Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

🐛 Bug Fixes

• Fix Agent mTLS CA cert pool not refreshing after certificate rotation by @nginx-bot in #5344
• Address ListenerSet Attachment gaps (#5329) by @ciarams87 in #5353
• Fix false-positive TargetConflict on policies when unrelated routes overlap each other by @nginx-bot in #5359
• Fix ListenerSet listeners not being included in provisioned Service and container ports by @nginx-bot in #5360

📦 Helm Chart

• Release 2.6.3 by @github-actions[bot] in #5363

📝 Documentation

• Update dependency nginx/agent to v3.10.2 by @nginx-bot in #5347
• Update NGINX Agent to v3.10.3 by @nginx-bot in #5362

🔨 Maintenance

• Add missed operator tag version by @ciarams87 in #5364

Other Changes

• Operator Bundle v1.4.2 by @nginx-bot in #5324

Full Changelog: v2.6.2...v2.6.3

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

📦 Helm Chart

• Release 2.6.2 by @github-actions[bot] in #5321

⬆️ Dependencies

• Update F5 WAF to 5.13.1 and NGINX OSS to 1.31.1 by @nginx-bot in #5320

Other Changes

• Operator Bundle v1.4.1 by @nginx-bot in #5314

Full Changelog: v2.6.1...v2.6.2

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

🐛 Bug Fixes

• Update operator bundle for new requirements by @nginx-bot in #5262
• Assertion job should run on production runner by @nginx-bot in #5264
• Fix bundle annotations; fix operator PR by @nginx-bot in #5268
• Readd AllowPrivilegeEscalation: false to containers (#5277) by @ciarams87 in #5279

📦 Helm Chart

• Release 2.6.1 by @github-actions[bot] in #5298

🔨 Maintenance

• Add draft release context by @nginx-bot in #5269
• Update changelog date by @sjberman in #5307
• Update operator version by @sjberman in #5310
• Remove value from broken job by @sjberman in #5311

⬆️ Dependencies

• Bumps version for NGINX OSS, NGINX Plus, NGINX Agent and WAF compiler… by @sjberman in #5297
• Update dependencies and manually build OSS image (#5304) by @sjberman in #5306

Other Changes

• Operator Bundle v1.4.0 by @nginx-bot in #5266

Full Changelog: v2.6.0...v2.6.1

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

🚀 Features

• Support multiple TLS certs per HTTPS Listener by @sjberman in #5037
• Proxy settings timeouts by @ciarams87 in #5165
• Support for Gateway FrontendTLS by @shaun-nx in #5127
• Add additional configuration options to nginxGateway.readinessProbe by @shaun-nx in #5200
• Support ListenerSets by @bjee19 in #5208
• Integrate with F5 WAF for NGINX by @ciarams87 in #5215

🐛 Bug Fixes

📦 Helm Chart

• Update docs for release 2.5.0 by @sjberman in #5028
• helm: add extraObjects support to nginx-gateway-fabric chart by @sinux-l5d in #5011
• Update docs for release 2.5.1 by @sjberman in #5098
• Release 2.6.0 by @github-actions[bot] in #5249

🧪 Tests

• NFR Test Results for NGF version 2.5.0 by @github-actions[bot] in #5007
• Longevity Test Results for NGF version 2.5.0 by @github-actions[bot] in #5018
• Add keepAlive.MinTimeout field to ClientSettingsPolicy by @salonichf5 in #5040
• NFR Test Results for NGF version edge by @github-actions[bot] in #5051
• Update docker/dockerfile Docker tag to v1.23 by @renovate[bot] in #5043
• Update Kubernetes manifests by @renovate[bot] in #5105
• Update Helm release opentelemetry-collector to v0.153.0 by @renovate[bot] in #5117, #5158, #5190, #5219
• Simplify HTTP response assertions in tests using Gomega matchers by @dap0am in #5095
• NFR: only download new results by @sjberman in #5128
• Set the default SSL verify depth to 4 by @dhurley in #5174
• Update ubuntu Docker tag to v26 by @renovate[bot] in #5181
• Update curlimages/curl Docker tag to v8.20.0 by @renovate[bot] in #5212
• Collect ListenerSetCount in telemetry by @bjee19 in #5210
• NFR Test Results for NGF version 2.6.0 by @nginx-bot in #5238
• Longevity Test Results for NGF version 2.6.0 by @nginx-bot in #5244

📝 Documentation

• Add missing note to CHANGELOG by @sjberman in #5035
• Update nginx Docker tag to v1.30.0 by @renovate[bot] in #5093, #5152
• Update NGINX Agent to v3.9.1 by @renovate[bot] in #5126, #5217
• docs: Update Code of Conduct by @alessfg in #5141
• Update examples to match waf docs by @ciarams87 in #5226

🔨 Maintenance

• Update operator RBAC and fix script by @sjberman in #5000
• Fix NFR input check by @sjberman in #5002
• Revert operator Dockerfile by @sjberman in #5029
• Update DOCKER action variable names by @sjberman in #5079
• Update docker token var by @sjberman in #5080
• Update paths to GH actions by @jjngx in #5090
• Use direct go proxy in PRs by @ciarams87 in #5107
• Add update to musl, musl-utils, and zlib packages in nginx plus dockerfile by @bjee19 in #5142
• Manually build helm operator by @sjberman in #5183
• Update nginx images for package CVEs by @sjberman in #5229

⬆️ Dependencies

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

🐛 Bug Fixes

• Increase http hash bucket sizes by @nginx-bot in #5036
• Fix broadcaster loop by @nginx-bot in #5038
• Move gateway define rate-limit-policy directives from HTTP to Server … by @salonichf5 in #5039
• fix: allow TCPRoute and UDPRoute on same gateway port (#5016) by @sjberman in #5053
• Use minimalObject when provisioning objects by @nginx-bot in #5059
• Add fix for effective NginxProxy when different Kubernetes types are specified by @nginx-bot in #5062
• Update validation check for IPFamily between BackendRefs and NginxProxy by @nginx-bot in #5063
• Fix bug where N1C dataplane key is ignored by @nginx-bot in #5073
• Fix CORS failure when attached to HTTPS Listener (#5071) by @sjberman in #5074
• Allow externalTrafficPolicy on ClusterIP services with externalIPs (#… by @salonichf5 in #5076

📦 Helm Chart

• Release 2.5.1 by @github-actions[bot] in #5085

📝 Documentation

• Update CHANGELOG date by @sjberman in #5097

🔨 Maintenance

• Update operator sample manifest by @sjberman in #5030
• Revert "Update lucacome/draft-release action to v2.1.0", update Docker vars by @sjberman in #5081

⬆️ Dependencies

• Update lucacome/draft-release action to v2.1.0 (#5055) by @sjberman in #5060

Other Changes

• Operator Bundle v1.3.0 by @nginx-bot in #5032

Full Changelog: v2.5.0...v2.5.1

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

🚀 Features

• Extend the readiness probe configuration by @ciarams87 in #4673
• Add owner references to gateway resources by @salonichf5 in #4684
• Add support for server_tokens by @salonichf5 in #4817
• Add HTTPCORSFilter support by @dhurley in #4813
• Update Gateway API to 1.5 by @sjberman in #4839
• NGINX Plus: OpenID Connect Support by @sjberman in #4944
• Support multiple targetPorts in InferencePool by @sjberman in #4637
• NGINX Plus: JWT Authentication Support by @sjberman in #4975

🐛 Bug Fixes

• fix: Prevent double-dash in Data Plane Deployment & Service name by @baburciu in #4653
• Reduce irrelevant resource caching by @sjberman in #4680
• Update dnsResolver value type to string by @bjee19 in #4719
• Fix missing ConfigMaps from cache by @sjberman in #4748
• Fix regex location ordering, prefix modifier, and regex anchoring by @sanmeshkakade in #4764
• Fix status updates for long-named Gateways by @sjberman in #4774
• Fix concurrent map writes by @sjberman in #4830
• Fix wildcard detection for listeners with hostnames by @salonichf5 in #4843
• Add gateway name to key when checking for route overlaps by @dhurley in #4855
• Fix policy TargetConflict for unrelated routes by @sjberman in #4899
• Update status conditions for Backend TLS by @sjberman in #4672
• Allow non-SNI requests and fix 421 responses by @sjberman in #4878
• Add validation for duplicate logout, frontchannel and redirect URI by @salonichf5 in #4947
• Fix: do not include $request_uri in proxy_pass for external locations by @oyiz-michael in #4935
• Support v1beta1 ReferenceGrant; add finalizer RBAC by @nginx-bot in #4994

📦 Helm Chart

• Update docs for release 2.4 by @bjee19 in #4700
• Update main docs for release 2.4.1 by @bjee19 in #4755
• Update main docs for 2.4.2 by @sjberman in #4827
• Bump minimum k8s version to v1.31 by @sjberman in #4840
• Only set helm replicas if autoscaling disabled by @sjberman in #4897
• Improve HPA documentation in README chart and add default values by @borjaOrtizLlamas in #4930
• Release 2.5.0 by @github-actions[bot] in #5006

🧪 Tests

• Update Helm release opentelemetry-collector to v0.147.1 by @renovate[bot] in #4665, #4867, #4956
• NFR Test Results for NGF version 2.4.0 (#4660) by @bjee19 in #4693
• Add longevity test workflows by @sjberman in #4713
• If the conformance tests fail, log the NGF and NGINX container logs by @dhurley in #4710
• Update golang Docker tag to v1.26 by @renovate[bot] in #4780, #4781
• Enable running conformance tests from GWAPI main again by @ciarams87 in #4783
• Improve longevity tests by @sjberman in #4769
• Capture NGINX CPU and Memory metrics in Scale tests by @shaun-nx in #4793
• Add retry when getting nginx loadbalancer address by @bjee19 in #4807
• Update docker/dockerfile Docker tag to v1.22 by @renovate[bot] in #4880
• Update dependency golangci/golangci-lint to v2.11.2 by @renovate[bot] in #4821, #4892
• Enable additional 1.5 conformance tests by @sjberman in #4879
• Add small fix to graceful recovery test and refactor to broadcast run function by @bjee19 in #4939
• Update curlimages/curl Docker tag to v8.18.0 by @renovate[bot] in #4951
• Fix conformance profile parsing by @sjberman in #4963
• Increase conformance test timeout by @sjberman in #4986
• NFR Test Results for NGF version 2.5.0 by @nginx-bot in #5015
• Longevity Test Results for NGF version 2.5.0 by @nginx-bot in #5027

📝 Documentation

• NFR pull request into main by @sjberman in #4694
• Fix release pipeline issues by @ciarams87 in #4703
• Restructure auth filter proposal and expand upon JWT sections by @shaun-nx in #4686
• Mark completed proposals as such by @sjberman in #4753
• Add goals and non-goals for OpenID connect by @salonichf5 in #4745
• Update WAF enhancement proposal by @ciarams87 in #4624
• Design for OpenID Connect by @salonichf5 in #4775
• Update NGINX Agent to v3.8.0 by @renovate[bot] in #4799, #4852, #4972
• Update proposal around multiple auth filters by @shaun-nx in #4801
• Update community meeting section of README by @sjberman in #4876
• Update nginx Docker tag to v1.29.6 by @renovate[bot] in #4910
• Update Gateway API version to 1.5.1 by @sjberman in #4937
• Update JWT auth proposal to include new caCertificateRefs field by @dhurley in #4984
• Update NGINX to v1.29.7 by @sjberman in #4987
• Add CHANGELOG note about deprecation by @sjberman in #5026

🔨 Maintenance

• Add cherry pick bot workflow by @sjberman in #4682
• Update openssl-libs package to fix cves by @bjee19 in #4712
• Use PAT for bot workflows by @sjberman in #4724
• Update community support issue number by @ciarams87 in #4726
• Manually build helm operator by @sjberman in #4731
• Update nginx version to 1.29.5 by @bjee19 in #4738
• Ignore ubi patch updates by @ciarams87 in #4744
• Update operator bundle workflow to use PAT for bot workflows by @bjee19 in #4756
• If the resource version is not set in the store, use the k8s client to get the resource version. by @dhurley in #4668
• Run go fix by @sjberman in #4784
• Fix release pipeline publishing by @sjberman in #4898
• Fix NFR workflow input by @sjberman in #4873
• Reduce pipeline complexity by @sjberman in #4905
• Fix NFR scheduled PRs by @sjberman in #4938
• Update operator RBAC and fix script by @nginx-bot in #5001
• Fix NFR input check by @nginx-bot in https://github.com/nginx/nginx-gatewa...

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

📦 Helm Chart

• Release 2.4.2 by @github-actions[bot] in #4826

🔨 Maintenance

• Update operator bundle workflow to use PAT for bot workflows by @nginx-bot in #4768

⬆️ Dependencies

• Update NGINX Agent to v3.7.1 and Lint to v2.9.0 (#4799) by @sjberman in #4825

Other Changes

• Operator Bundle v1.2.1 by @nginx-bot in #4758

Full Changelog: v2.4.1...v2.4.2

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

🐛 Bug Fixes

• Update dnsResolver value type to string (#4719) by @bjee19 in #4721

🔨 Maintenance

• Fix release pipeline issues (#4703) by @ciarams87 in #4705
• Update openssl-libs package to fix cves by @github-actions[bot] in #4720
• Manually build helm operator by @nginx-bot in #4735
• Update nginx version to 1.29.5 by @nginx-bot in #4743

⬆️ Dependencies

• Update NGINX Agent to v3.7.0 by @nginx-bot in #4728

Other Changes

• Operator Bundle v1.2.0 by @github-actions[bot] in #4702

Full Changelog: v2.4.0...v2.4.1

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

🚀 Features

• Add Session Persistence support for NGINX OSS and Plus users by @salonichf5 in #4471
• Allow users to specify escape format when customizing the data plane access logs by @michasHL in #4530
• Enables keepAlive directive to 16 by default by @salonichf5 in #4524
• Add TCPRoute and UDPRoute Support for L4 Load Balancing by @Skcey in #4518
• Support Basic Auth through AuthenticationFilter by @shaun-nx in #4575
• feat: Add CRD discovery for BackendTLSPolicy and experimental CRDs by @ciarams87 in #4569
• Add SnippetsPolicy for Gateway level by @fabian4 in #4461
• Add proxy settings policy by @ciarams87 in #4592
• Support watching subset of namespaces by @sjberman in #4606
• Support Rate Limiting through RateLimitPolicy by @bjee19 in #4633
• Add TLS Options support for Gateway by @dhurley in #4639

🐛 Bug Fixes

• Use container UUID instead of IP address for tracking agent by @sjberman in #4470
• Preserve external controller annotations for deployment and daemonSet by @salonichf5 in #4468
• Fix hostNetwork data plane pod connection issue by @sjberman in #4481
• Prevent unnecessary data plane restarts by @sjberman in #4555
• Add RouteType to L4Route struct by @shaun-nx in #4646
• Ensure agent collector logs go to stdout by @dhurley in #4656
• Confirm auth filter secret is referenced and exists by @shaun-nx in #4654

📦 Helm Chart

• Update docs for 2.3.0 release by @sjberman in #4491
• feat(chart): add priorityClassName for control plane pod by @starlightromero in #4356
• Include Gateway TLS spec in Helm template by @kwentine in #4514
• Update dependency dadav/helm-schema to v0.20.0 by @renovate[bot] in #4558
• add support for the GatewaySpecAddress to the gateway configuration by @rushikesh-outbound in #4605
• Add snippets helm flag and example changes for snippets doc update by @bjee19 in #4628
• Release 2.4.0 by @github-actions[bot] in #4669

🧪 Tests

• Update Helm release opentelemetry-collector to v0.143.0 by @renovate[bot] in #4464, #4504, #4516, #4580
• NFR Test Results for NGF version edge by @github-actions[bot] in #4467
• NFR Test Results for NGF version v2.3.0 (#4453) by @sjberman in #4475
• Fix inference conformance duplication by @sjberman in #4492
• Test: replace context.TODO and context.Background to t.Context in uni… by @richie-king in #4355
• Fix GW API version for NFR tests by @sjberman in #4528
• Update curlimages/curl Docker tag to v8.18.0 by @renovate[bot] in #4566
• Refactor test options by @tataruty in #4582
• Increase test coverage for stream servers; add UDP to feature list by @ciarams87 in #4563
• Add CEL tests for SnippetsPolicy by @tataruty in #4603
• Update docker/dockerfile Docker tag to v1.21 by @renovate[bot] in #4642
• Update telemetry collector for release 2.4 by @shaun-nx in #4659
• NFR Test Results for NGF version 2.4.0 by @github-actions[bot] in #4660

📝 Documentation

• Update AuthenticationFilter proposal by @shaun-nx in #4424
• Implementable RateLimitPolicy proposal by @bjee19 in #4346
• Add doc describing provisioning restrictions by @sjberman in #4499
• Add example files for TCPRoute and UDPRoute user guides. by @salonichf5 in #4573
• Update functional test to cover JWT auth by @shaun-nx in #4593
• Add details on JWKS creation for use in JWT auth secret by @shaun-nx in #4599
• Update RateLimitPolicy example files to guide by @bjee19 in #4634

🔨 Maintenance

• Rename context package to avoid linter errors in pipeline by @salonichf5 in #4476
• Update GOPROXY for forks; skip UBI plus by @sjberman in #4493
• Add correlation_id to logs by @sjberman in #4506
• Run create/update draft on manual workflows by @ciarams87 in #4526
• Automate Operator certification by @ciarams87 in #4288
• Merge open actions PRs into a single PR by @ciarams87 in #4564
• Remove FOSSA by @sjberman in #4576
• Temporarily switch to dev artifactory by @ciarams87 in #4594
• Chore: readd prod artifactory by @ciarams87 in #4604
• Remove internal redirect statuscode validation by @sjberman in #4600
• Fix events RBAC and action by @sjberman in #4638
• Render snippets-filter flag when specified by @sjberman in #4650
• Update glib2 and libpng packages for cves by @bjee19 in #4648

⬆️ Dependencies

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

🚀 Features

• Make endpoint picker connection flags configurable by @salonichf5 in #4105
• Update GatewayAPI to v1.4.1 by @ciarams87 in #4166
• Adding nginx_proxy access_log format ability by @tataruty in #4102
• Add SupportedFeatures to GatewayClassStatus by @ciarams87 in #4236
• Add support for backend tls config for Gateways by @salonichf5 in #3900
• Allow RegularExpression for path match be RE2/PCRE friendly. by @salonichf5 in #4450
• Add support for multiple InferencePool backends by @bjee19 in #4439

🐛 Bug Fixes

• Add the goreleaser fix from release branch by @ciarams87 in #4147
• Fix production pipeline by @ciarams87 in #4148
• Support mixed externalname and local services in single route by @ciarams87 in #4188
• Fix bug where user mounted files were being removed by agent by @bjee19 in #4178
• Preserve external controller state during reconciliation by @ciarams87 in #4182
• Fix HPA race condition by reading deployment replicas instead of HPA status by @ciarams87 in #4214
• Allow HPA to work when Inference is enabled by @sjberman in #4247
• Deduplicate route status entries by @sjberman in #4250
• Fix empty pod owner name when connecting to agent by @sjberman in #4367
• Remove k8s API access from NGINX pod by @sjberman in #4368
• fix: pass IPv6 DNS resolvers correctly by @sjberman in #4378
• Truncate long resource names when provisioning by @sjberman in #4387
• Retry NGINX provisioning on all errors by @sjberman in #4399
• Update permissions of gateway binary for UBI by @shaun-nx in #4404
• Use UUID instead of IP address for tracking agent (#4470) by @sjberman in #4472
• Preserve external controller annotations for deployment and daemonSet (#4468) by @salonichf5 in #4473
• Fix hostNetwork data plane pod connection issue (#4481) by @sjberman in #4483

📦 Helm Chart

• Update CHANGELOG and README for 2.2.0 by @ciarams87 in #4138
• Allow disabling cert-generator with a Helm value by @fabian4 in #4186
• Update docs for 2.2.1 release by @sjberman in #4283
• Update NGF chart logo to official branded logo by @sjberman in #4292
• Add clarifying comment to service template by @sjberman in #4321
• Release 2.3.0 by @github-actions[bot] in #4474

🧪 Tests

• NFR Test Results for NGF version 2.2.0 (#4124) by @ciarams87 in #4127
• Update Helm release opentelemetry-collector to v0.141.0 by @renovate[bot] in #4129, #4197, #4243, #4332, #4412
• Fix IPv6 tests and reduce logging noise in test suite by @ciarams87 in #4163
• NFR Test Results for NGF version edge by @github-actions[bot] in #4202
• Update curlimages/curl Docker tag to v8.17.0 by @renovate[bot] in #4225
• Update ghcr.io/nginx/kic-test-grpc-server Docker tag to v0.2.6 by @renovate[bot] in #4240
• Update docker/dockerfile Docker tag to v1.20 by @renovate[bot] in #4276
• Functional test logging/startup fixes by @sjberman in #4302
• Fix NFR upgrade tests by @sjberman in #4371
• NFR Test Results for NGF version edge by @github-actions[bot] in #4389
• NFR Test Results for NGF version v2.3.0 by @github-actions[bot] in #4453

📝 Documentation

• Move release logic to CI by @ciarams87 in #4137
• Update NGINX Agent to v3.4.2 by @renovate[bot] in #4162
• Update bundle for v1.0.0/v2.2.0 by @ciarams87 in #4157
• Design Session Persistence - Part 1 by @salonichf5 in #4158
• Enhancement Proposal: Authentication Filter by @shaun-nx in #4136
• Provisional ProxySettingsPolicy proposal by @ciarams87 in #4237
• Design for session persistence - Part II by @salonichf5 in #4221
• Implementable ProxySettingsPolicy proposal by @ciarams87 in #4256
• Provisional RateLimitPolicy proposal by @bjee19 in #4324
• Update session persistence design by @salonichf5 in #4314
• Enhancement Proposal: Authentication Filter by @shaun-nx in #4235
• Update DavidAnson/markdownlint-cli2-action action to v21 by @renovate[bot] in #4300
• Update NGINX Plus to R36 by @sjberman in #4365
• Update NGINX Agent to v3.5.1 by @sjberman in #4372
• Add examples for secure backend traffic guide by @salonichf5 in #4341
• Update Gateway API version to 1.4.1 by @sjberman in #4397
• Fix typo in proposal header by @shaun-nx in #4364
• Update dependency nginx/agent to v3.6.0 by @renovate[bot] in #4425

🔨 Maintenance

• Fix helm tests in release pipeline by @ciarams87 in #4126
• Fix prod workflow permissions by @ciarams87 in #4132
• Add docker login step to avoid rate limiting by @ciarams87 in #4140
• Reduce renovate noise by @ciarams87 in #4217
• Remove observability from alpha1 by @tataruty in #4215
• Alignment for Conditions messages format by @tataruty in #4253
• Update operator bundle for v1.0.1 (#4285) by @ciarams87 in #4287
• Upload conformance profiles to the correct release by @ciarams87 in #4289
• Fix provisioning logs by @sjberman in #4428
• Update docs and chart for 2.2.2 by @sjberman in #4438
• Update dockerfile packages by @sjberman in #4448
• Update bundle output for Operator by @shaun-nx in #4449

⬆️ Dependencies