edge-25.2.1

What's Changed

• feat(multicluster): propagate service labels to endpoints by @maxbrunet in #13583
• build(deps): bump codecov/codecov-action from 5.1.2 to 5.2.0 by @dependabot in #13587
• fix(policy): Update outbound policy routes even when parent ref has no port by @adleong in #13584
• build(deps): bump openssl from 0.10.68 to 0.10.69 by @dependabot in #13601
• Add extra trace attributes from downward API by @sfleen in #13544
• proxy: v2.277.0 by @l5d-bot in #13609
• workflows/codeql - Reorder steps to cache dependencies by @ScottBrenner in #13594
• build(deps): bump openssl-probe from 0.1.5 to 0.1.6 by @dependabot in #13592
• build(deps): bump rand from 0.8.5 to 0.9.0 by @dependabot in #13604
• build(deps): bump openssl from 0.10.69 to 0.10.70 by @dependabot in #13620
• build(deps): bump google-github-actions/auth from 2.1.7 to 2.1.8 by @dependabot in #13618
• build(deps): bump ryu from 1.0.18 to 1.0.19 by @dependabot in #13612
• build(deps): bump httparse from 1.9.5 to 1.10.0 by @dependabot in #13611
• build(deps): bump github.com/spf13/pflag from 1.0.5 to 1.0.6 by @dependabot in #13610
• build(deps): bump unicode-ident from 1.0.14 to 1.0.16 by @dependabot in #13607
• build(deps): bump bumpalo from 3.16.0 to 3.17.0 by @dependabot in #13606
• build(deps): bump codecov/codecov-action from 5.2.0 to 5.3.1 by @dependabot in #13602
• build(deps): bump cpufeatures from 0.2.16 to 0.2.17 by @dependabot in #13600
• build(deps): bump google.golang.org/protobuf from 1.36.3 to 1.36.4 by @dependabot in #13599
• build(deps-dev): bump @babel/core from 7.26.0 to 7.26.7 in /web/app by @dependabot in #13598
• build(deps-dev): bump @babel/runtime from 7.26.0 to 7.26.7 in /web/app by @dependabot in #13596
• build(deps-dev): bump @babel/preset-env from 7.26.0 to 7.26.7 in /web/app by @dependabot in #13597
• build(deps): bump google.golang.org/grpc from 1.69.4 to 1.70.0 by @dependabot in #13593
• build(deps): bump cc from 1.2.10 to 1.2.11 by @dependabot in #13625
• build(deps): bump bytes from 1.9.0 to 1.10.0 by @dependabot in #13624
• build(deps): bump async-trait from 0.1.85 to 0.1.86 by @dependabot in #13623
• build(deps): bump serde_json from 1.0.137 to 1.0.138 by @dependabot in #13622
• build(deps): bump the clap group with 2 updates by @dependabot in #13621
• proxy: v2.278.0 by @l5d-bot in #13626
• build(deps): bump pin-project from 1.1.8 to 1.1.9 by @dependabot in #13627
• build(deps): bump cc from 1.2.11 to 1.2.12 by @dependabot in #13629
• build(deps): bump dyn-clone from 1.0.17 to 1.0.18 by @dependabot in #13628
• test(deps): bump k8s to v1.32 by @alpeb in #13632
• build(deps): bump once_cell from 1.20.2 to 1.20.3 by @dependabot in #13635
• build(deps): bump google.golang.org/protobuf from 1.36.4 to 1.36.5 by @dependabot in #13634
• build(deps): bump tj-actions/changed-files from 45.0.6 to 45.0.7 by @dependabot in #13630
• build(deps): bump data-encoding from 2.7.0 to 2.8.0 by @dependabot in #13642
• build(deps): bump cc from 1.2.12 to 1.2.13 by @dependabot in #13641
• build(deps-dev): bump @babel/preset-env from 7.26.7 to 7.26.8 in /web/app by @dependabot in #13640
• build(deps-dev): bump @babel/eslint-parser from 7.26.5 to 7.26.8 in /web/app by @dependabot in #13639
• build(deps-dev): bump @babel/core from 7.26.7 to 7.26.8 in /web/app by @dependabot in #13638
• expose issuer certificate TTL as a prometheus metric by @n-oden in #13615
• build(deps): bump golang.org/x/net from 0.34.0 to 0.35.0 by @dependabot in #13645
• build(deps): bump serialize-javascript from 6.0.1 to 6.0.2 in /web/app by @dependabot in #13647
• build(deps): bump miniz_oxide from 0.8.3 to 0.8.4 by @dependabot in #13651
• proxy: v2.279.0 by @l5d-bot in #13652
• build(deps): bump openssl-src from 300.4.1+3.4.0 to 300.4.2+3.4.1 by @dependabot in #13650
• build(deps): bump the clap group with 2 updates by @dependabot in #13649
• build(deps): bump golang.org/x/tools from 0.29.0 to 0.30.0 by @dependabot in #13644
• build(deps): bump github.com/evanphx/json-patch from 5.9.0+incompatible to 5.9.11+incompatible by @dependabot in #13608
• proxy: v2.280.0 by @l5d-bot in #13653
• fix(cli): Don't require gateway CRDs in linkerd install by @adleong in #13603

New Contributors

• @ScottBrenner made their first contribution in #13594

Full Changelog: edge-25.1.2...edge-25.2.1