Zihan Li <******@****.***> 1704940708 +0800

Abu Kashem <******@****.***> 1698755752 -0400

apiVersion: release-notes/v2
kind: feature
area: traffic-management

releaseNotes:
- |
  **Added** warning validation messages when a DestinationRule specifies failover policies but does not provide an OutlierDetection policy.

name: "Validate Gradle Wrapper"
on: [push, pull_request]

permissions:
  contents: read

jobs:
  validation:
    name: "Validation"
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6

apiVersion: release-notes/v2
kind: bug-fix
area: security
releaseNotes:
  - |

# limitations under the License.

# This script checks that validation files do not mutate their inputs.
# Usage: `hack/verify-non-mutating-validation.sh`.

set -o errexit
set -o nounset
set -o pipefail

KUBE_ROOT=$(dirname "${BASH_SOURCE[0]}")/..
source "${KUBE_ROOT}/hack/lib/init.sh"

apiVersion: release-notes/v2
kind: feature
area: traffic-management
releaseNotes:
   - |
     **Added** the ability to perform automatic SAN validation based on the downstream HTTP host/authority header
     when `ENABLE_AUTO_SNI` and `VERIFY_CERTIFICATE_AT_CLIENT` feature flags are enabled.
docs:
   - https://docs.google.com/document/d/1pTUl-Ng3nXAWJb7UGJtalftznpxQEfID/

apiVersion: release-notes/v2
kind: feature
area: installation
releaseNotes:
  - |
    **Updated** `istioctl tag set default` to control which revision handles Istio resource validation. The revision indicated
    through the default tag will also win leader elections and assume singleton cluster responsibilities.

upgradeNotes:
  - title: Default revision must be switched when performing a revision-based upgrade.
    content: |

Xiaopeng Han <******@****.***> 1681732280 +0800

John Howard <******@****.***> 1662658353 -0700