diff --git a/CHANGELOG.md b/CHANGELOG.md
index ae3e266c2d..dab0d32737 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -85,13 +85,26 @@ it will be removed; but as it won't be user-visible this isn't considered a brea
## RELEASE NOTES
+## [3.11.0] TBD
+[3.11.0]: https://github.com/emissary-ingress/emissary/compare/v3.10.0...v3.11.0
+
+### Emissary-ingress and Ambassador Edge Stack
+
+- Feature: This upgrades Emissary-ingress to be built on Envoy v1.30.2 which provides security,
+ performance and feature enhancements. You can read more about them here: Envoy Proxy
+ 1.28.0 Release Notes
+
+- Change: Upgraded Emissary-ingress to the latest release of Golang as part of our general
+ dependency upgrade process.
+
## [3.10.0] TBD
[3.10.0]: https://github.com/emissary-ingress/emissary/compare/v3.9.0...v3.10.0
### Emissary-ingress and Ambassador Edge Stack
- Feature: This upgrades Emissary-ingress to be built on Envoy v1.28.0 which provides security,
- performance and feature enhancements. You can read more about them here: Envoy Proxy
1.28.0 Release Notes
@@ -109,31 +122,30 @@ it will be removed; but as it won't be user-visible this isn't considered a brea
### Emissary-ingress and Ambassador Edge Stack
- Feature: This upgrades Emissary-ingress to be built on Envoy v1.27.2 which provides security,
- performance and feature enhancements. You can read more about them here: Envoy Proxy
1.27.2 Release Notes
-- Feature: By default, Emissary-ingress will return an `UNAVAILABLE` code when a request using gRPC
+- Feature: By default, Emissary-ingress will return an `UNAVAILABLE` code when a request using gRPC
is rate limited. The `RateLimitService` resource now exposes a new
- `grpc.use_resource_exhausted_code` field that when set to `true`, Emissary-ingress will return a
- `RESOURCE_EXHAUSTED` gRPC code instead. Thanks to Jerome
+ `grpc.use_resource_exhausted_code` field that when set to `true`, Emissary-ingress will return a
+ `RESOURCE_EXHAUSTED` gRPC code instead. Thanks to Jerome
Froelich for contributing this feature!
- Feature: Envoy runtime fields that were provided to mitigate the recent HTTP/2 rapid reset
- vulnerability can now be configured via the Module resource so the configuration will persist
- between restarts. This configuration is added to the Envoy bootstrap config, so restarting
- Emissary is necessary after changing these fields for the configuration to take effect.
+ vulnerability can now be configured via the Module resource so the configuration will persist
+ between restarts. This configuration is added to the Envoy bootstrap config, so restarting
+ Emissary is necessary after changing these fields for the configuration to take effect.
- Change: APIExt would previously allow for TLS 1.0 connections. We have updated it to now only use
- a minimum TLS version of 1.3 to resolve security concerns.
+ a minimum TLS version of 1.3 to resolve security concerns.
- Change: - Update default image to Emissary-ingress v3.9.0.
- Bugfix: The APIExt server provides CRD conversion between the stored version v2 and the version
- watched for by Emissary-ingress v3alpha1. Since this component is required to operate
- Emissary-ingress, we have introduced an init container that will ensure it is available before
- starting. This will help address some of the intermittent issues seen during install and
- upgrades.
+ watched for by Emissary-ingress v3alpha1. Since this component is required to operate
+ Emissary-ingress, we have introduced an init container that will ensure it is available before
+ starting. This will help address some of the intermittent issues seen during install and upgrades.
## [3.8.0] August 29, 2023
[3.8.0]: https://github.com/emissary-ingress/emissary/compare/v3.7.2...v3.8.0
diff --git a/docs/releaseNotes.yml b/docs/releaseNotes.yml
index 32da6bfed0..8f1f85171b 100644
--- a/docs/releaseNotes.yml
+++ b/docs/releaseNotes.yml
@@ -32,6 +32,23 @@
changelog: https://github.com/emissary-ingress/emissary/blob/$branch$/CHANGELOG.md
items:
+ - version: 3.11.0
+ prevVersion: 3.10.0
+ date: 'TBD'
+ notes:
+ - title: Upgrade to Envoy 1.30.2
+ type: feature
+ body: >-
+ This upgrades $productName$ to be built on Envoy v1.30.2 which provides security, performance
+ and feature enhancements. You can read more about them here:
+ Envoy Proxy 1.28.0 Release Notes
+ docs: https://www.envoyproxy.io/docs/envoy/v1.30.2/version_history/version_history
+
+ - title: Update to golang 1.22.4
+ type: change
+ body: >-
+ Upgraded $productName$ to the latest release of Golang as part of our general dependency upgrade process.
+
- version: 3.10.0
prevVersion: 3.9.0
date: 'TBD'