proxy: v2.336.0 (linkerd#14850)

Release notes: https://github.com/linkerd/linkerd2-proxy/releases/tag/release/v2.336.0

Signed-off-by: l5d-bot <l5d-bot@users.noreply.github.com>
Co-authored-by: l5d-bot <l5d-bot@users.noreply.github.com>

build(deps): bump github.com/prometheus/common from 0.67.4 to 0.67.5 (l…

…inkerd#14839)

Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.67.4 to 0.67.5.
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](prometheus/common@v0.67.4...v0.67.5)

---
updated-dependencies:
- dependency-name: github.com/prometheus/common
  dependency-version: 0.67.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore(deps): bump proxy-init(v2.4.4), linkerd-cni(v1.6.5) and validat…

…or(0.1.5) (linkerd#14816)

- https://github.com/linkerd/linkerd2-proxy-init/releases/tag/proxy-init%2Fv2.4.4
- https://github.com/linkerd/linkerd2-proxy-init/releases/tag/cni-plugin%2Fv1.6.5
- https://github.com/linkerd/linkerd2-proxy-init/releases/tag/validator%2Fv0.1.5

build(deps): bump codecov/codecov-action from 5.5.1 to 5.5.2 (linkerd…

…#14795)

Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5.5.1 to 5.5.2.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@5a10915...671740a)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 5.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

fix(policy): respect timeout field on gateway API HTTPRoutes (linkerd…

…#14750)

Fixes linkerd#14713

The [Linkerd documentation](https://linkerd.io/2-edge/reference/timeouts/#configuring-timeouts) specifies that:

> If the [request timeout](https://gateway-api.sigs.k8s.io/api-types/httproute/#timeouts-optional) field is set on an HTTPRoute resource, it will be used as the timeout.linkerd.io/request timeout. However, if both the field and the annotation are specified, the annotation will take priority.

This is true for policy.linkerd.io/HTTPRoute resources but not for `gateway.networking.k8s.io/HTTPRoute` resources.  

We update the policy controller to consider the request timeout field on `gateway.networking.k8s.io/HTTPRoute` and add API tests.

Signed-off-by: Alex Leong <alex@buoyant.io>

build(deps): bump the clap group with 2 updates (linkerd#14736)

Bumps the clap group with 2 updates: [clap](https://github.com/clap-rs/clap) and [clap_builder](https://github.com/clap-rs/clap).


Updates `clap` from 4.5.52 to 4.5.53
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.52...clap_complete-v4.5.53)

Updates `clap_builder` from 4.5.52 to 4.5.53
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@v4.5.52...v4.5.53)

---
updated-dependencies:
- dependency-name: clap
  dependency-version: 4.5.53
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: clap
- dependency-name: clap_builder
  dependency-version: 4.5.53
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: clap
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

fix(destination): prevent task leak in federated service watchers (li…

…nkerd#14693)

When unsubscribing a stream from a federated service, we:

1. For each cluster, send an update on the stream's channel to remove endpoints.
2. Call synchronizedGetStream.Stop() so that it stops processing updates.

These steps can race and deadlock: if Stop() has been called before endoint
updates are processed, the subsequent Send() calls block forever.

This change improves test coverage to cover this case as well as that fixed in
f4e6795.

proxy: v2.326.0 (linkerd#14668)

Release notes: https://github.com/linkerd/linkerd2-proxy/releases/tag/release/v2.326.0

Signed-off-by: l5d-bot <l5d-bot@users.noreply.github.com>
Co-authored-by: l5d-bot <l5d-bot@users.noreply.github.com>
Co-authored-by: Scott Fleener <scott@buoyant.io>

proxy: v2.326.0 (linkerd#14668)

Release notes: https://github.com/linkerd/linkerd2-proxy/releases/tag/release/v2.326.0

Signed-off-by: l5d-bot <l5d-bot@users.noreply.github.com>
Co-authored-by: l5d-bot <l5d-bot@users.noreply.github.com>
Co-authored-by: Scott Fleener <scott@buoyant.io>