Releases: envoyproxy/envoy
v1.28.2
repo: Release v1.28.2
Summary of changes:
- Patch nghttp2 to resolve CVE-2024-30255
- Assorted fixes
Docker images:
https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.28.2
Docs:
https://www.envoyproxy.io/docs/envoy/v1.28.2/
Release notes:
https://www.envoyproxy.io/docs/envoy/v1.28.2/version_history/v1.28/v1.28.2
Full changelog:
v1.28.1...v1.28.2
Signed-off-by: Ryan Northey ryan@synca.io
Signed-off-by: Yan Avlasov yavlasov@google.com
v1.27.4
repo: Release v1.27.4
Summary of changes:
- Patch nghttp2 to resolve CVE-2024-30255
- Assorted fixes
Docker images:
https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.27.4
Docs:
https://www.envoyproxy.io/docs/envoy/v1.27.4/
Release notes:
https://www.envoyproxy.io/docs/envoy/v1.27.4/version_history/v1.27/v1.27.4
Full changelog:
v1.27.3...v1.27.4
Signed-off-by: Ryan Northey ryan@synca.io
Signed-off-by: Yan Avlasov yavlasov@google.com
v1.26.8
repo: Release v1.26.8
Summary of changes:
- Patch nghttp2 to resolve CVE-2024-30255
- Assorted fixes
Docker images:
https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.26.8
Docs:
https://www.envoyproxy.io/docs/envoy/v1.26.8/
Release notes:
https://www.envoyproxy.io/docs/envoy/v1.26.8/version_history/v1.26/v1.26.8
Full changelog:
v1.26.7...v1.26.8
Signed-off-by: Ryan Northey ryan@synca.io
Signed-off-by: Yan Avlasov yavlasov@google.com
v1.29.2
repo: Release v1.29.2
Summary of changes:
- Revert default codec to nghttp2 as a number of users have reported issues with
oghttp2 including #32611 and #32401 - Assorted minor fixes
Docker images:
https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.29.2
Docs:
https://www.envoyproxy.io/docs/envoy/v1.29.2/
Release notes:
https://www.envoyproxy.io/docs/envoy/v1.29.2/version_history/v1.29/v1.29.2
Full changelog:
v1.29.1...v1.29.2
Signed-off-by: Ryan Northey ryan@synca.io
v1.29.1
repo: Release v1.29.1
Summary of changes:
- Fix CVE-2024-23324
- Fix CVE-2024-23325
- Fix CVE-2024-23322
- Fix CVE-2024-23323
- Fix CVE-2024-23327
- Assorted bug fixes
Docker images:
https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.29.1
Docs:
https://www.envoyproxy.io/docs/envoy/v1.29.1/
Release notes:
https://www.envoyproxy.io/docs/envoy/v1.29.1/version_history/v1.29/v1.29.1
Full changelog:
v1.29.0...v1.29.1
Signed-off-by: Ryan Northey ryan@synca.io
v1.28.1
repo: Release v1.28.1
Summary of changes:
- Fix CVE-2024-23324
- Fix CVE-2024-23325
- Fix CVE-2024-23322
- Fix CVE-2024-23323
- Fix CVE-2024-23327
- Assorted bug fixes
Docker images:
https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.28.1
Docs:
https://www.envoyproxy.io/docs/envoy/v1.28.1/
Release notes:
https://www.envoyproxy.io/docs/envoy/v1.28.1/version_history/v1.28/v1.28.1
Full changelog:
v1.28.0...v1.28.1
Signed-off-by: Ryan Northey ryan@synca.io
v1.27.3
repo: Release v1.27.3
Summary of changes:
- Fix CVE-2024-23324
- Fix CVE-2024-23325
- Fix CVE-2024-23322
- Fix CVE-2024-23323
- Fix CVE-2024-23327
- Assorted bug fixes
Docker images:
https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.27.3
Docs:
https://www.envoyproxy.io/docs/envoy/v1.27.3/
Release notes:
https://www.envoyproxy.io/docs/envoy/v1.27.3/version_history/v1.27/v1.27.3
Full changelog:
v1.27.2...v1.27.3
Signed-off-by: Ryan Northey ryan@synca.io
v1.26.7
repo: Release v1.26.7
Summary of changes:
- Fix CVE-2024-23324
- Fix CVE-2024-23325
- Fix CVE-2024-23322
- Fix CVE-2024-23323
- Fix CVE-2024-23327
Docker images:
https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.26.7
Docs:
https://www.envoyproxy.io/docs/envoy/v1.26.7/
Release notes:
https://www.envoyproxy.io/docs/envoy/v1.26.7/version_history/v1.26/v1.26.7
Full changelog:
v1.26.6...v1.26.7
Signed-off-by: Ryan Northey ryan@synca.io
v1.29.0
repo: Release v1.29.0
Summary of changes:
- Envoy Mobile can now be built without C++ exceptions using the
--define=envoy_exceptions=disabled
Bazel flag. - Add the logical
OR
operation to value matchers. - Add xDS support for Envoy Mobile Android (AAR) library.
- Add configurable HTTP status when a global rate limit service fails.
- Opentelemetry tracer: add support for environment resource detector.
- Added HTTP basic auth extension.
- Add support for ext_authz to send route metadata.
- Allow per route body buffering configuration in ext_authz.
- Datadog: honor extracted sampling decisions to avoid dropping samples.
- gRPC side streams: make idle connection timeout configurable.
- Support CEL expressions in ext_proc for extraction of request or response atributes.
- HTTP: clear hop by hop
Transfer-Encoding
header. - Redis: Add support for the
WATCH
andGETDEL
commands. - Adds strict mode for stateful session filter, that rejects requests if destination host is not available.
- Internal redirects: support passing headers from response to request.
- Add implementation of the
drop_overload
Cluster API. - HTTP/2: discard the
Host
header when:authority
is present. - grpc_http1_bridge: add
<ignore_query_params>
option. - Access Log: Add
EMIT_TIME
command operator. - ECDS now supports composite filter.
- Enable new oghttp2 codec for HTTP/2 connections.
Docker images:
https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.29.0
Docs:
https://www.envoyproxy.io/docs/envoy/v1.29.0/
Release notes:
https://www.envoyproxy.io/docs/envoy/v1.29.0/version_history/v1.29/v1.29.0
Full changelog:
v1.28.0...v1.29.0
Signed-off-by: Ryan Northey ryan@synca.io
Signed-off-by: Yan Avlasov yavlasov@google.com
v1.28.0
repo: Release v1.28.0
Summary of major changes:
- Switched from http_parser to BalsaParser for HTTP/1.1 traffic
- Promoted TLS inspector to be robust against unstrusted downstreams and upstreams.
- Added glob control for fine-grained logging in admin interface.
- Added an optimization to defer the cluster creation on workers
- Added support for caching EDS response with ADS
- Added ECDS support for downstream and upstream network filters
- Report the correct response code in the access log
- Added a filter to extract JSON payload to metadata
- Added a filter to update filter state objects
- Added a filter for Maxmind geolocation provider
- Added support for tracking the global downstream connection limits in the overload manager.
- Added support for HTTP Capsule protocol that can be used to encapsulate and decapsulate UDP datagrams in HTTP
- Added the support to detect and send TCP RST for the raw buffer socket based connections on Linux.
- Announced deprecation of OpenTracing and OpenCensus and future removal at version 1.30.
Docker images:
https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.28.0
Docs:
https://www.envoyproxy.io/docs/envoy/v1.28.0/
Release notes:
https://www.envoyproxy.io/docs/envoy/v1.28.0/version_history/v1.28/v1.28.0
Full changelog:
v1.27.0...v1.28.0
Signed-off-by: Ryan Northey ryan@synca.io
Signed-off-by: Kuat Yessenov kuat@google.com