edge-25.4.1

Overall status: RECOMMENDED

Cautions

Starting with edge-25.3.4, Linkerd requires the Gateway API CRDs, so you must either install them before installing Linkerd, or you must explicitly set installGatewayAPI=true when installing Linkerd. This release correctly supports setting installGatewayAPI when using the Linkerd CLI, and also correctly configures Prometheus to scrape the new multicluster mirror controllers.

Changes

This release correctly supports installGatewayAPI when using the Linkerd CLI. Additionally, it adds the --only-controller flag to the now-deprecated linkerd mc unlink command, to help users migrate to the new multicluster controller by removing old mirror controllers but leaving the Link resources in place, and it supports restoring the authority labels on inbound metrics by setting LINKERD2_PROXY_INBOUND_AUTHORITY_LABELS=unsafe as an environment variable for the proxy. It also introduces a new control_dns_resolutions_total metric, and correctly propagates span context into proxy debug log messages to make it easier to understand what caused things, and correctly configures Prometheus to scrape the new multicluster mirror controllers.

What's Changed

• build(deps): bump socket2 from 0.5.8 to 0.5.9 by @dependabot in #13882
• build(deps): bump darling from 0.20.10 to 0.20.11 by @dependabot in #13881
• build(deps): bump once_cell from 1.21.1 to 1.21.3 by @dependabot in #13880
• build(deps): bump @babel/eslint-plugin from 7.26.10 to 7.27.0 in /web/app by @dependabot in #13879
• build(deps-dev): bump @babel/eslint-parser from 7.26.10 to 7.27.0 in /web/app by @dependabot in #13878
• build(deps-dev): bump sinon from 19.0.4 to 20.0.0 in /web/app by @dependabot in #13877
• build(deps-dev): bump @babel/runtime from 7.26.10 to 7.27.0 in /web/app by @dependabot in #13876
• build(deps-dev): bump webpack-dev-server from 5.2.0 to 5.2.1 in /web/app by @dependabot in #13875
• build(deps): bump event-listener-strategy from 0.5.3 to 0.5.4 by @dependabot in #13868
• build(deps): bump linkerd2-proxy-api from git to v0.16.0 by @olix0r in #13883
• build(deps): bump hyper-util from 0.1.10 to 0.1.11 by @dependabot in #13886
• feat(multicluster): add --only-controller flag to linkerd mc unlink by @alpeb in #13874
• build(deps): bump tj-actions/changed-files from 27ae6b33eaed7bf87272fdeb9f1c54f9facc9d99 to b74df86ccb65173a8e33ba5492ac1a2ca6b216fd by @dependabot in #13887
• build(deps): bump iana-time-zone from 0.1.62 to 0.1.63 by @dependabot in #13885
• proxy: v2.290.0 by @l5d-bot in #13889
• fix(CLI): Check if installGatewayAPI is true before we error during CRD install by @zaharidichev in #13872
• build(deps): enable tracing feature in hyper-util by @alpeb in #13890
• chore(multicluster): update Prometheus configs and access policy to scrape new multicluster controllers by @alpeb in #13892
• feat(policy-test): conditionally compile experimental type tests by @olix0r in #13891
• build(deps): bump the clap group with 2 updates by @dependabot in #13894
• fix(policy-test): feature-gate experimental types in tests by @olix0r in #13896
• chore(ci): run policy tests against various Gateway API versions by @olix0r in #13893

Full Changelog: edge-25.3.4...edge-25.4.1