v2.1.4

What's Changed

📦 Helm Chart

• Release 2.1.4 docs by @bjee19 in #3996

🔨 Maintenance

• Fix cves for libcrpyto3 and libssl3 (#3993) by @bjee19 in #3995

Full Changelog: v2.1.3...v2.1.4

v2.1.3

What's Changed

📦 Helm Chart

• Release 2.1.3 docs by @bjee19 in #3988

🔨 Maintenance

• Update Dockerfile alpine packages for cve fixes (#3973) by @bjee19 in #3983

Full Changelog: v2.1.2...v2.1.3

v2.1.2

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

🐛 Bug Fixes

• Improve connection reset handling during ServiceAccountToken rotation… by @ciarams87 in #3932
• Remove not programmed condition from Routes when nginx reload fails by @salonichf5 in #3938
• Move certs job service account token (#3951) by @sjberman in #3952
• Add nginx image version validation during agent connections by @salonichf5 in #3953

📦 Helm Chart

• Release 2.1.2 docs by @salonichf5 in #3963

🔨 Maintenance

• Update dependency nginx/agent to v3.3.1 (#3934) by @ciarams87 in #3935
• Revert agent reload backoff settings (#3937) by @bjee19 in #3939
• Remove azblob for release by @sjberman in #3964

Full Changelog: v2.1.1...v2.1.2

v2.1.1

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

🐛 Bug Fixes

• fix: remove patch label/ annotation cross contamination (#3754) by @sjberman in #3766
• fix: host readiness probe on ipv6 in addition to ipv4 (#3765) by @sjberman in #3767
• Prevent policy includes duplication in advanced routing configuration by @shaun-nx in #3819
• Adjust nginx agent backoff settings (#3820) by @bjee19 in #3828

📦 Helm Chart

• Add patches to Helm chart spec by @salonichf5 in #3777
• Release 2.1.1 docs by @ciarams87 in #3833

Full Changelog: v2.1.0...v2.1.1

v2.1.0

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

🚀 Features

• Apply PolicyAffected status for target refs by @salonichf5 in #3535
• Add support for backendref service appProtocol by @bjee19 in #3511
• Support configurable hostPort in helm chart by @Gasoid in #3321
• Add worker connections field to NginxProxy by @sarthyparty in #3611
• Add workerConnections field to helm chart by @sarthyparty in #3616
• Add support for percentage based request mirroring by @bjee19 in #3627
• Add readiness probe for NGINX on pod startup by @salonichf5 in #3629
• feat: Add ability to patch dataplane Service, Deployment, and DaemonSet in NginxProxy by @ciarams87 in #3630
• Add ability to disable SNI host validation by @ciarams87 in #3659
• Add connection to NGINX One Console by @bjee19 in #3676
• Add control/data plane HPA by @sjberman in #3702
• Add OverlappingTLSConfig condition by @ciarams87 in #3709
• Add nginx one console telemetry field by @salonichf5 in #3731

🐛 Bug Fixes

• Set proper IP family policy on NGINX LB Service by @sjberman in #3475
• Fix crash when BackendRef filter is specified by @sjberman in #3508
• Fix index out of bounds error when building status by @sjberman in #3513
• Move automountServiceAccountToken to Pod by @sjberman in #3573
• Fix port binding with reduced privileges by @sjberman in #3574
• Only include relevant snippets by @ciarams87 in #3586
• Validate agent token for duplicate IP addresses by @sjberman in #3673
• Fix events block crash (#3730) by @sarthyparty in #3733

📦 Helm Chart

• Use proper internal GKE service annotation by @sjberman in #3431
• Release 2.0 docs by @sjberman in #3466
• Feat: Add helm values for cert-generator Job pod placement by @baburciu in #3493
• gives enough time for argocd to verify job has finished by @ab-andresc in #3487
• Feat: Add user-provided helm values for additional control plane service labels by @michasHL in #3499
• Release 2.0.1 (#3502) by @salonichf5 in #3504
• Add nginxGateway.name usage in case of its presence instead of nameOverride by @tataruty in #3528
• Remove omitted comment by @tataruty in #3572
• fix: removes Extra keyword from volumeMounts and Volumes for the data… by @vazkarvishal in #3588
• Use server side apply for NGF CRDs by @bjee19 in #3589
• Release 2.1.0 by @bjee19 in #3734

🧪 Tests

23 changes

• Add 2.0 longevity results by @sjberman in #3429
• NFR Test Results for NGF version 2.0.0 (#3436) by @sjberman in #3438
• Fix functional tests pipeline failures by @salonichf5 in #3446
• Re-enable upgrade NFR test by @sjberman in #3482
• Update docker/dockerfile Docker tag to v1.17 by @renovate[bot] in #3524
• Update curlimages/curl Docker tag to v8.14.1 by @renovate[bot] in #3523
• Update Helm release opentelemetry-collector to v0.127.1 by @renovate[bot] in #3529
• Update Helm release opentelemetry-collector to v0.127.2 by @renovate[bot] in #3543
• Enable GatewayAddressEmpty conformance test by @sjberman in #3602
• Update Helm release opentelemetry-collector to v0.127.3 by @renovate[bot] in #3617
• Run functional and NFR tests with --race by @sjberman in #3614
• Graceful recovery test improvements by @sjberman in #3628
• Update curlimages/curl Docker tag to v8.15.0 by @renovate[bot] in #3635
• Update Helm release opentelemetry-collector to v0.129.0 by @renovate[bot] in #3636
• Update dependency golangci/golangci-lint to v2.3.0 by @renovate[bot] in #3649
• Update Helm release opentelemetry-collector to v0.130.0 by @renovate[bot] in #3675
• Add CEL validation test for targetRef in ClientSettingsPolicy by @shaun-nx in #3623
• Add CEL validation test for timeout in ClientSettingsPolicy by @shaun-nx in #3695
• Update Helm release opentelemetry-collector to v0.130.1 by @renovate[bot] in #3700
• Add mirroring fraction edge case test by @tataruty in #3708
• Update remaining server side apply for crds by @bjee19 in #3711
• (Cherry-pick) Fix NFR tests (#3722) by @bjee19 in #3723
• NFR Test Results for NGF version 2.1.0 by @bjee19 in #3727

📝 Documentation

• Add agent version to CHANGELOG template by @sjberman in #3467
• Add missing note from CHANGELOG by @sjberman in #3469
• Add enhancement proposal for NAP WAF integration by @ciarams87 in #3398
• Add API doc generation to release process by @sjberman in #3495
• Update release doc with more information by @salonichf5 in #3506
• Update module github.com/nginx/agent/v3 to v3.0.2 by @renovate[bot] in #3521
• Update dependency nginx/agent to v3.0.3 by @renovate[bot] in #3558
• Update community forum link by @sjberman in #3601
• Add simplified architecture diagrams for traffic flow and config changes by @sarthyparty in #3557
• Update dependency nginx/agent to v3.2.0 by @renovate[bot] in #3674
• Update NGINX and NGINX Agent (#3737) by @sjberman in #3738

🔨 Maintenance

• Update to agent v3 release packages by @sjberman in #3450
• Update scorecard workflow to use GITHUB_TOKEN by @ciarams87 in #3564
• Group NGINX Agent updates with Renovate by @sjberman in #3597
• Remove fixed dependency by @sjberman in #3615
• Fix intermitent lint error on types package by @bjee19 in #3652
• Update go module to v2 by @sjberman in #3660
• Update missed version path in previous commit by @sjberman in #3664
• Add logging for endpoint discovery issues by @sjberman in #3667
• Adjust logging when resolving endpoints by @bjee19 in #3690
• Update NGINX Plus version to R35 by @salonichf5 in #3729

⬆️ Dependencies

76 changes

• Update ossf/scorecard-action action to v2.4.2 by @renovate[bot] in #3424
• Update pre-commit hook gitleaks/gitleaks to v8.27.0 by @renovate[bot] in #3428
• Update github/codeql-action action to v3.28.19 by @renovate[bot] in #3441
• Update vitest...

v2.0.2

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

🐛 Bug Fixes

• Fix crash when BackendRef filter is specified (#3508) by @sjberman in #3575
• Fix index out of bounds error when building status (#3513) by @sjberman in #3576
• Move automountServiceAccountToken to Pod (#3573) by @sjberman in #3580
• Fix port binding with reduced privileges (#3574) by @sjberman in #3590
• Only include relevant snippets (#3586) by @ciarams87 in #3591

📦 Helm Chart

• fix: removes Extra keyword from volumeMounts and Volumes for the data… by @sjberman in #3592

Full Changelog: v2.0.1...v2.0.2

v2.0.1

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

🐛 Bug Fixes

• Set proper IP family policy on NGINX LB Service (#3475) by @sjberman in #3476

📦 Helm Chart

• feat: Add helm values for cert-generator job pod placement by @baburciu in #3494
• Expose ability to configure cert generator Job ttlSecondsAfterFinished. Set default to 30s. by @ab-andresc in #3500
• feat: Add user-provided helm values for additional control plane service labels #3499 by @michasHL in #3501

📝 Documentation

• Add missing note from CHANGELOG (#3469) by @sjberman in #3474
• Add agent version to CHANGELOG template by @salonichf5 in #3490

⬆️ Dependencies

• Agent version update to v3.0.1 into release branch 2.0 by @salonichf5 in #3491

Full Changelog: v2.0.0...v2.0.1

v2.0.0

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

🚀 Features

• Listener Isolation for hostnames occupied by other listeners by @salonichf5 in #3067
• Allow configuration of NGINX Plus API access by @bjee19 in #3066
• Add regex matching for headers and query params for HTTPRoute and GRPCRoute by @salonichf5 in #3093
• Upgrade to NGINX Plus R34 by @sjberman in #3281
• Add support for RequestMirror filter by @sjberman in #3306
• Update Gateway API to v1.3.0 by @ciarams87 in #3348
• Support sending chunked files to agent by @sjberman in #3390
• Allow for provisioning NGINX as DaemonSet by @sjberman in #3397
• adding support for secrets for backendtlspolicy by @porthorian in #3084

💣 Breaking Changes

• Separate control plane and data plane; support multiple Gateways by @sjberman in #3318

🐛 Bug Fixes

• Modify listener isolation rules for routes by @salonichf5 in #3159
• De-duplicate base headers if specified by user by @sjberman in #3249
• Add 503 status code when there are zero upstream endpoints by @bjee19 in #3406
• Add fix to route parentRef internal logic by @bjee19 in #3418

📦 Helm Chart

• Update main for 1.6.1 release by @sjberman in #3129
• Add support for deployment labels to helm chart by @Butterneck in #3194
• Support provisioning of Gateway(s) in helm chart by @bjee19 in #3399
• Release 2.0.0 by @nginx-bot in #3439

🧪 Tests

• NFR Test Results for NGF version 1.6.0 by @nginx-bot in #3013
• Update main with 1.6.0 by @bjee19 in #3021
• move ks client reader to separated directory by @miledxz in #3018
• Add more details to release process by @bjee19 in #3031
• updated unit test files with logr.Discard by @KR411-prog in #3083
• Update Helm release opentelemetry-collector to v0.126.0 by @renovate in #3106, #3166, #3172, #3195, #3222, #3245, #3273, #3282, #3310, #3421
• Update curlimages/curl Docker tag to v8.13.0 by @renovate in #3127, #3290
• Update docker/dockerfile Docker tag to v1.16 by @renovate in #3156, #3309, #3394
• Update golang Docker tag to v1.24 by @renovate in #3128
• NFR Test Results for NGF version edge by @nginx-bot in #3079
• Update service labels in NFR tests by @sjberman in #3386
• Bulk delete namespaces in reconfiguration nfr test by @bjee19 in #3402
• Update directory structure by @sjberman in #3401
• Enable HTTP Mirror conformance tests by @salonichf5 in #3411
• Skip full upgrade test suite by @sjberman in #3427
• Cherry pick #3429 and #3431; longevity results and GKE annotation fix by @sjberman in #3437
• NFR Test Results for NGF version 2.0.0 by @nginx-bot in #3436

📝 Documentation

• Update from nginxinc to nginx (3) by @lucacome in #3000
• feat: Restructure how-to section layout, update frontmatter by @ADubhlaoich in #2991
• Remove documentation site and GitHub Action, update README references by @ADubhlaoich in #3047
• Update documentation step for the release process by @ADubhlaoich in #3158
• Update README with new NGINX forum by @sjberman in #3204
• Update README badge from slack to forum by @sjberman in #3297
• Update nginx Docker tag to v1.27.5 by @renovate in #3308
• Update README for nginx version by @sjberman in #3337

🔨 Maintenance

• Remove announce for slack by @lucacome in #3104
• Remove tools.go and require Go 1.24 by @sjberman in #3181
• Update main branch for 1.6.2 release by @sjberman in #3206
• Update golangci-lint to v2 by @sjberman in #3269
• Update Go to 1.24.2 by @ciarams87 in #3342
• Remove unnecessary step in build file by @bjee19 in #3361
• Update security workflows by @sjberman in #3373
• Add GKE router to nfr workflow by @bjee19 in #3392
• Update agent collector config by @sjberman in #3396
• Don't run Mend on fork by @sjberman in #3415
• Add actions to CodeQL to satisfy scanning by @sjberman in #3417

⬆️ Dependencies

75 changes

• Update module sigs.k8s.io/controller-tools to v0.18.0 by @renovate in #2962, #3123, #3285, #3367
• Update quay.io/helmpack/chart-testing Docker tag to v3.12.0 by @renovate in #3016
• Update stefanzweifel/git-auto-commit-action action to v5.2.0 by @renovate in #3007, #3312
• Update dependency helm/chart-testing to v3.12.0 by @renovate in #3014
• Update github/codeql-action action to v3.28.18 by @renovate in #3001, #3043, #3050, #3068, #3075, #3109, #3163, #3202, #3255, #3293, #3324, #3354, #3388
• Update module sigs.k8s.io/controller-runtime to v0.21.0 by @renovate in #2993, #3029, #3051, #3138, #3203, #3262, #3403
• Update actions/upload-artifact action to v4.6.2 by @renovate in #3002, #3161, #3254
• Update reviewdog/action-actionlint action to v1.65.2 by @renovate in #3009, #3040, https://github.com/nginx/nginx-gateway-fabric/pull/...

v1.6.2

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

📦 Helm Chart

• Release 1.6.2 by @nginx-bot in #3205

⬆️ Dependencies

• Update golang.org/x/oauth2 (#3185) by @sjberman in #3197

Full Changelog: v1.6.1...v1.6.2

v1.6.1

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

📦 Helm Chart

• Release 1.6.1 by @nginx-bot in #3103

📝 Documentation

• Deploy docs for release 1.6.0 by @bjee19 in #3022

🔨 Maintenance

• Remove announce for slack (#3104) by @lucacome in #3105

⬆️ Dependencies

• Update nginx Docker tag to v1.27.4 (#3099) by @lucacome in #3102

Full Changelog: v1.6.0...v1.6.1