v1.4.0

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

🚀 Features

• Add provisional Enhancement Proposal-2035: Advanced NGINX Extensions by @pleshakov in #2039
• Collect ClientSettingsPolicy, ObservabilityPolicy, and NginxProxy count by @bjee19 in #2179
• Add possibility to provide custom pod annotations by @Robsta86 in #2250
• Add support for IPv6 by @salonichf5 in #2190
• Move Advanced NGINX Extensions proposal to Implementable by @pleshakov in #2201
• Add seccompProfile to Helm chart by @lucacome in #2323
• Rewrite Client IP Enhancement Proposal by @kate-osborn in #2329
• Add support for TLS Passthrough using TLSRoutes by @sarthyparty in #2356
• Add server zone metrics by @sjberman in #2360
• Support cross-namespace routing with TLSRoutes by @kate-osborn in #2379

🐛 Bug Fixes

• Remove sock files on nginx startup by @ciarams87 in #2131
• Replace TODO route condition with an Accepted/False condition by @kate-osborn in #2228
• Properly disable leader election by @sjberman in #2307
• Disallow route to attach to listener if not present in allowed routes. by @salonichf5 in #2314
• Check for ReferenceGrants from GRPCRoutes to Services by @kate-osborn in #2337
• Restrict policies to non-duplicate routes by @sjberman in #2318
• update upstreams to format ipv6 adddress for nginx plus by @salonichf5 in #2339

📦 Helm Chart

• Update docs for 1.3 release by @kate-osborn in #2125
• Allow resource allocation by @anwbtom in #2216
• Add Helm Chart examples by @lucacome in #2292
• Release 1.4.0 by @nginx-bot in #2411

📝 Documentation

36 changes

• Update release doc for conformance by @sjberman in #2123
• Fix error in uninstall gateway api resources doc by @kate-osborn in #2127
• Update GRPCRoute Core Support Level by @kate-osborn in #2142
• Add generate-all make target by @lucacome in #2122
• Fix tracing doc namespace by @sjberman in #2157
• Automate remaining graceful recovery tests by @bjee19 in #2140
• Add more linters by @lucacome in #2092
• Fix ObservabilityPolicy TargetRefs documentation by @pleshakov in #2202
• Update Troubleshooting guide by @salonichf5 in #2141
• fix: update kubectl exec syntax to remove deprecation warning by @aknot242 in #2218
• NFR Test Results for NGF version edge (Plus) by @nginx-bot in #2209
• Use doctoc to automatically generate TOCs by @lucacome in #2213
• Fix HTTP Response Headers document link by @ADubhlaoich in #2210
• Fix: include security note for JWT and password in history by @mjang in #2227
• Update Community Meeting Schedule in README by @kate-osborn in #2236
• Update Community Meeting Schedule to every Tuesday in README by @kate-osborn in #2239
• NFR Test Results for NGF version edge by @nginx-bot in #2229
• Add oss suffix to OSS tests results by @lucacome in #2261
• NFR Test Results for NGF version edge by @nginx-bot in #2262
• docs: adds info on setting up host network access by @fardarter in #2263
• Update documentation for style consistency by @ADubhlaoich in #2256
• Automate Zero Downtime Scale tests by @sjberman in #2259
• Fix: update support link to KB K000140156 by @mjang in #2289
• Update release process doc by @sjberman in #2291
• Use /usr/bin/env for scripts by @lucacome in #2315
• Remove steps no longer needed by @lucacome in #2324
• Add docs build and deploy github action by @sjberman in #2351
• Automate Reconfiguration Performance Test by @bjee19 in #2313
• NFR Test Results for NGF version edge by @nginx-bot in #2393
• Add high level doc for data plane config by @sjberman in #2378
• Add NGF telemetry data for TLSRoute by @bjee19 in #2387
• NFR Test Results for NGF version edge by @nginx-bot in #2408
• Add guide for TLS Route in site (#2363) by @kate-osborn in #2412
• NFR Test Results for NGF version 1.4.0 by @nginx-bot in #2413
• Update troubleshooting doc for policy restriction (#2420) by @sjberman in #2422
• (Cherry-pick) Add longevity results for 1.4.0 (#2427) by @sjberman in #2428

🧪 Tests

• Add options for chart version and add command output by @lucacome in #2332
• Print logs and events on test failure by @lucacome in #2347
• Add NGF build information to test results by @lucacome in #2353
• Run tests in cmd/ in parallel by @lucacome in #2361
• Run tests in internal/framework in parallel (1) by @lucacome in #2362
• Add teardown of NGF to start of reconfiguration performance test by @bjee19 in #2381
• Add NFR flag to NGF configuration on reconfiguration performance test by @bjee19 in #2391
• Run tests in internal/framework in parallel (2) by @lucacome in #2367

🧹 Tech debt

• Refacter code to use new ObjectType by @sarthyparty in #2121
• Remove unnecessary telemetry header by @salonichf5 in #2403

🔨 Maintenance

23 changes

• Fix conformance release upload by @sjberman in #2126
• Update stale.yml by @lucacome in #2155
• Use new wildcard feature in dependabot by @lucacome in #2174
• Run CI and Lint workflows on PRs to any branch by @lucacome in #2180
• Update CodeQL workflow by @lucacome in #2181
• Update Docker frontend and remove noisy summaries for tests by @lucacome in #2182
• Use yamllint action from reviewdog by @lucacome in #2186
• Group otel and k8s.io updates by @lucacome in #2200
• Upload Plus Docker images to GAR by @lucacome in #2192
• Add helm-docs to pre-commit by @lucacome in #2230
• Run NFR tests on 1st and 15th of every month by @lucacome in #2249
• Use separate clusters for Plus and OSS by @lucacome in #2253
• Truncate test result files by @lucacome in #2255
• Use custom NGF Debian image for tests by @lucacome in #2260
• Avoid cloning the repo/downloading dependencies by @lucacome in #2280
• Hide NGINX version by @sjberman in #2305
• Fix problems in tests scripts by @lucacome in #2320
• Read Go build info from the binary by @lucacome in #2319
• Add missing variables and format scripts by @lucacome in #2330
• Remove var buildInfo by @lucacome in #2358
• Fix flaky unit tests by @sjberman in #2364
• Increase timeout for NFR tests to 5h by @lucacome in #2380
• Run mend workflow on releases by @lucacome in #2392

⬆️ Dependencies

96 changes

• Bump prettier from 3.3.1 to 3.3.2 in /internal/mode/static/nginx/modules by @dependabot in #2124
• Bump github/codeql-action from 3.25.8 to 3.25.9 by @dependabot in #2130
• Bump github/codeql-action from 3.25.9 to 3.25.10 by @dependabot in #2138
• Bump actions/checkout from 4.1.6 to 4.1.7 by @dependabot in #2136
• Bump codecov/codecov-action from 4.4.1 to 4.5.0 by @dependabot in #2137
• Bump reviewdog/action-actionlint from 1.48.0 to 1.50.0 by @dependabot in #2145
• Bump github.com/spf13/cobra from 1.8.0 to 1.8.1 by @dependabot in #2147
• Bump docker/build-push-action from 5.4.0 to 6.0.0 by @dependabot in #2146
• Bump docker/build-push-action from 6.0.0 to 6.0.1 by @dependabot in #2150
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #2149
• Bump github.com/nginxinc/nginx-plus-go-client from 1.2.0 to 1.2.1 by @dependabot in #2154
• Bump peter-evans/create-pull-request from 6.0.5 to 6.1.0 by @dependabot in #2153
• Bump k8s.io/apiextensions-apiserver from 0.30.1 to 0.30.2 by @dependabot in #2132
• Bump docker/build-push-action from 6.0.1 to 6.0.2 by @dependabot in #2159
• Bump docker/build-push-action from 6.0.2 to 6.1.0 by @dependabot in #2167
• Bump reviewdog/action-actionlint from 1.50.0 to 1.51.0 by @dependabot in #2168
• Bump docker/build-push-action from 6.1.0 to 6.2.0 by @dependabot in #2171
• Bump golang from 1.21-alpine to 1.22-alpine in /debug by @dependabot in #2176
• Bump ubuntu from 22.04 to 24.04 in /tests/suite/manifests/graceful-recovery by @dependabot in #2177
• Bump curlimages/curl from 8.3.0 to 8.8.0 in /tests/suite/manifests/longevity by @dependabot in #2178
• Bump github.com/prometheus/common from 0.54.0 to 0.55.0 by @dependabot in #2172
• Bump github/codeql-action from 3.25.10 to 3.25.11 by @dependabot in #2183
• Bump kindest/node from v1.30.0 to v1.30.2 in /tests by @dependabot in #2189
• Bump docker/build-push-action from 6.2.0 to 6.3.0 by @dependabot in #2198
• Bump docker/setup-buildx-action from 3.3.0 to 3.4.0 by @dependabot in #2203
• Bump actions/upload-artifact from 4.3.3 to 4.3.4 by @dependabot in #2204
• Bump docker/setup-qemu-action from 3.0.0 to 3.1.0 by @dependabot in #2199
• Bump vitest and @vitest/coverage-v8 in /internal/mode/static/nginx/modules by @dependabot in #2206
• Bump reviewdog/action-yamllint from 1.16.0 to 1.17.0 by @dependabot in #2208
• Bump reviewdog/action-actionlint from 1.51.0 to 1.53.0 by @dependabot in #2207
• Bump actions/setup-node from 4.0.2 to 4.0.3 by @dependabot in #2212
• Bump anchore/scan-action from 3.6.4 to 4.0.0 by @dependabot in #2223
• Bump @vitest/coverage-v8 from 2.0.1 to 2.0.2 in /internal/mode/static/nginx/modules by @dependabot in #2219
• Bump anchore/sbom-action from 0.16.0 to 0.16.1 by @dependabot in #2221
• Bump actions/setup-go from 5.0.1 to 5.0.2 by @dependabot in #2222
• Bump actions/setup-python from 5.1.0 to 5.1.1 by @dependabot in #2224
• Bump github/codeql-action from 3.25.11 to 3.25.12 by @dependabot in #2231
• Bump cloud-provider-kind to v0.3.0 by @lucacome in #2245
• Bump reviewdog/action-actionlint from 1.53.0 to 1.54.0 by @dependabot in #2243
• Bump reviewdog/action-yamllint from 1.17.0 to 1.18.0 by @dependabot in #2244
• Bump docker/build-push-action from 6.3.0 to 6.4.0 by @dependabot in #2242
• Bump anchore/sbom-action from 0.16.1 to 0.17.0 by @dependabot in #2247
• Bump anchore/scan-action from 4.0.0 to 4.1.0 by @dependabot in #2248
• Bump @vitest/coverage-v8 from 2.0.2 to 2.0.3 in /internal/mode/static/nginx/modules by @dependabot in #2240
• Bump prettier from 3.3.2 to 3.3.3 in /internal/mode/static/nginx/modules by @dependabot in #2241
• Bump actions/dependency-review-action from 4.3.3 to 4.3.4 by @dependabot in #2232
• Bump the go_modules group across 2 directories with 1 update by @dependabot in #2215
• Bump docker/build-push-action from 6.4.0 to 6.4.1 by @dependabot in #2252
• Bump the k8s-io group across 2 directories with 4 updates by @dependabot in #2257
• Bump github/codeql-action from 3.25.12 to 3.25.13 by @dependabot in #2264
• Bump docker/login-action from 3.2.0 to 3.3.0 by @dependabot in #2265
• Bump docker/setup-qemu-action from 3.1.0 to 3.2.0 by @dependabot in #2267
• Bump docker/build-push-action from 6.4.1 to 6.5.0 by @dependabot in #2266
• Bump docker/setup-buildx-action from 3.4.0 to 3.5.0 by @dependabot in #2268
• Bump @vitest/coverage-v8 from 2.0.3 to 2.0.4 in /internal/mode/static/nginx/modules by @dependabot in #2269
• Bump github.com/nginxinc/nginx-prometheus-exporter from 1.2.0 to 1.3.0 by @dependabot in #2281
• Bump curlimages/curl from 8.8.0 to 8.9.0 in /tests/suite/manifests/longevity by @dependabot in #2287
• Bump github/codeql-action from 3.25.13 to 3.25.14 by @dependabot in #2288
• Bump the otel group across 1 directory with 2 updates by @dependabot in #2205
• Bump github.com/tsenart/vegeta/v12 from 12.11.1 to 12.11.3 in /tests by @dependabot in #2303
• Bump ossf/scorecard-action from 2.3.3 to 2.4.0 by @dependabot in #2293
• Bump docker/setup-buildx-action from 3.5.0 to 3.6.1 by @dependabot in #2304
• Bump github/codeql-action from 3.25.14 to 3.25.15 by @dependabot in #2294
• Bump github.com/onsi/ginkgo/v2 from 2.19.0 to 2.19.1 by @dependabot in #2295
• Bump golangci/golangci-lint-action from 6.0.1 to 6.1.0 by @dependabot in #2310
• Bump jacobtomlinson/gha-find-replace from 3.0.2 to 3.0.3 by @dependabot in #2309
• Bump github.com/onsi/gomega from 1.34.0 to 1.34.1 by @dependabot in #2311
• Bump github.com/tsenart/vegeta/v12 from 12.11.3 to 12.12.0 in /tests by @dependabot in #2312
• Bump curlimages/curl from 8.9.0 to 8.9.1 in /tests/suite/manifests/longevity by @dependabot in #2317
• Bump @vitest/coverage-v8 from 2.0.4 to 2.0.5 in /internal/mode/static/nginx/modules by @dependabot in #2316
• Bump actions/upload-artifact from 4.3.4 to 4.3.5 by @dependabot in #2327
• Bump google-github-actions/auth from 2.1.3 to 2.1.4 by @dependabot in #2335
• Bump google-github-actions/setup-gcloud from 2.1.0 to 2.1.1 by @dependabot in #2334
• Bump actions/upload-artifact from 4.3.5 to 4.3.6 by @dependabot in #2336
• Bump fossas/fossa-action from 1.3.3 to 1.4.0 by @dependabot in #2340
• Bump docker/build-push-action from 6.5.0 to 6.6.0 by @dependabot in #2343
• Bump sigstore/cosign-installer from 3.5.0 to 3.6.0 by @dependabot in #2342
• Bump github/codeql-action from 3.25.15 to 3.26.0 by @dependabot in #2341
• Bump github.com/onsi/ginkgo/v2 from 2.19.1 to 2.20.0 by @dependabot in #2344
• Bump docker/build-push-action from 6.6.0 to 6.6.1 by @dependabot in #2354
• Bump sigs.k8s.io/controller-runtime from 0.18.4 to 0.18.5 by @dependabot in #2365
• Bump docker/build-push-action from 6.6.1 to 6.7.0 by @dependabot in #2384
• Bump anchore/scan-action from 4.1.0 to 4.1.1 by @dependabot in #2383
• Bump anchore/sbom-action from 0.17.0 to 0.17.1 by @dependabot in #2382
• Bump github.com/nginxinc/telemetry-exporter from 0.1.0 to 0.1.1 by @dependabot in #2386
• Bump golang from 1.22 to 1.23 in /build by @dependabot in #2398
• Bump golang from 1.22 to 1.23 in /tests/conformance by @dependabot in #2401
• Bump golang from 1.22-alpine to 1.23-alpine in /debug by @dependabot in #2399
• Bump lucacome/draft-release from 1.1.0 to 1.1.1 by @dependabot in #2394
• Bump github/codeql-action from 3.26.0 to 3.26.2 by @dependabot in #2395
• Bump github.com/prometheus/client_golang from 1.19.1 to 1.20.0 by @dependabot in #2396
• Bump kindest/node from v1.30.2 to v1.31.0 in /tests by @dependabot in #2400
• Bump github.com/nginxinc/nginx-plus-go-client from 1.2.2 to 1.3.0 by @dependabot in #2407
• Bump sigs.k8s.io/controller-runtime from 0.18.5 to 0.19.0 by @dependabot in #2405
• Bump sigs.k8s.io/controller-tools from 0.15.0 to 0.16.1 by @dependabot in #2402
• Update NGINX to 1.27.1 by @sjberman in #2409

New Contributors

• @aknot242 made their first contribution in #2218
• @mjang made their first contribution in #2227
• @anwbtom made their first contribution in #2216
• @Robsta86 made their first contribution in #2250
• @fardarter made their first contribution in #2263

Full Changelog: v1.3.0...v1.4.0