v1.4.1

What's Changed

• fix: restore egress catch-all in cleanupPod for Ingress-only pods (#591) by @RBROE00094 in #598
• Connect to IPAMD via Unix socket and add timeout to ipamd conn by @oliviassss in #606
• add liveness and readiness probe by @yash97 in #565
• test: make except_block_test IP-family-aware (fix IPv6 canary failure) by @yash97 in #612
• feat: embed version and build metadata in NPA binary by @nakshah87 in #604
• Support addon-distribution pipeline by @emilyhuaa in #611
• fix: validate loaded BPF program has associated maps before use by @Pavani-Panakanti in #619
• perf: eliminate fmt.Sprintf allocations in port dedup via a struct map key by @srikanthjg in #617
• test: fix flaky IPBlock-Except spec (premature pod-log read) by @yash97 in #614
• Bump golang.org/x/text to v0.39.0 to fix GO-2026-5970 by @jupdec in #624
• Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.258.1 to 1.317.0 by @dependabot[bot] in #541
• Bump google.golang.org/grpc from 1.79.3 to 1.82.1 by @dependabot[bot] in #625
• Bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds from 1.18.11 to 1.18.31 by @dependabot[bot] in #538
• Bump sigs.k8s.io/controller-runtime from 0.22.3 to 0.24.1 by @dependabot[bot] in #537
• Bump github.com/aws/amazon-vpc-cni-k8s from 1.20.0 to 1.22.4 by @dependabot[bot] in #539
• Sync release-1.4 with main by @yash97 in #629
• sync release-1.4 with main by @yash97 in #628

New Contributors

• @RBROE00094 made their first contribution in #598
• @nakshah87 made their first contribution in #604

Full Changelog: v1.4.0...v1.4.1