Changelog v1.76.9

Know before update

• The node-local-dns DaemonSet pods will restart after the update.

Fixes

• [cloud-provider-aws] Do not fail the node bootstrap or update when linux-modules-extra is unavailable for the running kernel. #21953
• [deckhouse-controller] Module releases rendered with nelm no longer raise false absent-resource alerts. #21831
• [deckhouse-controller] nelm now takes over fields left by the old Helm 3 engine, so stale fields get removed on module upgrade. #21831
• [deckhouse] An unset settings.update.mode now defaults to AutoPatch instead of silently running as Auto. #21927
• [deckhouse] Fix a minor Deckhouse release being auto-applied as a patch when no Deployed release object is present. #21985
• [documentation] Fix a memory leak in the documentation builder so memory is released between builds; add CPU/memory limits and an opt-in profiling endpoint. #21935
• [istio] Add missing tools to proxyv2 images so the application-aware proxy termination hook works correctly. #22026
• [istio] Create the ConfigMaps required for additional JWKS root CA certificates. #22124
• [istio] Fix graceful draining of established HTTP connections when application pods terminate. #22065
• [keepalived] Fixed Python linking in the keepalived module image. #22066
• [network-gateway] Fixed Python linking in the network-gateway module image. #22066
• [node-local-dns] Bump Go dependencies in the coredns helper image to fix known CVEs. #21873 The node-local-dns DaemonSet pods will restart after the update.
• [registrypackages] Rebuild kubernetes-cni with updated Go dependencies to fix CVEs. #21960

Chore

• [candi] Golang CVE fixes #22044
• [istio] Fixed CVEs in revisions v1.21 and v1.25. #21991

For more information, see the changelog and minor version release changes.