Linkerd

This release primarily consists of dependency updates across various components, alongside bug fixes in the destination service related to native sidecar port handling.

This release focuses on bug fixes, primarily improving support for native sidecar servers across the CLI, injector, and destination components. It also includes several dependency updates.

This release primarily consists of dependency updates across various components, including security patches and minor version bumps for build tools and Rust crates. It also includes a fix for README references and improvements to policy testing stability.

This release merges the proxy-init image into the proxy image for simplification and fixes an issue where HTTPRoute timeouts were not being correctly honored for gateway API resources.

This release is marked as NOT RECOMMENDED due to a critical bug with mesh expansion certificates, and users should upgrade to edge-25.11.3. It includes dependency updates and fixes for broken CLI documentation links and CRD typos.

This recommended release includes updates to dependency versions and fixes several issues, notably ensuring pod metadata is present in OpenTelemetry traces and correcting the workload subscribers metric calculation.

This release focuses on dependency updates and improving the robustness of tracing configuration handling within the Helm chart, alongside a proxy update to v2.326.0.

This release contains minor dependency bumps and a fix for Helm chart tracing guards, but is explicitly marked as NOT RECOMMENDED in favor of edge-25.10.7.

This release improves the robustness of tracing parameter handling in Linkerd's Helm chart and includes several dependency updates. Note that this specific version is marked as NOT RECOMMENDED.

This release addresses a potential crash during proxy injection and introduces new semantic convention labels for OpenTelemetry spans. Users are advised to upgrade to edge-25.10.7 instead.

This release introduces configuration for destination controller stream queue capacity and fixes a potential deadlock, but it contains a breaking change removing the `ip_port_subscribers` metric. This version is explicitly marked as NOT RECOMMENDED.

This release drops support for OpenCensus tracing and promotes native sidecar support to beta, introducing new OpenTelemetry annotation support for tracing customization.

This release removes the Linkerd Jaeger extension in favor of direct OpenTelemetry configuration and introduces new metrics for request frame sizes. It also ensures OpenTelemetry spans are flushed more reliably.

This release is RECOMMENDED and introduces a breaking change where the `linkerd-crds` Helm chart no longer installs Gateway API CRDs by default. It fixes a critical bug related to stale endpoint data in native sidecar proxies and adds support for ReplacePrefixMatch in HTTPRoute filters.

This release introduces new metrics for inbound request and frame size tracking. It primarily consists of dependency updates managed via new Dependabot groups for `serde` and `pest`.

This is a RECOMMENDED release focused primarily on dependency updates and includes a critical fix for correct OpenTelemetry pod IP reporting in traces. It also updates the Linkerd proxy to v2.318.0.

This release bumps numerous dependencies across the project and updates the proxy to v2.317.0, while maintaining functional parity with the previous edge release.

This release introduces enhanced metrics for multicluster checks and resolves an issue where certain errors were being ignored during those checks. It also includes numerous dependency updates.

This release introduces support for custom security contexts for the proxy and network validator containers, and upgrades the proxy to prefer the X25519MLKEM768 key exchange algorithm. Several dependency updates and CI fixes were also included.

This release consolidates the policy controller into the main controller image, removing the separate image, and introduces a new metric for TLS provider visibility. It also includes extensive dependency updates.

This RECOMMENDED release updates numerous dependencies and switches the default routing table programming command from iptables-legacy to iptables-nft, requiring configuration changes for users needing the legacy mode.

This RECOMMENDED release removes support for ARMv7 platforms and fixes a critical bug where native-sidecar proxies could enter an error state upon container exit.

This release introduces support for percentage values in PDB maxUnavailable settings and prefers AES algorithms for mTLS. It also fixes reproducible build issues and cleans up proxy metric descriptions.

This release primarily consists of dependency updates and internal CI/build improvements, bringing the proxy to v2.310.0. It is explicitly marked as NOT RECOMMENDED, advising users to upgrade to edge-25.8.1.

This release (edge-25.7.4) is marked as NOT RECOMMENDED and contains a fix to reduce proxy memory usage for HTTP/1 connections. Users are advised to upgrade to edge-25.8.1.

This release reintroduces idle timeouts for HTTP/1 connections and adds AES_256_GCM cipher support for mTLS, but is marked as NOT RECOMMENDED in favor of edge-25.8.1.

This release primarily addresses a bug where invalid Server selectors blocked other Servers and includes numerous dependency updates. Users are strongly advised to use edge-25.8.1 instead of this version.

This release introduces stricter enforcement against connecting to undefined Service ports, aligning Linkerd behavior with Kubernetes standards, and includes several dependency updates and minor fixes.

This release introduces the ability to configure OpenTelemetry tracing directly via the Helm chart and fixes an issue with `caBundle` configuration when using PEM certificates. Users are advised to use edge-25.8.1 instead of this version.

This release is NOT RECOMMENDED and suggests upgrading to edge-25.8.1. It introduces breaking changes by updating gRPC histogram buckets and renaming container ports to satisfy Kubernetes 1.33 requirements, alongside bug fixes and new gRPC server metrics in the policy controller.

This release (edge-25.6.2) contains dependency bumps, minor feature additions, and a policy test fix, but is explicitly marked as NOT RECOMMENDED in favor of edge-25.7.4.

This release is marked as NOT RECOMMENDED and advises users to upgrade to edge-25.7.4. It includes a fix for retries causing failures with HTTP/2 traffic and several minor dependency updates.

This release adds k8s.pod.ip to OpenTelemetry trace attributes but is marked as NOT RECOMMENDED, advising users to upgrade to edge-25.7.4 instead.

This release primarily contains dependency updates and fixes an issue with pod antiaffinity configuration for the linkerd-multicluster chart, although the overall release status is NOT RECOMMENDED.

This release contains internal improvements but no new capabilities over edge-25.5.1 and is marked as NOT RECOMMENDED; users should use edge-25.7.4 instead. An unused alpha CLI subcommand was removed.

This release primarily consists of dependency updates and an internal proxy version bump (v2.296.0). However, it is marked as NOT RECOMMENDED, advising users to use edge-25.7.4 instead.

This edge release introduces support for using Gateway API HTTPRoutes within AuthorizationPolicy target references. However, this version is explicitly marked as NOT RECOMMENDED, advising users to upgrade to edge-25.7.4.

This release completes Linkerd 2.18 and introduces stricter routing rules based on appProtocol, alongside dependency updates and a fix for TCPRoute policy inclusion. Note that this specific edge release is NOT RECOMMENDED.

This release updates several dependencies and modifies the CLI to better handle Gateway API CRDs. Crucially, it changes the default tracing port to 4317 (OpenTelemetry standard).

This release improves the CLI error reporting when Gateway API CRDs are missing and fixes a gRPC streaming metrics bug. Note that this version is explicitly marked as NOT RECOMMENDED.

This release fixes issues related to Gateway API CRD installation and updates Prometheus configuration for new multicluster controllers. It also introduces support for restoring inbound authority labels via an environment variable.

This release introduces mandatory Gateway API CRD installation, deprecates old multicluster commands in favor of `link-gen`, and restores IPv6 support. This version is explicitly marked as NOT RECOMMENDED.

This edge release integrates service-mirroring controllers into the multicluster extension for better GitOps management and updates federated Service metadata synchronization logic. It also replaces the `proxy.cores` Helm value with `proxy.runtime.workers`.

This release changes the default for `outbound-transport-mode` to `transport-header` and fixes an issue with Helm installing Gateway API CRDs incorrectly. It is strongly recommended to use edge-25.7.4 instead due to known issues, including lack of IPv6 support.

This release introduces major changes to how Linkerd manages Gateway API CRDs, replacing older settings with `installGatewayAPI`, and adds support for explicit protocol declaration via Service ports. However, this version is marked as NOT RECOMMENDED due to critical bugs affecting CRD installation and IPv6 support.

This release introduces support for opaque protocol configuration and upgrades Gateway API CRDs, but contains a critical bug preventing correct IPv6 support.

This release changes the default tracing protocol to OpenTelemetry and includes fixes for policy controller lease handling and deterministic ordering of Server resources. Sites requiring IPv6 should avoid this version.

This release significantly enhances OpenTelemetry compatibility, introduces metrics for issuer certificate TTL, and fixes a policy update bug related to HTTPRoutes without specified ports. It also relaxes the requirement for Gateway API CRDs during `linkerd install`.

This RECOMMENDED release updates OpenTelemetry conventions, reduces multicluster load, and fixes a service-mirror bug, while introducing a breaking change to the Link resource's probe period format.

This release bumps the minimum required TLS version to v1.3, adds RHEL iptables support, allows communication with unready pods, and introduces configuration options for pod annotations and Viz dashboard labels. This release is marked as NOT RECOMMENDED; use edge-25.1.2 instead.