Releases · linkerd/linkerd2

@adleong

What's Changed

chore(policy-controller): fix visibility clippy lint by @adleong in #14150
fix(helm): Allow setting caBundle with caPEM and keyPEM by @Kakadus in #14109
nit(charts): remove extra space in linkerd-cni description by @cratelyn in #14162
build(deps): bump syn from 2.0.101 to 2.0.104 by @dependabot in #14169
build(deps): bump tracing-attributes from 0.1.29 to 0.1.30 in the tracing group by @dependabot in #14151
build(deps): bump slab from 0.4.9 to 0.4.10 by @dependabot in #14171
proxy: v2.303.0 by @l5d-bot in #14174
build(deps): bump cfg-if from 1.0.0 to 1.0.1 by @dependabot in #14173
build(deps): bump autocfg from 1.4.0 to 1.5.0 by @dependabot in #14172
build(deps): bump crazy-max/ghaction-chocolatey from 3.3.0 to 3.4.0 by @dependabot in #14170
build(deps): bump github.com/prometheus/common from 0.64.0 to 0.65.0 by @dependabot in #14168
build(deps-dev): bump babel-jest from 29.7.0 to 30.0.2 in /web/app by @dependabot in #14166
build(deps): bump core-js from 3.42.0 to 3.43.0 in /web/app by @dependabot in #14163
build(deps): bump tj-actions/changed-files from d52d20fa3f981cb852b861fd8f55308b5fe29637 to 666c9d29007687c52e3c7aa2aac6c0ffcadeadc3 by @dependabot in #14161
build(deps): bump docker/setup-buildx-action from 3.11.0 to 3.11.1 in /.github/actions/docker-build by @dependabot in #14159
build(deps): bump github.com/emicklei/proto from 1.14.1 to 1.14.2 by @dependabot in #14158
build(deps): bump rustls from 0.23.27 to 0.23.28 by @dependabot in #14155
build(deps): bump miniz_oxide from 0.8.8 to 0.8.9 by @dependabot in #14154
build(deps): bump windows-link from 0.1.1 to 0.1.3 by @dependabot in #14152
proxy: v2.304.0 by @l5d-bot in #14186
feat(tracing): Add proxy tracing configuration to control plane helm chart by @sfleen in #13994
build(deps-dev): bump jest-environment-jsdom from 30.0.0 to 30.0.2 in /web/app by @dependabot in #14164
build(deps): bump sigs.k8s.io/yaml from 1.4.0 to 1.5.0 by @dependabot in #14178
build(deps): bump errno from 0.3.12 to 0.3.13 by @dependabot in #14181
build(deps 8000 ): bump memchr from 2.7.4 to 2.7.5 by @dependabot in #14182
build(deps): bump libc from 0.2.173 to 0.2.174 by @dependabot in #14183
build(deps): bump wasi from 0.11.0+wasi-snapshot-preview1 to 0.11.1+wasi-snapshot-preview1 by @dependabot in #14184
build(deps): bump Swatinem/rust-cache from 2.7.8 to 2.8.0 by @dependabot in #14185
build(deps-dev): bump jest from 30.0.0 to 30.0.2 in /web/app by @dependabot in #14165

New Contributors

@Kakadus made their first contribution in #14109

Full Changelog: edge-25.6.3...edge-25.6.4

@zaharidichev

What's Changed

build(deps): bump softprops/action-gh-release from 2.2.2 to 2.3.2 by @dependabot in #14120
chore(build): enable proxy-identity to work on Windows sy 8000 stems by @zaharidichev in #14126
proxy: v2.301.0 by @l5d-bot in #14128
chore(docs): remove outdated release instructions by @cratelyn in #14129
build(deps): bump tj-actions/changed-files from c6634ca281a9fc05b03bee224ba00910cb78ab6e to 4140eb99d2cced9bfd78375c2088371853262f79 by @dependabot in #14118
build(deps): bump hyper-rustls from 0.27.6 to 0.27.7 by @dependabot in #14117
build(deps): bump smallvec from 1.15.0 to 1.15.1 by @dependabot in #14116
build(deps): bump the tracing group with 2 updates by @dependabot in #14115
build(deps-dev): bump @babel/eslint-parser from 7.27.1 to 7.27.5 in /web/app by @dependabot in #14114
build(deps-dev): bump webpack-dev-server from 5.2.1 to 5.2.2 in /web/app by @dependabot in #14113
build(deps-dev): bump @babel/runtime from 7.27.4 to 7.27.6 in /web/app by @dependabot in #14112
build(deps): bump bumpalo from 3.17.0 to 3.18.1 by @dependabot in #14108
build(deps): bump golang.org/x/net from 0.40.0 to 0.41.0 by @dependabot in #14106
build(deps): bump cc from 1.2.25 to 1.2.26 by @dependabot in #14107
build(deps): bump golang.org/x/tools from 0.33.0 to 0.34.0 by @dependabot in #14105
build(deps): bump google.golang.org/grpc from 1.72.2 to 1.73.0 by @dependabot in #14104
refactor(charts)!: disambiguate container port names for Kubernetes 1.33 by @olix0r in #14111
chore(controller)!: tune grpc handling time histogram buckets by @olix0r in #14130
feat(policy-controller): add grpc server metrics by @olix0r in #14122
build(deps): bump docker/setup-buildx-action from 3.10.0 to 3.11.0 in /.github/actions/docker-build by @dependabot in #14146
fix(test): fix policy-test e2e_appprotocol by @alpeb in #14148
build(deps-dev): bump jest-environment-jsdom from 29.7.0 to 30.0.0 in /web/app by @dependabot in #14132
build(deps): bump query-string from 9.2.0 to 9.2.1 in /web/app by @dependabot in #14133
build(deps): bump thread_local from 1.1.8 to 1.1.9 by @dependabot in #14142
build(deps): bump libc from 0.2.172 to 0.2.173 by @dependabot in #14141
build(deps): bump adler2 from 2.0.0 to 2.0.1 by @dependabot in #14140
fix(policy-controller): properly index named ports in native sidecar containers by @alpeb in #14144
build(deps): bump pest_derive from 2.8.0 to 2.8.1 by @dependabot in #14139
build(deps-dev): bump sinon from 20.0.0 to 21.0.0 in /web/app by @dependabot in #14136
build(deps-dev): bump jest from 29.7.0 to 30.0.0 in /web/app by @dependabot in #14134
build(deps): bump the clap group with 4 updates by @dependabot in #14138
build(deps): bump tj-actions/changed-files from 4140eb99d2cced9bfd78375c2088371853262f79 to d52d20fa3f981cb852b861fd8f55308b5fe29637 by @dependabot in #14143
build(deps): bump github.com/sergi/go-diff from 1.3.1 to 1.4.0 by @dependabot in #14137
proxy: v2.302.0 by @l5d-bot in #14156
fix(ci): Don't update website in releases before pushing helm charts by @sfleen in #14157

Full Changelog: edge-25.6.2...edge-25.6.3

@alpeb

What's Changed

build(deps): bump anstyle from 1.0.10 to 1.0.11 by @dependabot in #14102
build(deps): bump hyper-util from 0.1.13 to 0.1.14 by @dependabot in #14101
build(deps): bump headers from 0.4.0 to 0.4.1 by @dependabot in #14098
build(deps): bump tower-http from 0.6.4 to 0.6.6 by @dependabot in #14097
feat(helm): grant linkerd-config read access to additional SAs by @alpeb in #14092
Steering committee membership change by @wmorgan in #14087
fix(policy-test): update expected response codes by @olix0r in #14124

Full Changelog: edge-25.6.1...edge-25.6.2

@alpeb

What's Chang 8000 ed

deps(test): fetch latest helm version in integration tests by @alpeb in #14094
proxy: v2.300.0 by @l5d-bot in #14093
build(deps): bump parking_lot from 0.12.3 to 0.12.4 by @dependabot in #14081
build(deps): bump lock_api from 0.4.12 to 0.4.13 by @dependabot in #14082
build(deps): bump backon from 1.5.0 to 1.5.1 by @dependabot in #14084
build(deps-dev): bump @babel/core from 7.27.3 to 7.27.4 in /web/app by @dependabot in #14088
build(deps-dev): bump @babel/runtime from 7.27.3 to 7.27.4 in /web/app by @dependabot in #14089
build(deps): bump cc from 1.2.24 to 1.2.25 by @dependabot in #14090

Full Changelog: edge-25.5.5...edge-25.6.1

@adleong

Overall status: RECOMMENDED

Cautions

N/A

Changes

This 100% community-driven release adds k8s.pod.ip to the proxy's OpenTelemetry trace attributes (thanks, Justin Seiser!).

What's Changed

build(deps): bump tj-actions/changed-files from 403a8a6fd188648f8a5adab2047d8eab5c0a4b34 to 3981e4f74104e7a4c67a835e1e5dd5d9eb0f0a57 by @dependabot in #14049
refactor(proxy-injector): make injection code take a value overrider as a parameter by @adleong in #14037
build(deps): bump hyper-rustls from 0.27.5 to 0.27.6 by @dependabot in #14058
build(deps): bump cc from 1.2.23 to 1.2.24 by @dependabot in #14057
build(deps): bump mio from 1.0.3 to 1.0.4 by @dependabot in #14056
build(deps): bump tokio from 1.45.0 to 1.45.1 by @dependabot in #14055
build(deps-dev): bump @babel/eslint-parser from 7.27.0 to 7.27.1 in /web/app by @dependabot in #14054
build(deps): bump rustversion from 1.0.20 to 1.0.21 by @dependabot in #14048
build(deps-dev): bump webpack from 5.99.8 to 5.99.9 in /web/app by @dependabot in #14051
build(deps): bump query-string from 9.1.1 to 9.2.0 in /web/app by @dependabot in #14053
build(deps-dev): bump @babel/preset-env from 7.26.8 to 7.27.2 in /web/app by @dependabot in #14052
build(deps): bump google.golang.org/grpc from 1.72.1 to 1.72.2 by @dependabot in #14063
build(deps): bump tj-actions/changed-files from 3981e4f74104e7a4c67a835e1e5dd5d9eb0f0a57 to c6634ca281a9fc05b03bee224ba00910cb78ab6e by @dependabot in #14064
build(deps): bump socket2 from 0.5.9 to 0.5.10 by @dependabot in #14062
proxy: v2.299.0 by @l5d-bot in #14069
Add pod ip to via downward API to Trace Attributes by @jseiser in #13981
build(deps): bump hyper-util from 0.1.12 to 0.1.13 by @dependabot in #14068
build(deps): bump the clap group with 2 updates by @dependabot in #14067
deps: have dependabot update composite actions by @alpeb in #14060
build(deps-dev): bump @babel/runtime from 7.27.1 to 7.27.3 in /web/app by @dependabot in #14077
build(deps-dev): bump @babel/core from 7.27.1 to 7.27.3 in /web/app by @dependabot in #14076
build(deps): bump google-github-actions/setup-gcloud from 1.1.1 to 2.1.4 in /.github/actions/helm-publish by @dependabot in #14073
build(deps): bump docker/setup-buildx-action from 3.0.0 to 3.10.0 in /.github/actions/docker-build by @dependabot in #14072
build(deps): bump docker/setup-qemu-action from 3.0.0 to 3.6.0 in /.github/actions/docker-build by @dependabot in #14071
build(deps): bump crazy-max/ghaction-github-runtime from 3.0.0 to 3.1.0 in /.github/actions/docker-build by @dependabot in #14070
build(deps): bump openssl from 0.10.72 to 0.10.73 by @dependabot in #14079
build(deps): bump openssl-sys from 0.9.108 to 0.9.109 by @dependabot in #14078

Full Changelog: edge-25.5.4...edge-25.5.5

@l5d-bot

Overall status: RECOMMENDED

Cautions

N/A

Changes

This release correctly supports setting pod antiaffinity for the linkerd-multicluster chart.

What's Changed

build(deps): bump cc from 1.2.21 to 1.2.23 by @dependabot in #14035
build(deps): bump codecov/codecov-action from 5.4.2 to 5.4.3 by @dependabot in #14031
build(deps): bump github.com/prometheus/common from 0.63.0 to 0.64.0 by @dependabot in #14030
build(deps): bump bitflags from 2.9.0 to 2.9.1 by @dependabot in #14026
build(deps): bump tower-http from 0.6.3 to 0.6.4 by @dependabot in #14018
build(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.1 by @dependabot in #14025
proxy: v2.297.0 by @l5d-bot in #14024
chore(readme): trivial copyright date bump by @wmorgan in #14023
build(deps): bump tj-actions/changed-files from 11fe0a22639570798676000acac7be726130b5ee to 480f49412651059a414a6a5c96887abb1877de8a by @dependabot in #14019
build(deps): bump rustls-webpki from 0.103.2 to 0.103.3 by @dependabot in #14017
build(deps): bump the clap group with 2 updates by @dependabot in #14015
build(deps): bump core-js from 3.41.0 to 3.42.0 in /web/app by @dependabot in #14014
build(deps): bump @babel/eslint-plugin from 7.27.0 to 7.27.1 in /web/app by @dependabot in #14013
build(deps-dev): bump webpack from 5.99.7 to 5.99.8 in /web/app by @dependabot in #14012
chore: Update MAINTAINERS.md by @olix0r in #14044
proxy: v2.298.0 by @l5d-bot in #14043
build(deps): bump windows-result from 0.3.2 to 0.3.4 by @dependabot in #14042
build(deps): bump windows-strings from 0.4.0 to 0.4.2 by @dependabot in #14041
build(deps): bump errno from 0.3.11 to 0.3.12 by @dependabot in #14040
build(deps): bump windows-core from 0.61.0 to 0.61.2 by @dependabot in #14039
build(deps): bump hyper-util from 0.1.11 to 0.1.12 by @dependabot in #14038
chore(deps): sort and organize dependencies by @cratelyn in #13969
fix(multicluster): affinities for controllers by @alpeb in #14028
build(deps): bump DavidAnson/markdownlint-cli2-action from 19.1.0 to 20.0.0 by @dependabot in #14032
build(deps): bump tj-actions/changed-files from 480f49412651059a414a6a5c96887abb1877de8a to 403a8a6fd188648f8a5adab2047d8eab5c0a4b34 by @dependabot in #14045

Full Changelog: edge-25.5.3...edge-25.5.4

@l5d-bot

Overall status: NOT RECOMMENDED, use edge-25.5.4 instead

Cautions

N/A

Changes

This release contains internal improvements, but if you're looking for new capabilities over edge-25.5.1, go straight to edge-25.5.4!

What's Changed

build(deps): bump cc from 1.2.20 to 1.2.21 by @dependabot in #13991
build(deps-dev): bump @babel/core from 7.26.10 to 7.27.1 in /web/app by @dependabot in #13990
build(deps-dev): bump @babel/runtime from 7.27.0 to 7.27.1 in /web/app by @dependabot in #13988
build(deps): bump tj-actions/changed-files from 5426ecc3f5c2b10effaefbd374f0abdc6a571b2f to 4168bb487d5b82227665ab4ec90b67ce02691741 by @dependabot in #13986
build(deps-dev): bump @babel/preset-react from 7.26.3 to 7.27.1 in /web/app by @dependabot in #13989
build(deps): bump golang.org/x/net from 0.39.0 to 0.40.0 by @dependabot in #13998
build(deps): bump rustls-webpki from 0.103.1 to 0.103.2 by @dependabot in #13997
build(deps): bump rustls from 0.23.26 to 0.23.27 by @dependabot in #13995
build(deps): bump h2 from 0.4.9 to 0.4.10 by @dependabot in #13996
proxy: v2.296.0 by @l5d-bot in #14002
build(deps): bump tokio from 1.44.2 to 1.45.0 by @dependabot in #14001
build(deps): bump golang.org/x/tools from 0.32.0 to 0.33.0 by @dependabot in #13999
build(deps): bump tj-actions/changed-files from 4168bb487d5b82227665ab4ec90b67ce02691741 to e7b157b1c4ad44acfc8d9be14b8cd8f5058636e3 by @dependabot in #14003
build: validate edge version in release workflow by @alpeb in #13993
build(deps): bump actions/setup-go from 5.4.0 to 5.5.0 by @dependabot in #14007
build(deps): bump tj-actions/changed-files from e7b157b1c4ad44acfc8d9be14b8cd8f5058636e3 to 11fe0a22639570798676000acac7be726130b5ee by @dependabot in #14006
build(deps): bump tower-http from 0.6.2 to 0.6.3 by @dependabot in #14005
build(deps): bump rustls-pki-types from 1.11.0 to 1.12.0 by @dependabot in #14004
build(deps): bump backtrace from 0.3.74 to 0.3.75 by @dependabot in #14000

Full Changelog: edge-25.5.1...edge-25.5.2

@adleong

Overall status: RECOMMENDED

Cautions

N/A

Changes

This edge release adds support for httproute.gateway.networking.k8s.io in an AuthorizationPolicy targetRef.

What's Changed

build(deps): bump tokio-metrics from 0.4.0 to 0.4.1 by @dependabot in #13960
build(deps): bump google.golang.org/grpc from 1.71.1 to 1.72.0 by @dependabot in #13959
build(deps): bump tj-actions/changed-files from c34c1c13a740b06851baff92ab9a653d93ad6ce7 to 5426ecc3f5c2b10effaefbd374f0abdc6a571b2f by @dependabot in #13974
build(deps): bump google-github-actions/auth from 2.1.8 to 2.1.10 by @dependabot in #13973
build(deps): bump cc from 1.2.19 to 1.2.20 by @dependabot in #13972
build(deps): bump syn from 2.0.100 to 2.0.101 by @dependabot in #13971
build(deps-dev): bump webpack from 5.99.6 to 5.99.7 in /web/app by @dependabot in #13970
build(deps): bump actions/download-artifact from 4.2.1 to 4.3.0 by @dependabot in #13967
build(deps): bump tokio-util from 0.7.14 to 0.7.15 by @dependabot in #13963
build(deps): bump getrandom from 0.2.15 to 0.2.16 by @dependabot in #13961
fix(policy): allow gateway api httproutes as authorizationpolicy target type by @adleong in #13962
build(deps): bump chrono from 0.4.40 to 0.4.41 by @dependabot in #13977
build(deps): bump github.com/emicklei/proto from 1.14.0 to 1.14.1 by @dependabot in #13978
proxy: v2.295.0 by @l5d-bot in #13979
Create AMBASSADORS.md by @kflynn in #13982
build(deps): bump sha2 from 0.10.8 to 0.10.9 by @dependabot in #13985
build(deps): bump openssl-sys from 0.9.107 to 0.9.108 by @dependabot in #13984
build(deps): bump tokio-metrics from 0.4.1 to 0.4.2 by @dependabot in #13983

Full Changelog: edge-25.4.4...edge-25.5.1

@adleong

Overall status: RECOMMENDED

Cautions

Changes

With this release, Linkerd 2.18 is complete, and the version-2.18 tag points to edge-25.4.4!

Services with ports using appProtocol: linkerd.io/opaque will now only allow TCPRoutes to be attached to that port, and any unknown appProtocol value will be treated as linkerd.io/opaque. Additionally, both GRPCRoutes and HTTPRoutes may be attached to kubernetes.io/h2c ports, with GRPCRoutes taking precedence if both are present. Finally, the LINKERD2_PROXY_OUTBOUND_METRICS_HOSTNAME_LABELS is correctly honored for TLS hostname labels.

What's Changed

build(deps): bump softprops/action-gh-release from 2.2.1 to 2.2.2 by @dependabot in #13956
build(deps): bump http-proxy-middleware from 2.0.7 to 2.0.9 in /web/app by @dependabot in #13957
build(deps): bump the clap group with 2 updates by @dependabot in #13955
build(deps): bump signal-hook-registry from 1.4.2 to 1.4.5 by @dependabot in #13954
build(deps-dev): bump webpack from 5.99.5 to 5.99.6 in /web/app by @dependabot in #13952
build(deps): bump tj-actions/changed-files from 9934ab3fdf63239da75d9e0fbd339c48620c72c4 to c34c1c13a740b06851baff92ab9a653d93ad6ce7 by @dependabot in #13950
build(deps): bump rand from 0.9.0 to 0.9.1 by @dependabot in #13949
build(deps): bump proc-macro2 from 1.0.94 to 1.0.95 by @dependabot in #13945
fix(policy): include TCPRoute policy on opaque appProtocol services by @adleong in #13948
proxy: v2.294.0 by @l5d-bot in #13958
build(deps): bump libc from 0.2.171 to 0.2.172 by @dependabot in #13944

Full Changelog: edge-25.4.3...edge-25.4.4

Releases: linkerd/linkerd2

edge-25.6.4

What's Changed

New Contributors

Contributors

Uh oh!

edge-25.6.3

What's Changed

Contributors

Uh oh!

edge-25.6.2

What's Changed

Contributors

Uh oh!

edge-25.6.1

What's Chang 8000 ed

Contributors

Uh oh!

edge-25.5.5

Overall status: RECOMMENDED

Cautions

Changes

What's Changed

Contributors

Uh oh!

edge-25.5.4

Overall status: RECOMMENDED

Cautions

Changes

What's Changed

Contributors

Uh oh!

edge-25.5.3

Overall status: NOT RECOMMENDED, use edge-25.5.4 instead

Cautions

Changes

What's Changed

Contributors

Uh oh!

edge-25.5.2

Overall status: NOT RECOMMENDED, use edge-25.5.4 instead

Cautions

Changes

What's Changed

Contributors

Uh oh!

edge-25.5.1

Overall status: RECOMMENDED

Cautions

Changes

What's Changed

Contributors

Uh oh!

edge-25.4.4

Overall status: RECOMMENDED

Cautions

Changes

What's Changed

Contributors

Uh oh!