chore: Update docker.io/envoyproxy/gateway-helm Docker tag to v1.8.1

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Update	Change
docker.io/envoyproxy/gateway-helm (source)	minor	1.7.1 → 1.8.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

envoyproxy/gateway (docker.io/envoyproxy/gateway-helm)

v1.8.1

Compare Source

Release Announcement

Check out the v1.8.1 release announcement to learn more about the release.

What's Changed

• [release/v1.8] fix: add unary interceptor and fix fail-open auth in GatewayNamespaceMode (#​8986) by @​cnvergence in #​9118
• [release-1.8] bump envoy to 1.38.1 by @​zirain in #​9168
• [release/v1.8] cherry-pick for v1.8.1 by @​jukie in #​9169
• [release-1.8] fix github SA for June release by @​zirain in #​9172
• [release-1.8] cherry-pick release notes and version bump by @​jukie in #​9174

Full Changelog: envoyproxy/gateway@v1.8.0...v1.8.1

v1.8.1

Compare Source

Release Announcement

Check out the v1.8.1 release announcement to learn more about the release.

What's Changed

• [release/v1.8] fix: add unary interceptor and fix fail-open auth in GatewayNamespaceMode (#​8986) by @​cnvergence in #​9118
• [release-1.8] bump envoy to 1.38.1 by @​zirain in #​9168
• [release/v1.8] cherry-pick for v1.8.1 by @​jukie in #​9169
• [release-1.8] fix github SA for June release by @​zirain in #​9172
• [release-1.8] cherry-pick release notes and version bump by @​jukie in #​9174

Full Changelog: envoyproxy/gateway@v1.8.0...v1.8.1

v1.8.0

Compare Source

Release Announcement

Check out the v1.8.0 release announcement to learn more about the release.

What's Changed

• e2e: speed tracing tests by @​zirain in #​8124
• fix(translator): allow single-label backends in host mode by @​codefromthecrypt in #​8123
• ci: release json report by @​zirain in #​8107
• fix oidc flakiness by @​zhaohuabing in #​8119
• fix: skip_test_workflow doesn't exist by @​dylanmtaylor in #​8116
• fix e2e test panic by @​zhaohuabing in #​8109
• chore: bump func-e to v1.4.0 by @​codefromthecrypt in #​8105
• fix: route idle timeout by @​zhaohuabing in #​8058
• docs: add Mirakl to adopters list by @​twandja in #​8138
• docs: add security warning to control plane extensions by @​guydc in #​7967
• chore: add lint for release notes filenames by @​zirain in #​8137
• fix: remove global logger in message package by @​zirain in #​8131
• docs: fix url result of regex rewrite by @​SadmiB in #​7864
• chore: log skipped xds by @​zhaohuabing in #​8132
• docs: fixes for OPA sidecar + Unix Domain Socket task by @​millermatt in #​8142
• fix: basic auth validation by @​zhaohuabing in #​8053
• fix: controller cache-sync readiness check by @​jukie in #​7430
• fix: replace context.TODO with timeout context in config dump by @​jaffarkeikei in #​8122
• refactor: convert IR map fields to slices to ensure deterministic Dee… by @​Junnygram in #​7953
• fix links in releasing and develop docs by @​cnvergence in #​8141
• docs: add provider guide for entra by @​oliverbaehler in #​7977
• chore: clean up test output files by @​zhaohuabing in #​8154
• fix: TCPRoute mTLS didn't work by @​zirain in #​8152
• v1.7.0-rc2 release notes by @​cnvergence in #​8163
• chore(docs): Update Azure Entra link in OIDC guide by @​guydc in #​8167
• fix: continue processing the remaining xDS with invalid EnvoyPatchPolicies by @​zhaohuabing in #​8153
• build(deps): bump the actions group across 1 directory with 2 updates by @​dependabot[bot] in #​8178
• fix: skip provision when IR Infra is invalid by @​zirain in #​7754
• docs: add HTTP header and method based authentication task by @​Aditya7880900936 in #​7990
• fix: Validation of XListenerSet certificateRefs by @​krishicks in #​8168
• fix: Remove whitespace for nodeSelector in deployment YAML - helm chart change by @​jess-belliveau in #​8185
• [release/v1.7.0] release notes by @​cnvergence in #​8188
• [release/v1.7] v1.7.0 release docs and announcement by @​cnvergence in #​8191
• [release/v1.7.0] update eg upgrade test and fix ordering by @​cnvergence in #​8195
• docs: reword updating shortcode prefixes in releasing.md by @​cnvergence in #​8196
• build(deps): bump busybox from e226d63 to b3255e7 in /tools/docker/envoy-gateway by @​dependabot[bot] in #​8175
• build(deps): bump distroless/base-nossl from 16b3bc2 to d90f132 in /tools/docker/envoy-gateway by @​dependabot[bot] in #​8174
• chore: enable DisallowUnknownFields for xds translator by @​zirain in #​8203
• chore bump golang 1.25.7 by @​zirain in #​8205
• build(deps): bump the gomod group across 1 directory with 11 updates by @​dependabot[bot] in #​8177
• feat(helm): add commonLabels support to helm chart by @​gaganhr94 in #​8078
• build(deps): bump the helm group across 1 directory with 3 updates by @​dependabot[bot] in #​8179
• fix(gatewayapi): reject ClientTrafficPolicy with invalid TLS cipher by @​Junnygram in #​8040
• feat (translator): support optional health check configuration by @​cryoshida in #​7959
• chore: install crds separated by @​zirain in #​8223
• chore: fix make gen-check by @​zirain in #​7937
• fix: XListenerSet allows route from same namespace by @​krishicks in #​8226
• fix gateway api crd gen by @​zhaohuabing in #​8238
• chore: fix flaky retry test by @​zirain in #​8020
• feat: support ShadowMode in local ratelimit by @​zirain in #​8076
• chore: add missing release notes for #​8076 by @​zirain in #​8243
• chore: remove useless address by @​zirain in #​8216
• release notes for v1.6.4 by @​zirain in #​8221
• release notes for v1.5.9 by @​zirain in #​8219
• update release notes by @​zirain in #​8253
• fix: re-enable ext-auth timeout test by @​zirain in #​8070
• chore: fix ExtAuthTimeout flaky by @​zirain in #​8255
• doc: bump v1.5.9 by @​zirain in #​8256
• docs: bump version by @​zirain in #​8257
• chore: Update default kind and metallb versions by @​jukie in #​8254
• chore: update v1.6 compatibility matrix versions by @​rudrakhp in #​8260
• build(deps): bump github/codeql-action from 4.32.1 to 4.32.2 in the actions group across 1 directory by @​dependabot[bot] in #​8248
• build(deps): bump the k8s-io group across 1 directory with 6 updates by @​dependabot[bot] in #​8249
• build(deps): bump the gomod group across 2 directories with 3 updates by @​dependabot[bot] in #​8246
• build(deps): bump the helm group across 1 directory with 5 updates by @​dependabot[bot] in #​8250
• feat: enable command operators for httproute filter directresponse by @​6ixfalls in #​8183
• fix test race by @​zirain in #​8180
• chore: update experimental conformance by @​zirain in #​8269
• feat: jaX fingerprint support by @​Inode1 in #​7983
• feat: support egctl config envoy-gateway by @​zhaohuabing in #​8251
• fix: API key auth by @​zhaohuabing in #​8267
• feat: Add WeightedZones to PreferLocalZones by @​jukie in #​7251
• docs: render crds in example install command by @​NilsGriebner in #​8225
• chore: Fix JA Fingerprint ipv6 e2e by @​jukie in #​8298
• build(deps): bump github.com/envoyproxy/go-control-plane/envoy from 1.36.1-0.20260127060829-c81ce9094f67 to 1.37.0 by @​dependabot[bot] in #​8292
• build(deps): bump the actions group across 1 directory with 6 updates by @​dependabot[bot] in #​8296
• build(deps): bump distroless/base-nossl from d90f132 to f8ebb45 in /tools/docker/envoy-gateway by @​dependabot[bot] in #​8290
• build(deps): bump prometheus from 28.9.0 to 28.9.1 in /charts/gateway-addons-helm in the helm group across 1 directory by @​dependabot[bot] in #​8297
• build(deps): bump the gomod group across 1 directory with 2 updates by @​dependabot[bot] in #​8303
• Use sub-chart for CRDs to reduce chart size by @​jukie in #​8283
• chore: gh action for running gen check by @​rudrakhp in #​8304
• fix: add mutex lock to snapshot cache OnStreamResponse/OnStreamDeltaResponse by @​jaffarkeikei in #​8277
• docs: update proxy protocol docs for client traffic policies by @​kraashen in #​8310
• fix release notes order in the docs by @​cnvergence in #​8316
• e2e: improve SessionPersistence tests by @​zirain in #​8207
• bump Gateway API v1.5.0-rc.1 by @​zirain in #​8161
• feat: Add support for Dynamic Modules by @​jukie in #​8278
• fix: fixed local object reference resolution from parent in merged BackendTrafficPolicies by @​rudrakhp in #​8210
• fix: exclude unmanaged route parents from xPolicy status ancestors by @​zhaohuabing in #​8321
• fix(kubernetes): apply namespace selector filtering to List operations by @​shahar-h in #​8312
• fix: samplingFraction not working by @​zirain in #​8317
• chore: skip head repo check in gen check command by @​rudrakhp in #​8347
• build(deps): bump the actions group across 1 directory with 2 updates by @​dependabot[bot] in #​8342
• revist TLSRoute conformance test by @​zirain in #​8345
• chore: adopt FailFast by @​zirain in #​8335
• fix ConsistentHashLoadBalancing flaky by @​zirain in #​8349
• build(deps): bump the helm group across 1 directory with 2 updates by @​dependabot[bot] in #​8343
• build(deps): bump sigs.k8s.io/gateway-api-inference-extension from 1.3.0 to 1.3.1 in /examples/extension-server by @​dependabot[bot] in #​8340
• fix ListenerSet conformance test by @​zirain in #​8344
• bump Gateway API v1.5.0 by @​zirain in #​8348
• fix: watch TLSRoute v1 by @​zhaohuabing in #​8327
• fix attachedRoutes by @​zirain in #​8187
• chore: update testdata on main by @​jukie in #​8370
• docs: add custom redirect BTP task by @​rudrakhp in #​8357
• feat: Implement RoutingType BTP by @​jukie in #​8173
• Add retriableStatuses for healthchecks by @​akardaspg in #​8306
• [gatewayapi] skip unused BTP routing index work by @​arkodg in #​8375
• fix(host): eliminate spurious error logs in standalone mode by @​codefromthecrypt in #​8287
• feat: Support AlwaysEjectOneHost configuration in Outlier Detection by @​Inode1 in #​8149
• chore: remove existence check for v1 CRDs by @​zhaohuabing in #​8365
• feat(envoyextensionpolicy): Implement TLS configuration for WASM code source. by @​achernev in #​7865
• feat: invalid listener should not block IR by @​zirain in #​8194
• fix TestWasmTLSIndexers and test gen by @​zhaohuabing in #​8384
• feat: HTTPRoute support 303 307 308 redirect by @​zirain in #​8182
• chore: bump golang.org/x/net by @​zirain in #​8394
• fix: computeHosts doesn't work when listener and route both wildcard by @​zirain in #​8186
• docs: fix cors exemples in security-policy.md by @​TanguyPatte in #​8408
• fix: support cross-ns for SecretObjectReference by @​zhaohuabing in #​8074
• api: Add source type structure for dynamic modules by @​jukie in #​8359
• ci: fix flaky e2e tests by @​zirain in #​8388
• ci: run conformance test with standard channel by @​zirain in #​8367
• chore: fix gen by @​zirain in #​8418
• fix: aggregate xRoute/xPolicy statuses across GWCs in gateway-api runner by @​zhaohuabing in #​8387
• api: GeoIP by @​zhaohuabing in #​8002
• feat(securitypolicy): add MergeType support for policy merging by @​rajatvig in #​7918
• chore: lower the qps to mitigate flaky upgrade test by @​zhaohuabing in #​8415
• chore: fix gen by @​zhaohuabing in #​8426
• chore: fix gen check by @​rudrakhp in #​8437
• feat: support grpc web settings by @​kkk777-7 in #​8147
• build(deps): bump the actions group across 2 directories with 7 updates by @​dependabot[bot] in #​8433
• build(deps): bump the helm group across 1 directory with 5 updates by @​dependabot[bot] in #​8404
• build(deps): bump distroless/base-nossl from f8ebb45 to ae8c000 in /tools/docker/envoy-gateway by @​dependabot[bot] in #​8398
• build(deps): bump the gomod group across 1 directory with 12 updates by @​dependabot[bot] in #​8400
• chore: fix gen by @​zirain in #​8440
• test: fix flaky RouteStatNameTest and refactor by @​Arpit529Srivastava in #​8368
• e2e: remove HTTPRoute CORS test by @​zirain in #​8443
• fix: add ownerReferences to ratelimit ConfigMap and HPA by @​Teja079 in #​8358
• test: add unit tests for ratelimit UnitToSeconds and UnitToDuration by @​archy-rock3t-cloud in #​8396
• chore: fix oidc flakiness by @​zhaohuabing in #​8423
• fix: handle network errors in rate limit e2e tests by @​rudrakhp in #​8446
• chore: mute OSV scanner & Trivy by @​zirain in #​8444
• refactor/perf: use LuaPerRoute instead of FilterConfig by @​rudrakhp in #​8355
• e2e: reduce consistent hash flaky by @​zirain in #​8371
• fix: multiple gc e2e by @​kkk777-7 in #​8448
• build(deps): bump sigs.k8s.io/gateway-api-inference-extension from 1.3.1 to 1.4.0 in /examples/extension-server by @​dependabot[bot] in #​8402
• build(deps): bump the k8s-io group across 1 directory with 6 updates by @​dependabot[bot] in #​8401
• raise RL rule imit to 256 by @​zhaohuabing in #​8451
• fix oidc flakiness by @​zhaohuabing in #​8469
• api: make ConnectionLimit.Value optional by @​felipesabadini in #​8478
• build(deps): bump aquasecurity/trivy-action from 0.34.2 to 0.35.0 in the actions group across 1 directory by @​dependabot[bot] in #​8485
• Revert "api: add sourceCIDRs field in SecurityPolicy for L4 IP filtering" by @​zhaohuabing in #​8471
• chore: bump filippo.io/edwards25519 by @​zirain in #​8474
• build(deps): bump sigs.k8s.io/controller-runtime from 0.23.1 to 0.23.3 in /examples/extension-server by @​dependabot[bot] in #​8487
• build(deps): bump codespell from 2.4.1 to 2.4.2 in /tools/src/codespell by @​dependabot[bot] in #​8481
• fix: active health check respect endpoint hostname by @​zirain in #​8452
• build(deps): bump the helm group across 1 directory with 3 updates by @​dependabot[bot] in #​8488
• feat: support status_on_error field in external authorization by @​AlexKrudu in #​8432
• build(deps): bump the gomod group across 5 directories with 15 updates by @​dependabot[bot] in #​8482
• build(deps): bump k8s.io/klog/v2 from 2.130.1 to 2.140.0 in the k8s-io group across 1 directory by @​dependabot[bot] in #​8483
• build(deps): bump sigs.k8s.io/controller-runtime from 0.23.1 to 0.23.3 by @​dependabot[bot] in #​8484
• build(deps): bump sigs.k8s.io/mcs-api from 0.3.0 to 0.4.0 by @​dependabot[bot] in #​8486
• [release/v1.6] add release notes for v1.6.5 by @​rudrakhp in #​8504
• Add release notes for 1.7.1 by @​cnvergence in #​8493
• Add release notes news for v1.7.1 by @​cnvergence in #​8513
• [release/v1.6] update docs for v1.6.5 by @​rudrakhp in #​8515
• Bump last version in eg upgrade e2e test by @​cnvergence in #​8514
• e2e: ratelimit test not rely on the count of request by @​zirain in #​8472
• bump ratelimis version by @​fbalicchia in #​8465
• fix(ratelimit): expose metrics port to ratelimit container spec by @​stekole in #​8525
• chore: update stale action settings to clean up stale PRs by @​rudrakhp in #​8526
• feat(helm): add namespaceOverride support to gateway-helm chart by @​honarkhah in #​8281
• bump Gateway API to v1.5.1 by @​zirain in #​8533
• feat(api): add HTTP/2 connection keepalive to ClientTrafficPolicy and BackendTrafficPolicy by @​rajatvig in #​8215
• feat: add support for retry budget in BackendTrafficPolicy by @​zirain in #​8457
• e2e: fix ConnectionLimit test by @​zirain in #​8473
• feat: support stream idle timeout in BackendTrafficPolicy by @​zhaohuabing in #​8455
• feat: EDS modification hook by @​zhaohuabing in #​8240
• chore: raise the jwt provider limit to 16 by @​zhaohuabing in #​8543
• ci: fix ACTIONS_STEP_DEBUG not working by @​zirain in #​8517
• ci: rm gen-check action by @​zirain in #​8553
• chore: aggregate route status parents when they're more than the allowed cap(32) by @​zhaohuabing in #​8516
• fix merged example by @​RicHincapie in #​8563
• add e2e test for HTTPRouteHTTPSListenerDetectMisdirectedRequests by @​zirain in #​8558
• build(deps): bump distroless/base-nossl from ae8c000 to f71dcb6 in /tools/docker/envoy-gateway by @​dependabot[bot] in #​8546
• build(deps): bump the actions group across 1 directory with 4 updates by @​dependabot[bot] in #​8549
• fix: per-endpoint hostname override blocked by auto-generated wildcad host by @​zirain in #​8565
• feat/mtls add ClientValidationMode by @​Julien-Beezeelinx in #​8325
• fix(tcp): add SNI-based filter chain matching for TLS passthrough empty routes by @​OliverBailey in #​8521
• ci: fix netlify build by @​zirain in #​8571
• feat: upstream access log by @​zirain in #​8397
• chore: refactor JSONPatch by @​zirain in #​8497
• docs: fix terminology inconsistencies for External Authorization by @​haruyama480 in #​8539
• docs: ignore blog.envoyproxy.io by @​zirain in #​8574
• feat(loadbalancer): Add LoadBalancerType Client Side Weighted Round Robin by @​altaiezior in #​7407
• build(deps): bump loki from 6.54.0 to 6.55.0 in /charts/gateway-addons-helm in the helm group across 1 directory by @​dependabot[bot] in #​8550
• fix bug with grpcroute mirror filter by @​aburanrbx in #​8541
• fix: normalize CRLF line endings in htpasswd basic auth secrets by @​stekole in #​8557
• build(deps): bump the gomod group across 5 directories with 6 updates by @​dependabot[bot] in #​8548
• chore: update release schedule by @​zhaohuabing in #​8584
• feat: GeoIP by @​zhaohuabing in #​8453
• Bump version by @​jukie in #​8587
• chore: update grpc to fix osv scan by @​zhaohuabing in #​8586
• build(deps): bump busybox from b3255e7 to 1487d0a in /tools/docker/envoy-gateway by @​dependabot[bot] in #​8590
• build(deps): bump the actions group across 1 directory with 2 updates by @​dependabot[bot] in #​8593
• build(deps): bump the gomod group across 1 directory with 2 updates by @​dependabot[bot] in #​8591
• build(deps): bump the helm group across 1 directory with 3 updates by @​dependabot[bot] in #​8594
• build(deps): bump the k8s-io group across 1 directory with 6 updates by @​dependabot[bot] in #​8592
• [xds] stabilize listener-level Lua XDS filters to avoid listener drain by @​arkodg in #​8598
• docs: fix typos in RELEASING.md by @​archy-rock3t-cloud in #​8601
• chore: update basic auth error status by @​zhaohuabing in #​8589
• chore: update request buffer docs by @​zhaohuabing in #​8604
• docs: add note on case-insensitivity of header names by @​lextiz in #​8596
• Add Pollinate to Envoy Gateway adopters by @​shavmohin in #​8607
• fix: reject incompatible requestBuffer + httpUpgrade CTP by @​zhaohuabing in #​8605
• geoip docs by @​zhaohuabing in #​8585
• chore: update Performance Benchmark Report by @​zhaohuabing in #​8613
• feat: support invert in source match by @​rudrakhp in #​8407
• chore: fix osv scan by @​zhaohuabing in #​8615
• fix json report by @​zhaohuabing in #​8614
• chore: add benchmark report to the release process by @​zhaohuabing in #​8617
• feat: implement remote source dynamic modules by @​jukie in #​8579
• chore: fix e2e tests by @​zirain in #​8450
• feat: JSON log encoder uses abbreviated field keys by @​zirain in #​8555
• test: add unit tests for route sort precedence by @​archy-rock3t-cloud in #​8603
• feat(translator): make append_x_forwarded_host configurable in HTTPRouteFilter by @​rborale5 in #​8527
• fix: avoid metric increments on no-op delete reconcile paths by @​felipesabadini in #​8480
• chore: cswrr cleanup and e2e by @​jukie in #​8582
• chore: add make target for benchmark dashboard by @​zhaohuabing in #​8621
• feat(telemetry): add sampler config for OpenTelemetry tracing by @​codefromthecrypt in #​8529
• feat(ctp): add IgnoredUpgradeTypes to HTTP1Settings by @​michalskalski in #​8599
• build(deps): bump npm-check-updates from 19.6.6 to 20.0.0 in /site by @​dependabot[bot] in #​8641
• chore: fix metrics check in the rate limit e2e tests by @​zhaohuabing in #​8636
• build(deps): bump the gomod group across 1 directory with 2 updates by @​dependabot[bot] in #​8639
• build(deps): bump the actions group across 2 directories with 7 updates by @​dependabot[bot] in #​8640
• enterprise support: Add Procedure Technologies by @​harshita375 in #​8643
• fix typo by @​Alireza-Mim in #​8629
• build(deps): bump the helm group across 1 directory with 2 updates by @​dependabot[bot] in #​8642
• chore: bump API version by @​zirain in #​8644
• fix(telemetry): support BackendTLSPolicy for telemetry backends by @​codefromthecrypt in #​8545
• ci(fix): ensure Go binaries in published Docker images have correct module version by @​shahar-h in #​8275
• fix: restore failure-path metric recording for delete and HPA reconcile by @​felipesabadini in #​8656
• fix for duplicate cidr local rate limit rules by @​erik-hunter in #​8650
• feat: impl gateway tls.frontend/tls.backend by @​zirain in #​8380
• docs: fix Protol -> Protocol typo by @​wiktor-k in #​8657
• chore: remove cluster.LbPolicy usage by @​jukie in #​8637
• chore: align all helm calls to use go tool by @​shahar-h in #​8659
• ci: remove codecov workaround by @​shahar-h in #​8664
• ci: remove hardcoded KIND_NODE_TAG from release benchmark by @​shahar-h in #​8661
• chore: add lint check to enforce ubuntu-latest in workflow runs-on by @​shahar-h in #​8662
• Publish chart and docker image for rc.0 tags by @​jukie in #​8658
• ci: fix broken go-benchmark-test by @​shahar-h in #​8663
• chore: fix cve by @​zirain in #​8669
• ci: remove continue-on-error from go-benchmark-test by @​shahar-h in #​8670
• ci: pin checkout action by @​shahar-h in #​8674
• docs: clarify supported HTTP redirect status codes by @​Aditya7880900936 in #​8566
• feat: support grpc stats settings by @​kkk777-7 in #​8158
• Fix link to Tasks section in quickstart.md by @​xCyberxx in #​8618
• chore: pin npm tools by @​shahar-h in #​8672
• fix: status for mirror backend by @​kkk777-7 in #​8675
• ci: add github action for codex review on PRs by @​arkodg in #​8679
• build(deps): bump the actions group across 1 directory with 2 updates by @​dependabot[bot] in #​8684
• build(deps): bump sigs.k8s.io/mcs-api from 0.4.0 to 0.4.1 by @​dependabot[bot] in #​8683
• build(deps): bump the helm group across 1 directory with 2 updates by @​dependabot[bot] in #​8682
• fix(gatewayapi): add deprecated warning for clientValidation.optional by @​officialasishkumar in #​8609
• feat: add support for contrpl plane tracer by @​zirain in #​8551
• build(deps): bump the gomod group across 5 directories with 11 updates by @​dependabot[bot] in #​8681
• api: dynamic module lb by @​jukie in #​8638
• build(deps): bump actions/checkout from 6.0.1 to 6.0.2 in the actions group across 1 directory by @​dependabot[bot] in #​8697
• build(deps): bump the gomod group across 2 directories with 4 updates by @​dependabot[bot] in #​8696
• build(deps): bump the helm group across 1 directory with 2 updates by @​dependabot[bot] in #​8698
• fix: client certificate secret never delivered when it is exclusively referenced by a SecurityPolicy extAuth Backend by @​zirain in #​8654
• bump golang for CVE by @​zirain in #​8709
• set the status when EPP target to a MergeGateways with wrong kind by @​fabian4 in #​7490
• chore: update testdata to covered multiple listener in one gateway by @​zirain in #​8710
• fix: disable http3 when client tls is configured by @​zhaohuabing in #​8583
• fix: client certificate secret never delivered when it is exclusively referenced by a SecurityPolicy jwt/oidc Backend by @​zirain in #​8711
• chore: fix release issue gen by @​rudrakhp in #​8722
• remove DFP filter by @​zhaohuabing in #​8655
• build(deps): bump the gomod group across 1 directory with 2 updates by @​dependabot[bot] in #​8721
• api for id token forwarding by [@&#8203

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.