v1.7.2

Updated Envoy Gateway to v1.7.3.

Security Updates

• Bumped golang to 1.26.3 for security and bug fixes.
• Bumped Envoy Gateway to v1.7.3 to address CVE-2026-33186 and CVE-2026-24051.

Bug Fixes

• Fixed a control plane panic caused by concurrent Status mutation racing with the watchable Map coalesce goroutine.
• Fixed ws and wss Backend appProtocols to force HTTP/1.1 upstream connections instead of negotiating HTTP/2, avoiding compatibility issues with WebSocket backends that do not support RFC 8441 extended CONNECT.
• Fixed status conditions not being updated when a route is rejected due to multiple errors.
• Fixed benchmark JSON report emitting 0 for p99 and p999 percentiles by using the nearest Nighthawk histogram percentiles.
• Fixed active HTTP health checks to use Backend endpoint hostnames before falling back to the effective Route hostname.