v1.5.5

Date: November 14, 2025

Breaking changes

Security updates

New features

Bug fixes

  • Fixed 500 errors caused by partially invalid BackendRefs; traffic is now correctly routed between valid backends and 500 responses according to their configured weights.
  • Fixed certificate SAN overlap detection in gateway listeners.
  • Fixed panic with request mirror with GRPCRoute.
  • Fixed listener port limit typo 65353 -> 65535.
  • Fixed validating EnvoyGateway configuration during a config update.
  • Fixed missing JWT provider configuration when JWT authentication is configured on multiple HTTP listeners sharing the same port.
  • Fixed IP family not set in UDPListener.
  • Fixed issue where didn’t watch change for the ca cert in the Backend.

Performance improvements

  • Fixed an memory leak issue where `watchable.Maps`` never closed when shutting down the provider.
  • Coalesced updates to reduce intermediate updates.

Deprecations

Other changes


Last modified November 14, 2025: release notes for v1.5.5 (#7511) (5ea3e09)