repo: Release v1.28.0

Summary of major changes:

* Switched from http_parser to BalsaParser for HTTP/1.1 traffic
* Promoted TLS inspector to be robust against unstrusted downstreams and upstreams.
* Added glob control for fine-grained logging in admin interface.
* Added an optimization to defer the cluster creation on workers
* Added support for caching EDS response with ADS
* Added ECDS support for downstream and upstream network filters
* Report the correct response code in the access log
* Added a filter to extract JSON payload to metadata
* Added a filter to update filter state objects
* Added a filter for Maxmind geolocation provider
* Added support for tracking the global downstream connection limits in the overload manager.
* Added support for HTTP Capsule protocol that can be used to encapsulate and decapsulate UDP datagrams in HTTP
* Added the support to detect and send TCP RST for the raw buffer socket based connections on Linux.
* Announced deprecation of OpenTracing and OpenCensus and future removal at version 1.30.

*Docker images*:
    https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.28.0
*Docs*:
    https://www.envoyproxy.io/docs/envoy/v1.28.0/
*Release notes*:
    https://www.envoyproxy.io/docs/envoy/v1.28.0/version_history/v1.28/v1.28.0
*Full changelog*:
    v1.27.0...v1.28.0

Signed-off-by: Ryan Northey <[email protected]>
Signed-off-by: Kuat Yessenov <[email protected]>

VERSION.txt

@@ -1 +1 @@
-1.28.0-dev
+1.28.0

changelogs/current.yaml

@@ -1,7 +1,6 @@
-date: Pending
+date: October 18, 2023
 
 behavior_changes:
-# *Changes that are expected to cause an incompatibility if applicable; deployment changes are likely required*
 - area: jwt
   change: |
     Changed behavior of the JWT extraction, passing entire token for validation, instead cut him in the non-Base64 character.
@@ -40,7 +39,6 @@ behavior_changes:
     Previously, zone-aware routing would not route fairly in this case.
     To revert the entire change, set the runtime flag ``envoy.reloadable_features.locality_routing_use_new_routing_logic``
     to ``false`` to get the old behavior and well-tested codepaths, undoing both changes.
-
 - area: UHV
   change: |
     Introduced runtime flag ``envoy.reloadable_features.enable_universal_header_validator`` for toggling Universal Header Validator
@@ -56,7 +54,6 @@ behavior_changes:
     By default this limit is disabled.
 
 minor_behavior_changes:
-# *Changes that may cause incompatibilities for some users, but should not for most*
 - area: ext_authz
   change: |
     Removing any query parameter in the presence of repeated query parameter keys no longer drops the repeats.
@@ -137,7 +134,6 @@ minor_behavior_changes:
     to find the keys configured in filter_state_objects_to_log.
 
 bug_fixes:
-# *Changes expected to improve the state of the world and are unlikely to have negative effects*
 - area: connection limit
   change: |
     Fixed a use-after-free bug in the connection limit filter.
@@ -217,7 +213,6 @@ bug_fixes:
     Fix a bug where the nonce was not reset after reconnecting to the xDS server, when using State-of-the-World.
 
 removed_config_or_runtime:
-# *Normally occurs at the end of the* :ref:`deprecation period <deprecated>`
 - area: listener
   change: |
     Removed ``envoy.reloadable_features.enable_update_listener_socket_options`` runtime flag and legacy code paths.