v1.6.5
less than a minute
Date: March 12, 2026
Breaking changes
Security updates
- Bump golang to
1.25.8for security fixes to the go command and thecrypto/tlspackage. - Bump Envoy Proxy image to v1.36.5 for fixing several security issues and bug fixes. For more details, please refer to the Envoy Proxy v1.36.5 release notes.
- Bump Envoy ratelimit image to
c8765e89with security fixes for Go.
New features
Bug fixes
- Fixed local object reference resolution from parent policy in merged BackendTrafficPolicies.
- Fixed route and policy status aggregation across multiple GatewayClasses managed by the same controller, so resources preserve status from all relevant parents and ancestors instead of being overwritten by the last processed GatewayClass.
- Exclude unmanaged route parents from xPolicy status ancestors.
- Fixed an issue where computeHosts doesn’t work when listener and route both wildcard.
- Add ownership references to ratelimit ConfigMap and HPA resources.
- Made ConnectionLimit.Value optional so users can configure MaxConnectionDuration, MaxRequestsPerConnection, or MaxStreamDuration without setting a max connections value.
Performance improvements
Deprecations
Other changes
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.