Overall status: RECOMMENDED

Cautions

N/A

Changes

This release improves Linkerd Viz tap's authorization mechanism to supply any X-Remote-Extra- headers present in incoming requests when checking to make sure that the user using tap has access to the resources they're attempting to watch, fixing issue 13169 (thanks, @Tolsto and David Symons!). This permits tap to function even in environments where authorization plugins need the extra attributes, such as AWS EKS with AccessEntry authentication.

Additionally, this release introduces new inbound_http_response_duration_seconds and inbound_grpc_response_duration_seconds metrics histograms, tracking the durations of responses to inbound requests, and downgrades the error logged when a non-mTLS connection is attempted to port 4143 from INFO to DEBUG, fixing issue 10203 (thanks, Rohan Sood!). This can help avoid flooding the logs with error messages, especially in multicluster installations.

What's Changed

• proxy: v2.339.0 by @l5d-bot in #14947
• build(deps): bump hyper-util from 0.1.17 to 0.1.20 by @dependabot[bot] in #14944
• build(deps): bump rustls-pki-types from 1.13.1 to 1.14.0 by @dependabot[bot] in #14945
• build(deps): bump tokio from 1.48.0 to 1.49.0 by @dependabot[bot] in #14946
• build(deps): bump the clap group with 2 updates by @dependabot[bot] in #14943
• proxy: v2.340.0 by @l5d-bot in #14959
• build(deps): bump the clap group with 2 updates by @dependabot[bot] in #14955
• build(deps): bump tonic from 0.14.4 to 0.14.5 in the grpc group by @dependabot[bot] in #14956
• build(deps): bump tower-http from 0.6.6 to 0.6.8 by @dependabot[bot] in #14958
• build(deps): bump aws-lc-rs from 1.15.0 to 1.16.0 by @dependabot[bot] in #14960
• build(deps): bump regex-syntax from 0.8.8 to 0.8.10 by @dependabot[bot] in #14961
• build(deps): bump log from 0.4.28 to 0.4.29 by @dependabot[bot] in #14962
• chore(deps): bump rand from 0.9.2 to 0.10.0 by @cratelyn in #14965
• chore(deps): upgrade linkerd-await by @adleong in #14950
• build(deps): bump regex-automata from 0.4.13 to 0.4.14 by @dependabot[bot] in #14966
• build(deps): bump tower from 0.5.2 to 0.5.3 by @dependabot[bot] in #14967
• build(deps): bump bumpalo from 3.19.0 to 3.20.2 by @dependabot[bot] in #14968
• build(deps): bump axum from 0.8.7 to 0.8.8 by @dependabot[bot] in #14969
• build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in #14970
• build(deps): bump actions/download-artifact from 7.0.0 to 8.0.0 by @dependabot[bot] in #14971
• build(deps): bump actions/download-artifact from 7.0.0 to 8.0.0 in /.github/actions/cli-setup by @dependabot[bot] in #14972
• build(deps-dev): bump webpack from 5.105.2 to 5.105.3 in /web/app by @dependabot[bot] in #14976
• build(deps): bump the kube group with 7 updates by @dependabot[bot] in #14978
• build(deps): bump extractions/setup-just from 3.0.0 to 3.1.0 by @dependabot[bot] in #14952
• build(deps-dev): bump css-loader from 7.1.3 to 7.1.4 in /web/app by @dependabot[bot] in #14951
• build(deps): bump actions/setup-go from 6.2.0 to 6.3.0 by @dependabot[bot] in #14963
• build(deps): bump github.com/mattn/go-runewidth from 0.0.19 to 0.0.20 by @dependabot[bot] in #14942
• Include extra attributes in SubjectAccessReview by @Tolsto in #14768
• build(deps): bump crazy-max/ghaction-github-runtime from 3.1.0 to 4.0.0 in /.github/actions/docker-build by @dependabot[bot] in #14985
• build(deps): bump tj-actions/changed-files from 47.0.4 to 47.0.5 by @dependabot[bot] in #14984
• build(deps): bump security-framework-sys from 2.15.0 to 2.17.0 by @dependabot[bot] in #14983
• build(deps): bump tonic-prost from 0.14.2 to 0.14.5 by @dependabot[bot] in #14982
• build(deps): bump axum-core from 0.5.5 to 0.5.6 by @dependabot[bot] in #14980
• build(deps): bump github.com/go-openapi/spec from 0.22.3 to 0.22.4 by @dependabot[bot] in #14979
• proxy: v2.341.0 by @l5d-bot in #14991
• build(deps): bump iana-time-zone from 0.1.64 to 0.1.65 by @dependabot[bot] in #14990
• build(deps): bump zmij from 1.0.17 to 1.0.21 by @dependabot[bot] in #14989
• build(deps): bump itoa from 1.0.15 to 1.0.17 by @dependabot[bot] in #14988
• build(deps): bump tokio from 1.49.0 to 1.50.0 by @dependabot[bot] in #14987
• build(deps): bump docker/setup-qemu-action from 3.7.0 to 4.0.0 in /.github/actions/docker-build by @dependabot[bot] in #14998
• build(deps): bump docker/login-action from 3.7.0 to 4.0.0 by @dependabot[bot] in #14997
• build(deps): bump tokio-macros from 2.6.0 to 2.6.1 by @dependabot[bot] in #14996
• build(deps): bump ipnet from 2.11.0 to 2.12.0 by @dependabot[bot] in #14995
• build(deps): bump syn from 2.0.114 to 2.0.117 by @dependabot[bot] in #14994
• build(deps): bump quote from 1.0.42 to 1.0.45 by @dependabot[bot] in #14993
• build(deps): bump linkerd-validator from 0.1.6 to 0.1.7 by @alpeb in #15000

New Contributors

• @Tolsto made their first contribution in #14768

Full Changelog: edge-26.2.1...edge-26.3.1