v1.3.1

Updated Envoy Gateway to v1.3.2

Security Updates

• Updated to Envoy Proxy v1.33.1 which fixes vulnerability CVE-2025-30157, where local replies were incorrectly sent to the ext_proc server.

Helm

• Support affinity, topologySpreadConstraints and tolerations settings for the teg-envoy-gateway Deployment
• Fix not setting any explicit null value in the EnvoyProxy config

Bug Fixes

• Fixed cleaning up EnvoyPatchPolicies when WAF is disabled.
• Added support for BackendTLSPolicy and EnvoyExtensionPolicy parsing in Standalone mode.
• Fixed endpoint updates when mirrored backend Pod IPs change.
• Fix not logging an error and returning it in the K8s Reconcile method when a GatewayClass is not accepted.
• Fixed validation of host header in RequestHeaderModifier filter.
• Fixed an OpenTelemetry access log sink failure caused by an otel.Text is nil error.