v1.8.13

What's Changed

• fix(swiftv2-long-running): honour node readiness timeouts, surface unreachable nodes, decouple BYON from zonal tests by Johnson Isaac Joseph (@isaac-dasan) in #4670
• ci: forward-port OneBranch build fixes, enable signed npm, and align npm crypto (#4640) by Isaiah Raya (@rayaisaiah) in #4680
• fix: use powershell copy for windows CNI install by Mugesh (@mugeshsp) in #4515
• ci(dependabot): prevent cross-major ACN self-dependency bumps on release branches by Behzad Mirkhanzadeh (@behzad-mir) in #4685
• ci: Restrict docker dependabot updates to Dockerfile only by John Payne (@jpayne3506) in #4688
• fix: run release channel post in parallel with pipeline validation by Behzad Mirkhanzadeh (@behzad-mir) in #4683
• [swiftv2] [pod density] feat: make NICNetworkConfig cluster-scoped by Kshitija Murudi (@kmurudi) in #4706
• ci: fix go-version-check stale branch push rejection by Behzad Mirkhanzadeh (@behzad-mir) in #4589
• ci: add dependabot stale version bumps catch-all by Alexander (@QxBytes) in #4703
• Amaro/improve faa triage by AmaroTruong in #4675
• fix: repair the three failures keeping Test Windows red by Quang Nguyen (@nddq) in #4702
• chore: bump Go image digest to 1.26.6 by Behzad Mirkhanzadeh (@behzad-mir) in #4728
• feat: allow dns replies to skip conntrack by Santhosh Prabhu (@santhoshmprabhu) in #4734
• fix: ignore policy-only E2E warnings by Evan Baker (@rbtr) in #4736
• Agent public identity guard by Evan Baker (@rbtr) in #4727
• test: combined init for v1.19 cilium daemonsets by Mugesh (@mugeshsp) in #4475
• Swift podsubnet E2E: use stateless CNI on AKS 1.35 by Behzad Mirkhanzadeh (@behzad-mir) in #4609
• feat(npm): allow egress to node IP on ports from l1vh annotation by Kaustubh Welankar (@kaustubh0x77) in #4708
• ci: replace gh pr create with Copilot auto-assign via GraphQL by Behzad Mirkhanzadeh (@behzad-mir) in #4720
• ci: fix overlapping Dependabot Go directories by John Payne (@jpayne3506) in #4721
• fix: add validation for PrimaryIPAddress by John Payne (@jpayne3506) in #4737
• fix: route binary tags through create-release-tag workflow by Behzad Mirkhanzadeh (@behzad-mir) in #4742
• Create infrastructure code owners/team by Evan Baker (@rbtr) in #4759
• SkipDefaultRouteProgramming in CNI when delegated NIC programming is done outside of CNI by Ravi Sankar Raju (@ravisraju) in #4743
• Fix misc pipeline failures by Evan Baker (@rbtr) in #4733
• feat: add transparent-tunnel CNI mode (Linux) by Tahmid Alam (@alam-tahmid) in #4319
• (fix) ci: trace Go builds in CodeQL PR job by John Payne (@jpayne3506) in #4753
• ci: bump the all-github-actions group across 1 directory with 4 updates by Dependabot (@dependabot)[bot] in #4699
• deps: bump the all-go-minor-and-patch group across 1 directory with 2 updates by Dependabot (@dependabot)[bot] in #4749
• fix: key async delete watcher by container ID, not full path by Quang Nguyen (@nddq) in #4768
• ci: bump windows/servercore from 3a2a2fd to 0df5b1c in /npm in the all-docker-dependencies group across 1 directory by Dependabot (@dependabot)[bot] in #4740
• deps: bump the all-go-minor-and-patch group across 1 directory with 11 updates by Dependabot (@dependabot)[bot] in #4750
• deps: bump the all-go-minor-and-patch group across 7 directories with 13 updates by Dependabot (@dependabot)[bot] in #4780
• deps: bump the kubernetes-minor-and-patch group across 1 directory with 2 updates by Dependabot (@dependabot)[bot] in #4617
• ci: bump the all-github-actions group with 3 updates by Dependabot (@dependabot)[bot] in #4795
• fix(npm): enforce IPBlock.Except on NPM Lite Windows direct-rule path by Paul Johnston (@pjohnst5) in #4823
• ci: improve copilot-setup-steps for Go minor upgrades by Behzad Mirkhanzadeh (@behzad-mir) in #4758
• ci: modernize LSG kernel validation pipeline by John Payne (@jpayne3506) in #4751
• give faa code citations for change under test by AmaroTruong in #4744
• fix: add arg to match go mod version bump by Alexander (@QxBytes) in #4836
• chore: expand code owner coverage by Evan Baker (@rbtr) in #4839
• ci: bump the all-github-actions group across 1 directory with 4 updates by Dependabot (@dependabot)[bot] in #4827
• fix(ci): bump AKS SDK off the retired 2024-01-02-preview API version by Quang Nguyen (@nddq) in #4773
• fix: remove dropgz from Windows azure-ipam image by Mugesh (@mugeshsp) in #4775
• test: cover the async delete create event received while CNS runs by Quang Nguyen (@nddq) in #4792
• ci: bump the all-github-actions group across 1 directory with 2 updates by Dependabot (@dependabot)[bot] in #4848
• ci: extend pipeline image override support by Mugesh (@mugeshsp) in #4774
• Add 1ES PT to ACN PR pipeline and fix GH Release pipeline by Jackie Luc (@jackieluc) in #4735
• ci: fix wireserver and imds test flakes by Alexander (@QxBytes) in #4828

Full Changelog: v1.8.12...v1.8.13