edge-25.6.3

Overall status: NOT RECOMMENDED, use edge-25.8.1 instead

Cautions

This release changes the histogram buckets for gRPC handling-time histograms. The new buckets better line up with the long-lived streams used in Linkerd’s controllers, but of course this is a potentially breaking change.

It also updates the port names used in many Linkerd deployments for uniqueness, since Kubernetes 1.33 warns when port names are not unique within containers in the same pod:

• In destination, grpc becomes dest-grpc and admin-http becomes dest-admin
• In sp-validator, admin-http becomes spval-admin
• In policy-controller, grpc becomes policy-grpc and admin-http becomes policy-admin
• In identity, grpc becomes ident-grpc and admin-http becomes ident-admin
• In proxy-injector, admin-http becomes injector-admin
• In linkerd2-cni, admin-http becomes repair-admin

Changes

This release changes the histogram buckets for gRPC handling-time histograms and updates many port names to avoid warnings in Kubernetes 1.33, as described above. It also fixes an issue (#14103) where inbound policy couldn't be applied to the metrics port when using native sidecars, and adds common gRPC server metrics to the policy controller.

What's Changed

• build(deps): bump softprops/action-gh-release from 2.2.2 to 2.3.2 by @dependabot in #14120
• chore(build): enable proxy-identity to work on Windows systems by @zaharidichev in #14126
• proxy: v2.301.0 by @l5d-bot in #14128
• chore(docs): remove outdated release instructions by @cratelyn in #14129
• build(deps): bump tj-actions/changed-files from c6634ca281a9fc05b03bee224ba00910cb78ab6e to 4140eb99d2cced9bfd78375c2088371853262f79 by @dependabot in #14118
• build(deps): bump hyper-rustls from 0.27.6 to 0.27.7 by @dependabot in #14117
• build(deps): bump smallvec from 1.15.0 to 1.15.1 by @dependabot in #14116
• build(deps): bump the tracing group with 2 updates by @dependabot in #14115
• build(deps-dev): bump @babel/eslint-parser from 7.27.1 to 7.27.5 in /web/app by @dependabot in #14114
• build(deps-dev): bump webpack-dev-server from 5.2.1 to 5.2.2 in /web/app by @dependabot in #14113
• build(deps-dev): bump @babel/runtime from 7.27.4 to 7.27.6 in /web/app by @dependabot in #14112
• build(deps): bump bumpalo from 3.17.0 to 3.18.1 by @dependabot in #14108
• build(deps): bump golang.org/x/net from 0.40.0 to 0.41.0 by @dependabot in #14106
• build(deps): bump cc from 1.2.25 to 1.2.26 by @dependabot in #14107
• build(deps): bump golang.org/x/tools from 0.33.0 to 0.34.0 by @dependabot in #14105
• build(deps): bump google.golang.org/grpc from 1.72.2 to 1.73.0 by @dependabot in #14104
• refactor(charts)!: disambiguate container port names for Kubernetes 1.33 by @olix0r in #14111
• chore(controller)!: tune grpc handling time histogram buckets by @olix0r in #14130
• feat(policy-controller): add grpc server metrics by @olix0r in #14122
• build(deps): bump docker/setup-buildx-action from 3.10.0 to 3.11.0 in /.github/actions/docker-build by @dependabot in #14146
• fix(test): fix policy-test e2e_appprotocol by @alpeb in #14148
• build(deps-dev): bump jest-environment-jsdom from 29.7.0 to 30.0.0 in /web/app by @dependabot in #14132
• build(deps): bump query-string from 9.2.0 to 9.2.1 in /web/app by @dependabot in #14133
• build(deps): bump thread_local from 1.1.8 to 1.1.9 by @dependabot in #14142
• build(deps): bump libc from 0.2.172 to 0.2.173 by @dependabot in #14141
• build(deps): bump adler2 from 2.0.0 to 2.0.1 by @dependabot in #14140
• fix(policy-controller): properly index named ports in native sidecar containers by @alpeb in #14144
• build(deps): bump pest_derive from 2.8.0 to 2.8.1 by @dependabot in #14139
• build(deps-dev): bump sinon from 20.0.0 to 21.0.0 in /web/app by @dependabot in #14136
• build(deps-dev): bump jest from 29.7.0 to 30.0.0 in /web/app by @dependabot in #14134
• build(deps): bump the clap group with 4 updates by @dependabot in #14138
• build(deps): bump tj-actions/changed-files from 4140eb99d2cced9bfd78375c2088371853262f79 to d52d20fa3f981cb852b861fd8f55308b5fe29637 by @dependabot in #14143
• build(deps): bump github.com/sergi/go-diff from 1.3.1 to 1.4.0 by @dependabot in #14137
• proxy: v2.302.0 by @l5d-bot in #14156
• fix(ci): Don't update website in releases before pushing helm charts by @sfleen in #14157

Full Changelog: edge-25.6.2...edge-25.6.3