edge-25.8.2

Overall status: RECOMMENDED

Cautions

This release switches the default command for programming the routing table from iptables-legacy to iptables-nft.

Changes

This release switches the default command for programming the routing table from iptables-legacy to iptables-nft. (If you need to continue to use iptables-legacy, set proxyInit.iptablesMode: legacy in the linkerd2-control-plane chart if you're using the init container, or iptablesMode: legacy in the linkerd2-cni chart if you're using the CNI plugin.)

What's Changed

• build(deps): bump tokio from 1.47.0 to 1.47.1 by @dependabot[bot] in #14316
• build(deps): bump event-listener from 5.4.0 to 5.4.1 by @dependabot[bot] in #14318
• build(deps): bump tokio-util from 0.7.15 to 0.7.16 by @dependabot[bot] in #14319
• build(deps): bump cc from 1.2.30 to 1.2.31 by @dependabot[bot] in #14317
• build(deps): bump signal-hook-registry from 1.4.5 to 1.4.6 by @dependabot[bot] in #14320
• build(deps): bump tj-actions/changed-files from 94d97fe3f88298bf8b2f2db6fa2ab150f3c1ab77 to c2ca2493190021783138cb8aac49bcee14b4bb89 by @dependabot[bot] in #14321
• build(deps): bump google-github-actions/auth from 2.1.11 to 2.1.12 by @dependabot[bot] in #14322
• chore(policy-controller): Use the aws-lc-rs TLS backend by @sfleen in #14300
• build(deps): bump tj-actions/changed-files from c2ca2493190021783138cb8aac49bcee14b4bb89 to 8cdfb7636d150253dee416a80f11c67f5ba7e9be by @dependabot[bot] in #14323
• chore(policy): Remove OpenSSL from the policy controller by @sfleen in #14292
• chore(extension-init): Bump extension-init to v0.1.5 by @sfleen in #14324
• fix: Allow aws-lc-fips-sys licenses in deny.toml by @sfleen in #14328
• proxy: v2.312.0 by @l5d-bot in #14327
• chore(extension-init): Bump extension-init to v0.1.6 by @sfleen in #14329
• chore(helm)!: change iptables default mode to nft by @alpeb in #14326
• build(deps): bump actions/download-artifact from 4.3.0 to 5.0.0 by @dependabot[bot] in #14325
• build(deps): bump tokio-metrics from 0.4.3 to 0.4.4 by @dependabot[bot] in #14332
• build(deps): bump h2 from 0.4.11 to 0.4.12 by @dependabot[bot] in #14331
• build(deps): bump the clap group with 2 updates by @dependabot[bot] in #14330
• fix(policy): Fix env vars for building for arm64 by @sfleen in #14334

Full Changelog: edge-25.8.1...edge-25.8.2