v1.5.0-rc.1

What's Changed

• skip building egctl for windows_arm64 by @arkodg in #5878
• docs(grpc): add note on using BackendTrafficPolicy for GPRC timeouts by @Antvirf in #5822
• ci: remove windows_arm64 uploads by @arkodg in #5884
• increase liveness probe failureThreshold for shutdown manager by @arkodg in #5877
• fix: remove sanposhiho from reviewers by @sanposhiho in #5870
• fix: make topology injector best effort by @arkodg in #5891
• docs: Change Subtitle of Concept Template by @melsal13 in #5893
• Revert "increase liveness probe failureThreshold for shutdown manager… by @arkodg in #5889
• release notes for v1.4.0-rc.2 by @arkodg in #5899
• chore: ignore api types in codecov by @shawnh2 in #5886
• chore/ci: add go.lint.fmt target by @cnvergence in #5846
• fix: staticcheck issues by @mmorel-35 in #5779
• docs: local jwks by @zhaohuabing in #5806
• disable settings by default in gateway-crds-helm by @arkodg in #5894
• Add seed corpus to guide the fuzzer to generate combinations of gatew… by @sudiptob2 in #5904
• fix(chart): passing root context to template by @hansselvig in #5902
• chore: improve merge test by @zirain in #5861
• fix: httproute precedence by considering header/query match type by @kkk777-7 in #5740
• ci: make helm-generate should failed as expected by @zirain in #5908
• docs(rate-limit): minor fix in 'Distinct Users Except Admin' section by @tomas-rojo in #5912
• adpot internals/utils/merge.Merge by @zirain in #5917
• Add Bitnami as an Envoy Gateway adopter by @carrodher in #5926
• build(deps): bump google/osv-scanner-action from 2.0.1 to 2.0.2 by @dependabot[bot] in #5920
• build(deps): bump github/codeql-action from 3.28.16 to 3.28.17 by @dependabot[bot] in #5919
• build(deps): bump github.com/valyala/fasthttp from 1.60.0 to 1.61.0 in /examples/preserve-case-backend in the github-com group across 1 directory by @dependabot[bot] in #5921
• docs: fix example for http redirects page by @mczaplinski in #5830
• docs: Add docs for request buffering by @markwinter in #5910
• feat: support configuring tls for dynamic resolver backend by @zhaohuabing in #5867
• fix: fix topology injector bug by @jukie in #5911
• feat: allow merge rate limit rule in BTP by @zirain in #5915
• docs: install EG via Argo CD by @zhaohuabing in #5824
• chore: clean up BTP status by @zhaohuabing in #5934
• e2e: test for dynamic resolver backend using system ca for TLS by @zhaohuabing in #5932
• feat: implement offline kubernetes controller by @shawnh2 in #5767
• fix: SecurityPolicy reference grant by @kkk777-7 in #5792
• fix: add validation for header values by @gavinkflam in #5933
• fix: Fixed typo in error message. by @mathias-ws in #5945
• e2e: disable DynamicResolverBackendTest on IPv6 by @zhaohuabing in #5964
• fix: proxy creation/deletion error handling in GatewayNamespace mode by @zirain in #5954
• ci: kube-deploy support KUBE_DEPLOY_PROFILE by @zirain in #5957
• fix: process remaining gatewayClasses after encountering an err by @arkodg in #5953
• fix: do not add tls inspector filter to quic listener by @Xunzhuo in #5671
• Add seed corpus related to traffic task. by @sudiptob2 in #5947
• [release/v1.3] release v1.3.3 notes by @guydc in #5969
• e2e: fix PreserveCase flaky by @zirain in #5966
• feat: validate JWT token and use projected token by @cnvergence in #5871
• feat: add controller namespace field to infrastructure render by @cnvergence in #5937
• e2e: GatewayNamespace mode by @zirain in #5961
• helm: support standard channel by @zhaohuabing in #5958
• e2e: bump upgrade test version to v1.3.2 by @zirain in #5976
• fix: add validation for duplicated API keys by @gavinkflam in #5955
• [release/v1.3] update site to use v1.3.3 by @guydc in #5980
• docs: dynamic resolver backend by @zhaohuabing in #5935
• Fuzzing: Fail on xds translation error by @sudiptob2 in #5986
• fix btp merge not working when there's multi parent refs on router by @zirain in #5967
• e2e: fix GRPCExtAuth flaky by @zirain in #5987
• chore: add coverpkg for coverage test by @shawnh2 in #5991
• ci: enable conformance test for GatewayNamespaceMode by @zirain in #5992
• e2e: add CollectAndDump for EGUpgrade test by @zirain in #5998
• e2e: add test for BTP timeout by @zirain in #5994
• Remoe check for accesslog formatter by @zirain in #5985
• e2e: fix GRPCExtAuth/http_route_with_ext_auth_authentication by @zirain in #6001
• chore: update dependabot by @zirain in #6007
• e2e: update CORS test by @zirain in #6011
• chore: add multiple gateways testdata for GatewayNamespace mode by @cnvergence in #5972
• feat: adds support for extension server in standalone mode by @mathetake in #5984
• docs: Add new conceptual pages for intro concepts by @melsal13 in #5981
• docs: update open graph image by @missBerg in #6022
• temporarily disable the backend tls test by @zhaohuabing in #6030
• Fix lint by @zhaohuabing in #6031
• fix: allows offline k8s controller to use non default CRDs by @mathetake in #6020
• e2e: refactor ratelmit test by @zirain in #5997
• moved shared under rules by @ryanhristovski in #5944
• docs: fix path to og:image by @missBerg in #6046
• version and release notes for v1.4.0 by @arkodg in #6048
• docs: add cherry-pick range example in release steps by @arkodg in #6045
• docs: clean up quickstart by @arkodg in #6051
• Release news for v1.4.0 by @arkodg in #6050
• chore: publish shouldnt wait for resilience-test by @arkodg in #6053
• docs: fix v1.4 release news by @arkodg in #6058
• build(deps): bump the gomod group across 6 directories with 8 updates by @dependabot[bot] in #6016
• build(deps): bump the gomod group across 2 directories with 3 updates by @dependabot[bot] in #6060
• v1.4 docs by @zhaohuabing in #6052
• update release process by @zhaohuabing in #6063
• e2e: fix EnvoyProxyCustomName by @zirain in #6014
• fix: custom controller namespace refs in gateway namespace mode by @cnvergence in #6065
• e2e: fix BackendUpgrade flaky by @zirain in #6038
• build(deps): bump actions/setup-go from 5.4.0 to 5.5.0 in /tools/github-actions/setup-deps in the github-actions group across 1 directory by @dependabot[bot] in #6004
• e2e: fix backend tls test by @zhaohuabing in #6029
• pin envoy image in e2e tests to avoid ext proc test failure by @zhaohuabing in #6078
• chore: utils.Merge by @zirain in #6074
• Fix flaky wasm permission cache tests by @zhaohuabing in #6085
• docs: add gateway namespace mode documentation by @cnvergence in #6040
• add @cnvergence and @rudrakhp as maintainers by @arkodg in #6089
• e2e: enable EGUpgrade test by @zirain in #6079
• e2e: fix BackendTLSSettings by @zirain in #6090
• chore: use the latest envoy image for e2e by @zhaohuabing in #6093
• Fuzzing: hardcode minor parameters to let the fuzzer only generate re… by @sudiptob2 in #6101
• fix(translator): make OIDC and JWT authentication work together by @StephenRobin in #5142
• fix(site): fix archetypes with Hugo 0.147.3+ by updating Docsy and render-heading template by @melsal13 in #6099
• fix: add FullDuplexStreamed to enum by @guydc in #6103
• Docs: fix client ip detection docs by @rudrakhp in #6104
• e2e: fix SessionPersistence flaky by @zirain in #6082
• e2e: fix flaky and refactor WeightedRoute test by @zirain in #6106
• build(deps): bump codecov/codecov-action from 5.4.2 to 5.4.3 by @dependabot[bot] in #6112
• build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by @dependabot[bot] in #6111
• fix: ZoneAwareRouting not working GNM(gateway namespace mode) by @zirain in #6107
• build(deps): bump the gomod group across 5 directories with 2 updates by @dependabot[bot] in #6113
• build(deps): bump distroless/base-nossl from d1fc914 to ecbab76 in /tools/docker/envoy-gateway by @dependabot[bot] in #6115
• doc: update release page by @shawnh2 in #6109
• build(deps): bump the k8s-io group across 2 directories with 6 updates by @dependabot[bot] in #6114
• e2e: fix EnvoyProxyCustomName flaky by @zirain in #6122
• e2e: update ZoneAwareRouting by @zirain in #6121
• fix(tranlator): SubjectAltNames were being dropped from BackendTLSPolicy.validation by @ankushagarwal in #6092
• api(oidc): adds support in OIDC api to optionally deny redirects by @sam-burrell in #5455
• use sds to fetch the client certificate for envoy-ratelimit TLS connections by @zhaohuabing in #5988
• e2e: fix TCPRouteBackend flaky by @zirain in #6120
• feat: local ratelimit support XRateLimitHeaders by @zirain in #6059
• feature(translator): cluster and endpoint xds metadata by @guydc in #5875
• feat(api): add zone field to BackendEndpoint by @AlexKrudu in #6137
• chore: fix CI by @zirain in #6148
• change default component log level to misc:error by @zirain in #6149
• fix: v1.4 gateway namespace mode deployment link by @cnvergence in #6158
• fix: zone-aware-routing e2e falkiness by @jukie in #6152
• fix: return early from buildwasms by @guydc in #6169
• docs: Added prereq boilerplate to Response Compression doc in latest and v1.4 by @melsal13 in #6170
• feat: add ownerreference to infra resources when gateway namespace mode by @kkk777-7 in #6100
• use SDS for the client cert for connections with Wasm HTTP server by @zhaohuabing in #6139
• chore: bump go and purego by @zirain in #6174
• validate gateway namespace mode and merged gateways by @cnvergence in #6041
• feat: support app protocol for dynamic resolver backend by @zhaohuabing in #5936
• feat: set OverlappingTLSConfig condition for merged Gateways by @zhaohuabing in #5862
• add unix domain socket path length validation by @mukeshmahato17 in #6160
• ci: fix go.test.cel by @zirain in #6185
• docs(fault-injection): fix incorrect policy name by @pratikgitss in #6178
• chore: add make help prompt to run golint by @rudrakhp in #6177
• Use gateway name as Proxy fleet name for Gateway Namespace mode by @zirain in #6135
• feat(translator): support active http healthcheck host by @guydc in #6118
• chore: use GetEnvoyProxyComponentLevel by @zirain in #6171
• fix: Use quoted values zone annotation in topology injector by @jukie in #6133
• local_ratelimit: make sure x-ratelimit-reset exists by @zirain in #6157
• docs: update egctl docs by @arkodg in #6166
• fix: translate xds udp listener by @kkk777-7 in #6183
• Fix shared=true when no clientSelector, by @ryanhristovski in #6072
• feat: implementing the ability to optionally deny redirects in security policies by @sam-burrell in #6136
• e2e: fix EnvoyProxyDaemonSet test by @zirain in #6195
• feat: improve egctl collect by @zirain in #6197
• test: make conformance test support RunTest by @zirain in #6132
• build(deps): bump the k8s-io group across 2 directories with 1 update by @dependabot[bot] in #6188
• Change static uid to for global ratelimit dashboard by @eminaktas in #6193
• dump config for flaky dynamic resover test by @zhaohuabing in #6196
• chore: fix flaky by @zhaohuabing in #6201
• chore: rename ir serverCertificate yaml key to certificate by @zhaohuabing in #6080
• decouple Gateway API version with go mod by @zirain in #6210
• docs: fix tls customisation minVersion case by @Dean-Coakley in #6212
• docs: gateway-crds-helm by @arkodg in #6235
• remove infra ENVOY_GATEWAY_NAMESPACE and introduce ENVOY_POD_NAMESPACE envVar for accesslog by @cnvergence in #6221
• feat: enable GatewayInfrastructure in GatewayNamespaceMode by @zirain in #5996
• Fix broken btp ratelimit merge by @ryanhristovski in #6214
• Keep ALPN configuration for listeners with overlapping certificates when ALPN is explicitly set via ClientTrafficPolicy by @zhaohuabing in #6217
• Add zone aware routing docs by @jukie in #6095
• Allow for headless envoy services by @ryanhristovski in #6250
• e2e: use ConformanceOptions.Hook by @zirain in #6215
• feat(api): add insecureSkipVerify flag to Backend TLS settigns by @AlexKrudu in #6222
• api: support headers and redirects in custom response by @rudrakhp in #5549
• v1.4.1 release notes by @shawnh2 in #6254
• docs: Conceptual docs for Load Balancing and Rate Limiting by @melsal13 in #6088
• docs: Use v1.4.1 tag by @arkodg in #6263
• chore: Set accepted condition as true when failed to resolve backends by @zhaohuabing in #6081
• add Alibaba Cloud as an Envoy Gateway adopter by @MaYuan-02 in #6264
• feat: add option to disable lua validation by @rudrakhp in #6176
• conformance: run experimental conformance test on different mode by @zirain in #6259
• chore: fix wasm file cache directory permission by @zhaohuabing in #6173
• build(deps): bump busybox from 37f7b37 to f85340b in /tools/docker/envoy-gateway by @dependabot[bot] in #6246
• Feat: Extension server policy propagation to PostTranslateModify by @raviverma-ai in #5914
• fix: add optional flag for hostname fix #6278 by @yyadavalli in #6279
• Update gateway-api-metrics.md by @saurabtharu in #6283
• feat(translator): impl tls insecure-skip-verify by @AlexKrudu in #6253
• feat: cluster stat name by @guydc in #5898
• feat(translator): support setting previous priorities retry predicate by @Inode1 in #6204
• docs: enable kapa.ai for doc and content discovery by @missBerg in #6288
• build(deps): bump github/codeql-action from 3.28.18 to 3.28.19 by @dependabot[bot] in #6273
• build(deps): bump aquasecurity/trivy-action from 0.30.0 to 0.31.0 by @dependabot[bot] in #6274
• build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @dependabot[bot] in #6248
• build(deps): bump the gomod group across 1 directory with 19 updates by @dependabot[bot] in #6275
• feat: add gatewayclass ownerreference to infra resources when all cases except gateway namespace mode by @kkk777-7 in #6238
• docs: remove unused import in ext grpc auth example by @Dean-Coakley in #6291
• feat: support custom redirects by @rudrakhp in #6295
• fix wrong enum on SubjectAltNameType by @zirain in #6307
• chore: fix unnecessary type arguments lint by @cnvergence in #6306
• chore: bump golang to 1.24.4 by @zirain in #6300
• ci: add ci-checks by @zirain in #6294
• xds: enable udpa.TypeStruct by @zirain in #6311
• build(deps): bump github/codeql-action from 3.28.19 to 3.29.0 by @dependabot[bot] in #6318
• build(deps): bump nosborn/github-action-markdown-cli from 3.4.0 to 3.5.0 by @dependabot[bot] in #6317
• build(deps): bump the gomod group across 5 directories with 6 updates by @dependabot[bot] in #6319
• build(deps): bump distroless/base-nossl from ecbab76 to fa7b50f in /tools/docker/envoy-gateway by @dependabot[bot] in #6320
• Dynamic variable rendering for btp responseOverride by @ryanhristovski in #6297
• feat: support HTTP CONNECT by @zirain in #6256
• bugfix: BackendTlsPolicy should not reference across namespace by @zirain in #6309
• chore: make log output consistent by @zirain in #6314
• feat: support listener name in SecurityPolicy target by @kinolaev in #5916
• feat(provider): cache sync period by @guydc in #6326
• chore: disable CollectAndDump by default by @zirain in #6328
• feat: support user provided name for generated HPA and PDB by @shahar-h in #6337
• deps: upgrades func-e to the latest to use latest Envoy with standalone by @mathetake in #6339
• feature(translator): expose OIDC oauth cookie samesite configuration by @vibe in #6289
• fix: fix bug in hostname overlap detection by @rudrakhp in #6332
• feat(api): allow pinning custom image repository for Envoy Proxy. by @sudiptob2 in #6296
• feat: load certs fallback to first key by @zirain in #6327
• fix(translator): ext-proc full duplex streamed trailers and validation by @guydc in #6323
• e2e: simply the Datadog e2e test by @zirain in #6361
• build(deps): bump softprops/action-gh-release from 2.2.2 to 2.3.2 by @dependabot[bot] in #6292
• fix: invalid basic auth data caused rds rejection by @Xunzhuo in #5683
• bugfix: make EnvoyPatchPolicy able to replace telemetry cluster by @zirain in #6367
• feat: Add support for configuring maxConnectionsToAcceptPerSocketEvent in ClientTrafficPolicy by @jukie in #6233
• default on SameSite attribute unset for Oauth2 cookies by @arkodg in #6347
• chore: fix cve by @zirain in #6365
• chore: enable ClusterTrustBundle by @zirain in #6352
• chore: add kind in status update log by @zirain in #6376
• e2e: fix DynamicResolverBackend test by @zirain in #6374
• feat: disable automountServiceAccountToken for proxy and ratelimit by @JefeDavis in #6364
• build(deps): bump google/osv-scanner-action from 2.0.2 to 2.0.3 by @dependabot[bot] in #6380
• feat: add validation of section name for Gateway listener by @kkk777-7 in #6343
• Update Community Meeting doc by @arkodg in #6391
• chore: drop redundant irKey validation in jwt interceptor by @cnvergence in #6362
• ZoneAwareRouting: Differentiate between TrafficDistribution and TopologyAwareRouting by @jukie in #5882
• fix: add configMap indexers for EEP reconciler by @rudrakhp in #6369
• api: allow to custom service account name by @zirain in #6360
• e2e: use different QPS for BackendUpgrade test by @zirain in #6373
• chore(installation): early validate presence of tag in image and imageRepository by @sudiptob2 in #6354
• docs: benchmark dashboard exploration tool by @missBerg in #6399
• fix: policy satus observedGeneration by @zhaohuabing in #6397
• bugfix: fix hpa/pdb deletion issue by @zirain in #6395
• fix: use buildEndpointType for access and tracing by @zirain in #6370
• docs: add tools page for navigating to tools by @missBerg in #6407
• e2e: use appropriate values for upgrade test by @zirain in #6409
• enhancement: lazy loading validator and defaulter when load resources by @shawnh2 in #6403
• Add The Trade Desk as adopter of envoygateway by @jukie in #6418
• docs: update links to meeting notes by @missBerg in #6420
• Add Verve to adopters.yaml by @pgold30 in #6422
• docs: Update zone aware docs by @jukie in #6392
• chore: fix doc link by @shawnh2 in #6423
• api: add zoneAware lb config by @jukie in #6154
• fix: typo in zoneAware API field by @jukie in #6426
• feat: OIDC RP initialized logout by @zhaohuabing in #6219
• Support client cert validation (spki, hash, san) by @kinolaev in #5868
• docs: show table of content in Gateway API Extensions page by @zirain in #6432
• build(deps): bump github/codeql-action from 3.29.0 to 3.29.1 by @dependabot[bot] in #6437
• fix: default accesslog not working by @zirain in #6441
• chore: bump kind and clustertrustbundles CRD by @zirain in #6443
• chore: fix cve by @zirain in #6446
• chore: fix flaky test EnvoyGatewayCustomSecurityContextUserid by @zhaohuabing in #6434
• fix: Do not set backendRequestTimeout when Retries are set by @sudiptob2 in #6421
• gatewayapi: don't append gwcResource if there's invalid GatewayClass by @zirain in #6379
• build(deps): bump the gomod group across 1 directory with 16 updates by @dependabot[bot] in #6436
• Default to 1 for MaxAcceptPerSocketEvent by @jukie in #6447
• feat: allow deployment annotations to be added through helm by @lboynton in #6341
• docs: improve table layout by @zirain in #6451
• fix: fix validation errors that occur when the redis url contains valid sentinel or cluster config by @keithfz in #6394
• feat: allow to custom service account name by @zirain in #6393
• fix telemetry with host port not working by @zirain in #6460
• fix: retry reconcile on transient errors during reconcile by @patrostkowski in #6299
• feat: support custom backendRef via extension server by @Xunzhuo in #6342
• docs: add release note for custom backend by @Xunzhuo in #6464
• fix: backendref nil set initialization by @Xunzhuo in #6466
• doc: 1.4.2 release by @zhaohuabing in #6467
• update release date for 1..4.2 by @zhaohuabing in #6469
• fix: custom backend weight not set properly by @Xunzhuo in #6468
• build(deps): bump the gomod group across 3 directories with 6 updates by @dependabot[bot] in #6475
• build(deps): bump github/codeql-action from 3.29.1 to 3.29.2 by @dependabot[bot] in #6476
• build(deps): bump aquasecurity/trivy-action from 0.31.0 to 0.32.0 by @dependabot[bot] in #6477
• helm: fix README by @zirain in #6472
• Use cluster.loadBalancingPolicy instead of commonLbConfig by @jukie in #5833
• fix: DualStack NodePort Gateway's status.addresses should contain addresses from both IP families by @michaelbeaumont in #6372
• fix: allow to override prometheus annotations by @zirain in #6430
• feat: introduce validation levels for lua by @rudrakhp in #6355
• feat(translator): add store metric by @guydc in #6406
• feat(translator): remove absent healthy endpoints by @guydc in #6478
• feat: support stream idle timeout by @mabdh in #6481
• Feat: syntax validation level for Lua EEPs by @rudrakhp in #6494
• Adds support for dashboard annotations by @dorsegal in #6493
• chore: update kubernetes provider controller log by @zhaohuabing in #6498
• feat(ext_service): Add support for SecurityPolicy and EnvoyExtensionPolicy to target ServiceImport by @nareddyt in #6495
• chore: fix CVE by @zirain in #6505
• fix: skip failed EEP when it's failopen by @zhaohuabing in #6401
• fix: avoid appending same Backends twice to resource map by @zirain in #6506
• API: support getting OIDC client ID from secrets by @zhaohuabing in #6479
• feat: aggregate ancestor status by @kkk777-7 in #6445
• build(deps): bump the gomod group across 5 directories with 4 updates by @dependabot[bot] in #6514
• fix: lua stream_handle.body()/bodyChunk() mocks by @rudrakhp in #6519
• Enable http2 by default for ALS access-loggers by @tjvdmolen in #6510
• skip SP ext auth when failopen is true by @zhaohuabing in #6512
• Add hostname to backend by @Ri7ay in #6503
• Setup ratelimit policy merging documentation by @ryanhristovski in #6529
• feat: admin and metrics server hot reloading on config change by @sudiptob2 in #6488
• docs: add ai gateway capability card by @missBerg in #6537
• docs: create an embedded page for kapa chat by @missBerg in #6538
• fix: incorrect envoy ai gw repo by @Xunzhuo in #6541
• chore: retry when failing to check doc links by @zhaohuabing in #6540
• test(ci): Install and run docker-mac-net-connect when running e2e on macos by @sudiptob2 in #6368
• add new reviewers by @arkodg in #6549
• rm priority field from EnvoyExtensionPolicy design doc by @arkodg in #6553
• rm latest_release workflow by @arkodg in #6551
• feat: support listener/routes in post translate hook level by @Xunzhuo in #6524
• fix: default httproutes order by creation timestamp or "{namespace}/{name}" combination by @fayizk1 in #6550
• docs: add v1.4.2 to benchmark report results by @missBerg in #6555
• docs: Policy Merging in BTP by @arkodg in #6554
• feat: add reset-before-request retry trigger by @arkodg in #6547
• build(deps): bump google/osv-scanner-action from 2.0.3 to 2.1.0 by @dependabot[bot] in #6562
• adopters: add KEDA by @wozniakjan in #6567
• build(deps): bump the gomod group across 3 directories with 3 updates by @dependabot[bot] in #6563
• Fix EEP CEL Validations around FullDuplexStreamed and FailOpen by @arkodg in #6560
• fix(filters): fix context loss in httproutefilter processing by @AlexKrudu in #6558
• docs: add airgap deployment guide by @ion-elgreco in #6429
• feat: add admin console support by @Xunzhuo in #6331
• feat(backendtrafficpolicy): initial_jitter in activehealthcheck- using gwapiv1 instead of metav1 by @nehabhosaleconfluent in #6548
• feat: api key auth forwarding setting by @zhaohuabing in #6444
• fix: Node objects should not be subject to namespace label checks by @fengxsong in #6565
• build(deps): updates to func-e 1.2 by @codefromthecrypt in #6571
• fix: race condition in watchable subscribe by @rudrakhp in #6566
• docs: add missing release notes by @Xunzhuo in #6574
• feat(console): add resource explorer by @Xunzhuo in #6572
• feat: urlRewrite supports idleTimeout by @mabdh in #6561
• docs: update global rate limit docs by @zhaohuabing in #6575
• feat: support route rule in SecurityPolicy target by @kkk777-7 in #6335
• API: add runtime guards for risky behavior changes to EnvoyGateway by @zhaohuabing in #6556
• feat: getting OIDC client ID from secret by @zhaohuabing in #6532
• feat: support ClusterTrustBundle in CACertificateRefs by @zirain in #6353
• docs: edit air gapped docs to clean up envoy proxy customizations by @arkodg in #6577
• chore: fix broken links by @zhaohuabing in #6588
• Allow configuring service_name in tracing via EnvoyProxy spec by @sudiptob2 in #6568
• setup allowRequestsWithoutProxyProtocol by @ryanhristovski in #6545
• reduce xds cluster DNS lookups by @arkodg in #6591
• fix: add missing HTTP filters for HTTP3 listener by @zhaohuabing in #6584
• docs: simplify concepts section by @arkodg in #6578
• feat: Implement ZoneAware loadbalancing - Use non-static local_cluster name (splitup #6482) by @jukie in #6497
• feat: Implement ZoneAware loadbalancing - ZoneAware Lb Config (splitup #6482) by @jukie in #6485
• feat: Add Support for Setting Certgen Pod Labels/Annotations by @blakeromano in #6378
• fix: use per-route configuration for session persistence to avoid listener drain by @zhaohuabing in #6580
• docs: add your logo here cta by @missBerg in #6604
• sort gw api resources based on name if creation timestamp is same by @arkodg in #6599
• feat: apply backendTLSSettings to all Backend Types by @zhaohuabing in #6533
• build(deps): bump the gomod group across 5 directories with 4 updates by @dependabot[bot] in #6613
• build(deps): bump github/codeql-action from 3.29.2 to 3.29.4 by @dependabot[bot] in #6614
• update RM for v1.5 by @zirain in #6610
• sort httpFilters on name if priority order is same by @arkodg in #6600
• docs: add admin console guides by @Xunzhuo in #6576
• Fix backendRef Provider processing for extAuth/OIDC by @zirain in #6612
• chore: bump k8s.io by @zirain in #6615
• build(deps): bump busybox from f85340b to f9a104f in /tools/docker/envoy-gateway by @dependabot[bot] in #6629
• bump github.com/docker/docker by @zirain in #6633
• fix concurrent write map issue in egctl by @zirain in #6628
• build(deps): bump sigs.k8s.io/yaml from 1.5.0 to 1.6.0 by @dependabot[bot] in #6632
• build(deps): bump github/codeql-action from 3.29.4 to 3.29.5 by @dependabot[bot] in #6630
• build(deps): bump the gomod group across 1 directory with 2 updates by @dependabot[bot] in #6631
• feat: Implement ZoneAware loadbalancing - Track Envoy pods via xDS (splitup #6482) by @jukie in #6597
• chore: fix unchanged files with check annotations by @zirain in #6623
• fix: rename listener using its protocol and port by @zhaohuabing in #6544
• e2e: add http3 test by @zirain in #6622
• feat: support endpoint override policy based routing by @Xunzhuo in #6458
• fix: gen-check and add release note by @Xunzhuo in #6637
• [release/v1.5]: v1.5.0-rc.1 release note by @zirain in #6636
• [release/v1.5] pin envoy and ratelimit image version by @zirain in #6640
• [release/v1.5] chore: fix release notes name by @zirain in #6644

New Contributors

• @Antvirf made their first contribution in #5822
• @hansselvig made their first contribution in #5902
• @kkk777-7 made their first contribution in #5740
• @tomas-rojo made their first contribution in #5912
• @carrodher made their first contribution in #5926
• @mczaplinski made their first contribution in #5830
• @gavinkflam made their first contribution in #5933
• @mathias-ws made their first contribution in #5945
• @StephenRobin made their first contribution in #5142
• @ankushagarwal made their first contribution in #6092
• @AlexKrudu made their first contribution in #6137
• @mukeshmahato17 made their first contribution in #6160
• @pratikgitss made their first contribution in #6178
• @eminaktas made their first contribution in #6193
• @raviverma-ai made their first contribution in #5914
• @yyadavalli made their first contribution in #6279
• @saurabtharu made their first contribution in #6283
• @kinolaev made their first contribution in #5916
• @vibe made their first contribution in #6289
• @JefeDavis made their first contribution in #6364
• @lboynton made their first contribution in #6341
• @patrostkowski made their first contribution in #6299
• @mabdh made their first contribution in #6481
• @dorsegal made their first contribution in #6493
• @tjvdmolen made their first contribution in #6510
• @Ri7ay made their first contribution in #6503
• @fayizk1 made their first contribution in #6550
• @wozniakjan made their first contribution in #6567
• @ion-elgreco made their first contribution in #6429
• @nehabhosaleconfluent made their first contribution in #6548
• @codefromthecrypt made their first contribution in #6571
• @blakeromano made their first contribution in #6378

Full Changelog: v1.4.2...v1.5.0-rc.1