v1.5.6

less than a minute

Date: December 05, 2025

Breaking changes

Patches for EnvoyProxy CVE-2025-64527, CVE-2025-66220, and CVE-2025-64763. Ref https://github.com/envoyproxy/envoy/releases/tag/v1.35.7

Fixed xDS snapshot cache to clear snapshots when streams close, preventing proxies from receiving stale configuration after reconnection.
Fixed configured OIDC authorization endpoint being overridden by discovered endpoints from issuer’s well-known URL.
Fixed an issue with gateway ownership tracking when running multiple controllers.
Fixed default namespace handling when namespace is unset.
Fixed a bug where HTTPRoutes referencing gateways with multiple different GatewayClasses would have incomplete status conditions.
Fixed gateway status to treat too many addresses as programmed.

Added disk space reclamation script for CI runners to prevent out-of-disk errors.
Bumped golang.org/x/crypto dependency.

Was this page helpful?

Sorry to hear that. Please tell us how we can improve.