repo: Release v1.28.3

**Summary of changes**:

* Fix for potential TLS/SNI (`auto_sni`) crash [CVE pending](GHSA-3mh5-6q8v-25wj).

**Docker images**:
    https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.28.3
**Docs**:
    https://www.envoyproxy.io/docs/envoy/v1.28.3/
**Release notes**:
    https://www.envoyproxy.io/docs/envoy/v1.28.3/version_history/v1.28/v1.28.3
**Full changelog**:
    v1.28.2...v1.28.3

Signed-off-by: Ryan Northey <ryan@synca.io>

VERSION.txt

@@ -1 +1 @@
-1.28.3-dev
+1.28.3

changelogs/1.27.5.yaml

@@ -0,0 +1,7 @@
+date: April 18, 2024
+
+bug_fixes:
+- area: tls
+  change: |
+    Fix a RELEASE_ASSERT when using :ref:`auto_sni <envoy_v3_api_field_config.core.v3.UpstreamHttpProtocolOptions.auto_sni>`
+    if the downstream request ``:authority`` was longer than 255 characters.

changelogs/current.yaml

@@ -1,22 +1,7 @@
-date: Pending
-
-behavior_changes:
-# *Changes that are expected to cause an incompatibility if applicable; deployment changes are likely required*
-
-minor_behavior_changes:
-# *Changes that may cause incompatibilities for some users, but should not for most*
+date: April 18, 2024
 
 bug_fixes:
-# *Changes expected to improve the state of the world and are unlikely to have negative effects*
 - area: tls
   change: |
     Fix a RELEASE_ASSERT when using :ref:`auto_sni <envoy_v3_api_field_config.core.v3.UpstreamHttpProtocolOptions.auto_sni>`
     if the downstream request ``:authority`` was longer than 255 characters.
-
-
-removed_config_or_runtime:
-# *Normally occurs at the end of the* :ref:`deprecation period <deprecated>`
-
-new_features:
-
-deprecated:

docs/versions.yaml

@@ -20,5 +20,5 @@
 "1.24": 1.24.12
 "1.25": 1.25.11
 "1.26": 1.26.8
-"1.27": 1.27.4
+"1.27": 1.27.5
 "1.28": 1.28.2