# (instead of spending the time to check O(N) previous tags).

! go list -m github.com/russross/blackfriday@v2.0
stderr '^go: module github.com/russross/blackfriday: no matching versions for query "v2\.0\"'

# (But asking for exactly v2.0.0+incompatible should still succeed.)
go list -m github.com/russross/blackfriday@v2.0.0+incompatible
stdout '^github.com/russross/blackfriday v2\.0\.0\+incompatible$'

apiVersion: release-notes/v2
kind: bug-fix
area: traffic-management
issue:
- 38709
releaseNotes:
- |

apiVersion: release-notes/v2
kind: feature
area: traffic-management
issue:
- 36707

releaseNotes:
- |

apiVersion: release-notes/v2
kind: feature
area: bug-fix
issue:
- 29199

releaseNotes:
- |
  **Fixed** a regression in Istio 1.8.0 causing workloads with multiple Services with overlapping ports to send

apiVersion: release-notes/v2
kind: bug-fix
area: traffic-management
issue: []
releaseNotes:
- |

apiVersion: release-notes/v2
kind: bug-fix
area: security
issue:
- 31297
releaseNotes:
- |

apiVersion: release-notes/v2
kind: bug-fix
area: installation
issue:
  - 29364
releaseNotes:
  - |
    **Fixed** Newer control plane installations were removing permissions for `rbac.istio.io` from `istiod`, causing

releaseNotes:
- |
  **Fixed** an issue causing mTLS errors for traffic on port 22, by including port 22 in iptables by default.

upgradeNotes:
- title: Port 22 iptables capture changes
  content: |
    In previous versions, port 22 was excluded from iptables capture. This mitigates risk of getting locked out of a VM
    when using Istio on VMs. This configuration was hardcoded into the iptables logic, meaning there was no way to

// Use of this source code is governed by a BSD-style
// license that can be found in the LICENSE file.

// Issue 36085: gccgo compiler did not generate type descriptor
// for pointer to type alias defined in another package, causing
// linking error.

  - eu.bookinfo.com
  ports:
  - number: 80
    name: http
    protocol: HTTP
  resolution: DNS
  endpoints:
  # Rather than relying on an external host that might become unreachable (causing test failures)
  # we can mock the external endpoint using service t which has no sidecar.
  - address: t.istio-system.svc.cluster.local # TODO: this is brittle
    ports: