Bug fixes:
- [docker] Bump github.com/docker/cli to v29.8.1 (#13934 @kevinpollet)
- [rules] Ignore negated matchers when parsing rule domains (#13863 @rtribotte)
- [server] Bump golang.org/x/crypto to v0.57.0 (#13930 @kevinpollet)
- [server] Ensure that the request TLS state is always set (#13985 @rtribotte)
- [service] Dedicate a sticky transport per ServersTransport (#13838 @sdelicata)
- [service] Isolate preauthenticated NTLM and Kerberos backend connections (#13902 @kevinpollet)
- [udp] Copy UDP datagrams into right-sized buffers before queuing (#13941 @rtribotte)