What's Changed

• build(deps): bump docker/build-push-action from 6.18.0 to 6.19.1 by @dependabot[bot] in #14922
• build(deps-dev): bump @babel/core from 7.28.6 to 7.29.0 in /web/app by @dependabot[bot] in #14913
• build(deps-dev): bump webpack from 5.104.1 to 5.105.0 in /web/app by @dependabot[bot] in #14912
• chore(deps): upgrade to go 1.25.7 by @adleong in #14920
• build(deps): bump tonic from 0.14.2 to 0.14.3 in the grpc group by @dependabot[bot] in #14897
• build(deps): bump tokio-stream from 0.1.17 to 0.1.18 by @dependabot[bot] in #14898
• build(deps): bump the clap group across 1 directory with 4 updates by @dependabot[bot] in #14921
• build(deps-dev): bump css-loader from 7.1.2 to 7.1.3 in /web/app by @dependabot[bot] in #14902
• build(deps-dev): bump webpack-bundle-analyzer from 5.1.1 to 5.2.0 in /web/app by @dependabot[bot] in #14903
• build(deps): bump bytes from 1.11.0 to 1.11.1 by @dependabot[bot] in #14907
• build(deps-dev): bump @babel/preset-env from 7.28.6 to 7.29.0 in /web/app by @dependabot[bot] in #14904
• build(deps): bump qs from 6.14.1 to 6.14.2 in /web/app by @dependabot[bot] in #14923
• build(deps): bump proc-macro2 from 1.0.105 to 1.0.106 by @dependabot[bot] in #14899
• build(deps): bump the pest group with 4 updates by @dependabot[bot] in #14925
• build(deps): bump regex from 1.12.2 to 1.12.3 by @dependabot[bot] in #14926
• build(deps): bump unicode-ident from 1.0.22 to 1.0.23 by @dependabot[bot] in #14927
• build(deps): bump zerocopy from 0.8.33 to 0.8.39 by @dependabot[bot] in #14928
• chore: replace registry for the pause container, fix multicluster test by @alpeb in #14918
• build(deps): bump docker/build-push-action from 6.19.1 to 6.19.2 by @dependabot[bot] in #14929
• build(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.0 by @dependabot[bot] in #14924
• chore(deps): upgrade proxy-init and extension-init by @adleong in #14931
• build(deps): bump @fortawesome/free-solid-svg-icons from 7.0.1 to 7.2.0 in /web/app by @dependabot[bot] in #14932
• build(deps-dev): bump webpack from 5.105.0 to 5.105.2 in /web/app by @dependabot[bot] in #14934
• build(deps): bump the futures group with 8 updates by @dependabot[bot] in #14938
• build(deps): bump tonic from 0.14.3 to 0.14.4 in the grpc group by @dependabot[bot] in #14939
• build(deps): bump data-encoding from 2.9.0 to 2.10.0 by @dependabot[bot] in #14940
• build(deps): bump indexmap from 2.12.1 to 2.13.0 by @dependabot[bot] in #14941
• build(deps): bump @fortawesome/fontawesome-svg-core from 6.7.2 to 7.2.0 in /web/app by @dependabot[bot] in #14935
• build(deps): bump the kube group with 7 updates by @dependabot[bot] in #14917
• build(deps): bump golang.org/x/tools from 0.41.0 to 0.42.0 by @dependabot[bot] in #14914
• build(deps): bump google.golang.org/grpc/cmd/protoc-gen-go-grpc from 1.6.0 to 1.6.1 by @dependabot[bot] in #14909
• build(deps): bump @fortawesome/free-regular-svg-icons from 7.0.1 to 7.2.0 in /web/app by @dependabot[bot] in #14933
• build(deps): bump tj-actions/changed-files from 47.0.1 to 47.0.2 by @dependabot[bot] in #14915
• build(deps): bump github.com/emicklei/proto from 1.14.2 to 1.14.3 by @dependabot[bot] in #14911

Full Changelog: edge-26.1.4...edge-26.2.1

What's Changed

• build(deps-dev): bump webpack-dev-server from 5.2.2 to 5.2.3 in /web/app by @dependabot[bot] in #14885
• build(deps): bump core-js from 3.47.0 to 3.48.0 in /web/app by @dependabot[bot] in #14884
• build(deps-dev): bump @babel/core from 7.28.5 to 7.28.6 in /web/app by @dependabot[bot] in #14883
• build(deps-dev): bump @babel/runtime from 7.28.4 to 7.28.6 in /web/app by @dependabot[bot] in #14882
• build(deps): bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #14881
• build(deps): bump chrono from 0.4.42 to 0.4.43 by @dependabot[bot] in #14874
• build(deps): bump zerocopy from 0.8.31 to 0.8.33 by @dependabot[bot] in #14876
• build(deps): bump find-msvc-tools from 0.1.5 to 0.1.8 by @dependabot[bot] in #14875
• build(deps): bump syn from 2.0.111 to 2.0.114 by @dependabot[bot] in #14877
• proxy: v2.338.0 by @l5d-bot in #14891
• build(deps): bump docker/login-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #14892
• build(deps): bump thiserror from 2.0.17 to 2.0.18 by @dependabot[bot] in #14890
• build(deps): bump libc from 0.2.178 to 0.2.180 by @dependabot[bot] in #14889
• build(deps): bump zmij from 1.0.14 to 1.0.17 by @dependabot[bot] in #14888
• build(deps): bump socket2 from 0.6.1 to 0.6.2 by @dependabot[bot] in #14887

Full Changelog: edge-26.1.3...edge-26.1.4

What's Changed

• build(deps): bump zerocopy from 0.8.27 to 0.8.31 by @dependabot[bot] in #14820
• build(deps): bump mio from 1.1.0 to 1.1.1 by @dependabot[bot] in #14819
• build(deps): bump libc from 0.2.177 to 0.2.178 by @dependabot[bot] in #14818
• build(deps): bump cc from 1.2.46 to 1.2.49 by @dependabot[bot] in #14788
• build(deps): bump helm.sh/helm/v3 from 3.19.4 to 3.19.5 by @dependabot[bot] in #14853
• chore(policy-controller): remove unused hyper dependency by @cratelyn in #14852
• build(deps): bump the clap group with 3 updates by @dependabot[bot] in #14854
• build(deps): bump the grpc group with 3 updates by @dependabot[bot] in #14855
• build(deps): bump the tracing group with 2 updates by @dependabot[bot] in #14856
• build(deps): bump serde_json from 1.0.145 to 1.0.149 in the serde group by @dependabot[bot] in #14857
• build(deps): bump tokio-test from 0.4.4 to 0.4.5 by @dependabot[bot] in #14861
• build(deps): bump tokio-metrics from 0.4.6 to 0.4.7 by @dependabot[bot] in #14862
• build(deps): bump signal-hook-registry from 1.4.7 to 1.4.8 by @dependabot[bot] in #14863
• build(deps): bump the pest group with 4 updates by @dependabot[bot] in #14860
• build(deps): bump derive_more from 2.0.1 to 2.1.1 by @dependabot[bot] in #14872
• build(deps): bump tokio-util from 0.7.17 to 0.7.18 by @dependabot[bot] in #14871
• build(deps): bump rustls-webpki from 0.103.8 to 0.103.9 by @dependabot[bot] in #14870
• build(deps): bump proc-macro2 from 1.0.103 to 1.0.105 by @dependabot[bot] in #14869
• build(deps-dev): bump @babel/eslint-parser from 7.28.5 to 7.28.6 in /web/app by @dependabot[bot] in #14868
• build(deps): bump d3-format from 3.1.0 to 3.1.2 in /web/app by @dependabot[bot] in #14867
• build(deps-dev): bump @babel/preset-env from 7.28.5 to 7.28.6 in /web/app by @dependabot[bot] in #14866
• build(deps-dev): bump html-webpack-plugin from 5.6.5 to 5.6.6 in /web/app by @dependabot[bot] in #14864
• build(deps): bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4 by @dependabot[bot] in #14859
• proxy: v2.337.0 by @l5d-bot in #14878
• build(deps): bump helm.sh/helm/v3 from 3.19.5 to 3.20.0 by @dependabot[bot] in #14880
• build(deps): bump lodash from 4.17.21 to 4.17.23 in /web/app by @dependabot[bot] in #14879

Full Changelog: edge-26.1.2...edge-26.1.3

What's Changed

• fix(policy-tests): adapt curl library for native sidecar proxies by @alpeb in #14840
• fix(policy): guard against deserialization errors in watches by @adleong in #14844
• fix(tests): adapt injection integration tests to native sidecars by @alpeb in #14842
• build(deps): bump actions/setup-go from 6.1.0 to 6.2.0 by @dependabot[bot] in #14848
• build(deps): bump golang.org/x/tools from 0.40.0 to 0.41.0 by @dependabot[bot] in #14847
• build(deps-dev): bump webpack-bundle-analyzer from 5.1.0 to 5.1.1 in /web/app by @dependabot[bot] in #14845
• proxy: v2.336.0 by @l5d-bot in #14850

Full Changelog: edge-26.1.1...edge-26.1.2

Overall status: RECOMMENDED

Cautions

N/A

Changes

This release bumps dependencies but has no functional changes from edge-25.12.3.

What's Changed

• chore(build): upgrade to go 1.25.5 by @adleong in #14821
• build(deps): bump docker/setup-buildx-action from 3.11.1 to 3.12.0 in /.github/actions/docker-build by @dependabot[bot] in #14826
• build(deps): bump actions/setup-go from 6.0.0 to 6.1.0 by @dependabot[bot] in #14825
• build(deps): bump the kube group with 8 updates - update related tests by @dependabot[bot] in #14817
• proxy: v2.335.0 by @l5d-bot in #14830
• build(deps): bump github.com/go-openapi/spec from 0.22.2 to 0.22.3 by @dependabot[bot] in #14831
• build(deps): bump google.golang.org/grpc from 1.77.0 to 1.78.0 by @dependabot[bot] in #14829
• build(deps): bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @dependabot[bot] in #14824
• build(deps-dev): bump webpack from 5.103.0 to 5.104.1 in /web/app by @dependabot[bot] in #14823
• build(deps-dev): bump sinon from 21.0.0 to 21.0.1 in /web/app by @dependabot[bot] in #14822
• build(deps): bump github.com/prometheus/common from 0.67.4 to 0.67.5 by @dependabot[bot] in #14839

Full Changelog: edge-25.12.3...edge-26.1.1

Overall status: RECOMMENDED

Cautions

N/A

Changes

This release correctly discovers ports and port opacity when using native sidecars, and fixes a race condition in the CNI plugin that could prevent proper deployment in some environments, particularly EKS.

What's Changed

• build(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 in /.github/actions/cli-setup by @dependabot[bot] in #14809
• build(deps): bump dessant/lock-threads from 5.0.1 to 6.0.0 by @dependabot[bot] in #14808
• build(deps): bump google.golang.org/protobuf from 1.36.10 to 1.36.11 by @dependabot[bot] in #14805
• build(deps): bump tokio-metrics from 0.4.5 to 0.4.6 by @dependabot[bot] in #14784
• build(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in #14807
• build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 by @dependabot[bot] in #14806
• build(deps): bump helm.sh/helm/v3 from 3.19.2 to 3.19.4 by @dependabot[bot] in #14804
• build(deps-dev): bump webpack-bundle-analyzer from 5.0.1 to 5.1.0 in /web/app by @dependabot[bot] in #14802
• build(deps): bump tj-actions/changed-files from abdd2f68ea150cee8f236d4a9fb4e0f2491abf1b to e0021407031f5be11a464abee9a0776171c79891 by @dependabot[bot] in #14799
• build(deps): bump indexmap from 2.12.0 to 2.12.1 by @dependabot[bot] in #14785
• fix(destination): properly deal with native sidecar port opacity in getProfile by @alpeb in #14791
• build(deps): bump the kube group with 7 updates by @dependabot[bot] in #14797
• build(deps): bump rustls-pki-types from 1.13.0 to 1.13.1 by @dependabot[bot] in #14810
• build(deps): bump socket2 from 0.6.0 to 0.6.1 by @dependabot[bot] in #14811
• build(deps): bump hostname from 0.4.1 to 0.4.2 by @dependabot[bot] in #14787
• fix(destination): properly discover native sidecar ports by @alpeb in #14814
• chore(deps): bump proxy-init(v2.4.4), linkerd-cni(v1.6.5) and validator(0.1.5) by @alpeb in #14816

Full Changelog: edge-25.12.2...edge-25.12.3

Overall status: RECOMMENDED

Cautions

N/A

Changes

This release correctly takes hostPorts and opaque ports into account when using native sidecars, and improves native sidecar support in the linkerd authz and linkerd check --proxy commands.

What's Changed

• fix(cli): improved support for native sidecar servers in linkerd authz by @alpeb in #14780
• fix(cli): improved support for native sidecar servers in linkerd check --proxy by @alpeb in #14779
• fix(injector): improved support for native sidecar servers by @alpeb in #14767
• build(deps): bump syn from 2.0.110 to 2.0.111 by @dependabot[bot] in #14783
• fix(destination): properly discover hostports in native sidecars by @alpeb in #14786
• build(deps): bump golang.org/x/tools from 0.39.0 to 0.40.0 by @dependabot[bot] in #14790
• build(deps): bump github.com/go-openapi/spec from 0.22.1 to 0.22.2 by @dependabot[bot] in #14789
• proxy: v2.333.0 by @l5d-bot in #14793
• build(deps): bump DavidAnson/markdownlint-cli2-action from 21.0.0 to 22.0.0 by @dependabot[bot] in #14794
• build(deps): bump codecov/codecov-action from 5.5.1 to 5.5.2 by @dependabot[bot] in #14795

Full Changelog: edge-25.12.1...edge-25.12.2

Overall status: RECOMMENDED

Cautions

N/A

Changes

This release bumps dependencies but has no functional changes from edge-25.11.3.

What's Changed

• build(deps): bump node-forge from 1.3.0 to 1.3.2 in /web/app by @dependabot[bot] in #14761
• build(deps): bump github.com/prometheus/common from 0.67.3 to 0.67.4 by @dependabot[bot] in #14756
• build(deps): bump use-query-params from 2.2.1 to 2.2.2 in /web/app by @dependabot[bot] in #14755
• build(deps-dev): bump webpack-bundle-analyzer from 4.10.2 to 5.0.1 in /web/app by @dependabot[bot] in #14754
• build(deps): bump actions/checkout from 5.0.1 to 6.0.0 by @dependabot[bot] in #14748
• build(deps): bump core-js from 3.45.1 to 3.47.0 in /web/app by @dependabot[bot] in #14751
• build(deps): bump hyper from 1.8.0 to 1.8.1 by @dependabot[bot] in #14746
• build(deps-dev): bump html-webpack-plugin from 5.6.4 to 5.6.5 in /web/app by @dependabot[bot] in #14752
• build(deps): bump axum from 0.8.6 to 0.8.7 by @dependabot[bot] in #14744
• Fix references to linkerd-crds in README by @szhekpisov-katanox in #14758
• build(deps): bump rustls-webpki from 0.103.7 to 0.103.8 by @dependabot[bot] in #14745
• build(deps-dev): bump webpack from 5.101.3 to 5.103.0 in /web/app by @dependabot[bot] in #14753
• build(deps): bump bytes from 1.10.1 to 1.11.0 by @dependabot[bot] in #14743
• build(deps): bump softprops/action-gh-release from 2.4.2 to 2.5.0 by @dependabot[bot] in #14774
• build(deps): bump the tracing group across 1 directory with 4 updates by @dependabot[bot] in #14770
• build(deps): bump signal-hook-registry from 1.4.6 to 1.4.7 by @dependabot[bot] in #14766
• build(deps): bump the pest group with 4 updates by @dependabot[bot] in #14764
• build(deps): bump google.golang.org/grpc/cmd/protoc-gen-go-grpc from 1.5.1 to 1.6.0 by @dependabot[bot] in #14762
• build(deps): bump mio from 1.0.4 to 1.1.0 by @dependabot[bot] in #14765
• test(policy): address timeouts and flakiness by @alpeb in #14773
• build(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 by @dependabot[bot] in #14778
• build(deps): bump actions/checkout from 6.0.0 to 6.0.1 by @dependabot[bot] in #14776
• proxy: v2.332.0 by @l5d-bot in #14775
• build(deps): bump tj-actions/changed-files from 2d752abc95ba0255af33a2b4d5de03df3954cdf2 to abdd2f68ea150cee8f236d4a9fb4e0f2491abf1b by @dependabot[bot] in #14771
• build(deps): bump Swatinem/rust-cache from 2.8.1 to 2.8.2 by @dependabot[bot] in #14760

New Contributors

• @szhekpisov-katanox made their first contribution in #14758

Full Changelog: edge-25.11.3...edge-25.12.1

Overall status: RECOMMENDED

Cautions

As of this release, the proxy-init image has been merged into the proxy image, which simplifies image management and reduces overall image size. Users who were explicitly using the proxy-init image should use the proxy image in its place.

Changes

This release correctly honors the timeouts.request value of HTTPRoutes in the gateway.networking.k8s.io API group, to match the behavior of policy.linkerd.io HTTPRoutes.

What's Changed

• feat(proxy, proxy-init): Combine proxy and proxy-init and use minimal base image by @adleong in #14577
• proxy: v2.331.0 by @l5d-bot in #14759
• fix(policy): respect timeout field on gateway API HTTPRoutes by @adleong in #14750

Full Changelog: edge-25.11.2...edge-25.11.3

Overall status: NOT RECOMMENDED, use edge-25.11.3 instead

Cautions

In this release, mesh expansion does not correctly get certificates from SPIRE; we recommend using edge-25.11.3 instead.

Changes

This release fixes broken documentation URLs in CLI commands (thanks, beza!) and corrects a typo in the EgressNetwork and ExternalWorkload CRD definitions (thanks, YY!).

What's Changed

• build(deps): bump enum-ordinalize-derive from 4.3.1 to 4.3.2 by @dependabot[bot] in #14694
• build(deps): bump proc-macro2 from 1.0.101 to 1.0.103 by @dependabot[bot] in #14695
• build(deps): bump enum-ordinalize from 4.3.0 to 4.3.2 by @dependabot[bot] in #14696
• build(deps): bump rustls from 0.23.34 to 0.23.35 by @dependabot[bot] in #14697
• chore(deps): Upgrade linkerd2-proxy-api and tonic group by @sfleen in #14699
• fix: restore bin/docker-build functionality by @cratelyn in #14698
• build(deps): bump helm.sh/helm/v3 from 3.19.0 to 3.19.1 by @dependabot[bot] in #14706
• build(deps): bump github.com/go-openapi/spec from 0.22.0 to 0.22.1 by @dependabot[bot] in #14700
• build(deps): bump softprops/action-gh-release from 2.4.1 to 2.4.2 by @dependabot[bot] in #14705
• build(deps): bump quote from 1.0.41 to 1.0.42 by @dependabot[bot] in #14703
• build(deps): bump openssl from 0.10.74 to 0.10.75 by @dependabot[bot] in #14702
• build(deps): bump syn from 2.0.106 to 2.0.110 by @dependabot[bot] in #14701
• proxy: v2.329.0 by @l5d-bot in #14712
• build(deps): bump tokio-util from 0.7.16 to 0.7.17 by @dependabot[bot] in #14711
• build(deps): bump aws-lc-sys from 0.32.2 to 0.32.3 by @dependabot[bot] in #14710
• Fix broken documentation URLs in CLI commands by @bezarsnba in #14651
• chore(typos): EgressNetwork and ExternalWorkload CRDs by @yy-ofms in #14681
• build(deps): bump hyper from 1.7.0 to 1.8.0 by @dependabot[bot] in #14718
• build(deps): bump unicode-ident from 1.0.20 to 1.0.22 by @dependabot[bot] in #14717
• build(deps): bump helm.sh/helm/v3 from 3.19.1 to 3.19.2 by @dependabot[bot] in #14716
• build(deps): bump the kube group with 7 updates by @dependabot[bot] in #14715
• build(deps): bump golang.org/x/tools from 0.38.0 to 0.39.0 by @dependabot[bot] in #14720
• build(deps): bump peter-evans/repository-dispatch from 4.0.0 to 4.0.1 by @dependabot[bot] in #14724
• build(deps): bump DavidAnson/markdownlint-cli2-action from 20.0.0 to 21.0.0 by @dependabot[bot] in #14723
• test(cni): update k8s and calico by @alpeb in #14707
• build(deps): bump google.golang.org/grpc from 1.76.0 to 1.77.0 by @dependabot[bot] in #14726
• build(deps): bump the clap group with 2 updates by @dependabot[bot] in #14727
• build(deps): bump actions/checkout from 5.0.0 to 5.0.1 by @dependabot[bot] in #14729
• build(deps): bump aws-lc-rs from 1.14.1 to 1.15.0 by @dependabot[bot] in #14728
• proxy: v2.330.0 by @l5d-bot in #14735
• build(deps): bump delegate from 0.13.4 to 0.13.5 by @dependabot[bot] in #14733
• build(deps): bump libloading from 0.8.8 to 0.8.9 by @dependabot[bot] in #14734
• build(deps): bump github.com/prometheus/common from 0.67.2 to 0.67.3 by @dependabot[bot] in #14732
• build(deps): bump tj-actions/changed-files from 70069877f29101175ed2b055d210fe8b1d54d7d7 to 2d752abc95ba0255af33a2b4d5de03df3954cdf2 by @dependabot[bot] in #14740
• build(deps): bump actions/setup-go from 6.0.0 to 6.1.0 by @dependabot[bot] in #14739
• build(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 by @dependabot[bot] in #14738
• build(deps): bump cc from 1.2.41 to 1.2.46 by @dependabot[bot] in #14737
• build(deps): bump the clap group with 2 updates by @dependabot[bot] in #14736

New Contributors

• @bezarsnba made their first contribution in #14651
• @yy-ofms made their first contribution in #14681

Full Changelog: edge-25.11.1...edge-25.11.2