v1.3.9

1.3.9 (August 30, 2024)

SECURITY:

• Bump Go to 1.22.5 to address CVE-2024-24791 [GH-4228]
• Upgrade Docker cli to use v.27.1. This addresses CVE
  CVE-2024-41110 [GH-4228]

IMPROVEMENTS:

• docker: update go-discover binary [GH-4287]
• docker: update ubi base image to ubi9-minimal:9.4. [GH-4287]
• helm: Adds webhookCertManager.resources field which can be configured to override the resource settings for the webhook-cert-manager deployment. [GH-4184]
• helm: Adds connectInject.apiGateway.managedGatewayClass.resourceJob.resources field which can be configured to override the resource settings for the gateway-resources-job job. [GH-4184]
• config-entry: add validate_clusters to mesh config entry [GH-4256]

BUG FIXES:

• Fixes install of Consul on GKE Autopilot where the option 'manageNonStandardCRDs' was not being used for the TCPRoute CRD. [GH-4213]
• api-gateway: fix nil pointer deref bug when the section name in a gateway policy is not specified [GH-4247]
• helm: Fix ArgoCD hooks related annotations on server-acl-init Job, they must be added at Job definition and not template level. [GH-3989]
• helm: adds imagePullSecret to the gateway-resources job and the gateway-cleanup job, would fail before if the image was in a private registry [GH-4210]
• openshift: order SecurityContextConstraint volumes alphabetically to match OpenShift behavior.
  This ensures that diff detection tools like ArgoCD consider the source and reconciled resources to be identical. [GH-4227]
• sync-catalog: fix infinite retry loop when the catalog fails to connect to consul-server during the sync process [GH-4266]