v1.6.3

less than a minute

Date: January 26, 2026

Breaking changes

Bump golang to v1.25.6.
Bump Envoy proxy version to v1.36.4. Includes security patches for CVE-2025-0913. Ref: https://github.com/envoyproxy/envoy/releases/tag/v1.36.4.
Bump Envoy rate limit version to 3fb70258.

Fixed an issue where unrecoverable discovery errors on checking optional CRDs caused the EG pod to reconcile incomplete resources.
Fixed an issue where ExtProc is discarded when failOpen is enabled for Wasm.
Fixed an issue where sensitive data was exposed in control plane config dump.
Fixed an issue where auto-detect upstream protocol breaks with multiple backends(HTTP + HTTPS).
Fixed a server run race condition that could cause goroutine leaks during config reloading.
Fix to set default namespace for TLS secret object reference to owner namespace.
Fixed an issue where wrong cluster type was used with mixed FQDN backend and service backend refs.
Fixed an issue where routes with match-all rules were incorrectly merged with specific match rules.

Was this page helpful?

Sorry to hear that. Please tell us how we can improve.