v2.5.0

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

🚀 Features

• Extend the readiness probe configuration by @ciarams87 in #4673
• Add owner references to gateway resources by @salonichf5 in #4684
• Add support for server_tokens by @salonichf5 in #4817
• Add HTTPCORSFilter support by @dhurley in #4813
• Update Gateway API to 1.5 by @sjberman in #4839
• NGINX Plus: OpenID Connect Support by @sjberman in #4944
• Support multiple targetPorts in InferencePool by @sjberman in #4637
• NGINX Plus: JWT Authentication Support by @sjberman in #4975

🐛 Bug Fixes

• fix: Prevent double-dash in Data Plane Deployment & Service name by @baburciu in #4653
• Reduce irrelevant resource caching by @sjberman in #4680
• Update dnsResolver value type to string by @bjee19 in #4719
• Fix missing ConfigMaps from cache by @sjberman in #4748
• Fix regex location ordering, prefix modifier, and regex anchoring by @sanmeshkakade in #4764
• Fix status updates for long-named Gateways by @sjberman in #4774
• Fix concurrent map writes by @sjberman in #4830
• Fix wildcard detection for listeners with hostnames by @salonichf5 in #4843
• Add gateway name to key when checking for route overlaps by @dhurley in #4855
• Fix policy TargetConflict for unrelated routes by @sjberman in #4899
• Update status conditions for Backend TLS by @sjberman in #4672
• Allow non-SNI requests and fix 421 responses by @sjberman in #4878
• Add validation for duplicate logout, frontchannel and redirect URI by @salonichf5 in #4947
• Fix: do not include $request_uri in proxy_pass for external locations by @oyiz-michael in #4935
• Support v1beta1 ReferenceGrant; add finalizer RBAC by @nginx-bot in #4994

📦 Helm Chart

• Update docs for release 2.4 by @bjee19 in #4700
• Update main docs for release 2.4.1 by @bjee19 in #4755
• Update main docs for 2.4.2 by @sjberman in #4827
• Bump minimum k8s version to v1.31 by @sjberman in #4840
• Only set helm replicas if autoscaling disabled by @sjberman in #4897
• Improve HPA documentation in README chart and add default values by @borjaOrtizLlamas in #4930
• Release 2.5.0 by @github-actions[bot] in #5006

🧪 Tests

• Update Helm release opentelemetry-collector to v0.147.1 by @renovate[bot] in #4665, #4867, #4956
• NFR Test Results for NGF version 2.4.0 (#4660) by @bjee19 in #4693
• Add longevity test workflows by @sjberman in #4713
• If the conformance tests fail, log the NGF and NGINX container logs by @dhurley in #4710
• Update golang Docker tag to v1.26 by @renovate[bot] in #4780, #4781
• Enable running conformance tests from GWAPI main again by @ciarams87 in #4783
• Improve longevity tests by @sjberman in #4769
• Capture NGINX CPU and Memory metrics in Scale tests by @shaun-nx in #4793
• Add retry when getting nginx loadbalancer address by @bjee19 in #4807
• Update docker/dockerfile Docker tag to v1.22 by @renovate[bot] in #4880
• Update dependency golangci/golangci-lint to v2.11.2 by @renovate[bot] in #4821, #4892
• Enable additional 1.5 conformance tests by @sjberman in #4879
• Add small fix to graceful recovery test and refactor to broadcast run function by @bjee19 in #4939
• Update curlimages/curl Docker tag to v8.18.0 by @renovate[bot] in #4951
• Fix conformance profile parsing by @sjberman in #4963
• Increase conformance test timeout by @sjberman in #4986
• NFR Test Results for NGF version 2.5.0 by @nginx-bot in #5015
• Longevity Test Results for NGF version 2.5.0 by @nginx-bot in #5027

📝 Documentation

• NFR pull request into main by @sjberman in #4694
• Fix release pipeline issues by @ciarams87 in #4703
• Restructure auth filter proposal and expand upon JWT sections by @shaun-nx in #4686
• Mark completed proposals as such by @sjberman in #4753
• Add goals and non-goals for OpenID connect by @salonichf5 in #4745
• Update WAF enhancement proposal by @ciarams87 in #4624
• Design for OpenID Connect by @salonichf5 in #4775
• Update NGINX Agent to v3.8.0 by @renovate[bot] in #4799, #4852, #4972
• Update proposal around multiple auth filters by @shaun-nx in #4801
• Update community meeting section of README by @sjberman in #4876
• Update nginx Docker tag to v1.29.6 by @renovate[bot] in #4910
• Update Gateway API version to 1.5.1 by @sjberman in #4937
• Update JWT auth proposal to include new caCertificateRefs field by @dhurley in #4984
• Update NGINX to v1.29.7 by @sjberman in #4987
• Add CHANGELOG note about deprecation by @sjberman in #5026

🔨 Maintenance

• Add cherry pick bot workflow by @sjberman in #4682
• Update openssl-libs package to fix cves by @bjee19 in #4712
• Use PAT for bot workflows by @sjberman in #4724
• Update community support issue number by @ciarams87 in #4726
• Manually build helm operator by @sjberman in #4731
• Update nginx version to 1.29.5 by @bjee19 in #4738
• Ignore ubi patch updates by @ciarams87 in #4744
• Update operator bundle workflow to use PAT for bot workflows by @bjee19 in #4756
• If the resource version is not set in the store, use the k8s client to get the resource version. by @dhurley in #4668
• Run go fix by @sjberman in #4784
• Fix release pipeline publishing by @sjberman in #4898
• Fix NFR workflow input by @sjberman in #4873
• Reduce pipeline complexity by @sjberman in #4905
• Fix NFR scheduled PRs by @sjberman in #4938
• Update operator RBAC and fix script by @nginx-bot in #5001
• Fix NFR input check by @nginx-bot in #5004

⬆️ Dependencies

50 changes

• Lock file maintenance by @renovate[bot] in #4666, #4718, #4766, #4812, #4851, #4868, #4958, #4973
• Update GitHub Actions by @renovate[bot] in #4675
• Update module sigs.k8s.io/controller-runtime to v0.23.3 by @renovate[bot] in #4674, #4887
• Update github/codeql-action action to v4.34.1 by @renovate[bot] in #4662, #4810, #4848, #4895, #4955, #4962, #4969
• Update redhat/ubi9-minimal Docker tag to v9.7-1769056855 by @renovate[bot] in #4664
• Update npm dependencies by @renovate[bot] in #4663
• Update docker/login-action action to v4 by @renovate[bot] in #4696, #4882
• Update dependency dadav/helm-schema to v0.22.0 by @renovate[bot] in #4695, #4706, #4760, #4798, #4901, #4911
• Update Testing dependencies by @renovate[bot] in #4708
• Update NGINX Agent to v3.7.0 by @renovate[bot] in #4725
• Update opentelemetry-go monorepo to v1.42.0 by @renovate[bot] in #4722, #4877, #4894
• Update ghcr.io/nginx/dependencies/nginx-ubi:ubi9 Docker digest to c72f941 by @renovate[bot] in #4729, #4759, #4777, #4797, #4818, #4833, #4916, #4921
• Update GitHub Actions by @renovate[bot] in #4730
• Update module github.com/nginx/nginx-gateway-fabric/v2 to v2.4.2 by @renovate[bot] in #4707, #4834
• Update Helm release opentelemetry-collector to v0.145.0 by @renovate[bot] in #4765
• Update module golang.org/x/text to v0.35.0 by @renovate[bot] in #4771, #4918
• Update dependency golangci/golangci-lint to v2.11.4 by @renovate[bot] in #4779, #4909, #4968
• Update kubernetes packages to v0.35.2 by @renovate[bot] in #4778, #4860
• Update docker/build-push-action action to v7 by @renovate[bot] in #4790, #4888
• Update module google.golang.org/grpc to v1.79.3 [SECURITY] by @renovate[bot] in #4800, #4949
• Update module sigs.k8s.io/controller-tools to v0.20.1 by @renovate[bot] in #4806
• Update pre-commit hook DavidAnson/markdownlint-cli2 to v0.22.0 by @renovate[bot] in #4811, #4971
• Update module github.com/envoyproxy/go-control-plane/envoy to v1.37.0 by @renovate[bot] in #4819
• Update kindest/node Docker tag to v1.35.1 by @renovate[bot] in #4804
• Update GitHub Actions by @renovate[bot] in #4805
• Update actions/dependency-review-action action to v4.8.3 by @renovate[bot] in #4844
• Update pre-commit hook thlorenz/doctoc to v2.3.0 by @renovate[bot] in #4847
• Update dependency goreleaser/goreleaser to v2.14.3 by @renovate[bot] in #4849, #4856, #4902
• Update goreleaser/goreleaser-action action to v7 by @renovate[bot] in #4850
• Update GitHub Artifact Actions (major) by @renovate[bot] in #4863
• Update GitHub Actions by @renovate[bot] in #4857
• Update GitHub Actions by @renovate[bot] in #4881
• Update docker/setup-qemu-action action to v4 by @renovate[bot] in #4883
• Update module k8s.io/klog/v2 to v2.140.0 by @renovate[bot] in #4893
• Update docker/metadata-action action to v6 by @renovate[bot] in #4889
• Update docker/setup-buildx-action action to v4 by @renovate[bot] in #4884
• Update GitHub Actions by @renovate[bot] in #4891
• Update dependency operator-framework/operator-sdk to v1.42.2 by @renovate[bot] in #4903, #4953
• Update actions/download-artifact action to v8.0.1 by @renovate[bot] in #4917
• Update dorny/paths-filter action to v4.0.1 by @renovate[bot] in #4924, #4932
• Update pre-commit hook gitleaks/gitleaks to v8.30.1 by @renovate[bot] in #4923
• Update codecov/codecov-action action to v5.5.3 by @renovate[bot] in #4950
• Update npm dependencies to ^4.1.0 by @renovate[bot] in #4957
• Update kubernetes monorepo to v0.35.3 by @renovate[bot] in #4954
• Update module github.com/nginx/telemetry-exporter to v0.1.5 by @renovate[bot] in #4961
• Update GitHub Actions by @renovate[bot] in #4966
• Update module github.com/golang-jwt/jwt/v5 to v5.3.1 by @renovate[bot] in #4980
• Update azure/setup-helm action to v5 by @renovate[bot] in #4982
• Update Gateway API Inference Extension (#4988) by @sjberman in #4990
• Update libpng for CVEs by @nginx-bot in #5014

Other Changes

• Generate operator bundle for v1.2.0 (#4702) by @bjee19 in #4704
• Operator Bundle v1.2.1 by @github-actions[bot] in #4754
• Operator Bundle v1.2.2 by @nginx-bot in #4831
• Increase number of possible TrustedAddresses by @fiksn in #4792

New Contributors

• @sanmeshkakade made their first contribution in #4764
• @fiksn made their first contribution in #4792
• @borjaOrtizLlamas made their first contribution in #4930
• @oyiz-michael made their first contribution in #4935

Full Changelog: v2.4.2...v2.5.0