changelog and version bump for 3.4.3.22

Author: lena-larionova

app/_data/changelogs/gateway.json

@@ -17926,5 +17926,57 @@
         "scope": "Core"
       }
     ]
+  },
+  "3.4.3.22": {
+    "kong": [
+      {
+        "message": "Fixed an issue where the restart command read configuration multiple times and failed to stop nginx.\n",
+        "type": "bugfix",
+        "scope": "Configuration"
+      }
+    ],
+    "kong-ee": [
+      {
+        "message": "Bumped libexpat from 2.7.1 to 2.7.3.",
+        "type": "dependency",
+        "scope": "Core"
+      },
+      {
+        "message": "Bumped lua-resty-ljsonschema to 1.2.0. Fixed UTF-8 string length calculation and added support for `null` in `enum` types.",
+        "type": "dependency",
+        "scope": "Core"
+      },
+      {
+        "message": "Fixed an issue where `500` response status can occasionally occur during reconfiguration.",
+        "scope": "Core",
+        "type": "bugfix"
+      },
+      {
+        "message": "**OpenID-Connect**: Fixed an issue where the `client_credentials`/`authorization_code` auth would not auto-recover if IdP was not accessible during Kong startup.",
+        "type": "bugfix",
+        "scope": "Plugin"
+      },
+      {
+        "message": "**OpenID Connect** Updated the rediscovery to use a short lifetime (5s) if the last discovery failed.",
+        "type": "bugfix",
+        "scope": "Plugin"
+      },
+      {
+        "message": "**response-transformer-advanced**: Fixed an issue where the failure occurred when Nginx gzip was enabled for upstream.",
+        "type": "bugfix",
+        "scope": "Plugin"
+      },
+      {
+        "message": "Fixed an issue where the data plane did not stop the health checker before cleaning up old configurations, which could lead to resource leaks.\n",
+        "type": "bugfix",
+        "scope": "Clustering"
+      },
+      {
+        "message": "Improved the performance of retrieving workspace entity counts.",
+        "type": "performance",
+        "scope": "Core"
+      }
+    ],
+    "kong-manager-ee": []
   }
 }

app/_data/products/gateway.yml

@@ -27,7 +27,7 @@ deployment_topologies:
 
 releases:
   - release: "3.4"
-    ee-version: "3.4.3.21"
+    ee-version: "3.4.3.22"
     ce-version: "3.4.2"
     eol: 2026-08-31
     lts: true
@@ -1361,6 +1361,7 @@ release_dates:
   '3.5.0.2': 2023/12/21
   '3.5.0.1': 2023/11/14
   '3.5.0.0': 2023/11/08
+  '3.4.3.22': 2025/11/24
   '3.4.3.21': 2025/09/05
   '3.4.3.20': 2025/06/25
   '3.4.3.19': 2025/06/10

app/_kong_plugins/openid-connect/changelog.json

@@ -391,6 +391,18 @@
       "scope": "Plugin"
     }
   ],
+  "3.4.3.22": [
+    {
+      "message": "Fixed an issue where the `client_credentials`/`authorization_code` auth would not auto-recover if IdP was not accessible during Kong startup.",
+      "type": "bugfix",
+      "scope": "Plugin"
+    },
+    {
+      "message": "**OpenID Connect** Updated the rediscovery to use a short lifetime (5s) if the last discovery failed.",
+      "type": "bugfix",
+      "scope": "Plugin"
+    }
+  ],
   "3.4.2.0": [
     {
       "message": "Fix the issue where `using_pseudo_issuer` does not work.",

app/_kong_plugins/response-transformer-advanced/changelog.json

@@ -13,6 +13,13 @@
       "scope": "Plugin"
     }
   ],
+  "3.4.3.22": [
+    {
+      "message": "Fixed an issue where the failure occurred when Nginx gzip was enabled for upstream.",
+      "type": "bugfix",
+      "scope": "Plugin"
+    }
+  ],
   "3.2.2.4": [
     {
       "message": "Does not load response body when `if_status` does not match.",