Kuma Files

Changelog

• chore(deps): bump coredns to v1.15.0 #19299 @lukidzi
• chore(deps): bump envoy from 1.36.10 to 1.37.11 #19074 #19142 #19267 #19281 @lukidzi
• chore(deps): bump golang.org/x/net from 0.58.0 to 0.62.0 #19033 #19287 @renovate
• chore(deps): move distroless base images to debian13 (backport of [#19224]) #19239 @kumahq
• chore(deps): move kuma-init to registry.k8s.io distroless-iptables v0.11.2 (backport of [#19264]) #19273 @kumahq
• chore(deps): security update #18778 @kumahq
• chore(deps): use latest kumahq/kuma-gui #19295 @kumahq
• feat(kds): name the resource type and size of the largest response when a KDS stream fails with ResourceExhausted #18838 @kumahq
• fix(api-server): check origin label on delete (backport of [#16826]) #18994 @bartsmykla
• fix(api-server): make kuma.io/origin immutable (backport of [#18412]) #18992 @bartsmykla
• fix(insights): don't mark data plane proxies as degraded because of ignored inbounds #18736 @Automaat
• fix(k8s): drop reserved pod labels from Dataplanes (backport of [#18648]) #18997 @bartsmykla
• fix(k8s): read system-namespace-only resources from the system namespace only (backport of [#19051]) #19130 @kumahq
• fix(kds): only accept subscribed resource types (backport of [#19062]) #19243 @kumahq
• fix(kuma-cp): don't follow HTTP redirects (backport of [#19248]) #19269 @kumahq
• fix(meshpassthrough): correct typo on 2.13 #18881 @lukidzi
• fix(meshtrafficpermission): keep allow in shadow (backport of [#19173]) #19233 @kumahq
• fix(store): keep labels on the resource after a postgres update (backport of [#18929]) #18938 @kumahq
• fix(xds): do not mutate the cached Dataplane (backport of [#18008]) #18771 @kumahq
• fix(xds): pick up recreated same-name policies (backport of [#18731]) #18744 @kumahq
• fix(xds): speed up Envoy stats tag extraction (backport of [#18910]) #18912 @kumahq