729 by rtribotte)
• [provider,tls] Bump tscert dependency to 28a91b69a046 (#10668 by kevinpollet)
• [rules,tcp] Fix the rule syntax mechanism for TCP (#10680 by lbenguigui)
• [tls,server] Remove deadlines when handling PostgreSQL connections (#10675 by rtribotte)
• [webui] Add support for IP White list (#10740 by davidbaptista)

Documentation:

• [http3] Add link to the new http3 config in migration (#10673 by yyewolf)
• [logs] Fix log.compress value (#10716 by mmatur)
• [metrics] Fix OTel documentation (#10723 by nmengin)
• [middleware] Fix doc consistency forwardauth (#10724 by mmatur)
• [middleware] Remove providers not supported in documentation (#10725 by mmatur)
• [rules] Fix typo in PathRegexp explanation (#10719 by BreadInvasion)
• [rules] Fix router documentation example (#10704 by ldez)