ci: Skip integration tests on metadata-only changes (linkerd#12134)

There's no reason to run all of the (sometimes flakey) integration if we are
only changing chart metadata (i.e. version bumps). We will continue to run
integration tests if helm templates or values change.

This stable release back-ports bugfixes and improvements from recent …

…edge

releases.

* Introduced support for arbitrary labels in the `podMonitors` field in the
  control plane Helm chart (thanks @jseiser!) ([linkerd#11222]; fixes [linkerd#11175])
* Added a `prometheusUrl` field for the heartbeat job in the control plane Helm
  chart (thanks @david972!) ([linkerd#11343]; fixes [linkerd#11342])
* Updated the Destination controller to return `INVALID_ARGUMENT` status codes
  properly when a `ServiceProfile` is requested for a service that does not
  exist. ([linkerd#11980])
* Reduced the load on the Destination controller by only processing Server
  updates on workloads affected by the Server ([linkerd#12017])
* Changed how updates to a `Server` selector are handled in the destination
  service. When a `Server` that marks a port as opaque no longer selects a
  resource, the resource's opaqueness will reverted to default settings
  ([linkerd#12031]; fixes [linkerd#11995])
* Fixed a race condition in the destination service that could cause panics
  under very specific conditions ([linkerd#12022]; fixes [linkerd#12010])
* Fixed an issue where inbound policy could be incorrect after certain policy
  resources are deleted ([linkerd#12088])

[linkerd#11222]: linkerd#11222
[linkerd#11175]: linkerd#11175
[linkerd#11343]: linkerd#11343
[linkerd#11342]: linkerd#11342
[linkerd#11980]: linkerd#11980
[linkerd#12017]: linkerd#12017
[linkerd#11995]: linkerd#11995
[linkerd#12031]: linkerd#12031
[linkerd#12010]: linkerd#12010
[linkerd#12022]: linkerd#12022
[linkerd#12088]: linkerd#12088

edge-24.2.4 (linkerd#12113)

 Updated the ExternalWorkload CRD to v1beta1, renaming the meshTls field to
  meshTLS ([linkerd#12098])
* Updated the proxy to address some logging and metrics inconsistencies
  ([linkerd#12099])

* Allowed the `MutatingWebhookConfig` timeout value to be configured ([…

…linkerd#12028])

  (thanks @mikebell90)
* Added a counter for items dropped from destination controller workqueue
  ([linkerd#12079])
* Fixed a spurious `linkerd check` error when using container images with
  digests ([linkerd#12059])
* Fixed an issue where inbound policy could be incorrect after certain policy
  resources are deleted ([linkerd#12088])

[linkerd#12028]: linkerd#12028
[linkerd#12079]: linkerd#12079
[linkerd#12059]: linkerd#12059
[linkerd#12088]: linkerd#12088

This release addresses some issues in the destination service that co…

…uld cause

it to behave unexpectedly when processing updates.

* Fixed a race condition in the destination service that could cause panics
  under very specific conditions ([linkerd#12022]; fixes [linkerd#12010])
* Changed how updates to a `Server` selector are handled in the destination
  service. When a `Server` that marks a port as opaque no longer selects a
  resource, the resource's opaqueness will reverted to default settings
  ([linkerd#12031]; fixes [linkerd#11995])
* Introduced Helm configuration values for liveness and readiness probe
  timeouts and delays ([linkerd#11458]; fixes [linkerd#11453]) (thanks @jan-kantert!)

[linkerd#12010]: linkerd#12010
[linkerd#12022]: linkerd#12022
[linkerd#11995]: linkerd#11995
[linkerd#12031]: linkerd#12031
[linkerd#11453]: linkerd#11453
[linkerd#11458]: linkerd#11458

## edge-24.2.1

This edge release contains performance and stability improvements to the
Destination controller, and continues stabilizing support for ExternalWorkloads.

* Reduced the load on the Destination controller by only processing Server
  updates on workloads affected by the Server ([linkerd#12017])
* Changed how the Destination controller reacts to target clusters (in
  multicluster pod-to-pod mode) whose Server CRD is outdated: skip them and log
  an error instead of panicking ([linkerd#12008])
* Improved the leader election of the ExternalWorkloads Endpoints controller to
  avoid missing events ([linkerd#12021])
* Improved naming of EndpointSlices generated by ExternWorkloads ([linkerd#12016])
* Restriced the number of IPs an ExternalWorkload can have ([linkerd#12026])

[linkerd#12017]: linkerd#12017
[linkerd#12008]: linkerd#12008
[linkerd#12021]: linkerd#12021
[linkerd#12016]: linkerd#12016
[linkerd#12026]: linkerd#12026

edge-24.1.3 (linkerd#11994)

* proxy: v2.220.0

* build(deps): bump itertools from 0.10.5 to 0.11.0 (linkerd/linkerd2-proxy#2594)
* build(deps): bump async-trait from 0.1.68 to 0.1.75 (linkerd/linkerd2-proxy#2595)
* pool: Decompose the pool and balancer crates (linkerd/linkerd2-proxy#2597)
* balance: Move endpoint state gauge into balancer (linkerd/linkerd2-proxy#2598)
* cargo: Remove cyclic meshtls dependency (linkerd/linkerd2-proxy#2602)
* build(deps): bump mime from 0.3.16 to 0.3.17 (linkerd/linkerd2-proxy#2599)
* build(deps): bump parking_lot_core from 0.9.5 to 0.9.9 (linkerd/linkerd2-proxy#2600)
* build(deps): bump prost-build from 0.12.1 to 0.12.3 (linkerd/linkerd2-proxy#2601)
* outbound: Update route backend metrics implementation (linkerd/linkerd2-proxy#2603)
* deps: Update to indexmap v2 (linkerd/linkerd2-proxy#2604)
* build(deps): bump actions/download-artifact from 3.0.2 to 4.1.0 (linkerd/linkerd2-proxy#2569)
* deps: h2 v0.3.22 (linkerd/linkerd2-proxy#2605)
* tracing: Ensure that INFO-level spans are preserved (linkerd/linkerd2-proxy#2611)
* build(deps): bump serde from 1.0.185 to 1.0.193 (linkerd/linkerd2-proxy#2606)
* build(deps): bump tokio-boring from 3.0.4 to 3.1.0 (linkerd/linkerd2-proxy#2607)
* build(deps): bump deranged from 0.3.10 to 0.3.11 (linkerd/linkerd2-proxy#2608)
* build(deps): bump axum from 0.6.11 to 0.6.20 (linkerd/linkerd2-proxy#2609)
* build(deps): bump proc-macro2 from 1.0.69 to 1.0.74 (linkerd/linkerd2-proxy#2610)
* build(deps): bump ahash from 0.8.6 to 0.8.7 (linkerd/linkerd2-proxy#2612)
* build(deps): bump cc from 1.0.79 to 1.0.83 (linkerd/linkerd2-proxy#2613)
* build(deps): bump scopeguard from 1.1.0 to 1.2.0 (linkerd/linkerd2-proxy#2614)
* build(deps): bump io-lifetimes from 1.0.10 to 1.0.11 (linkerd/linkerd2-proxy#2616)
* build(deps): bump pem from 3.0.2 to 3.0.3 (linkerd/linkerd2-proxy#2615)
* build(deps): bump anyhow from 1.0.76 to 1.0.79 (linkerd/linkerd2-proxy#2619)
* build(deps): bump socket2 from 0.4.9 to 0.5.5 (linkerd/linkerd2-proxy#2622)
* build(deps): bump libfuzzer-sys from 0.4.6 to 0.4.7 (linkerd/linkerd2-proxy#2620)
* build(deps): bump tempfile from 3.5.0 to 3.6.0 (linkerd/linkerd2-proxy#2621)
* build(deps): bump ryu from 1.0.13 to 1.0.16 (linkerd/linkerd2-proxy#2623)
* identity: Update metrics to follow OpenMetrics best practices (linkerd/linkerd2-proxy#2617)
* build(deps): bump tokio from 1.34.0 to 1.35.1 (linkerd/linkerd2-proxy#2627)
* build(deps): bump tracing from 0.1.37 to 0.1.40 (linkerd/linkerd2-proxy#2628)
* build(deps): bump slab from 0.4.8 to 0.4.9 (linkerd/linkerd2-proxy#2629)
* build(deps): bump unicode-bidi from 0.3.11 to 0.3.14 (linkerd/linkerd2-proxy#2630)
* build(deps): bump tokio-stream from 0.1.12 to 0.1.14 (linkerd/linkerd2-proxy#2632)
* build(deps): bump boring-sys from 3.0.4 to 3.1.0 (linkerd/linkerd2-proxy#2633)
* build(deps): bump rcgen from 0.11.3 to 0.12.0 (linkerd/linkerd2-proxy#2635)
* build(deps): bump trust-dns-resolver from 0.22.0 to 0.23.2 (linkerd/linkerd2-proxy#2631)
* build(deps): bump memchr from 2.6.4 to 2.7.1 (linkerd/linkerd2-proxy#2637)
* build(deps): bump pin-project from 1.0.12 to 1.1.3 (linkerd/linkerd2-proxy#2638)
* build(deps): bump futures from 0.3.28 to 0.3.30 (linkerd/linkerd2-proxy#2639)
* build(deps): bump rangemap from 1.3.0 to 1.4.0 (linkerd/linkerd2-proxy#2640)
* build(deps): bump actions/download-artifact from 4.1.0 to 4.1.1 (linkerd/linkerd2-proxy#2636)
* build(deps): bump thingbuf from 0.1.3 to 0.1.4 (linkerd/linkerd2-proxy#2642)
* build(deps): bump rustix from 0.36.16 to 0.36.17 (linkerd/linkerd2-proxy#2643)
* build(deps): bump httpdate from 1.0.2 to 1.0.3 (linkerd/linkerd2-proxy#2645)
* build(deps): bump num_cpus from 1.15.0 to 1.16.0 (linkerd/linkerd2-proxy#2646)
* Change inbound port check log level to debug. (linkerd/linkerd2-proxy#2625)
* docs: Fix bad reference link (linkerd/linkerd2-proxy#2647)
* identity: add spire identity client (linkerd/linkerd2-proxy#2580)
* config:add spire client config (linkerd/linkerd2-proxy#2641)
* discovery: consume server_name and UriLikeIdentity from proto (linkerd/linkerd2-proxy#2618)
* build(deps): bump h2 from 0.3.22 to 0.3.24 (linkerd/linkerd2-proxy#2660)
* build(deps): bump procfs from 0.15.1 to 0.16.0 (linkerd/linkerd2-proxy#2649)
* build(deps): bump async-trait from 0.1.75 to 0.1.77 (linkerd/linkerd2-proxy#2650)
* build(deps): bump semver from 1.0.20 to 1.0.21 (linkerd/linkerd2-proxy#2651)
* build(deps): bump smallvec from 1.10.0 to 1.13.1 (linkerd/linkerd2-proxy#2661)
* build(deps): bump either from 1.8.1 to 1.9.0 (linkerd/linkerd2-proxy#2652)
* build(deps): bump actions/upload-artifact from 4.0.0 to 4.2.0 (linkerd/linkerd2-proxy#2658)
* build(deps): bump shlex from 1.1.0 to 1.3.0 (linkerd/linkerd2-proxy#2664)
* build(deps): bump DavidAnson/markdownlint-cli2-action (linkerd/linkerd2-proxy#2656)
* build(deps): bump EmbarkStudios/cargo-deny-action from 1.5.5 to 1.5.10 (linkerd/linkerd2-proxy#2665)
* build(deps): bump serde from 1.0.193 to 1.0.195 (linkerd/linkerd2-proxy#2670)
* build(deps): bump clang-sys from 1.6.0 to 1.7.0 (linkerd/linkerd2-proxy#2668)
* build(deps): bump zerocopy from 0.7.31 to 0.7.32 (linkerd/linkerd2-proxy#2666)
* build(deps): bump unicode-ident from 1.0.6 to 1.0.12 (linkerd/linkerd2-proxy#2667)
* build(deps): bump actions/upload-artifact from 4.2.0 to 4.3.0 (linkerd/linkerd2-proxy#2671)
* build(deps): bump prettyplease from 0.2.15 to 0.2.16 (linkerd/linkerd2-proxy#2673)
* build(deps): bump getrandom from 0.2.8 to 0.2.12 (linkerd/linkerd2-proxy#2674)
* build(deps): bump which from 4.4.0 to 4.4.2 (linkerd/linkerd2-proxy#2675)
* build(deps): bump sharded-slab from 0.1.4 to 0.1.7 (linkerd/linkerd2-proxy#2676)
* build(deps): bump EmbarkStudios/cargo-deny-action from 1.5.10 to 1.5.11 (linkerd/linkerd2-proxy#2672)
* build(deps): bump tj-actions/changed-files from 41.0.1 to 42.0.0 (linkerd/linkerd2-proxy#2657)

Signed-off-by: Oliver Gould <ver@buoyant.io>

* Bump helm version

* +changes

* Update CHANGES.md

Co-authored-by: Alejandro Pedraza <alejandro@buoyant.io>

---------

Signed-off-by: Oliver Gould <ver@buoyant.io>
Co-authored-by: Alejandro Pedraza <alejandro@buoyant.io>

This stable release adds a cni-repair-controller which fixes the issu…

…e of

injected pods that cannot acquire proper network config because linkerd-cni
and/or the cluster's network CNI haven't fully started ([linkerd#11699]). It also
fixes a bug in the destination controller where having a large number of
Server resources could cause the destination controller to use an excessive
amount of CPU ([linkerd#11907]). Finally, it fixes a conflict with tap resource
shortnames which was causing warnings from kubectl v1.29.0+ ([linkerd#11816]).

[linkerd#11699]: linkerd#11699
[linkerd#11907]: linkerd#11907
[linkerd#11816]: linkerd#11816

This edge release incrementally improves support for ExternalWorkload…

… resources

throughout the control plane.

This edge release introduces a number of different fixes and improvem…

…ents. More

notably, it introduces a new `cni-repair-controller` binary to the CNI plugin
image. The controller will automatically restart pods that have not received
their iptables configuration.

* Removed shortnames from Tap API resources to avoid colliding with existing
  Kubernetes resources ([linkerd#11816]; fixes [linkerd#11784])
* Introduced a new ExternalWorkload CRD to support upcoming mesh expansion
  feature ([linkerd#11805])
* Changed `MeshTLSAuthentication` resource validation to allow SPIFFE URI
  identities ([linkerd#11882])
* Introduced a new `cni-repair-controller` to the `linkerd-cni` DaemonSet to
  automatically restart misconfigured pods that are missing iptables rules
  ([linkerd#11699]; fixes [linkerd#11073])
* Fixed a `"duplicate metrics"` warning in the multicluster service-mirror
  component ([linkerd#11875]; fixes [linkerd#11839])
* Added metric labels and weights to `linkerd diagnostics endpoints` json
  output ([linkerd#11889])
* Changed how `Server` updates are handled in the destination service. The
  change will ensure that during a cluster resync, consumers won't be
  overloaded by redundant updates ([linkerd#11907])
* Changed `linkerd install` error output to add a newline when a Kubernetes
  client cannot be successfully initialised ([linkerd#11917])

[linkerd#11816]: linkerd#11816
[linkerd#11784]: linkerd#11784
[linkerd#11805]: linkerd#11805
[linkerd#11882]: linkerd#11882
[linkerd#11699]: linkerd#11699
[linkerd#11073]: linkerd#11073
[linkerd#11875]: linkerd#11875
[linkerd#11839]: linkerd#11839
[linkerd#11889]: linkerd#11889
[linkerd#11907]: linkerd#11907
[linkerd#11917]: linkerd#11917