repo: Release v1.32.0 (#36597)

**Summary of changes**:

* Envoy now logs warnings when `internal_address_config` is not set.  If
you see this logged warning and wish to retain trusted status for
internal addresses you must explicitly configure
`internal_address_config` (which will turn off the warning) before the
next Envoy release.
* Removed support for (long deprecated) opentracing. 
* Added a configuration setting for the maximum size of response headers
in responses.
* Added support for `connection_pool_per_downstream_connection` flag in
tcp connection pool.
* For the strict DNS and logical DNS cluster types, the `dns_jitter`
field allows spreading out DNS refresh requests
* Added dynamic metadata matcher support `dynamic metadata input` and
`dynamic metadata input matcher`.
* The xff original IP detection method now supports using a list of
trusted CIDRs when parsing `x-forwarded-for`.
* QUIC server and client support certificate compression, which can in
some cases reduce the number of round trips required to setup a
connection.
* Added the ability to monitor CPU utilization in Linux based systems
via `cpu utilization monitor` in overload manager.
* Added new access log command operators (`%START_TIME_LOCAL%` and
`%EMIT_TIME_LOCAL%`) formatters (`%UPSTREAM_CLUSTER_RAW%`
`%DOWNSTREAM_PEER_CHAIN_FINGERPRINTS_256%`, and
`%DOWNSTREAM_PEER_CHAIN_SERIALS%`) as well as significant boosts to json
parsing.  See release notes for details
* Added support for `%BYTES_RECEIVED%`, `%BYTES_SENT%`,
`%UPSTREAM_HEADER_BYTES_SENT%`, `%UPSTREAM_HEADER_BYTES_RECEIVED%`,
`%UPSTREAM_WIRE_BYTES_SENT%`, `%UPSTREAM_WIRE_BYTES_RECEIVED%` and
access log substitution strings for UDP tunneling flows.
* Added ECDS support for UDP session filters.

**Docker images**:
    https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.32.0
**Docs**:
    https://www.envoyproxy.io/docs/envoy/v1.32.0/
**Release notes**:

https://www.envoyproxy.io/docs/envoy/v1.32.0/version_history/v1.32/v1.32.0
**Full changelog**:
    v1.31.0...v1.32.0

Signed-off-by: Alyssa Wilk <alyssar@chromium.org>

VERSION.txt

@@ -1 +1 @@
-1.32.0-dev
+1.32.0

changelogs/current.yaml

@@ -1,7 +1,6 @@
-date: Pending
+date: October 15, 2024
 
 behavior_changes:
-# *Changes that are expected to cause an incompatibility if applicable; deployment changes are likely required*
 - area: tracing
   change: |
     Removed support for (long deprecated) opentracing.  See `issue 27401
@@ -60,7 +59,6 @@ behavior_changes:
     can instead be enabled by setting compile option ``--define=execution_context=enabled``.
 
 minor_behavior_changes:
-# *Changes that may cause incompatibilities for some users, but should not for most*
 - area: command line options
   change: |
     :option:`--enable-fine-grain-logging` and :option:`--component-log-level` were incompatible in that one
@@ -138,7 +136,6 @@ minor_behavior_changes:
     runtime guard ``envoy.reloadable_features.sanitize_sni_in_access_log`` to ``false``.
 
 bug_fixes:
-# *Changes expected to improve the state of the world and are unlikely to have negative effects*
 - area: upstream
   change: |
     Use previously calculated healthcheck when endpoints move priority levels repeatedly.
@@ -230,7 +227,6 @@ bug_fixes:
     setting the runtime guard ``envoy.reloadable_features.avoid_dfp_cluster_removal_on_cds_update`` to ``false``.
 
 removed_config_or_runtime:
-# *Normally occurs at the end of the* :ref:`deprecation period <deprecated>`
 - area: upstream
   change: |
     Removed runtime flag ``envoy.reloadable_features.avoid_zombie_streams`` and legacy code paths.
@@ -459,8 +455,8 @@ new_features:
     <envoy_v3_api_msg_extensions.resource_monitors.cpu_utilization.v3.CpuUtilizationConfig>` in overload manager.
 - area: lua
   change: |
-      Added two new methods ``oidsPeerCertificate()`` and ``oidsLocalCertificate()`` to SSL
-      connection object API :ref:`SSL connection info object <config_http_filters_lua_ssl_socket_info>`.
+    Added two new methods ``oidsPeerCertificate()`` and ``oidsLocalCertificate()`` to SSL
+    connection object API :ref:`SSL connection info object <config_http_filters_lua_ssl_socket_info>`.
 - area: local_ratelimit
   change: |
     Add the :ref:`rate_limits
@@ -498,5 +494,3 @@ new_features:
     Added a new WIP implementation of :ref:`client_side_weighted_round_robin
     <envoy_v3_api_msg_extensions.load_balancing_policies.client_side_weighted_round_robin.v3.ClientSideWeightedRoundRobin>`
     load balancing policy that uses ``OrcaLoadReport`` provided by the upstream host to calculate host load balancing weight.
-
-deprecated: