v2.4.2

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

📦 Helm Chart

• Release 2.4.2 by @github-actions[bot] in #4826

🔨 Maintenance

• Update operator bundle workflow to use PAT for bot workflows by @nginx-bot in #4768

⬆️ Dependencies

• Update NGINX Agent to v3.7.1 and Lint to v2.9.0 (#4799) by @sjberman in #4825

Other Changes

• Operator Bundle v1.2.1 by @nginx-bot in #4758

Full Changelog: v2.4.1...v2.4.2

v2.4.1

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

🐛 Bug Fixes

• Update dnsResolver value type to string (#4719) by @bjee19 in #4721

🔨 Maintenance

• Fix release pipeline issues (#4703) by @ciarams87 in #4705
• Update openssl-libs package to fix cves by @github-actions[bot] in #4720
• Manually build helm operator by @nginx-bot in #4735
• Update nginx version to 1.29.5 by @nginx-bot in #4743

⬆️ Dependencies

• Update NGINX Agent to v3.7.0 by @nginx-bot in #4728

Other Changes

• Operator Bundle v1.2.0 by @github-actions[bot] in #4702

Full Changelog: v2.4.0...v2.4.1

v2.4.0

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

🚀 Features

• Add Session Persistence support for NGINX OSS and Plus users by @salonichf5 in #4471
• Allow users to specify escape format when customizing the data plane access logs by @michasHL in #4530
• Enables keepAlive directive to 16 by default by @salonichf5 in #4524
• Add TCPRoute and UDPRoute Support for L4 Load Balancing by @Skcey in #4518
• Support Basic Auth through AuthenticationFilter by @shaun-nx in #4575
• feat: Add CRD discovery for BackendTLSPolicy and experimental CRDs by @ciarams87 in #4569
• Add SnippetsPolicy for Gateway level by @fabian4 in #4461
• Add proxy settings policy by @ciarams87 in #4592
• Support watching subset of namespaces by @sjberman in #4606
• Support Rate Limiting through RateLimitPolicy by @bjee19 in #4633
• Add TLS Options support for Gateway by @dhurley in #4639

🐛 Bug Fixes

• Use container UUID instead of IP address for tracking agent by @sjberman in #4470
• Preserve external controller annotations for deployment and daemonSet by @salonichf5 in #4468
• Fix hostNetwork data plane pod connection issue by @sjberman in #4481
• Prevent unnecessary data plane restarts by @sjberman in #4555
• Add RouteType to L4Route struct by @shaun-nx in #4646
• Ensure agent collector logs go to stdout by @dhurley in #4656
• Confirm auth filter secret is referenced and exists by @shaun-nx in #4654

📦 Helm Chart

• Update docs for 2.3.0 release by @sjberman in #4491
• feat(chart): add priorityClassName for control plane pod by @starlightromero in #4356
• Include Gateway TLS spec in Helm template by @kwentine in #4514
• Update dependency dadav/helm-schema to v0.20.0 by @renovate[bot] in #4558
• add support for the GatewaySpecAddress to the gateway configuration by @rushikesh-outbound in #4605
• Add snippets helm flag and example changes for snippets doc update by @bjee19 in #4628
• Release 2.4.0 by @github-actions[bot] in #4669

🧪 Tests

• Update Helm release opentelemetry-collector to v0.143.0 by @renovate[bot] in #4464, #4504, #4516, #4580
• NFR Test Results for NGF version edge by @github-actions[bot] in #4467
• NFR Test Results for NGF version v2.3.0 (#4453) by @sjberman in #4475
• Fix inference conformance duplication by @sjberman in #4492
• Test: replace context.TODO and context.Background to t.Context in uni… by @richie-king in #4355
• Fix GW API version for NFR tests by @sjberman in #4528
• Update curlimages/curl Docker tag to v8.18.0 by @renovate[bot] in #4566
• Refactor test options by @tataruty in #4582
• Increase test coverage for stream servers; add UDP to feature list by @ciarams87 in #4563
• Add CEL tests for SnippetsPolicy by @tataruty in #4603
• Update docker/dockerfile Docker tag to v1.21 by @renovate[bot] in #4642
• Update telemetry collector for release 2.4 by @shaun-nx in #4659
• NFR Test Results for NGF version 2.4.0 by @github-actions[bot] in #4660

📝 Documentation

• Update AuthenticationFilter proposal by @shaun-nx in #4424
• Implementable RateLimitPolicy proposal by @bjee19 in #4346
• Add doc describing provisioning restrictions by @sjberman in #4499
• Add example files for TCPRoute and UDPRoute user guides. by @salonichf5 in #4573
• Update functional test to cover JWT auth by @shaun-nx in #4593
• Add details on JWKS creation for use in JWT auth secret by @shaun-nx in #4599
• Update RateLimitPolicy example files to guide by @bjee19 in #4634

🔨 Maintenance

• Rename context package to avoid linter errors in pipeline by @salonichf5 in #4476
• Update GOPROXY for forks; skip UBI plus by @sjberman in #4493
• Add correlation_id to logs by @sjberman in #4506
• Run create/update draft on manual workflows by @ciarams87 in #4526
• Automate Operator certification by @ciarams87 in #4288
• Merge open actions PRs into a single PR by @ciarams87 in #4564
• Remove FOSSA by @sjberman in #4576
• Temporarily switch to dev artifactory by @ciarams87 in #4594
• Chore: readd prod artifactory by @ciarams87 in #4604
• Remove internal redirect statuscode validation by @sjberman in #4600
• Fix events RBAC and action by @sjberman in #4638
• Render snippets-filter flag when specified by @sjberman in #4650
• Update glib2 and libpng packages for cves by @bjee19 in #4648

⬆️ Dependencies

32 changes

• Update GitHub Artifact Actions (major) by @renovate[bot] in #4460
• Update github/codeql-action action to v4.31.10 by @renovate[bot] in #4463, #4502, #4618
• Update kindest/node Docker tag to v1.35.0 by @renovate[bot] in #4459, #4478, #4488
• Lock file maintenance by @renovate[bot] in #4465, #4505, #4517, #4581, #4621
• Update stefanzweifel/git-auto-commit-action action to v7.1.0 by @renovate[bot] in #4490
• Update module github.com/nginx/nginx-gateway-fabric/v2 to v2.3.0 by @renovate[bot] in #4495
• Update ghcr.io/nginx/nginx-gateway-fabric/operator Docker tag to v1.1.0 by @renovate[bot] in #4494
• Update module sigs.k8s.io/controller-tools to v0.20.0 by @renovate[bot] in #4496
• Update docker/setup-buildx-action action to v3.12.0 by @renovate[bot] in #4501
• Update npm dependencies to ^4.0.16 by @renovate[bot] in #4503
• Update ghcr.io/nginx/dependencies/nginx-ubi:ubi9 Docker digest to 8352fd3 by @renovate[bot] in #4507, #4510, #4577
• Update module google.golang.org/grpc to v1.78.0 by @renovate[bot] in #4508
• Update anchore/sbom-action action to v0.21.0 by @renovate[bot] in #4511
• Up...

v2.3.0

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

🚀 Features

• Make endpoint picker connection flags configurable by @salonichf5 in #4105
• Update GatewayAPI to v1.4.1 by @ciarams87 in #4166
• Adding nginx_proxy access_log format ability by @tataruty in #4102
• Add SupportedFeatures to GatewayClassStatus by @ciarams87 in #4236
• Add support for backend tls config for Gateways by @salonichf5 in #3900
• Allow RegularExpression for path match be RE2/PCRE friendly. by @salonichf5 in #4450
• Add support for multiple InferencePool backends by @bjee19 in #4439

🐛 Bug Fixes

• Add the goreleaser fix from release branch by @ciarams87 in #4147
• Fix production pipeline by @ciarams87 in #4148
• Support mixed externalname and local services in single route by @ciarams87 in #4188
• Fix bug where user mounted files were being removed by agent by @bjee19 in #4178
• Preserve external controller state during reconciliation by @ciarams87 in #4182
• Fix HPA race condition by reading deployment replicas instead of HPA status by @ciarams87 in #4214
• Allow HPA to work when Inference is enabled by @sjberman in #4247
• Deduplicate route status entries by @sjberman in #4250
• Fix empty pod owner name when connecting to agent by @sjberman in #4367
• Remove k8s API access from NGINX pod by @sjberman in #4368
• fix: pass IPv6 DNS resolvers correctly by @sjberman in #4378
• Truncate long resource names when provisioning by @sjberman in #4387
• Retry NGINX provisioning on all errors by @sjberman in #4399
• Update permissions of gateway binary for UBI by @shaun-nx in #4404
• Use UUID instead of IP address for tracking agent (#4470) by @sjberman in #4472
• Preserve external controller annotations for deployment and daemonSet (#4468) by @salonichf5 in #4473
• Fix hostNetwork data plane pod connection issue (#4481) by @sjberman in #4483

📦 Helm Chart

• Update CHANGELOG and README for 2.2.0 by @ciarams87 in #4138
• Allow disabling cert-generator with a Helm value by @fabian4 in #4186
• Update docs for 2.2.1 release by @sjberman in #4283
• Update NGF chart logo to official branded logo by @sjberman in #4292
• Add clarifying comment to service template by @sjberman in #4321
• Release 2.3.0 by @github-actions[bot] in #4474

🧪 Tests

• NFR Test Results for NGF version 2.2.0 (#4124) by @ciarams87 in #4127
• Update Helm release opentelemetry-collector to v0.141.0 by @renovate[bot] in #4129, #4197, #4243, #4332, #4412
• Fix IPv6 tests and reduce logging noise in test suite by @ciarams87 in #4163
• NFR Test Results for NGF version edge by @github-actions[bot] in #4202
• Update curlimages/curl Docker tag to v8.17.0 by @renovate[bot] in #4225
• Update ghcr.io/nginx/kic-test-grpc-server Docker tag to v0.2.6 by @renovate[bot] in #4240
• Update docker/dockerfile Docker tag to v1.20 by @renovate[bot] in #4276
• Functional test logging/startup fixes by @sjberman in #4302
• Fix NFR upgrade tests by @sjberman in #4371
• NFR Test Results for NGF version edge by @github-actions[bot] in #4389
• NFR Test Results for NGF version v2.3.0 by @github-actions[bot] in #4453

📝 Documentation

• Move release logic to CI by @ciarams87 in #4137
• Update NGINX Agent to v3.4.2 by @renovate[bot] in #4162
• Update bundle for v1.0.0/v2.2.0 by @ciarams87 in #4157
• Design Session Persistence - Part 1 by @salonichf5 in #4158
• Enhancement Proposal: Authentication Filter by @shaun-nx in #4136
• Provisional ProxySettingsPolicy proposal by @ciarams87 in #4237
• Design for session persistence - Part II by @salonichf5 in #4221
• Implementable ProxySettingsPolicy proposal by @ciarams87 in #4256
• Provisional RateLimitPolicy proposal by @bjee19 in #4324
• Update session persistence design by @salonichf5 in #4314
• Enhancement Proposal: Authentication Filter by @shaun-nx in #4235
• Update DavidAnson/markdownlint-cli2-action action to v21 by @renovate[bot] in #4300
• Update NGINX Plus to R36 by @sjberman in #4365
• Update NGINX Agent to v3.5.1 by @sjberman in #4372
• Add examples for secure backend traffic guide by @salonichf5 in #4341
• Update Gateway API version to 1.4.1 by @sjberman in #4397
• Fix typo in proposal header by @shaun-nx in #4364
• Update dependency nginx/agent to v3.6.0 by @renovate[bot] in #4425

🔨 Maintenance

• Fix helm tests in release pipeline by @ciarams87 in #4126
• Fix prod workflow permissions by @ciarams87 in #4132
• Add docker login step to avoid rate limiting by @ciarams87 in #4140
• Reduce renovate noise by @ciarams87 in #4217
• Remove observability from alpha1 by @tataruty in #4215
• Alignment for Conditions messages format by @tataruty in #4253
• Update operator bundle for v1.0.1 (#4285) by @ciarams87 in #4287
• Upload conformance profiles to the correct release by @ciarams87 in #4289
• Fix provisioning logs by @sjberman in #4428
• Update docs and chart for 2.2.2 by @sjberman in #4438
• Update dockerfile packages by @sjberman in #4448
• Update bundle output for Operator by @shaun-nx in #4449

⬆️ Dependencies

58 changes

• Update dependency goreleaser/goreleaser to v2.13.1 by @renovate[bot] in #4128, #4168, #4360, #4410
• Update vitest monorepo to ^4.0.7 by @renovate[bot] in #4155, #4161, #4181, #4199, #4210
• Update ghcr.io/nginx/dependencies/nginx-ubi:ubi9 Docker digest to 68964f6 by @renovate[bot] in #4152, https://github.com/nginx/nginx-ga...

v2.2.2

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

🐛 Bug Fixes

• Update permissions of gateway binary for UBI (#4404) by @shaun-nx in #4416

🔨 Maintenance

• Update operator bundle for v1.0.1 by @ciarams87 in #4285
• Release 2.2.2 by @github-actions[bot] in #4417

⬆️ Dependencies

• Update dependency nginx/agent to v3.6.0 (#4425) by @sjberman in #4427

Full Changelog: v2.2.1...v2.2.2

v2.2.1

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

🚀 Features

• Make EPP flags configurable by @salonichf5 in #4189

🐛 Bug Fixes

• Support mixed externalname and local services in single route (#4188) by @ciarams87 in #4218
• Fix HPA race condition by reading deployment replicas instead of HPA … by @ciarams87 in #4239
• Preserve external controller annotations on Services (#4182) by @ciarams87 in #4238
• Fix bug where user mounted files were being removed by agent (#4178) by @bjee19 in #4246
• Allow HPA to work when Inference is enabled (#4247) by @sjberman in #4248

📦 Helm Chart

• Allow disabling cert-generator with a Helm value (#4186) by @sjberman in #4280
• Release 2.2.1 by @github-actions[bot] in #4274

📝 Documentation

• Update bundle for v1.0.0/v2.2.0 (#4157) by @ciarams87 in #4165

⬆️ Dependencies

• Update redhat/ubi9-minimal Docker tag to v9.7-1762180032 (#4268) by @sjberman in #4271
• Update dependency nginx/agent to v3.5.0 (#4267) by @sjberman in #4272
• Update quay.io/operator-framework/helm-operator Docker tag to v1.42.0… by @sjberman in #4281

Other Changes

• Fix production pipeline (#4148) by @ciarams87 in #4164

Full Changelog: v2.2.0...v2.3.0

v2.2.0

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

🚀 Features

• Add nginx one console connection telemetry field by @salonichf5 in #3717
• Add local nginx dev env by @sarthyparty in #3752
• feat: Support ExternalName Services by @ciarams87 in #3759
• Add support for Port in ParentReference by @sarthyparty in #3778
• Align with BackendTLSPolicy validation by @ciarams87 in #3871
• Add regex for path matching by @fabian4 in #3874
• NGINX Plus: support enforce_initial_report field by @tataruty in #3899
• Add support for gateway addresses field by @bjee19 in #3896
• Add First Class OpenShift support by @ciarams87 in #4001
• Warnings for unsupported Gateway and Routes fields by @tataruty in #4036
• Implement Inference Extension by @ciarams87 in #4091
• OpenShift Support: Product Telemetry by @shaun-nx in #4038

🐛 Bug Fixes

23 changes

• Handle duplicate kinds in listener allowed kinds by @fabian4 in #3810
• Fix events block crash by @sarthyparty in #3730
• Fix policy attachment when ancestors slice is full by @sarthyparty in #3698
• fix: remove patch label/ annotation cross contamination by @ciarams87 in #3754
• fix: host readiness probe on ipv6 in addition to ipv4 by @lucasl0st in #3765
• Fix SnippetsFilter Functional test by @bjee19 in #3751
• Prevent policy includes duplication in advanced routing configuration by @shaun-nx in #3799
• Adjust nginx agent backoff settings and revert request timeout by @bjee19 in #3820
• Set NGINX Plus default image by @sjberman in #3919
• Improve connection reset handling during ServiceAccountToken rotation by @ciarams87 in #3905
• Remove false condition on Routes when nginx reload fails by @salonichf5 in #3936
• add nginx image version validation during agent connections by @ciarams87 in #3928
• Move certs job service account token by @sjberman in #3951
• Add plus secrets for image building in tests by @ciarams87 in #4020
• Update operator controller name & add annotation by @ciarams87 in #4026
• Update operator base libraries by @ciarams87 in #4048
• Use download artifact instead by @ciarams87 in #4033
• Remove azure upload from release pipeline by @ciarams87 in #4049
• Modify schedule by @ciarams87 in #4053
• Add conditional on listing inference pools for status by @bjee19 in #4104
• Try more permissions by @ciarams87 in #4134
• Move permissions to higher context by @ciarams87 in #4135
• Fix update draft and goreleaser on release by @ciarams87 in #4143
• Fix goreleaser by @ciarams87 in #4146

📦 Helm Chart

• Release 2.1.0 docs by @bjee19 in #3741
• Add patches to helm chart spec by @salonichf5 in #3773
• Update READMEs by @sjberman in #3788
• Release 2.1.1 docs (#3833) by @ciarams87 in #3834
• Update docs for Release 2.1.2 by @salonichf5 in #3965
• Update main docs for release 2.1.3 by @bjee19 in #3990
• Update main docs for release 2.1.4 by @bjee19 in #3997
• Release 2.2.0 by @github-actions[bot] in #4123
• Fix helm tests in release pipeline (#4126) by @ciarams87 in #4130

🧪 Tests

24 changes

• Fix NFR tests by @bjee19 in #3722
• Add CEL validation tests for NginxProxy by @shaun-nx in #3701
• add test for missing numerator case by @tataruty in #3715
• Update Helm release opentelemetry-collector to v0.137.0 by @renovate[bot] in #3725, #3770, #3803, #3879, #3924, #3948, #3967, #4120
• (Cherry-pick) NFR Test Results for NGF version 2.1.0 (#3727) by @bjee19 in #3739
• Update golang Docker tag to v1.25 by @renovate[bot] in #3747
• Add readiness probes to deployments in functional tests by @sarthyparty in #3740
• Add cel tests for upstreamsettingspolicy by @sarthyparty in #3742
• Add CEL validation tests for ObservabilityPolicy CRD by @shaun-nx in #3735
• Add CEL tests for snippetsFilter API by @salonichf5 in #3750
• Update tests instructions for common troubleshooting by @salonichf5 in #3802
• Update docker/dockerfile Docker tag to v1.19 by @renovate[bot] in #3847, #4000
• Fix some of the NFR tests to reduce error logs and pipeline failures by @salonichf5 in #3827
• Adding logging to functional tests by @tataruty in #3781
• Fix failing unit tests by @salonichf5 in #3901
• Update curlimages/curl Docker tag to v8.16.0 by @renovate[bot] in #3897
• Tests/improve nfr logging by @tataruty in #3872
• NFR Test Results for NGF version edge by @github-actions[bot] in #3921
• Update dependency golangci/golangci-lint to v2.5.0 by @renovate[bot] in #3940
• Add IPv6 testing script for use in release process by @shaun-nx in #3931
• NFR Test Results for NGF version edge by @github-actions[bot] in #3991
• Run nightly on production runners, ignore .git for vm sync by @ciarams87 in #4087
• Upload NFR test results even if test fails by @ciarams87 in #4112
• NFR Test Results for NGF version 2.2.0 by @github-actions[bot] in #4124

📝 Documentation

• Update NGINX Plus version to R35 by @salonichf5 in #3726
• Update NGINX and NGINX Agent by @sjberman in #3737
• Provisional: Proposal for Inference Extension by @sjberman in #3789
• Update NGINX Agent to v3.3.2 by @renovate[bot] in #3817, #3955
• Chore: Use F5 artifactory GOPROXY and self-hosted runners by @ciarams87 in #3718
• Proposal: Gateway API Inference Extension by @sjberman in #3800
• Update inference design by @sjberman in #3902
• Update diagram in inference doc by @sjberman in http...

v2.1.4

What's Changed

📦 Helm Chart

• Release 2.1.4 docs by @bjee19 in #3996

🔨 Maintenance

• Fix cves for libcrpyto3 and libssl3 (#3993) by @bjee19 in #3995

Full Changelog: v2.1.3...v2.1.4

v2.1.3

What's Changed

📦 Helm Chart

• Release 2.1.3 docs by @bjee19 in #3988

🔨 Maintenance

• Update Dockerfile alpine packages for cve fixes (#3973) by @bjee19 in #3983

Full Changelog: v2.1.2...v2.1.3

v2.1.2

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

🐛 Bug Fixes

• Improve connection reset handling during ServiceAccountToken rotation… by @ciarams87 in #3932
• Remove not programmed condition from Routes when nginx reload fails by @salonichf5 in #3938
• Move certs job service account token (#3951) by @sjberman in #3952
• Add nginx image version validation during agent connections by @salonichf5 in #3953

📦 Helm Chart

• Release 2.1.2 docs by @salonichf5 in #3963

🔨 Maintenance

• Update dependency nginx/agent to v3.3.1 (#3934) by @ciarams87 in #3935
• Revert agent reload backoff settings (#3937) by @bjee19 in #3939
• Remove azblob for release by @sjberman in #3964

Full Changelog: v2.1.1...v2.1.2