What's Changed

• Add Flux installation guide by @matheuscscp in #8864
• fix(api): increase RateLimitSelectCondition.headers MaxItems from 16 to 64 by @wucm667 in #8906
• skip invalid listener first in IR by @zirain in #8577
• feat: policy field owner by @kkk777-7 in #8538
• docs(tasks): add documentation for Dynamic Modules configuration example by @sjoukedv in #8908
• fix: remove cross ns policy attachment status by @zhaohuabing in #8901
• build(deps): bump npm-check-updates from 22.0.1 to 22.1.0 in /site by @dependabot[bot] in #8918
• build(deps): bump sigs.k8s.io/controller-runtime from 0.23.3 to 0.24.0 in /examples/extension-server by @dependabot[bot] in #8924
• build(deps): bump the helm group across 1 directory with 2 updates by @dependabot[bot] in #8925
• build(deps): bump github/codeql-action from 4.35.2 to 4.35.3 in the actions group across 1 directory by @dependabot[bot] in #8920
• feat: add runner event metrics by @zirain in #8802
• build(deps): bump sigs.k8s.io/mcs-api from 0.4.1 to 0.5.0 by @dependabot[bot] in #8923
• fix: respect backend endpoint hostname for health checks by @arkodg in #8929
• fix(helm): propagate commonLabels to RBAC resources by @mvanhorn in #8818
• fix(translator): set ListenerSet and listener Accepted:True for InvalidCertificateRef by @apkatsikas in #8871
• fix: do not downgrade ALPN for only hostnames-overlapping listeners by @zhaohuabing in #8934
• build(deps): bump the gomod group across 6 directories with 9 updates by @dependabot[bot] in #8931
• feat: enableDeferredCreationStats by default by @zirain in #8937
• bump golang to 1.26.3 by @zirain in #8943
• chore: mute OSV scanner by @zirain in #8945
• chore: use os.Stdout instead of t.Output() by @zirain in #8860
• [release/v1.7] update docs and add release notes by @cnvergence in #8947
• [release/v1.7] add benchmark report for v1.7.3 by @cnvergence in #8954
• fix: restore last transition time in merge status conditions by @rudrakhp in #8962
• docs: fix the version in release announcement link by @cnvergence in #8966
• [release/v1.8] v1.8.0 release docs and announcement by @jukie in #8942
• build(deps): bump the actions group across 1 directory with 4 updates by @dependabot[bot] in #8976
• build(deps): bump npm-check-updates from 22.1.0 to 22.2.0 in /site by @dependabot[bot] in #8972
• chore: remove unnecessary overlapping hostnames in the http3 test yaml by @zhaohuabing in #8963
• build(deps): bump the gomod group across 2 directories with 2 updates by @dependabot[bot] in #8973
• build(deps): bump the k8s-io group across 1 directory with 6 updates by @dependabot[bot] in #8974
• fix: add unary interceptor and fix fail-open auth in GatewayNamespaceMode by @cnvergence in #8986
• build(deps): bump the helm group across 1 directory with 2 updates by @dependabot[bot] in #8978
• build(deps): bump sigs.k8s.io/controller-runtime from 0.24.0 to 0.24.1 by @dependabot[bot] in #8975
• bump lastVersionTag to v1.8.0 by @jukie in #8992
• feat: add envoyproxy status by @zirain in #8475
• build(deps): bump sigs.k8s.io/controller-runtime from 0.24.0 to 0.24.1 in /examples/extension-server by @dependabot[bot] in #8977
• Add gateway-api v1.5.1 mention to v1.8.0 release notes by @jukie in #8999
• Update benchmarks dashboard for v1.8.0 by @jukie in #9002
• Update non--crash-security--bug.md by @guydc in #9000
• update docs links to 1.8.0 by @zhaohuabing in #9005
• chore: fix gateway API docs links by @zhaohuabing in #9006
• [release/v1.8] fix benchmark report for v1.8.0 by @jukie in #9007
• fix(charts): add Gateway API v1.5 ListenerSet metrics to kube-state-metrics by @samuelmasuy in #9001
• fix(charts): split combined autoscaling/policy RBAC rule in infra-manager by @samuelmasuy in #9013
• fix: applyBackendTLSSetting panic by @zirain in #8998
• fix(xds): hot-reload xDS server cert in GatewayNamespaceMode by @nguyenptk in #8959
• docs: move v1.8 CRD upgrade note by @arkodg in #9017
• docs: add bandwidth docs by @kkk777-7 in #8939
• fix(helm): correct typo in HPA maxReplicas required message by @benjaminch in #9032
• docs: highlight Gateway API compatibility by @zhaohuabing in #9010
• build(deps): bump distroless/base-nossl from f71dcb6 to 20f009e in /tools/docker/envoy-gateway by @dependabot[bot] in #9038
• chore: replace Deprecated CEL ParsedExpr Oneof With CelExprParsed by @zhaohuabing in #8982
• chore: update release note for v1.9 by @kkk777-7 in #9045
• build(deps): bump the gomod group across 5 directories with 6 updates by @dependabot[bot] in #9040
• build(deps): bump the helm group across 1 directory with 2 updates by @dependabot[bot] in #9041
• feat: disabled automountServiceAccountToken by default by @zirain in #9051
• feat: allow to custom pod securityContext in gateway-helm by @zirain in #9036
• fix: bump osv scanner by @jukie in #9070
• chore: add deprecated field check by @kkk777-7 in #9072
• docs: fix ClientTrafficPolicy verification steps by @apkatsikas in #9076
• fix backend.tls.clientCertificateRef override test by @guydc in #9077
• add depkeep to enterprise support by @pkuzco in #9046
• lua: deprecate disableLua in favor of enableLua by @rudrakhp in #9081
• chore: fix osv scan by @zhaohuabing in #9080
• fix: allow IANA cipher names by @zhaohuabing in #9073
• chore: address comment by @zirain in #9055
• build(deps): bump the actions group across 1 directory with 4 updates by @dependabot[bot] in #9090
• build(deps): bump cel.dev/expr from 0.25.1 to 0.25.2 by @dependabot[bot] in #9089
• build(deps): bump busybox from 1487d0a to fd8d9aa in /tools/docker/envoy-gateway by @dependabot[bot] in #9087
• build(deps): bump github.com/docker/cli from 29.5.1+incompatible to 29.5.2+incompatible in the gomod group across 1 directory by @dependabot[bot] in #9088
• build(deps): bump the helm group across 1 directory with 4 updates by @dependabot[bot] in #9092
• fix(gatewayapi): prefer sectioned BackendTLSPolicy over wildcard for same target by @AlecDiraimondo in #9068
• chore: hide ForwardIDToken by @zhaohuabing in #9085
• chore: fix docs link by @zirain in #9101
• build(deps): bump npm-check-updates from 22.2.0 to 22.2.1 in /site by @dependabot[bot] in #9091
• fix: encode TLS secrets with canonical PEM formatting by @cnvergence in #8744
• chore: update deprecated docker libraries by @cnvergence in #9106
• build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #9109
• docs: copy Lua extensions security warning to v1.8 and v1.7 by @rudrakhp in #9113
• fix: MaxStreamDuration should worked for non-route cluster by @zirain...

Release Announcement

Check out the v1.8.3 release announcement to learn more about the release.

What's Changed

• [release-1.8]: bump the gomod group across 1 directory with 3 updates by @dependabot[bot] in #9389
• [release-1.8]: bump the gomod group across 1 directory with 2 updates by @dependabot[bot] in #9435
• [release-1.8]: bump the actions group across 1 directory with 6 updates by @dependabot[bot] in #9440
• [release-1.8]: bump the actions group across 1 directory with 7 updates by @dependabot[bot] in #9507
• [release-1.8]: bump the gomod group across 1 directory with 4 updates by @dependabot[bot] in #9502
• [release-1.8]: bump sigs.k8s.io/mcs-api from 0.4.1 to 0.5.2 by @dependabot[bot] in #9503
• [release-1.8]: bump distroless/base-nossl from 20f009e to 86554c4 in /tools/docker/envoy-gateway by @dependabot[bot] in #9497
• fix: reject TLS secret when certificate and private key do not match by @zhaohuabing in #9487
• [release-1.8] release notes and version bump for v1.8.3 by @jukie in #9520
• [release-1.8] V1.8.3 cherry picks by @jukie in #9540
• [release-1.8]: bump the gomod group across 1 directory with 7 updates by @dependabot[bot] in #9547
• [release-1.8]: bump the actions group across 2 directories with 6 updates by @dependabot[bot] in #9551
• [release-1.8] fix: update ratelimit image fallback tag in helm helpers by @jukie in #9552

Full Changelog: v1.8.2...v1.8.3

Release Announcement

Check out the v1.7.5 release announcement to learn more about the release.

What's Changed

• [release-1.7] don't mark as latest by @zirain in #9178
• [release-1.7] bump codecov by @zirain in #9301
• [release-1.7]: bump go.uber.org/zap from 1.27.1 to 1.28.0 by @dependabot[bot] in #9311
• build(deps): bump the actions group across 2 directories with 17 updates by @dependabot[bot] in #9302
• [release-1.7]: bump codespell from 2.4.1 to 2.4.2 in /tools/src/codespell by @dependabot[bot] in #9303
• [release-1.7]: bump the gomod group across 1 directory with 35 updates by @dependabot[bot] in #9307
• [release-1.7]: bump distroless/base-nossl from 16b3bc2 to 20f009e in /tools/docker/envoy-gateway by @dependabot[bot] in #9323
• [release-1.7]: bump actions/setup-go from 6.4.0 to 6.5.0 in /tools/github-actions/setup-deps in the actions group across 1 directory by @dependabot[bot] in #9329
• [release-1.7]: bump busybox from e226d63 to fd8d9aa in /tools/docker/envoy-gateway by @dependabot[bot] in #9322
• [release-1.7]: bump the gomod group across 1 directory with 7 updates by @dependabot[bot] in #9345
• [release-1.7]: bump the gomod group across 1 directory with 5 updates by @dependabot[bot] in #9391
• [release/v1.7] cherry-pick for v1.7.5 by @cnvergence in #9429
• [release-1.7]: bump the actions group across 1 directory with 6 updates by @dependabot[bot] in #9441
• [release-1.7]: bump the gomod group across 1 directory with 3 updates by @dependabot[bot] in #9438
• [release/v1.7] bump golang to 1.26.5 and 1.25.12 by @cnvergence in #9447

Full Changelog: v1.7.4...v1.7.5

Release Announcement

Check out the v1.8.2 release announcement to learn more about the release.

What's Changed

• [chore] bump codecov by @zirain in #9264
• [release-1.8] chore: bump base image by @zirain in #9263
• build(deps): bump the actions group across 1 directory with 8 updates by @dependabot[bot] in #9284
• build(deps): bump busybox from 1487d0a to fd8d9aa in /tools/docker/envoy-gateway by @dependabot[bot] in #9275
• [release-1.8]: bump the gomod group across 1 directory with 24 updates by @dependabot[bot] in #9304
• [release-1.8]: bump helm.sh/helm/v3 from 3.21.0 to 3.21.2 in the gomod group across 1 directory by @dependabot[bot] in #9326
• [release-1.8]: bump actions/setup-go from 6.4.0 to 6.5.0 in /tools/github-actions/setup-deps in the actions group across 1 directory by @dependabot[bot] in #9330
• [release-1.8] release notes and version bump for v1.8.2 by @jukie in #9364
• [release-1.8] cherry-pick for v1.8.2 by @jukie in #9376

Full Changelog: v1.8.1...v1.8.2

Release Announcement

Check out the v1.8.1 release announcement to learn more about the release.

What's Changed

• [release/v1.8] fix: add unary interceptor and fix fail-open auth in GatewayNamespaceMode (#8986) by @cnvergence in #9118
• [release-1.8] bump envoy to 1.38.1 by @zirain in #9168
• [release/v1.8] cherry-pick for v1.8.1 by @jukie in #9169
• [release-1.8] fix github SA for June release by @zirain in #9172
• [release-1.8] cherry-pick release notes and version bump by @jukie in #9174

Full Changelog: v1.8.0...v1.8.1

Release Announcement

Check out the v1.7.4 release announcement to learn more about the release.

What's Changed

• [release/v1.7] fix: add unary interceptor and fix fail-open auth in GatewayNamespaceMode (#8986) by @cnvergence in #9116
• [release/v1.7] bump ratelimit to b8d893f3 by @cnvergence in #9119
• [release-1.7] chore: bump golang to 1.25.11 by @zirain in #9148
• [release-1.7] cherry pick for v1.7.4 by @zirain in #9152
• [release/v1.7] cherry-pick for v1.7.4 by @cnvergence in #9120
• [release-1.7] bump envoy to 1.37.3 by @zirain in #9167
• [release-1.7] fix github SA for June release by @zirain in #9171
• [release-1.7] cherry pick release notes and bump version by @zirain in #9176

Full Changelog: v1.7.3...v1.7.4

Release Announcement

Check out the v1.8.0 release announcement to learn more about the release.

What's Changed

• e2e: speed tracing tests by @zirain in #8124
• fix(translator): allow single-label backends in host mode by @codefromthecrypt in #8123
• ci: release json report by @zirain in #8107
• fix oidc flakiness by @zhaohuabing in #8119
• fix: skip_test_workflow doesn't exist by @dylanmtaylor in #8116
• fix e2e test panic by @zhaohuabing in #8109
• chore: bump func-e to v1.4.0 by @codefromthecrypt in #8105
• fix: route idle timeout by @zhaohuabing in #8058
• docs: add Mirakl to adopters list by @twandja in #8138
• docs: add security warning to control plane extensions by @guydc in #7967
• chore: add lint for release notes filenames by @zirain in #8137
• fix: remove global logger in message package by @zirain in #8131
• docs: fix url result of regex rewrite by @SadmiB in #7864
• chore: log skipped xds by @zhaohuabing in #8132
• docs: fixes for OPA sidecar + Unix Domain Socket task by @millermatt in #8142
• fix: basic auth validation by @zhaohuabing in #8053
• fix: controller cache-sync readiness check by @jukie in #7430
• fix: replace context.TODO with timeout context in config dump by @jaffarkeikei in #8122
• refactor: convert IR map fields to slices to ensure deterministic Dee… by @Junnygram in #7953
• fix links in releasing and develop docs by @cnvergence in #8141
• docs: add provider guide for entra by @oliverbaehler in #7977
• chore: clean up test output files by @zhaohuabing in #8154
• fix: TCPRoute mTLS didn't work by @zirain in #8152
• v1.7.0-rc2 release notes by @cnvergence in #8163
• chore(docs): Update Azure Entra link in OIDC guide by @guydc in #8167
• fix: continue processing the remaining xDS with invalid EnvoyPatchPolicies by @zhaohuabing in #8153
• build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #8178
• fix: skip provision when IR Infra is invalid by @zirain in #7754
• docs: add HTTP header and method based authentication task by @Aditya7880900936 in #7990
• fix: Validation of XListenerSet certificateRefs by @krishicks in #8168
• fix: Remove whitespace for nodeSelector in deployment YAML - helm chart change by @jess-belliveau in #8185
• [release/v1.7.0] release notes by @cnvergence in #8188
• [release/v1.7] v1.7.0 release docs and announcement by @cnvergence in #8191
• [release/v1.7.0] update eg upgrade test and fix ordering by @cnvergence in #8195
• docs: reword updating shortcode prefixes in releasing.md by @cnvergence in #8196
• build(deps): bump busybox from e226d63 to b3255e7 in /tools/docker/envoy-gateway by @dependabot[bot] in #8175
• build(deps): bump distroless/base-nossl from 16b3bc2 to d90f132 in /tools/docker/envoy-gateway by @dependabot[bot] in #8174
• chore: enable DisallowUnknownFields for xds translator by @zirain in #8203
• chore bump golang 1.25.7 by @zirain in #8205
• build(deps): bump the gomod group across 1 directory with 11 updates by @dependabot[bot] in #8177
• feat(helm): add commonLabels support to helm chart by @gaganhr94 in #8078
• build(deps): bump the helm group across 1 directory with 3 updates by @dependabot[bot] in #8179
• fix(gatewayapi): reject ClientTrafficPolicy with invalid TLS cipher by @Junnygram in #8040
• feat (translator): support optional health check configuration by @cryoshida in #7959
• chore: install crds separated by @zirain in #8223
• chore: fix make gen-check by @zirain in #7937
• fix: XListenerSet allows route from same namespace by @krishicks in #8226
• fix gateway api crd gen by @zhaohuabing in #8238
• chore: fix flaky retry test by @zirain in #8020
• feat: support ShadowMode in local ratelimit by @zirain in #8076
• chore: add missing release notes for #8076 by @zirain in #8243
• chore: remove useless address by @zirain in #8216
• release notes for v1.6.4 by @zirain in #8221
• release notes for v1.5.9 by @zirain in #8219
• update release notes by @zirain in #8253
• fix: re-enable ext-auth timeout test by @zirain in #8070
• chore: fix ExtAuthTimeout flaky by @zirain in #8255
• doc: bump v1.5.9 by @zirain in #8256
• docs: bump version by @zirain in #8257
• chore: Update default kind and metallb versions by @jukie in #8254
• chore: update v1.6 compatibility matrix versions by @rudrakhp in #8260
• build(deps): bump github/codeql-action from 4.32.1 to 4.32.2 in the actions group across 1 directory by @dependabot[bot] in #8248
• build(deps): bump the k8s-io group across 1 directory with 6 updates by @dependabot[bot] in #8249
• build(deps): bump the gomod group across 2 directories with 3 updates by @dependabot[bot] in #8246
• build(deps): bump the helm group across 1 directory with 5 updates by @dependabot[bot] in #8250
• feat: enable command operators for httproute filter directresponse by @6ixfalls in #8183
• fix test race by @zirain in #8180
• chore: update experimental conformance by @zirain in #8269
• feat: jaX fingerprint support by @Inode1 in #7983
• feat: support egctl config envoy-gateway by @zhaohuabing in #8251
• fix: API key auth by @zhaohuabing in #8267
• feat: Add WeightedZones to PreferLocalZones by @jukie in #7251
• docs: render crds in example install command by @NilsGriebner in #8225
• chore: Fix JA Fingerprint ipv6 e2e by @jukie in #8298
• build(deps): bump github.com/envoyproxy/go-control-plane/envoy from 1.36.1-0.20260127060829-c81ce9094f67 to 1.37.0 by @dependabot[bot] in #8292
• build(deps): bump the actions group across 1 directory with 6 updates by @dependabot[bot] in #8296
• build(deps): bump distroless/base-nossl from d90f132 to f8ebb45 in /tools/docker/envoy-gateway by @dependabot[bot] in #8290
• build(deps): bump prometheus from 28.9.0 to 28.9.1 in /charts/gateway-addons-helm in the helm group across 1 directory by @dependabot[bot] in #8297
• build(deps): bump the gomod group across 1 directory with 2 updates by @dependabot[bot] in #8303
• Use sub-chart for CRDs to reduce chart size by @jukie in #8283
• chore: gh action for running gen check by @rudrakhp in #8304
• fix: add mutex lock to snapshot cache OnStreamResponse/OnStreamDeltaResponse by @jaffarkeikei in #8277
• docs: update proxy protocol docs for client traffic policies by @kraashen in #8310
• fix release notes order in the docs by @cnvergence in #8316
• e2e: improve SessionPersistence...

Release Announcement

Check out the v1.7.3 release announcement to learn more about the release.

What's Changed

• [release/v1.7] bump grpc and otel by @cnvergence in #8846
• [release-1.7] bump golang by @zirain in #8944
• [release/v1.7] Cherry-pick for v1.7.3 by @cnvergence in #8869
• [release/v1.7] update release notes by @cnvergence in #8946

Full Changelog: v1.7.2...v1.7.3

What's Changed

• e2e: speed tracing tests by @zirain in #8124
• fix(translator): allow single-label backends in host mode by @codefromthecrypt in #8123
• ci: release json report by @zirain in #8107
• fix oidc flakiness by @zhaohuabing in #8119
• fix: skip_test_workflow doesn't exist by @dylanmtaylor in #8116
• fix e2e test panic by @zhaohuabing in #8109
• chore: bump func-e to v1.4.0 by @codefromthecrypt in #8105
• fix: route idle timeout by @zhaohuabing in #8058
• docs: add Mirakl to adopters list by @twandja in #8138
• docs: add security warning to control plane extensions by @guydc in #7967
• chore: add lint for release notes filenames by @zirain in #8137
• fix: remove global logger in message package by @zirain in #8131
• docs: fix url result of regex rewrite by @SadmiB in #7864
• chore: log skipped xds by @zhaohuabing in #8132
• docs: fixes for OPA sidecar + Unix Domain Socket task by @millermatt in #8142
• fix: basic auth validation by @zhaohuabing in #8053
• fix: controller cache-sync readiness check by @jukie in #7430
• fix: replace context.TODO with timeout context in config dump by @jaffarkeikei in #8122
• refactor: convert IR map fields to slices to ensure deterministic Dee… by @Junnygram in #7953
• fix links in releasing and develop docs by @cnvergence in #8141
• docs: add provider guide for entra by @oliverbaehler in #7977
• chore: clean up test output files by @zhaohuabing in #8154
• fix: TCPRoute mTLS didn't work by @zirain in #8152
• v1.7.0-rc2 release notes by @cnvergence in #8163
• chore(docs): Update Azure Entra link in OIDC guide by @guydc in #8167
• fix: continue processing the remaining xDS with invalid EnvoyPatchPolicies by @zhaohuabing in #8153
• build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #8178
• fix: skip provision when IR Infra is invalid by @zirain in #7754
• docs: add HTTP header and method based authentication task by @Aditya7880900936 in #7990
• fix: Validation of XListenerSet certificateRefs by @krishicks in #8168
• fix: Remove whitespace for nodeSelector in deployment YAML - helm chart change by @jess-belliveau in #8185
• [release/v1.7.0] release notes by @cnvergence in #8188
• [release/v1.7] v1.7.0 release docs and announcement by @cnvergence in #8191
• [release/v1.7.0] update eg upgrade test and fix ordering by @cnvergence in #8195
• docs: reword updating shortcode prefixes in releasing.md by @cnvergence in #8196
• build(deps): bump busybox from e226d63 to b3255e7 in /tools/docker/envoy-gateway by @dependabot[bot] in #8175
• build(deps): bump distroless/base-nossl from 16b3bc2 to d90f132 in /tools/docker/envoy-gateway by @dependabot[bot] in #8174
• chore: enable DisallowUnknownFields for xds translator by @zirain in #8203
• chore bump golang 1.25.7 by @zirain in #8205
• build(deps): bump the gomod group across 1 directory with 11 updates by @dependabot[bot] in #8177
• feat(helm): add commonLabels support to helm chart by @gaganhr94 in #8078
• build(deps): bump the helm group across 1 directory with 3 updates by @dependabot[bot] in #8179
• fix(gatewayapi): reject ClientTrafficPolicy with invalid TLS cipher by @Junnygram in #8040
• feat (translator): support optional health check configuration by @cryoshida in #7959
• chore: install crds separated by @zirain in #8223
• chore: fix make gen-check by @zirain in #7937
• fix: XListenerSet allows route from same namespace by @krishicks in #8226
• fix gateway api crd gen by @zhaohuabing in #8238
• chore: fix flaky retry test by @zirain in #8020
• feat: support ShadowMode in local ratelimit by @zirain in #8076
• chore: add missing release notes for #8076 by @zirain in #8243
• chore: remove useless address by @zirain in #8216
• release notes for v1.6.4 by @zirain in #8221
• release notes for v1.5.9 by @zirain in #8219
• update release notes by @zirain in #8253
• fix: re-enable ext-auth timeout test by @zirain in #8070
• chore: fix ExtAuthTimeout flaky by @zirain in #8255
• doc: bump v1.5.9 by @zirain in #8256
• docs: bump version by @zirain in #8257
• chore: Update default kind and metallb versions by @jukie in #8254
• chore: update v1.6 compatibility matrix versions by @rudrakhp in #8260
• build(deps): bump github/codeql-action from 4.32.1 to 4.32.2 in the actions group across 1 directory by @dependabot[bot] in #8248
• build(deps): bump the k8s-io group across 1 directory with 6 updates by @dependabot[bot] in #8249
• build(deps): bump the gomod group across 2 directories with 3 updates by @dependabot[bot] in #8246
• build(deps): bump the helm group across 1 directory with 5 updates by @dependabot[bot] in #8250
• feat: enable command operators for httproute filter directresponse by @6ixfalls in #8183
• fix test race by @zirain in #8180
• chore: update experimental conformance by @zirain in #8269
• feat: jaX fingerprint support by @Inode1 in #7983
• feat: support egctl config envoy-gateway by @zhaohuabing in #8251
• fix: API key auth by @zhaohuabing in #8267
• feat: Add WeightedZones to PreferLocalZones by @jukie in #7251
• docs: render crds in example install command by @NilsGriebner in #8225
• chore: Fix JA Fingerprint ipv6 e2e by @jukie in #8298
• build(deps): bump github.com/envoyproxy/go-control-plane/envoy from 1.36.1-0.20260127060829-c81ce9094f67 to 1.37.0 by @dependabot[bot] in #8292
• build(deps): bump the actions group across 1 directory with 6 updates by @dependabot[bot] in #8296
• build(deps): bump distroless/base-nossl from d90f132 to f8ebb45 in /tools/docker/envoy-gateway by @dependabot[bot] in #8290
• build(deps): bump prometheus from 28.9.0 to 28.9.1 in /charts/gateway-addons-helm in the helm group across 1 directory by @dependabot[bot] in #8297
• build(deps): bump the gomod group across 1 directory with 2 updates by @dependabot[bot] in #8303
• Use sub-chart for CRDs to reduce chart size by @jukie in #8283
• chore: gh action for running gen check by @rudrakhp in #8304
• fix: add mutex lock to snapshot cache OnStreamResponse/OnStreamDeltaResponse by @jaffarkeikei in #8277
• docs: update proxy protocol docs for client traffic policies by @kraashen in #8310
• fix release notes order in the docs by @cnvergence in #8316
• e2e: improve SessionPersistence tests by @zirain in #8207
• bump Gateway API v1.5.0-rc.1 by @zirain in #8161
  ...

Check out the v1.6.7 release announcement to learn more about the release.

What's Changed

• [release/v1.6] bump grpc and otel sdk versions by @rudrakhp in #8838
• [release/v1.6] cherry pick for v1.6.7 by @rudrakhp in #8840
• [release/v1.6] cherry picks for v1.6.7 by @rudrakhp in #8863
• [release/v1.6] cherry pick release notes + bump version by @rudrakhp in #8867

Full Changelog: v1.6.6...v1.6.7